testvox
Joined 9 years ago
Karma
874
Submissions
343
Member since
Aug 28
Recent submissions
Comment · 5 years ago
They do https://protonmail.com/tor
Comment · 5 years ago
I think that quote is saying that if you modify your public key locally then the data you encrypt with it will no longer be decryptable by the private key you previously sent backblaze.
Comment · 5 years ago
> If that's true, as an iCloud user you are exactly as likely to be charged with a crime based on your photos as you were before
Is this strictly true? I feel like the evidence that a photo was present on specific device is different from evidence that a photo was uploaded by a specific account (and a specific ip address probably).
It seems like it would be far easier for the government to justify a search warrant if they have evidence the photo they are looking for was on a specific device. Just having evidence that a specific account uploaded a photo seems like far shakier grounds to search a specific device, after all accounts are often stolen to be used for criminal purposes and ip addresses don't map cleanly to people or devices.
Comment · 5 years ago
They actually can be forced to reveal sources, the choice not to force them to reveal sources was executive branch policy not law and this policy was rescinded by the Obama administration. I think they realized this was pretty bad optics though so Obama and Trump mostly just relied on using their broad intelligence powers to track down reporter's sources.
https://www.theguardian.com/law/2013/aug/27/obama-administra...
Comment · 5 years ago
"Freedom of the press" in US law just means the freedom to create and distribute media (as opposed to freedom of speech which is specifically about the spoken word). "The press" references the printing press not the news media or journalists who are in modern times called "the press" also in reference to the printing press. Journalists have the same first amendment rights as everyone else (actually they could be said to have less because for certain purposes such as defamation they are actually held to a higher standard).
Comment · 6 years ago
Yes Clearview has been abused as specified TFA.
Also Clearview itself has been found breaking the law repeatedly.
https://techcrunch.com/2020/02/14/class-action-suit-against-...
Comment · 6 years ago
So yeah you lose out on pay if you were planning on working overtime.
Comment · 6 years ago
What is full payment if you are paid hourly?
Comment · 6 years ago
By the way, in the United States copyright is owned by the author of the work unless there is a written contract assigning it to someone else. The only real exception to this is an employee can assign copyright to their employer by mere verbal agreement. Since you were a contractor they don't have the copyright unless you actually have a written contract assigning it to them.
Comment · 6 years ago
Some people do believe that non ionizing radiation has effects other than those produced by the added thermal energy (or that the thermal effects are in some way significant). The actual scientific evidence for this is minimal though.
Comment · 6 years ago
Salaried employees don't have free time.
Comment · 6 years ago
I'm sure they would if it wasn't against the law.
Comment · 6 years ago
So do they not have jury nullification in Brazil?
Comment · 6 years ago
But they shouldn't. The key you enter as a user is actually only half of the key needed to decrypt the data. The other half of the key is generated by the secure enclave when the device was first powered on. This part of the key alone should be impossible to brute force and is stored in tamper resistant flash memory on the secure enclave co-processor.
So you would need to break open the co-processor without destroying its contents and read the secure enclave key before any brute forcing could happen directly on the encrypted data.
And no you can't just try to brute force it by sending decryption requests to the secure enclave. The secure enclave itself implements a exponentially increasing lockout time and won't respond to decryption requests during it. [0]
[0] https://www.apple.com/in/business-docs/iOS_Security_Guide.pd...
Comment · 6 years ago
The lockout delay is implemented in the chip itself in newer iphones (I think starting with iphone 5S). So no, taking the chip out buys you nothing.
> To further discourage brute-force passcode attacks, there are escalating time delays after the entry of an invalid passcode at the Lock screen. ...On devices with Secure Enclave, the delays are enforced by the Secure Enclave coprocessor. If the device is restarted during a timed delay, the delay is still enforced, with the timer starting over for the current period.
https://www.apple.com/in/business-docs/iOS_Security_Guide.pd...