I feel like I've ranted this before. many times. but here we go again because Australia.

why do people think you can just ban math? like really?! that's what crypto laws do. they require companies to use shitty math. and what prevents me from using the good math? nothing! oh I mean... I won't use it? scouts honor.

you can't ban math.
literally billions of internet users don't fall in your jurisdiction.
no single jurisdiction can cover more than a subset of the internet.
I will use whatever maths I damn well please.
fuck off. please stop making us less safe.
/discussion

A big disease in Computer Science. People telling young students that they 'just need to plugg stuff together' and they believe it. But no one asks where all the crypto-methods are coming from.

#itsAKindOfMagic
#iWillBecomeAHackerByOpeningTheCommandLine

Im looking forward to the first people that get jailed because they used crypto. It doesn't matter what the topic of the conversation was, maybe they were planning a terrorist attack, maybe they were planning to go out for dinner, who knows? I don't believe that insecure crypto makes anything or anyone even a bit more safe. The big MAYBE "they were planning a terrorist attack" is equally big BULLSHIT. Everybody is a suspect for the vague possibility of some people (who by the way don't obey the law anyways) doing bad stuff.
I feel that this is very similar to airport security: It's a farce, everybody is handled like a potential terrorist and it's not very good at detecting weapons/terrorists and has not prevented anything ever. Or when was the last time you heard about a terrorist with a bomb being stopped at an airport?

Wasn't this just about sending full applications? As far as I know, basic algorithms and concepts aren't included in it. Also, it's of course impossible to enforce, it's just a "if we can ever prove that someone did it, we can sue him" thing.

@Fabian as far I know you're right. but the thing is: most people don't give a shit about AES and RSA. hell they don't care abound encryption at all. sure if you say you're making the crypto weaker, they will rightfully get mad, but they won't go out of their way to intentionally encrypt their things securely. except privacy advocates like myself and terrorists. so it does a few things:

- makes everyone a little less secure
- makes everyone a little more okay with that
- makes the pool of non terrorists using good crpyto smaller, therefore I am now viewed as "more likely" a terrorist.
- a lot less people are much less involved or exposed to decent cryptography and this will lead to bad algorithms being used where they aren't "required" because "it's what we use on that system so... I already know how this library works so... it's what Facebook uses so it must be good I guess..." etc.
- it makes the next crypto bill to come out look less bad. it's only adding this one thing yknow?

@TobyAsE I even send my email gateway test emails to an encrypted tutanota inbox, waiting for this to become illegal...