[Cryptography] But it's encrypted so it must be OK

Tom Mitchell mitch at niftyegg.com
Thu Nov 2 19:01:04 EDT 2023


On Tue, Oct 31, 2023 at 8:23 AM Jerry Leichter <leichter at lrw.com> wrote:
>
> > Ray, not trying to be an a****** but you're 100% wrong.
...
> A lock from 50 years ago isn't as good as a modern lock, so you might have reason to want the new lock; but the weaknesses and attacks against the older lock were there and known 50 years ago as well.
....
> Picking physical locks (mainly) remains a learned skill.  Breaking older encryption algorithms is just a matter of downloading the right software and running it
....
> You *can* get physical locks that are quite secure.

You are all correct.
There are some missing modern turns of the dial to pay attention to.

Perhaps the most ignored bit is video and surveillance.
The Ring Doorbell Camera is a good example.  It need not unlock the
door.  It alerts nicely at a distance.
Surveillance collapses with inattention and response time as the
Pelosi's learned.

Knowledge to select and pick mechanical locks is at the tip of
anyone's fingers.
The same is true for 'electronic' locks that must have a mechanical backdoor.
Digital garage openers are home openers.
Remote control for autos is a tangle.
Postal Arrow keys are a dark market commodity and once were protected
with a social contract

Much of security is a social contract... that is a current tangle.

I had access to a 1930's bank vault door.  I could feel nothing and I
knew the combination.


-- 
    T o m    M i t c h e l l  (on NiftyEgg[.]com )


More information about the cryptography mailing list