> > Cops just don't put that much work in.
On 2013-05-22 5:41 PM, Jacob Appelbaum wrote:
> Yes, yes they do:
>
>
http://www.scmagazine.com/finfisher-command-and-control-hubs-turn-up-in-11-new-countries/article/291252/
That governments attempt to spy on people is not evidence that they any
good at it.
If they were half way competent, it would not be possible to detect
these hubs.
> While I generally understand your arguments, I think you
underestimate the capabilities of even local police officers.
> There are point and click tools, custom tools and everything in between.
Local police can no more do this stuff than your mother can, and the FBI
is not a whole lot better.
Consider for example, the boston bombing. Interested parties threw away
Tsarnaev's laptop, indicating he had been doing interesting things on
the internet. Despite the fact that the FBI had been told by the
Russian intelligence service Tsarnaev was a terrorist, they had failed
to collect any interesting internet communications.
Customized solutions are the standard operating procedure. I encourage
you to read this:
http://www.gpo.gov/fdsys/pkg/CHRG-112hhrg64581/html/CHRG-112hhrg64581.htm
Upon reading it, I find the unsurprising information: "Simply stated,
the technical capabilities of law enforcement agencies have not kept
pace with the dazzling array of new communication devices and other
technologies that are now widely available in the marketplace."
This tells me that not that the police are super terrific hackers who
produced customized malware for each person's computer, but that they
are your mother.
===============
Ms. Caproni. Thank you for that question. There will always be
criminals, terrorists, and spies who use very sophisticated means of
communications that are going to create very specific problems for law
enforcement. We understand that there are times when you need to design
an individual solution for an individual target, and that is what
those targets present.
We are looking for a better solution for most of our
targets, and the reality is, I think, sometimes we want to
think that criminals are a lot smarter than they really are.
Criminals tend to be somewhat lazy, and a lot of times, they
will resort to what is easy.
And so, long as we have a solution that will get us the
bulk of our targets, the bulk of criminals, the bulk of
terrorists, the bulk of spies, we will be ahead of the game. We
can't have individual--have to design individualized solutions
as though they were a very sophisticated target who was self-
encrypting and putting a very difficult encryption algorithm on
for every target we confront because not every target is using
such sophisticated communications.
This tells us that they would like to have customized solutions, that
they aspire to have customized solutions, but that instead of customized
solutions they rely on Google and Microsoft vacuuming everything up and
handing it to them on a platter tied up with a pink ribbon.
_______________________________________________
cryptography mailing list
[email protected]
http://lists.randombit.net/mailman/listinfo/cryptography
