LOL, 11 pages of tiny printed keys. Ballsy!
â11 pages of 4 point typeâŚthe court didntâ go for thatâ âŚdo you even Photoshop, Bro??
âTo make use of these keys, the FBI would have to manually input all 2,560 characters, and one incorrect keystroke in this laborious process would render the FBI collection system incapable of collecting decrypted dataâ
Surely it would be trivial to OCR that?
I dunno how good OCR is but when ONE character wrong makes the whole thing not work. Yea Still, ballsy move. Kindof like that one site way back when getting told to remove links and instead left the text up and just de-linkafied (meaning people could just copy the addresses in.)
The grand tradition continues.
I would maybe have âaccidentallyâ transcribed one wrong character before sending the print off out. Blame the key entry/OCR.
Getting someone to spend the time carefully keying it in surely would have cost less time and money than litigating the whole thing out.
Well, anything goes because terrorism.
I guess I donât really understand what the point of Lavabit was, or why users were supposed to trust them in the first place, if the users depended on them to keep some key a secret which could maliciously be used to decrypt all their data.
Because itâs better than the alternative I suppose.
Because it was a third party that two people who want to communicate through the internet could agree to trust as an intermediary. There could never be a guarantee that Lavabit was trustworthy, but the site claimed up front that everything was encrypted so that intruders wouldnât be able to steal anything.
Compare to something such as sending email from a gmail account to a hotmail account. You have no promises that the email on either end is encrypted (and in fact those messages are completely unencrypted and are data mined as a matter of habit), and unless the connection between gmail and hotmail is encrypted, anyone sitting on the wire between the two sites could capture it as well.
End result: Lavabit was a âleast badâ option for sending communication over the internet. For anything truly important itâs still not secure enough, say for a cache of classified NSA documents. But for organizing an in-person meeting to discuss those documents itâs a lot better than many other methods.
He wouldnât need to transcribe, heâd just have to make sure they use the âcorrectâ Xerox scanner.
Given the advertising for Lavabit centered around security, wasnât this a court order effectively compelling Levison to commit fraud?
I didnât think a court could compel you to break the law.
I suspect the point of spending the time/money litigating to get it in electronic format was less about efficiency, and more about asserting dominance and setting a precedent.
I find it telling that responses to FOIA requests are routinely delivered in formats that are intentionally difficult to digitize, copy, or proliferate, and Iâve yet to hear about a judge who has a problem with that.
He should have printed one character per page, but without page numbers.
Weeellll - it would âonlyâ require breaking a civil contract and undermining the product of his own business. So it doesnât really count.
But that would mean all these civil services would have to actually serve We the People.
Wow, what a face.
For its premium (paid) customers, there was an option to provide Lavabit with a public key from a private - public key pair; it would drop all incoming mail to your account through the public key and delete the original plain text, leaving only an encrypted blob. Since Lavabit never had the private key, and deleted logs, if they were compromised on the server, there would be nothing to analyse.
when ssl keys are outlawed , only outlaws will have ssl keys ?
