Pulse of Truth

1753 readers

334 users here now

Cyber Security news and links to cyber security stories that could make you go hmmm. The content is exactly as it is consumed through RSS feeds and wont be edited (except for the occasional encoding errors).

This community is automagically fed by an instance of Dittybopper.

founded 2 years ago

MODERATORS

krogoth@infosec.pub

204

‘End-to-end encrypted’ smart toilet camera is not actually end-to-end encrypted (techcrunch.com)

submitted 23 hours ago by lemmydev2@infosec.pub to c/pulse_of_truth@infosec.pub

64 comments fedilink hide all child comments

Kohler, the makers of a smart toilet camera, can access customers' data stored on its servers, and can use customers’ bowl pictures to train AI.

you are viewing a single comment's thread
view the rest of the comments

[–] x00z@lemmy.world 2 points 4 hours ago (1 children)

End-to-end means a path from point A to point B.

End-to-end encryption could definitely include at rest encryption, but only as part of the path that isn't one of the ends. An example would be where a service like WhatsApp stores your message until it can be delivered to the other contact. End-to-end includes "zero knowledge storage" in this example because WhatsApp can not view your message. You are one end and your contact is the other end. The data is stored encrypted at rest (going trough their servers) because their server is neither end. This is literally why end-to-end encryption exists.

In the case of the smart toilet storage, you are not both ends. Instead you are one end and the storage provider is the other end. The transit is still end-to-end encrypted but it does not imply "zero knowledge storage". They use the term end-to-end encryption because they transfer the data to their servers without people being able to intercept it. And that's semantically correct.

[–] NotMyOldRedditName@lemmy.world 1 points 3 hours ago

Ah, that makes it clear how it may or may not include at rest.

Thanks!