After Washington Post rolls out HTTPS, its editorial board bemoans encryption debate

After Washington Post rolls out HTTPS, its editorial board bemoans encryption debate

There's hope that by the time the Washington Post's editorial board takes a third crack at the encryption whip, it might say something worthwhile.

Late on Saturday, the The Washington Post's editorial board published what initially read as a scathing anti-encryption and pro-government rhetoric opinion piece that scolded Apple and Google (albeit a somewhat incorrect assertion) for providing "end-to-end encryption" (again,an incorrect assertion) on their devices, locking out federal authorities investigating serious crimes and terrorism.

Read to the end, and you'll find the editorial came up with nothing.

It was a bland and mediocre follow-up to a similar opinion piece, which was called"staggeringly dumb" and "seriously embarrassing"for proposing a "golden key" to bypass encryption.

Critically, what the Post gets out of this editorial remains widely unknown, perhaps with the exception of riling up members of the security community. It's not as though the company is particularly invested in either side. Aside the inaccuracies in the board's opinion, and the fair (and accurate) accusation that the article said "nothing" (one assumes that means nothing of "worth" or "value"), it's hypocritical to make more than one statement on this matter while at the same time becoming the first major news outlet to start encrypting its entire website.

The board's follow-up sub-600 worded note did not offer anything new, but reaffirmed its desire to see both tech companies and law enforcement "reconcile the competing imperatives" for privacy and data access, respectively. (It's worth noting the board's opinion does not represent every journalist or reporter working at the national daily, but it does reflect the institution's views on the whole.)

Distinguished security researcher Kenn White, dismissed the editorial in just three words: "Nope. No need."

Because right now, there is no viable way allow both encrypted services while allowing police and federal agencies access to that scrambled information through so-called "backdoor" means. Just last week, a group of 13 of the world's preeminent cryptographers and security researchers released a paper (which White linked to in his tweet) explaining that "such access will open doors through which criminals and malicious nation-states can attack the very individuals law enforcement seeks to defend."

In other words: if there's a secret way in for the police and the feds, who's to say a hacker won't find it, too?

The Post's own decision to roll out encryption across its site seems bizarre considering the editorial board's conflicting views on the matter.

Such head-scratching naivety prompted one security expertto ask anyone who covers security at the Post to "explain reality" to the board. Because, clearly, the board isn't doing its job well if on two separate occasions it's fluffed up reporting on a subject with zero technical insight.

If the board, however, needs help navigating the topic, there is no doubt a virtual long line of security experts, academics, and researchers lining up around the block ready to assist. At least then there's hope the board can strike it third-time lucky in covering the topic.


It is difficult for the FBI to crack most smartphone encryption

The FBI is struggling to decode private messages on phones and other mobile devices that could contain key criminal evidence, and the agency failed to access data more than half of the times it tried during the last fiscal year, FBI Director Christopher Wray told House lawmakers. Wray will testify at the House Judiciary Committee ...

Texas Church Shooting: More Calls for Encryption Backdoors

US Deputy Attorney General, Rod Rosenstein, has decided to use the recent mass shooting at a Texas church to reiterate calls for encryption backdoors to help law enforcers. The incident took place at the First Baptist Church in Sutherland Springs, killing at least 26 people. Deceased suspect Devin Kelley’s mobile phone is now in the ...

FBI couldn't retrieve data from nearly 7000 mobile phones due to encryption

The head of the FBI has reignited the debate about technology companies continuing to protect customer privacy despite law enforcement having a search warrant. The FBI says it hasn't been able to retrieve data from nearly 7000 mobile phones in less than one year, as the US agency turns up the heat on the ongoing ...

Wi-Fi's Most Popular Encryption May Have Been Cracked

Your home Wi-Fi might not be as secure as you think. WPA2 -- the de facto standard for Wi-Fi password security worldwide -- may have been compromised, with huge ramifications for almost all of the Wi-Fi networks in our homes and businesses as well as for the networking companies that build them. Details are still ...