Zarquan’s Comments

• Jan 13th, 2016 @ 10:46am

  By fax or by email ?

  on Latest Email Dump Shows Hillary Clinton Telling Aide To Send Classified Documents Over Unsecure Fax Line

  Clinton told him to wipe off any "identifying heading" and send it over using a regular fax line

  Q: was it sent by fax ?

  "We did do some forensics on that and found no evidence it was actually emailed to her"

  The question was not about whether it was sent to her by email, the question was asking if it was is sent by fax ?
  

  "There are other ways it could have found its way to her for her use"

  Is that code for "yes, it kind of might have been sent by fax" ?
• Apr 23rd, 2015 @ 6:06pm

  Re: How *Many* Governments and Agencies?

  on Cybersecurity Official Believes Encryption Can Be Backdoored Safely; Can't Think Of Single Expert Who Agrees With Him
  Once the US tries it, all the other governments will want the same level of access to devices used in their territory. The UK government is already proposing a similar scheme.
  
  However, Angela Merkel is unlikely to be happy using a device that has US or UK government decryption keys built in. So will the manufacturers have to install different decryption keys depending on where a device is being used ? US keys on US devices, German keys on German devices, Brazilian keys on Brazilian devices.
  
  International travel suddenly becomes very complicated.
  
  If Michael Daniel visits France, will he be happy to comply with their laws and install the French government decryption keys on his Kindle ? What happens when he returns home. Will he want to be able to remove the French decryption keys once he is safely back in the USA ?
  
  If Dilma Rousseff visits the USA, will she be required to install the US government decryption keys on her iPad ? Can she remove them again once she has left ? Will she ever be able to trust the device again, or do we all just throw everything away and buy new devices every time we cross a border ?
  
  If the keys can be added and removed, who is authorised to modify the keys and how ? Who checks that a device has all the right decryption keys installed on it ?
  
  Perhaps this a job for United Nations Cyber Law Enforcement ?