Resident PulserDec 3

‘End-to-end encrypted’ smart toilet camera is not actually end-to-end encrypted

https://infosec.pub/post/38542048

‘End-to-end encrypted’ smart toilet camera is not actually end-to-end encrypted - Infosec.Pub

Kohler, the makers of a smart toilet camera, can access customers’ data stored on its servers, and can use customers’ bowl pictures to train AI.

Show threadcommieDec 3

https is end to end

surely, once I read this article, I’ll find they implemented ssl

edit:

as I suspected, Kohler is one of the ends of the e2ee. and it is implemented. what is the news here exactly

Show threadNikokinDec 4
Https is the transit. End to end encrypted means it’s encrypted before, during, and after transit. Ie the data at rest would/should be encrypted
Show threadcommie
and Kohler said they are encrypting the data at rest
Dec 4 at 2:29amWeb
Show threadAsetruDec 4
They also said they decrypt after transit before they encrypt at rest, so it’s not encrypted in between and they can look at your data. So it’s not e2e if you want both ends to be you.
Show threadcommieDec 4
I think what your talking about is zero knowledge. but that’s not what was promised.
Show threadAsetruDec 4
Absolutely not. E2EE means it’s encrypted from end to end. If I send data and I’m also the person to receive it on my app to inspect it, I’m both ends and the data should not be decryptable in between by anybody else if it’s advertised as e2ee. Zero knowledge on the other hand doesn’t mean that you transfer information securely but that you can prove that you have some information without it ever even being sent.
Zero-knowledge proof - Wikipedia