ML
    • Recent
    • Categories
    • Tags
    • Popular
    • Users
    • Groups
    • Register
    • Login

    Is It Really Encrypted When the Key Is Public and Automatic?

    IT Discussion
    encryption software legal
    9
    59
    2.7k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • DustinB3403D
      DustinB3403 @Obsolesce
      last edited by

      @Obsolesce said in Is It Really Encrypted When the Key Is Public and Automatic?:

      @scottalanmiller said in Is It Really Encrypted When the Key Is Public and Automatic?:

      @Dashrender said in Is It Really Encrypted When the Key Is Public and Automatic?:

      so run it from there - what are the legal liabilities?

      Can't. Key is required to be with the data for the app to run. It's inside the app, can't he separated.

      Have you successfully been able to use it to decrypt other people's data?

      I don't know if that would be ethical to do specifically. But since there is apparently a demo environment if you could use your key to decrypt the demo data the proof is already sufficient while not exposing someone else's environment and data.

      ObsolesceO scottalanmillerS 2 Replies Last reply Reply Quote 0
      • ObsolesceO
        Obsolesce @DustinB3403
        last edited by

        @DustinB3403 said in Is It Really Encrypted When the Key Is Public and Automatic?:

        @Obsolesce said in Is It Really Encrypted When the Key Is Public and Automatic?:

        @scottalanmiller said in Is It Really Encrypted When the Key Is Public and Automatic?:

        @Dashrender said in Is It Really Encrypted When the Key Is Public and Automatic?:

        so run it from there - what are the legal liabilities?

        Can't. Key is required to be with the data for the app to run. It's inside the app, can't he separated.

        Have you successfully been able to use it to decrypt other people's data?

        I don't know if that would be ethical to do specifically. But since there is apparently a demo environment if you could use your key to decrypt the demo data the proof is already sufficient while not exposing someone else's environment and data.

        Is that what he did?

        DustinB3403D scottalanmillerS 2 Replies Last reply Reply Quote 0
        • DustinB3403D
          DustinB3403 @Obsolesce
          last edited by

          @Obsolesce said in Is It Really Encrypted When the Key Is Public and Automatic?:

          @DustinB3403 said in Is It Really Encrypted When the Key Is Public and Automatic?:

          @Obsolesce said in Is It Really Encrypted When the Key Is Public and Automatic?:

          @scottalanmiller said in Is It Really Encrypted When the Key Is Public and Automatic?:

          @Dashrender said in Is It Really Encrypted When the Key Is Public and Automatic?:

          so run it from there - what are the legal liabilities?

          Can't. Key is required to be with the data for the app to run. It's inside the app, can't he separated.

          Have you successfully been able to use it to decrypt other people's data?

          I don't know if that would be ethical to do specifically. But since there is apparently a demo environment if you could use your key to decrypt the demo data the proof is already sufficient while not exposing someone else's environment and data.

          Is that what he did?

          I think he mentioned it in or near the OP, yes.

          1 Reply Last reply Reply Quote 0
          • scottalanmillerS
            scottalanmiller @Obsolesce
            last edited by

            @Obsolesce said in Is It Really Encrypted When the Key Is Public and Automatic?:

            @scottalanmiller said in Is It Really Encrypted When the Key Is Public and Automatic?:

            @Dashrender said in Is It Really Encrypted When the Key Is Public and Automatic?:

            so run it from there - what are the legal liabilities?

            Can't. Key is required to be with the data for the app to run. It's inside the app, can't he separated.

            Have you successfully been able to use it to decrypt other people's data?

            Yes, that's how we found it. Someone sent us their data asking us to decrypt it. Which we did so, without getting a key from them.

            travisdh1T 1 Reply Last reply Reply Quote 0
            • scottalanmillerS
              scottalanmiller @DustinB3403
              last edited by

              @DustinB3403 said in Is It Really Encrypted When the Key Is Public and Automatic?:

              @Obsolesce said in Is It Really Encrypted When the Key Is Public and Automatic?:

              @scottalanmiller said in Is It Really Encrypted When the Key Is Public and Automatic?:

              @Dashrender said in Is It Really Encrypted When the Key Is Public and Automatic?:

              so run it from there - what are the legal liabilities?

              Can't. Key is required to be with the data for the app to run. It's inside the app, can't he separated.

              Have you successfully been able to use it to decrypt other people's data?

              I don't know if that would be ethical to do specifically. But since there is apparently a demo environment if you could use your key to decrypt the demo data the proof is already sufficient while not exposing someone else's environment and data.

              Yes, you can trivially get two demos and show that the data from one can be read from the other, for example.

