ML
    • Recent
    • Categories
    • Tags
    • Popular
    • Users
    • Groups
    • Register
    • Login

    Is It Really Encrypted When the Key Is Public and Automatic?

    Scheduled Pinned Locked Moved IT Discussion
    encryptionsoftwarelegal
    59 Posts 9 Posters 6.8k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S
      scottalanmiller @Dashrender
      last edited by

      @Dashrender said in Is It Really Encrypted When the Key Is Public and Automatic?:

      @scottalanmiller said in Is It Really Encrypted When the Key Is Public and Automatic?:

      @Dashrender said in Is It Really Encrypted When the Key Is Public and Automatic?:

      so run it from there - what are the legal liabilities?

      Can't. Key is required to be with the data for the app to run. It's inside the app, can't he separated.

      OK I misunderstood then.. gotcha..

      You CAN remove the key and make the data unreachable, even by yourself. but only by deleting the app entirely.

      1 Reply Last reply Reply Quote 0
      • S
        scottalanmiller
        last edited by

        But anyone else with the app will have your key, so you can stop yourself from reading it, but you can't stop anyone else.

        1 Reply Last reply Reply Quote 0
        • O
          Obsolesce @scottalanmiller
          last edited by

          @scottalanmiller said in Is It Really Encrypted When the Key Is Public and Automatic?:

          @Dashrender said in Is It Really Encrypted When the Key Is Public and Automatic?:

          so run it from there - what are the legal liabilities?

          Can't. Key is required to be with the data for the app to run. It's inside the app, can't he separated.

          Have you successfully been able to use it to decrypt other people's data?

          D S 2 Replies Last reply Reply Quote 0
          • D
            DustinB3403 @Obsolesce
            last edited by

            @Obsolesce said in Is It Really Encrypted When the Key Is Public and Automatic?:

            @scottalanmiller said in Is It Really Encrypted When the Key Is Public and Automatic?:

            @Dashrender said in Is It Really Encrypted When the Key Is Public and Automatic?:

            so run it from there - what are the legal liabilities?

            Can't. Key is required to be with the data for the app to run. It's inside the app, can't he separated.

            Have you successfully been able to use it to decrypt other people's data?

            I don't know if that would be ethical to do specifically. But since there is apparently a demo environment if you could use your key to decrypt the demo data the proof is already sufficient while not exposing someone else's environment and data.

            O S 2 Replies Last reply Reply Quote 0
            • O
              Obsolesce @DustinB3403
              last edited by

              @DustinB3403 said in Is It Really Encrypted When the Key Is Public and Automatic?:

              @Obsolesce said in Is It Really Encrypted When the Key Is Public and Automatic?:

              @scottalanmiller said in Is It Really Encrypted When the Key Is Public and Automatic?:

              @Dashrender said in Is It Really Encrypted When the Key Is Public and Automatic?:

              so run it from there - what are the legal liabilities?

              Can't. Key is required to be with the data for the app to run. It's inside the app, can't he separated.

              Have you successfully been able to use it to decrypt other people's data?

              I don't know if that would be ethical to do specifically. But since there is apparently a demo environment if you could use your key to decrypt the demo data the proof is already sufficient while not exposing someone else's environment and data.

              Is that what he did?

              D S 2 Replies Last reply Reply Quote 0
              • D
                DustinB3403 @Obsolesce
                last edited by

                @Obsolesce said in Is It Really Encrypted When the Key Is Public and Automatic?:

                @DustinB3403 said in Is It Really Encrypted When the Key Is Public and Automatic?:

                @Obsolesce said in Is It Really Encrypted When the Key Is Public and Automatic?:

                @scottalanmiller said in Is It Really Encrypted When the Key Is Public and Automatic?:

                @Dashrender said in Is It Really Encrypted When the Key Is Public and Automatic?:

                so run it from there - what are the legal liabilities?

                Can't. Key is required to be with the data for the app to run. It's inside the app, can't he separated.

                Have you successfully been able to use it to decrypt other people's data?

                I don't know if that would be ethical to do specifically. But since there is apparently a demo environment if you could use your key to decrypt the demo data the proof is already sufficient while not exposing someone else's environment and data.

                Is that what he did?

                I think he mentioned it in or near the OP, yes.

                1 Reply Last reply Reply Quote 0
                • S
                  scottalanmiller @Obsolesce
                  last edited by

                  @Obsolesce said in Is It Really Encrypted When the Key Is Public and Automatic?:

                  @scottalanmiller said in Is It Really Encrypted When the Key Is Public and Automatic?:

                  @Dashrender said in Is It Really Encrypted When the Key Is Public and Automatic?:

                  so run it from there - what are the legal liabilities?

                  Can't. Key is required to be with the data for the app to run. It's inside the app, can't he separated.

                  Have you successfully been able to use it to decrypt other people's data?

                  Yes, that's how we found it. Someone sent us their data asking us to decrypt it. Which we did so, without getting a key from them.

                  T 1 Reply Last reply Reply Quote 0
                  • S
                    scottalanmiller @DustinB3403
                    last edited by

                    @DustinB3403 said in Is It Really Encrypted When the Key Is Public and Automatic?:

                    @Obsolesce said in Is It Really Encrypted When the Key Is Public and Automatic?:

                    @scottalanmiller said in Is It Really Encrypted When the Key Is Public and Automatic?:

                    @Dashrender said in Is It Really Encrypted When the Key Is Public and Automatic?:

                    so run it from there - what are the legal liabilities?

