D&C GLug - Home Page

[ Date Index ] [ Thread Index ] [ <= Previous by date / thread ] [ Next date => thread => ]

Re: [LUG] Security Thoughts

 

On 30/03/17 22:58, Simon Waters wrote:
> 
> 
>> On 30 Mar 2017, at 20:46, mr meowski via list <list@xxxxxxxxxxxxx> wrote:
>>
>> FileVault or Bitlocker for example, which are demonstrably backdoored.
> 
> I want a demonstration.
> 
> Various papers leaked from US  three letter agencies suggest they've spent a lot 
> of money hacking hardware since these products were allegedly backdoored.
> 
> Not saying it hasn't happened, nor that there aren't too many recovery options, 
> but if it's demonstrable..
> 

Apologies - seems I have misremembered here. I was sure I'd seen
accounts/leaks about exactly this but but going back to check only turns
up (lots) of implementation flaws and various successful attacks against
FileVault and Bitlocker. Which I'd like to hope have all been fixed by now.

So, withdrawn unconditionally!

On balance I still think it vanishingly unlikely that both products
aren't technically and/or legally backdoored - especially Bitlocker -
but that's decidedly not the same thing as it being proven.

Hopefully Microsoft and Apple don't read the DCGLUG lists so I don't
have to watch out for black helicopters or armies of lawyers...

Cheers



-- 
The Mailing List for the Devon & Cornwall LUG
https://mailman.dclug.org.uk/listinfo/list
FAQ: http://www.dcglug.org.uk/listfaq