El Reg :
Analysis In the wake of the FBI's failed fight against Apple, Senators Richard Burr (R-NC) and Dianne Feinstein (D-CA) have introduced a draft bill that would effectively ban strong crypto.
The bill would require tech and communications companies to allow law enforcement with a court order to decrypt their customers' data. Last week a draft copy of the bill, dubbed the Compliance with Court Orders Act of 2016, was leaked, but the new version is even worse than the discussion draft.
In the draft version, court orders could only be issued for a crime resulting in death or serious bodily harm, terrorism and espionage, crimes against minors, serious violent felonies or Federal drug crimes. In the final version, those caveats are gone, so any court order will allow the police to access the data they want.
The bill would apply to "device manufacturers, software manufacturers, electronic communication services, remote communication services, providers of wire or electronic communication services, providers of remote communication services, or any person who provides a product or method to facilitate a communication or to process or store data." That's a pretty wide net.
"No entity or individual is above the law," said Feinstein. "The bill we have drafted would simply provide that, if a court of law issues an order to render technical assistance or provide decrypted data, the company or individual would be required to do so.
"Today, terrorists and criminals are increasingly using encryption to foil law enforcement efforts, even in the face of a court order. We need strong encryption to protect personal data, but we also need to know when terrorists are plotting to kill Americans."
Idiots, I tell you, they're a pair of idiots.
(Score: 2) by RamiK on Saturday April 16 2016, @06:13PM
You forget the part where if you provide encryption as part of your service you're still required to be able to backdoor it.
Read this again:
feature, product, or service owned, controlled, created, or provided
Simply put, don't provide encryption.
As a software programmer, implement a general purpose script extension system.
As a hardware designer, replace your cryptography extensions with FPGA.
As a cryptographer, review anonymous scripts in an open academic journal wiki while releasing your reviews under public domain.
Is this a feature making data unintelligible? No more than any other general purpose interpreter, CPU or abacus.
Do you own this product, or service? Nope. Can't own what's under public domain.
Do you control this product, or service? Nope. Can't own what's under public domain.
Did you create this product, or service? Nope. anonymous wrote the script. You just reviewed it.
Did you provide this product, or service? Nope. You just reviewed it in a journal after it was posted anonymously \ fell off a truck.
Like I said, this bill is a blessing in disguise. It will force open computing like never before.
compiling...