I'm so sorry for the people who work on this and have to look at the data.
Kohler Can Access Pictures from "End-to-End Encrypted" Toilet Camera
81–90 of 227 posts
Re: Kohler Can Access Pictures from "End-to-End Encrypted" Toilet Camera
#82So basically their marketing-department is abusing a security term in order to sound good, as opposed to a software flaw. They're claiming "end to end" encryption, which usually implies the service is unable to spy on individual users that are communicating to one-another over an individualized channel. However in this case there are no other users, and their server is one of the "ends" doing the communicating, which…
This is an incredibly common misuse of the term e2ee. I think at this point we need a new word because you have a coin flip's chance of actually getting what you think when a company describes their product this way.
Re: Kohler Can Access Pictures from "End-to-End Encrypted" Toilet Camera
#83Re: Kohler Can Access Pictures from "End-to-End Encrypted" Toilet Camera
#84Earlier quoted context omitted.
End-to-end encryption is not a term used for communication between clients and servers, although I saw several marketers trying to do it. For normal people E2EE means privacy, and that's why some company tries to sneak the term in products where it makes no sense.
> For normal people E2EE means privacy It's misunderstood. In the begining it's used to describe chat apps, your chat message are delivered in a secure way. But later some marketers try to use it as a "transport channel" for client-server interactions.
Not in my experience, except by very few
> But later some marketers try to use it as a "transport channel" for client-server interactions.
Some, still few enough to not make the term confusing, for what I can tell
Re: Kohler Can Access Pictures from "End-to-End Encrypted" Toilet Camera
#85Re: Kohler Can Access Pictures from "End-to-End Encrypted" Toilet Camera
#86Earlier quoted context omitted.
“In transit encryption”
Creating a new term for the less secure definition doesn't work, as they'll just continue to call it E2EE encrypted.
Re: Kohler Can Access Pictures from "End-to-End Encrypted" Toilet Camera
#87It was only a decade or so ago that "End-To-End Encryption" began to mean something other than "encrypted in transit". E2EE now means something wildly different in the context of messaging applications and the like (since like 2014) so this is more of an outdated way of saying "no one is getting your poop pictures between your toilet and us". It also feels like it would never make sense for this to be "E2EE encrypted…
No, before that it was simply not a term, except in some obscure radio protocol (and even there someone competent in cryptography would probably not have chosen that term)
> E2EE now means something wildly different in the context of messaging applications and the like (since like 2014) so this is more of an outdated way of saying "no one is getting your poop pictures between your toilet and us".
The outdated way was saying "Military-grade 128-bit encryption", no one really used the E2EE term before it got the current meaning
> I wonder if they encrypt it and then send it over TLS or if they're just relying on TLS as the client->server encryption. Restated, I wonder how deep in their stack the encrypted blob goes before it's decrypted.
Some homemade encryption added on top of TLS is very unlikely to increase the security of the system
Re: Kohler Can Access Pictures from "End-to-End Encrypted" Toilet Camera
#88Re: Kohler Can Access Pictures from "End-to-End Encrypted" Toilet Camera
#89Earlier quoted context omitted.
No, E2EE doesn't mean it's encrypted until the service provider decrypts it. E2EE means the service provider is unable to decrypt it. What you are describing is encryption in transit (and possibly at rest). Bank data is never E2EE because the bank needs to see it. If banks call it E2EE they are misusing the term. E2EE for financial transactions would look like e.g. ZCash.
I would argue it depends on context. E2EE means it's encrypted until the "target" receives it. For a messaging protocol, it's the intended recipient of the message. For what the person you're replying is discussing, the intended recipient IS the bank. That being said, the person you're replying to seems to be saying that "the server" is always an "intended" end, which is wrong.