Re: [cryptography] Question About Best Practices for Personal File Encryption

2014-08-17 Thread Jeffrey Walton
On Sun, Aug 17, 2014 at 12:09 AM, Jeffrey Goldberg jeff...@goldmark.org wrote: On 2014-08-16, at 4:51 PM, David I. Emery d...@dieconsulting.com wrote: On Sat, Aug 16, 2014 at 04:21:53PM -0500, Christopher Nielsen wrote: The comment about Apple is simply false. Apple does not have a key to

Re: [cryptography] Question About Best Practices for Personal File Encryption

2014-08-17 Thread ianG
On 17/08/2014 05:09 am, Jeffrey Goldberg wrote: On 2014-08-16, at 4:51 PM, David I. Emery d...@dieconsulting.com wrote: I do think, however, that if there are such backdoors, it would have to be known to only a very small number of people. Too many of the people who work on Apple security

Re: [cryptography] Question About Best Practices for Personal File Encryption

2014-08-17 Thread Ryan Carboni
Or in the case of OpenSSL, no one notices the backdoor as it is indistinguishable from an obscure programming error. On Sun, Aug 17, 2014 at 5:01 AM, ianG i...@iang.org wrote: On 17/08/2014 05:09 am, Jeffrey Goldberg wrote: On 2014-08-16, at 4:51 PM, David I. Emery d...@dieconsulting.com

Re: [cryptography] Question About Best Practices for Personal File Encryption

2014-08-17 Thread ianG
On 17/08/2014 19:39 pm, Ryan Carboni wrote: Or in the case of OpenSSL, no one notices the backdoor as it is indistinguishable from an obscure programming error. The difference between a corporate backdoor and an open source backdoor is likely that when it is finally discovered, the corporate

Re: [cryptography] Question About Best Practices for Personal File Encryption

2014-08-17 Thread Tony Arcieri
On Fri, Aug 15, 2014 at 9:05 PM, Mark Thomas mark00tho...@gmail.com wrote: any commercial product could be compromised and not completely secure. Like Appleā€™s FileVault2, which Apple has a key to. There aren't known backdoors in FileVault2, or for that mater, Microsoft's Bitlocker. Apple, on

[cryptography] Fwd: Cryptoparty 2014 - Hi my name is Ed - 2014/09/20

2014-08-17 Thread shawn wilson
Is anyone (or know anyone) in the DC area who would like to talk at this event? The focus is on defensive security, identity, and tools (and some UX as it relates to things like gnupg). But I'd also like to see some more technical talks involving math or programatic use of encryption. If anyone

Re: [cryptography] Question About Best Practices for Personal File Encryption

2014-08-17 Thread shawn wilson
I just use gpg and armor the file. If its text, there's also a vim plugin that works perfectly with this method. On Aug 16, 2014 12:06 AM, Mark Thomas mark00tho...@gmail.com wrote: I have a question for the group, if I may ask it here and in this manner (?). What are you guys using to encrypt