Comment by 542354234235
12 days ago
>my front door still keeps my home secure even though my sister has a copy of the key.
Someone has to physically come to your house to access your front door. Computers and other computer equipment is accessible by anyone anywhere. A Russian hacker outfit can attempt to access your phone from Vladivostok in a way they can't with your front door.
Sticking with front door analogy, what if there were a master key that could open up all door locks that the police held. What if that key was leaked and now you knew that multiple gangs and criminals had the key and were breaking into houses. Would you feel secure with your front door then? Data breaches happen and a company with the keys to everyone's computer front door is a huge target. I don't trust my bitlocker key to Microsoft. There is no such thing as a magical backdoor that only good guys can use but is secure against everyone else. A backdoor is a vulnerability that puts everyone using it at risk.
>>Sticking with front door analogy, what if there were a master key that could open up all door locks that the police held.
That's exactly what I said I don't want Apple/Google/MS to have - a master key that opens all locks is unacceptable imho.
>> What if that key was leaked and now you knew that multiple gangs and criminals had the key and were breaking into houses.
I'm sure I used this exact analogy in another comment, that's why no one should have a master key.
>>I don't trust my bitlocker key to Microsoft.
And neither do I - but overall on balance I think this is a good thing. I do like that my mum's laptop is automatically encrypted, if it gets stolen her data is safe, and if she forgets her password there is some pathway to recovering it. I like that. It's nice convenience for "regular" people. I don't do it myself because I have an alternative backup of my encryption keys. And yes, I do like that if someone is under criminal investigation that the key can be obtained from MS when a valid warrant is produced. I see that as a good thing personally.
>> There is no such thing as a magical backdoor that only good guys can use but is secure against everyone else.
Well, good thing it's not a backdoor then.
>>A backdoor is a vulnerability that puts everyone using it at risk.
Again, MS having a copy of your bitlocker key is not a backdoor.