Kohler, the makers of a smart toilet camera, can access customers’ data stored on its servers, and can use customers’ bowl pictures to train AI.

  • NotMyOldRedditName@lemmy.world
    link
    fedilink
    English
    arrow-up
    2
    ·
    6 hours ago

    Doesn’t end to end also mean at rest?

    But at rest still doesn’t matter as they’ll own the key unless it’s zero knowledge like you said.

    • x00z@lemmy.world
      link
      fedilink
      English
      arrow-up
      2
      ·
      4 hours ago

      End-to-end means a path from point A to point B.

      End-to-end encryption could definitely include at rest encryption, but only as part of the path that isn’t one of the ends. An example would be where a service like WhatsApp stores your message until it can be delivered to the other contact. End-to-end includes “zero knowledge storage” in this example because WhatsApp can not view your message. You are one end and your contact is the other end. The data is stored encrypted at rest (going trough their servers) because their server is neither end. This is literally why end-to-end encryption exists.

      In the case of the smart toilet storage, you are not both ends. Instead you are one end and the storage provider is the other end. The transit is still end-to-end encrypted but it does not imply “zero knowledge storage”. They use the term end-to-end encryption because they transfer the data to their servers without people being able to intercept it. And that’s semantically correct.

    • The Quuuuuill@slrpnk.net
      link
      fedilink
      English
      arrow-up
      2
      ·
      6 hours ago

      it does not. end to end encryption and point to point encryption are two ways of delivering an encrypted message to a destination. a point to point encrypted message has a message and header that are decrypted by every node in the network to determine where to route it next. an end to end encrypted message has its header and body encrypted separately such that only the sender and recipient see the body, but the nodes can read the header for routing. encrytion at rest just means that the message, once saved to disk, is encrypted