Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

I hope so, but I'm not certain what sorts of legal precedents could be leveraged here. Uber, for instance, might try and avoid sharing non-visual recording data on the basis that it's proprietary information. IANAL but I'm very curious if companies can be compelled to share proprietary formats and tools for examining those formats or translating them into non-proprietary formats (which... is that even a thing legally speaking?) in a case like this.

For instance, if law enforcement had testimony and other warrant allowing things that indicated that a user had stored some vital secret plan in a password field what could the government compel a company to do, assume the disk it relies on is also encrypted for extra fun time

1. Hand over the physical disk

2. Hand over the disk image

3. Hand over the decrypted disk image

4. Hand over the unobfuscated (enc or hashed) string of interest from the decrypted disk image

5. Compel the company to decrypt the string if it was encrypted with a common algorithm (i.e. AES)

6. Compel the company to decrypt the string if it was encrypted in a proprietary manner (i.e. in-house custom encryption)

7. Compel the company to devote resources (how much?) to brute force a one-way common hashed string (i.e. bcrypt)

8. Compel the company to discover a hash salt assuming the company doesn't store it locally but may be able to procure it from the user to do the above.

9. 7 & 8 if the one-way hashing algorithm is proprietary (and weak) and the company raises objections that the process of breaking this string will reveal key components of how the algorithm works (i.e. the hash is just md5(string) XOR "IMMA SECRET_STRING")

10. 7 & 8 if the proprietary algorithm is not weak but the company raises objections over trade secrets for other reasons.



The legalities are beyond me, but the core principal seems pretty simple: if Uber isn't willing to cooperate fully with the NTSB to make autonomous cars safe drivers, then Uber doesn't get to make autonomous cars. Full stop.




Consider applying for YC's Fall 2025 batch! Applications are open till Aug 4

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: