[prev in list] [next in list] [prev in thread] [next in thread] 

List:       cryptography
Subject:    Re: [Cryptography] Response to "I don't have anything to hide"
From:       Tom Mitchell <mitch () niftyegg ! com>
Date:       2016-02-26 21:18:56
Message-ID: CAAMy4URivxJOQs9kfCaD=h8z-8uwrepuAUSiTU1rpB3nTcYj=A () mail ! gmail ! com
[Download RAW message or body]

[Attachment #2 (multipart/alternative)]


On Thu, Feb 25, 2016 at 4:49 PM, Matthias Wulfeck <
matthias.wulfeck@gmail.com> wrote:

> > "Do you want the government to have free access to your phone"?
>
> > "I don't have anything to hide. They can look at they want."
>
> I'm sure many of us who have tried to explain the backdoor problem to
> their friends and family have heard this response to the question
>

How many friends understand parallel reconstruction?

How many understand that the judicial system is a contest
between storytellers?    Yes there are rules but the suspension
of disbelief is central to modern storytelling to the point that all
media marketing depends on it.    i.e. the jury of your peers has
been conditioned to accept fantacy on a daily basis.

    https://en.wikipedia.org/wiki/Suspension_of_disbelief

More importantly most schools eliminate debate or religate debate or
restrict it to a rarified few
to the point that it is the uncommon teacher that can coach and judge a
quality debate.

The debate lesson learned when two sides of a fabrication have at it and a
winner
declared is eye opening when both are championing a total fabrication.

In the case of Apple and the FBI there is an important line in the WP
article:

"However, there are authors, movie writers, and show producers who tend to
actually believe in their stories rather than suspending disbelief."

My most recent insight I have had in this is that some principals in this
are anchored in a them vs. us contest mindset.
This is insufficient in a global market context.
With global products and global deployments of hardware and software the
exact same
tools apply to both sides.   Our problems are their problems, their
problems are our
problems.

This global symmetry and equality for commerce and citizens recolors the
notion of "never say anything" when a flaw, bug or attack is discovered.
The attack that might be held tightly as a nut of power is in reality also
a vulnerability to the same side that thinks of it as power.

Thinking back on Purple and Enigma -- we did not have to discard
our Enigma machines once we discovered a way to read Enigma and
Purple messages.   This was a context where never say anything applied
to methods and capabilities.   For the billions of people on the globe this
is no longer the case because we all use the same subset of possible tools.
Open source, global products, stackexchange, ....

In a global context with the long reach of criminals any exploit is also
a liability and vulnerability to the home front.

Analysis of an individual flaw colors this.   If and only if the vector of
the attack
can be blocked and managed would one say nothing and do nothing.

So on the global Internet "see something, say something".

Re Purple:   First there was the Red code, then the Blue code then
red+blue ==> Purple.
Today... the issue is simply muddy Brown.

-- 
  T o m    M i t c h e l l

[Attachment #5 (text/html)]

<div dir="ltr"><div class="gmail_extra"><div class="gmail_quote">On Thu, Feb 25, 2016 \
at 4:49 PM, Matthias Wulfeck <span dir="ltr">&lt;<a \
href="mailto:matthias.wulfeck@gmail.com" \
target="_blank">matthias.wulfeck@gmail.com</a>&gt;</span> wrote:<br><blockquote \
class="gmail_quote" style="margin:0px 0px 0px \
0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"><div \
dir="ltr"><div>&gt; &quot;Do you want the government to have free access to your \
phone&quot;?<span style="font-weight:bold"><br></span></div><div><span \
style="font-weight:bold"><br></span></div>&gt; &quot;I don&#39;t have anything to \
hide. They can look at they want.&quot;<div><span \
style="font-weight:bold"><br></span></div>I&#39;m sure many of us who have tried to \
explain the backdoor problem to their friends and family have heard this response to \
the question  </div></blockquote><div><br></div><div>How many friends understand \
parallel reconstruction?<br><br>How many understand that the judicial system is a \
contest</div><div>between storytellers?      Yes there are rules but the \
suspension</div><div>of disbelief is central to modern storytelling to the point that \
all</div><div>media marketing depends on it.      i.e. the jury of your peers \
has</div><div>been conditioned to accept fantacy on a daily \
basis.</div><div><br></div><div>      <a \
href="https://en.wikipedia.org/wiki/Suspension_of_disbelief">https://en.wikipedia.org/wiki/Suspension_of_disbelief</a> \
<br></div><br>More importantly most schools eliminate debate or religate debate or \
restrict it to a rarified few<br>to the point that it is the uncommon teacher that \
can coach and judge a quality debate.</div><div class="gmail_quote"><br></div><div \
class="gmail_quote">The debate lesson learned when two sides of a fabrication have at \
it and a winner</div><div class="gmail_quote">declared is eye opening when both are \
championing a total fabrication.<br><br>In the case of Apple and the FBI there is an \
important line in the WP article:<br></div></div><blockquote style="margin:0 0 0 \
40px;border:none;padding:0px"><div class="gmail_extra"><div class="gmail_quote"><span \
style="color:rgb(37,37,37);font-family:sans-serif;font-size:14px;line-height:22.4px">&quot;However, \
there are authors, movie writers, and show producers who tend to  </span></div><div \
class="gmail_quote"><span \
style="color:rgb(37,37,37);font-family:sans-serif;font-size:14px;line-height:22.4px">actually \
believe in their stories rather than suspending disbelief.&quot;</span></div><div \
class="gmail_quote"><span \
style="color:rgb(37,37,37);font-family:sans-serif;font-size:14px;line-height:22.4px"><br></span></div></div></blockquote><font \
color="#252525" face="sans-serif"><span style="font-size:14px;line-height:22.4px">My \
most recent insight I have had in this is that some principals in this  \
</span></font><div><font color="#252525" face="sans-serif"><span \
style="font-size:14px;line-height:22.4px">are anchored in a them vs. us contest \
mindset.<br>This is insufficient in a global market context.<br>With global products \
and global deployments of hardware and software the exact same  \
</span></font><div><font color="#252525" face="sans-serif"><span \
style="font-size:14px;line-height:22.4px">tools apply to both sides.    Our problems \
are their problems, their problems are our</span></font></div><div><font \
color="#252525" face="sans-serif"><span \
style="font-size:14px;line-height:22.4px">problems.  <br><br>This global symmetry and \
equality for commerce and citizens recolors the  </span></font></div><div><font \
color="#252525" face="sans-serif"><span \
style="font-size:14px;line-height:22.4px">notion of &quot;never say anything&quot; \
when a flaw, bug or attack is discovered.<br>The attack that might be held tightly as \
a nut of power is in reality also</span></font></div><div><font color="#252525" \
face="sans-serif"><span style="font-size:14px;line-height:22.4px">a vulnerability to \
the same side that thinks of it as power.<br><br>Thinking back on Purple and Enigma \
-- we did not have to discard</span></font></div><div><font color="#252525" \
face="sans-serif"><span style="font-size:14px;line-height:22.4px">our Enigma machines \
once we discovered a way to read Enigma and</span></font></div><div><font \
color="#252525" face="sans-serif"><span \
style="font-size:14px;line-height:22.4px">Purple messages.    This was a context \
where never say anything applied</span></font></div><div><font color="#252525" \
face="sans-serif"><span style="font-size:14px;line-height:22.4px">to methods and \
capabilities.    For the billions of people on the globe this<br></span></font><div \
class="gmail_extra">is no longer the case because we all use the same subset of \
possible tools.<br>Open source, global products, stackexchange, ....<br><br>In a \
global context with the long reach of criminals any exploit is also</div><div \
class="gmail_extra">a liability and vulnerability to the home front.   \
<br><br>Analysis of an individual flaw colors this.    If and only if the vector of \
the attack</div><div class="gmail_extra">can be blocked and managed would one say \
nothing and do nothing.</div><div class="gmail_extra"><br></div><div \
class="gmail_extra">So on the global Internet &quot;see something, say \
something&quot;.<br><br>Re Purple:    First there was the Red code, then the Blue \
code then</div><div class="gmail_extra">red+blue ==&gt; Purple.<br>Today... the issue \
is simply muddy Brown.<br clear="all"><div><br></div>-- <br><div \
class="gmail_signature"><div dir="ltr">   T o m      M i t c h e l l</div></div> \
</div></div></div></div>


[Attachment #6 (text/plain)]

_______________________________________________
The cryptography mailing list
cryptography@metzdowd.com
http://www.metzdowd.com/mailman/listinfo/cryptography

[prev in list] [next in list] [prev in thread] [next in thread] 

Configure | About | News | Add a list | Sponsored by KoreLogic