                    Can't. Key is required to be with the data for the app to run. It's inside the app, can't he separated.

                    Have you successfully been able to use it to decrypt other people's data?

                    I don't know if that would be ethical to do specifically. But since there is apparently a demo environment if you could use your key to decrypt the demo data the proof is already sufficient while not exposing someone else's environment and data.

                    Yes, you can trivially get two demos and show that the data from one can be read from the other, for example.

                    O 1 Reply Last reply Reply Quote 0
                    • S
                      scottalanmiller @Obsolesce
                      last edited by

                      @Obsolesce said in Is It Really Encrypted When the Key Is Public and Automatic?:

                      @DustinB3403 said in Is It Really Encrypted When the Key Is Public and Automatic?:

                      @Obsolesce said in Is It Really Encrypted When the Key Is Public and Automatic?:

                      @scottalanmiller said in Is It Really Encrypted When the Key Is Public and Automatic?:

                      @Dashrender said in Is It Really Encrypted When the Key Is Public and Automatic?:

                      so run it from there - what are the legal liabilities?

                      Can't. Key is required to be with the data for the app to run. It's inside the app, can't he separated.

                      Have you successfully been able to use it to decrypt other people's data?

                      I don't know if that would be ethical to do specifically. But since there is apparently a demo environment if you could use your key to decrypt the demo data the proof is already sufficient while not exposing someone else's environment and data.

                      Is that what he did?

                      We have access to a lot of customer data because figuring out why it is corrupt, what has gone wrong with it, backing it up, or moving it to another platform is all stuff that we do with this specific data. So customers are requesting that we work with their data regularly, since the vendor who encrypts it doesn't know how.

                      1 Reply Last reply Reply Quote 0
                      • T
                        travisdh1 @scottalanmiller
                        last edited by

                        @scottalanmiller said in Is It Really Encrypted When the Key Is Public and Automatic?:

                        @Obsolesce said in Is It Really Encrypted When the Key Is Public and Automatic?:

                        @scottalanmiller said in Is It Really Encrypted When the Key Is Public and Automatic?:

                        @Dashrender said in Is It Really Encrypted When the Key Is Public and Automatic?:

                        so run it from there - what are the legal liabilities?

                        Can't. Key is required to be with the data for the app to run. It's inside the app, can't he separated.

                        Have you successfully been able to use it to decrypt other people's data?

                        Yes, that's how we found it. Someone sent us their data asking us to decrypt it. Which we did so, without getting a key from them.

                        #facepalm

                        S 1 Reply Last reply Reply Quote 0
                        • S
                          scottalanmiller @travisdh1
                          last edited by

                          @travisdh1 said in Is It Really Encrypted When the Key Is Public and Automatic?:

                          @scottalanmiller said in Is It Really Encrypted When the Key Is Public and Automatic?:

                          @Obsolesce said in Is It Really Encrypted When the Key Is Public and Automatic?:

                          @scottalanmiller said in Is It Really Encrypted When the Key Is Public and Automatic?:

                          @Dashrender said in Is It Really Encrypted When the Key Is Public and Automatic?:

                          so run it from there - what are the legal liabilities?

                          Can't. Key is required to be with the data for the app to run. It's inside the app, can't he separated.

                          Have you successfully been able to use it to decrypt other people's data?

                          Yes, that's how we found it. Someone sent us their data asking us to decrypt it. Which we did so, without getting a key from them.

                          #facepalm

                          Yeah, pretty funny.

                          1 Reply Last reply Reply Quote 0
                          • O
                            Obsolesce @scottalanmiller
                            last edited by

                            @scottalanmiller said in Is It Really Encrypted When the Key Is Public and Automatic?:

                            @DustinB3403 said in Is It Really Encrypted When the Key Is Public and Automatic?:

                            @Obsolesce said in Is It Really Encrypted When the Key Is Public and Automatic?:

                            @scottalanmiller said in Is It Really Encrypted When the Key Is Public and Automatic?:

                            @Dashrender said in Is It Really Encrypted When the Key Is Public and Automatic?:

                            so run it from there - what are the legal liabilities?

                            Can't. Key is required to be with the data for the app to run. It's inside the app, can't he separated.

                            Have you successfully been able to use it to decrypt other people's data?

                            I don't know if that would be ethical to do specifically. But since there is apparently a demo environment if you could use your key to decrypt the demo data the proof is already sufficient while not exposing someone else's environment and data.

                            Yes, you can trivially get two demos and show that the data from one can be read from the other, for example.

                            So basically the software itself is the key. Yeah, that can't be legal. That's like saying your data is encrypted with BitLocker or FileVault, but anyone with BitLocker or FileVault respectively can decrypt your data.

                            S 2 Replies Last reply Reply Quote 0
                            • S
                              scottalanmiller @Obsolesce
                              last edited by

                              @Obsolesce said in Is It Really Encrypted When the Key Is Public and Automatic?:

                              So basically the software itself is the key.

                              That's exactly correct. The software is the key, the key is always the same.

                              1 Reply Last reply Reply Quote 0
                              • S
                                scottalanmiller @Obsolesce
                                last edited by

                                @Obsolesce said in Is It Really Encrypted When the Key Is Public and Automatic?:

                                That's like saying your data is encrypted with BitLocker or FileVault, but anyone with BitLocker or FileVault respectively can will automatically decrypt your data without even trying.

                                FTFY

                                1 Reply Last reply Reply Quote 0
                                • 1
                                • 2
                                • 3
                                • 3 / 3
                                • First post
                                  Last post