              ObsolesceO 1 Reply Last reply Reply Quote 0
              • scottalanmillerS
                scottalanmiller @Obsolesce
                last edited by

                @Obsolesce said in Is It Really Encrypted When the Key Is Public and Automatic?:

                @DustinB3403 said in Is It Really Encrypted When the Key Is Public and Automatic?:

                @Obsolesce said in Is It Really Encrypted When the Key Is Public and Automatic?:

                @scottalanmiller said in Is It Really Encrypted When the Key Is Public and Automatic?:

                @Dashrender said in Is It Really Encrypted When the Key Is Public and Automatic?:

                so run it from there - what are the legal liabilities?

                Can't. Key is required to be with the data for the app to run. It's inside the app, can't he separated.

                Have you successfully been able to use it to decrypt other people's data?

                I don't know if that would be ethical to do specifically. But since there is apparently a demo environment if you could use your key to decrypt the demo data the proof is already sufficient while not exposing someone else's environment and data.

                Is that what he did?

                We have access to a lot of customer data because figuring out why it is corrupt, what has gone wrong with it, backing it up, or moving it to another platform is all stuff that we do with this specific data. So customers are requesting that we work with their data regularly, since the vendor who encrypts it doesn't know how.

                1 Reply Last reply Reply Quote 0
                • travisdh1T
                  travisdh1 @scottalanmiller
                  last edited by

                  @scottalanmiller said in Is It Really Encrypted When the Key Is Public and Automatic?:

                  @Obsolesce said in Is It Really Encrypted When the Key Is Public and Automatic?:

                  @scottalanmiller said in Is It Really Encrypted When the Key Is Public and Automatic?:

                  @Dashrender said in Is It Really Encrypted When the Key Is Public and Automatic?:

                  so run it from there - what are the legal liabilities?

                  Can't. Key is required to be with the data for the app to run. It's inside the app, can't he separated.

                  Have you successfully been able to use it to decrypt other people's data?

                  Yes, that's how we found it. Someone sent us their data asking us to decrypt it. Which we did so, without getting a key from them.

                  #facepalm

                  scottalanmillerS 1 Reply Last reply Reply Quote 0
                  • scottalanmillerS
                    scottalanmiller @travisdh1
                    last edited by

                    @travisdh1 said in Is It Really Encrypted When the Key Is Public and Automatic?:

                    @scottalanmiller said in Is It Really Encrypted When the Key Is Public and Automatic?:

                    @Obsolesce said in Is It Really Encrypted When the Key Is Public and Automatic?:

                    @scottalanmiller said in Is It Really Encrypted When the Key Is Public and Automatic?:

                    @Dashrender said in Is It Really Encrypted When the Key Is Public and Automatic?:

                    so run it from there - what are the legal liabilities?

                    Can't. Key is required to be with the data for the app to run. It's inside the app, can't he separated.

                    Have you successfully been able to use it to decrypt other people's data?

                    Yes, that's how we found it. Someone sent us their data asking us to decrypt it. Which we did so, without getting a key from them.

                    #facepalm

                    Yeah, pretty funny.

                    1 Reply Last reply Reply Quote 0
                    • ObsolesceO
                      Obsolesce @scottalanmiller
                      last edited by

                      @scottalanmiller said in Is It Really Encrypted When the Key Is Public and Automatic?:

                      @DustinB3403 said in Is It Really Encrypted When the Key Is Public and Automatic?:

                      @Obsolesce said in Is It Really Encrypted When the Key Is Public and Automatic?:

                      @scottalanmiller said in Is It Really Encrypted When the Key Is Public and Automatic?:

                      @Dashrender said in Is It Really Encrypted When the Key Is Public and Automatic?:

                      so run it from there - what are the legal liabilities?

                      Can't. Key is required to be with the data for the app to run. It's inside the app, can't he separated.

                      Have you successfully been able to use it to decrypt other people's data?

                      I don't know if that would be ethical to do specifically. But since there is apparently a demo environment if you could use your key to decrypt the demo data the proof is already sufficient while not exposing someone else's environment and data.

                      Yes, you can trivially get two demos and show that the data from one can be read from the other, for example.

                      So basically the software itself is the key. Yeah, that can't be legal. That's like saying your data is encrypted with BitLocker or FileVault, but anyone with BitLocker or FileVault respectively can decrypt your data.

                      scottalanmillerS 2 Replies Last reply Reply Quote 0
                      • scottalanmillerS
                        scottalanmiller @Obsolesce
                        last edited by

                        @Obsolesce said in Is It Really Encrypted When the Key Is Public and Automatic?:

                        So basically the software itself is the key.

                        That's exactly correct. The software is the key, the key is always the same.

                        1 Reply Last reply Reply Quote 0
                        • scottalanmillerS
                          scottalanmiller @Obsolesce
                          last edited by

                          @Obsolesce said in Is It Really Encrypted When the Key Is Public and Automatic?:

                          That's like saying your data is encrypted with BitLocker or FileVault, but anyone with BitLocker or FileVault respectively can will automatically decrypt your data without even trying.

                          FTFY

                          1 Reply Last reply Reply Quote 0
                          • 1
                          • 2
                          • 3
                          • 2 / 3
                          • First post
                            Last post