- Second Amendment protesters defend gun rights with truly terrible signs 4 Years Ago
- David Lynch surprises fans by dropping Netflix short out of the blue 4 Years Ago
- Poop-focused parody of Kent State Gun Girl sparks conservative ire Today 11:58 AM
- 6-year-old raises $250K for Australian bushfires by making clay koalas Today 11:31 AM
- What you need to know about Clearview AI and its facial recognition app Today 10:36 AM
- Apple TV+ gets its first SAG Award while Netflix and Amazon nab 2 each Today 10:07 AM
- Facebook apologizes for translating Chinese president’s name to ‘Mr. Sh*thole’ Today 9:45 AM
- New York Times endorses Klobarren for president Today 8:45 AM
- 6 gift cards that make for the most thoughtful Valentine’s Day gift ideas Today 8:16 AM
- Studio Ghibli films are coming to Netflix—but not for Americans Today 8:13 AM
- Brad Pitt clutching Jennifer Aniston’s hand sparks all the rumors Today 7:47 AM
- The man who sold shares of himself on the internet Today 7:00 AM
- The rise of the conservative ‘mancast’ in a world of changing masculinity Today 6:00 AM
- Amazon’s ‘Troop Zero’ gives the underdog movie a stylized re-do Today 4:20 AM
- No, the first words of Trump’s tweets don’t match up to lyrics of ‘Break My Stride’ Sunday 10:28 PM
Here’s what Obama doesn’t understand about encryption
Science harder, geeks!
President Barack Obama is a politician who built his career on compromise. That’s how politics works. You wheel and you deal and you wind up with something more or less palatable to both parties.
The problem here is that Obama does not, by his own admission, understand the technology. He doesn’t like the political consequences of creating secure(-ish) computing devices, and demands, petulantly, that engineers fix it, Mommy, fix it right now. Here’s what he said during his appearance at SXSW in Austin on Friday:
I’ve got a bunch of smart people sitting there, talking about it, thinking about it. We have engaged the tech community aggressively to help solve this problem. My conclusion so far is that you cannot take an absolutist view on this. So if your argument is strong encryption, no matter what, and we can and should, in fact, create black boxes, then that I think does not strike the kind of balance that we have lived with for 200, 300 years….and that can’t be the right answer.
But that’s about as useful as demanding a perpetual motion machine, or a flying carpet, or some other monstrously useful invention that the laws of science and mathematics tell us are not possible.
Never before have we faced such a stark choice between liberty and tyranny.
Insisting that geeks put their heads together and come up with some kind of “compromise solution” is like saying “I don’t like that 2+2=4, and I want you math people to go to your chalkboards and figure out how we can make 2+2=5, because by God if we don’t, them dirty darn terrorists gonna git us.”
As one prominent cryptographer put it: “Science harder, everyone!”
Obama on crypto @ SXSW speech: technologists should invent a good compromise that solves policy problems. Science harder, everyone.
— matt blaze (@mattblaze) March 11, 2016
Except that won’t work. No compromise is possible on this issue. There is no grey area, as anyone who understands computer security will tell you. Never before have we faced such a stark choice between liberty and tyranny. Encryption is a binary issue that does not admit any middle ground, no matter how much well-meaning politicians like Obama want to find one.
Even if you do not agree, as I do, that “abuse is a by-product of power”—as Edward Snowden put it so eloquently at the Logan Symposium in Berlin on Saturday, even if you believe that the FBI are angelic creatures who would never misuse these powers to attack political opponents, or disrupt the lives of peaceful protestors, or spy on journalists, or frame a lawmaker they didn’t like with child porn (Where did that come from? It’s not mine! I swear it!) even if you somehow could overlook all of these things, then consider this:
National security is now a matter of collective individual security.
The security of my iPhone does not exist in isolation. It exists as part of an ecosystem.
Did you catch that? The security of my iPhone does not exist in isolation. It exists as part of an ecosystem. An ecosystem that is vulnerable to plagues of malware. Because vulnerabilities, like everything on the Internet, scale.
Metaphors have limits but the disease metaphor has been a staple of cybersecurity thinking for two decades because it highlights a fundamental truth: Every insecure device on the Internet is a threat to every other device on the Internet.
If you make one device vulnerable, you make every device vulnerable. iPhones are not lovingly handcrafted by bearded gnomes making every individual part with loving care from scratch on their tiny work benches in Apple CEO Tim Cook’s candy-cane striped workshop at the North Pole. Computers are mass produced, and unless the government interdicts yours in transit, every single iPhone is exactly the same.
And all equally secure or insecure. Do you realize how vulnerable the world is we’re building? I don’t mean iPhones, I mean everything. The power grid. Your car. The burgeoning market for ioT devices. The world we are creating—our civilization, as Obama put it—will rise or fall on our ability to secure those computers from glitches, of both the accidental and malicious variety. At a time when computer insecurity is reaching crisis proportions, suggesting ways to make computers security worse is not only criminally irresponsible, it is something only a “man of zeal, well-meaning but without understanding” would try to do.
I’ll sign off with this. Obama ended his discourse on iPhone security by defending the Transportation Security Administration. Yes, the TSA—the idiotic security theater that robs us of our dignity, compels our obedience, and which study after study after study have proven does not make us any safer.
“We make compromises all the time,” he told the audience at SXSW. “I haven’t flown commercial in a while, but my understanding is it’s not great fun going through security. But we make the concession because—it’s a big intrusion on our privacy, but we recognize it as important.”
If Obama is capable of defending such nonsense with a straight face, then only a fool would take him seriously on a subject that really does matter—encrypting and securing our future.
J.M. Porup is a freelance cybersecurity reporter who lives in Toronto. When he dies his epitaph will simply read “assume breach.” Follow him on Twitter at @toholdaquill.
Photo via Terry Ross/Flickr (CC by 2.0) | Remix by Max Fleishman