31–40 of 227 posts
Earlier quoted context omitted.
This is an incredibly common misuse of the term e2ee. I think at this point we need a new word because you have a coin flip's chance of actually getting what you think when a company describes their product this way.
“In transit encryption”
So, end-to-end-encraption? Oh wait, maybe this is what Cory Doctorow is referring to as enshittified? I mean, these jokes make themselves, including whoever buys the hardware, AND buys the marketing pitch.
E2EE now means something wildly different in the context of messaging applications and the like (since like 2014) so this is more of an outdated way of saying "no one is getting your poop pictures between your toilet and us".
It also feels like it would never make sense for this to be "E2EE encrypted" in the modern sense of the term as the "end user recipient" of the message is the service provider (Kohler) itself. "Encrypted in Transit" and "Encrypted at Rest" is about as good as you're going to get here IMO as the service provider is going to have to have access to the keys, so E2EE in a product like this is kind of impossible if you're not doing the processing on the device.
I wonder if they encrypt it and then send it over TLS or if they're just relying on TLS as the client->server encryption. Restated, I wonder how deep in their stack the encrypted blob goes before it's decrypted.
Sounds like the crappiest data source for AI training yet. But in all seriousness, of course they can access the data. Otherwise who else would process it to give any health results back? I don't think encryption in transit is relevant to privacy concerns because the concerns are about such data being tied to you at all, in any way. At the same time, yes, this could product valuable health information. Their better b…
You could have a classifier running on-device that sends summary data (rather than raw images) back to Kohler.
Doing on device compute is probably expensive and would prohibit such a product based on the economics but ITS A GENITAL CAM
Earlier quoted context omitted.
“In transit encryption”
Creating a new term for the less secure definition doesn't work, as they'll just continue to call it E2EE encrypted.
I can't blame most people for calling TLS "E2EE", even some folks in industry, but it's not great for a company to advertise that you offer X if the meaning of X has shifted so drastically in the last decade.
Earlier quoted context omitted.
This is an incredibly common misuse of the term e2ee. I think at this point we need a new word because you have a coin flip's chance of actually getting what you think when a company describes their product this way.
“In transit encryption”
Earlier quoted context omitted.
Creating a new term for the less secure definition doesn't work, as they'll just continue to call it E2EE encrypted.
I think part of the problem is that prior to WhatsApp's E2EE implementation in like 2014, TLS was very often called "End to End Encryption" as the ends were Client and Server/Service Provider. It got redefined and now the new usage is way more popular than the old one. I can't blame most people for calling TLS "E2EE", even some folks in industry, but it's not great for a company to advertise that you offer X if the m…