BlackBerry Clears Hurdle For Voice Crypto Acquisition 27
angry tapir writes BlackBerry is now free to integrate German security vendor Secusmart's voice encryption technology in its smartphones and software, after the German government approved its acquisition of the company. BlackBerry CEO John Chen still wants his company to be the first choice of CIOs that want nothing but the best security as he works to turn around the company's fortunes.
Unless end to end, it's a farce (Score:3, Insightful)
The only secure encryption is end to end encryption where you understand and actively control/limit how the key transmission works.
Any encryption is better than none (Score:4, Insightful)
Having fewer people able to eavesdrop on you is enough to prefer one technology over the other. For example, even if governments A and B can still listen on your conversation with a particular party, being protected from all other governments — as well as NGOs — can be quite helpful and thus desirable.
Re: (Score:1)
Yeah, only having the cook and the driver being able to spit on my pizza really makes the idea much, much more delightful.
Re: (Score:2)
"Delightful" may not be the right word here, but, yes, the fewer people are able to spit into your food, the less your health is endangered. At least, you have some idea of how healthy your servants are, whereas total strangers could carry a really nasty infection...
Re: (Score:1)
The problem is that this delivery guy has the whooping cough and from the looks of it you're not quite sure how much he really hates you for not being one of the few that have the means to tip him handsomely.
Re: (Score:2, Insightful)
If the users don't generate and completely control their keys even end-to-end is a farce.
Re: (Score:1)
>Since multiple governments mandate that Blackberry share back doors with them
Please tell me which ones and describe intricately how this works with the new (well, old now actually) phones. Articulate how it can affect a user not living in such a country and how it applies outside of specific business configurations. Also explain how it affects users entering that country for travel whose phone and business is setup in a country that does not have such back doors.
As you can imagine, I asked you to do t
Re: (Score:2)
Re: (Score:1)
That article doesn't answer the questions at all.
"Users" can be Indians, who are already monitored on all other platforms. Specifically, the only useful thing in that article:
"BlackBerry is emphasizing that all of this surveillance is in accordance with local law — leaving the company with little choice — and also points out that its Enterprise Server customers won't have to worry about any direct monitoring. Authorities won't have access to email records of BES users, but they will be able to
Re: (Score:3, Informative)
Re: (Score:3)
Since multiple governments mandate that Blackberry share back doors with them, it's not clear to me what benefit more encryption will really add. Won't they be sharing keys with governments (and thus potentially hackers can get the same data)?
The only secure encryption is end to end encryption where you understand and actively control/limit how the key transmission works.
This is a blatant lie. BES controls encryption from end-to-end. BB/RIM does not have the ability to see any traffic other than the encrypted traffic.
Re: (Score:2)
This is a blatant lie.
No, in fact it's a fundamental principle of infosec. Unless you keep keys close to your chest and perform tightly controlled, end to end encryption, there are opportunities for subpoenas by TLAs or for top tier hackers to compromise your keys. Trusting a middle man is a fundamental compromise in the provability of your security.
Re: (Score:1)
Since multiple governments mandate that Blackberry share back doors with them, it's not clear to me what benefit more encryption will really add.
The encryption keys used by a BES server are generated by that BES server, and not by BB. As such, there is no key that BB can give to any govt which will decrypt any data sent between a BES and a connected BB phone.
Re: (Score:2)
The encryption keys used by a BES server are generated by that BES server, and not by BB. As such, there is no key that BB can give to any govt which will decrypt any data sent between a BES and a connected BB phone.
You can substitute the BES server for BB in my remark (see, still trusting a third party), or you can recognize that BB still has control over software and software updates, and thus by definition is able to subvert the system. The most you can say is "Sure, they _can_, but I trust that they never _would_." And the infosec guys will shake their heads sadly at you.
I guess the BND's backdoor (Score:2)
Must be fairly good, then.
Re: (Score:1)
No trust (Score:1)
But realistically the government is one of the last big holdouts for large installed BB bases so they can negotiate with a very large carrot and a very large stick.
Re: (Score:3, Insightful)
You're being silly, and I suspect it's on purpose.
BlackBerry, like any other publicly traded (and most private ones..) company in the world, can't just opt out of government or legal obligations. If a judge signs an order requirining access to information, there is not much you can do. Sure, you can appeal or protest it, but at the end of the day you have to comply. If you have a problem with this, you should really take it up with your elected leaders who enable the very same laws that are the root of t
sinking ship (Score:3)
sounds like they are trying to install new chandeliers in the titanic. Seriously they don't need new features they need to either get out of the smartphone business or completely reinvent it, currently they are close to irrelevant as companies abandon them on mass and consumers already left them.
End-to-end crypto or not (Score:1)
... the key feature I'm liking my BB device is that I can separate the gaming part from the my real data and contacts through their 'balance' container system. I can install all the freeware Android games and apps I want and know that all they will find is an empty email account, an empty contact list, and an empty documents folder. As long as Android doesn't have a built in, free equivalent, that's transparently supported throughout all apps, I'm not in for it.
Sqwak all you want, I don't care.