Post #4287489
2026-07-31 14:25 UTC
@wdormann@infosec.exchange In physically keyed locks, a master key has different pin height from the lock-specific key. There exists a limit on the number of keys that can open a single pin-tumbler, directly derived from the number of little cylinders you can stack up in a pin bore. So we tend to think that there is only ever one master key. But there is no such physical limitation on a digital cryptographic lock.
Encrypt your sensitive data long before you ever touch the cloud. (But don't roll your own.)
Replies (1)
-
@log@mastodon.sdf.org 2026-07-31 14:31
@wdormann@infosec.exchange And for us bitjockeys, if someone orders you to install a back door into a system presented to the user as secure, refuse. Which is to say polish up your resume, send out applications, and slow-walk the implementation until you can afford to quit, because you resisted unionizing for 60 years so can't just say "no, that's defrauding the customer; I'm not doing that".