2y ago

Researchers find deliberate backdoor in police radio encryption algorithm | Vendors knew all about it, but most customers were clueless.

arstechnica.com Researchers find deliberate backdoor in police radio encryption algorithm

Vendors knew all about it, but most customers were clueless.

Researchers find deliberate backdoor in police radio encryption algorithm | Vendors knew all about it, but most customers were clueless.::Vendors knew all about it, but most customers were clueless.

18 comments

Interesting. I wonder if this was due to a request from certain agencies for anything exported.
- Bingo. All of these technologies are controlled by ITAR.
  I have zero doubt this was for clandestine use internationally and it was almost inevitable. Outside of a back-door there is no way you’re getting access to properly encrypted net with some of the higher end technologies.
  
  ETSI isn’t controlled by ITAR. You’re on the wrong continent.
  
  Ah, yes. European radios made by European manufacturers to specifications created by a European agency primarily intended for use in Europe are, in fact, actually being controlled by the US. Am I understanding that correctly?
  
  For sure. There are plenty of historical prevents for this exact situation. Makes you wonder why anyone would trust exported "secure" technology from America

Looking forward to someone bringing this up when discussing the ongoing died-but-somehow-always-revived legislations that would introduce backdoors for encryption for government
- Died? The below are all happening right now.
  https://www.gov.uk/government/publications/international-statement-end-to-end-encryption-and-public-safety/international-statement-end-to-end-encryption-and-public-safety-accessible-version
  https://9to5mac.com/2023/07/20/apple-imessage-facetime-remove-security-law/
  https://www.eff.org/uk/deeplinks/2023/03/tell-uks-house-lords-protect-end-end-encryption-online-safety-bill
  
  Yeah the ones in EU and UK are kinda fresh, but if I remember correctly, the ones in the US went through different iterations through many years, and keep coming back. There’s also a new-ish one in the US as well I think.

Am I the only one annoyed with the sticker not removed from the screen on the picture?

I heard the vendors knew all about it, but most customers were clueless

Well this is pretty problematic!
- It’s actually a positive thing since it can be used as an example of why we can’t trust governments with backdoor access to our communications.

18 comments