Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

They don't even have to be corruptible. People are fallible. Someone could just make a mistake. No bad actors needed. (Bad actors exist, and make the problem worse. But the problem exists even without bad actors.)


The TSA used essentially this system for luggage locks. You could have a lock on your luggage, but the TSA had a master key that could open any luggage lock.

The master keys became available on 3D printing sites after the TSA allowed a photo of them to be published in a news article: https://www.wired.com/2015/09/lockpickers-3-d-print-tsa-lugg...


This is an apt reminder that the question is not "how likely is it that backdoor keys will be leaked/stolen?", but rather "how soon until the first backdoor keys are leaked/stolen, and how frequently after that?"

And to make it much worse, we would now also have to ask "how soon until the required systemic weaknesses themselves are used an attack vector for a mass breach?".

Just for a moment, ignore all arguments about citizens' rights to privacy, potential for abuse by the organizations authorized to access the secrets (and their many fallible and corruptible employees), and so on. Of course all that _is_ important, but just for the sake of argument, ignore it. The problem remains that if anything resembling the "EARN IT" bill passes, then attacks against encryption will _scale too effectively_, and the USA will have exposed itself to having the secrets of thousands of politicians and civil servants leaked to an adversary at once. What do you think happens to democracy when that happens?

I get that many people are short-sighted, or even simply apathetic to the long-term consequences of a law that might make their job easier today. But it seems that whenever computers are involved, lawmakers become _so_ incredibly short-sighted that it verges on madness.

Consider this: a bill requiring a small GPS and remote-controlled bomb to be installed in the engine of every car would allow the police to entirely avoid dangerous high-speed pursuits. If it could be done cheaply enough, should it be done? It's pretty easy to understand the myriad ways this could be abused, so it would never happen. But add computers to the mix, and suddenly any kind of foresight goes out the window.


You're completely correct. I think the deeper issue is that the people responsible for directing US policy right now (and for the last few decades by varying amounts) generally do not care about the welfare of the country or the rights of an average person relative to how much they care about preserving and increasing their own power and advancing an ideological agenda to the same end.

The game is different than it once was; They aren't out murdering like Genghis Khan, but they are no less indifferent towards the people they harm in their conquest. The extent of their love for their country and it's people is the extent to which they can control it all. I've gotten to know this kind of sociopathic power-obsessed personality up close, and have no doubt certain mega-rich assholes out there influencing the political sphere have the same "defect".




Consider applying for YC's Winter 2026 batch! Applications are open till Nov 10

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: