Page 1 of 1

White House considered bypassing encryption with malware disguised as updates

Posted: Mon Sep 28, 2015 3:54 pm
by VMI77
https://www.theverge.com/2015/9/24/9393 ... king-group
The most controversial proposal was one that targeted the automatic software update system. "Virtually all consumer devices include the capability to remotely download and install updates," the paper observes. It then proposes to "use lawful process to compel providers to use their remote update capability to insert law enforcement software into a targeted device."

Re: White House considered bypassing encryption with malware disguised as updates

Posted: Mon Sep 28, 2015 4:11 pm
by RoyGBiv
"Targeted device".... ?
Would that be "All"?

Re: White House considered bypassing encryption with malware disguised as updates

Posted: Mon Sep 28, 2015 4:32 pm
by ScottDLS
Totally useless, since any badguy worth their salt will use opensource encryption that is widely available. There are rumors that the NSA has done this already, but this will typically only work using subterfuge. Once you use lawful process to compel it, it will be quickly worked around by the bad guys (and some libertarian good guys too).