this post was submitted on 08 Nov 2023
204 points (97.7% liked)

Privacy

31914 readers
534 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

Chat rooms

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago
MODERATORS
all 24 comments
sorted by: hot top controversial new old
[–] davel@lemmy.ml 72 points 1 year ago* (last edited 1 year ago) (2 children)

This kind of legislation fundamentally misunderstands how easy it is for bad people to build their own end-to-end encryption layers on top of other messaging systems.

This person is mistakenly taking the justifications for these laws at face value. These governments aren’t trying to thwart bad actors, they’re trying to control their entire population. To point out that scofflaws can circumvent the laws is to misunderstand their true purpose.

[–] Deckweiss@lemmy.world 10 points 1 year ago* (last edited 1 year ago) (2 children)

https://balkaninsight.com/2023/09/25/who-benefits-inside-the-eus-fight-over-scanning-for-child-sex-content

Independent report, which has been posted before. It doesn't even seem to be as deep as controlling the population, rather they just take big US tech money in exchange for pushing these laws.

[–] davel@lemmy.ml 9 points 1 year ago

As an old nerd I’ve lived through previous battles in the crypto wars.

[–] davel@lemmy.ml 7 points 1 year ago

Often that US tech money comes from peculiar places, like In-Q-Tel, for example.

[–] cobra89@beehaw.org 5 points 1 year ago

And yet it's still important to strike down their bullshit reasoning so that normies can see the argument for what it truly is.

[–] merde@sh.itjust.works 31 points 1 year ago (1 children)

Various lawmakers in different countries are proposing to require messaging services to provide a mechanism for law enforcement to decrypt end-to-end encrypted messages. This kind of legislation fundamentally misunderstands how easy it is for bad people to build their own end-to-end encryption layers on top of other messaging systems.

Requiring Signal, WhatsApp, and so on to introduce vulnerabilities into their products does not make life much harder for criminals. Criminals can easily build or buy an extra layer of encryption on top and exchange messages that can't be decrypted.

It does make everyone else less safe. If a backdoor exists and is usable by authorised people, it will eventually be exploited and used by malicious people.

This repository contains a trivial demonstration of this. 👉

[–] davel@lemmy.ml 9 points 1 year ago (1 children)

It does make everyone else less safe.

This is all the evidence one should need that these laws are about control, not safety.

[–] Gabu@lemmy.world 2 points 1 year ago

It's the age old political weapon of saying "but think of the children" before doing something horrible.

[–] rtxn@lemmy.world 15 points 1 year ago* (last edited 1 year ago)

I haven't read the article, but I'm going to guess that it describes a form of encrypted tunnel with pre-shared keys that operates over any text messaging app and is trivial to implement.

In the world of tech illiterates, the script kid is a seasoned cybercriminal.

[–] library_napper@monyet.cc 11 points 1 year ago

I don't think anyone thinks that e2ee bans prevent people from using e2ee. What it does is force companies in their jurisdiction to install a backdoor

It is entirely plausible and it will make many people (who dont migrate to secure service providers) loose security and privacy.

[–] lemming741@lemmy.world 10 points 1 year ago

Languages

Hack 99.1% Other 0.9%

Fukin lol

[–] penquin@lemm.ee 9 points 1 year ago (1 children)

Can't bad actors just create their own messaging app and their own encryption methods?

[–] umami_wasbi@lemmy.ml 8 points 1 year ago (2 children)

They absolutely can. Its just the matter where to find a trusty guy to write one for them.

[–] penquin@lemm.ee 7 points 1 year ago (3 children)

Ok then, what are these politicians smoking?

[–] davel@lemmy.ml 8 points 1 year ago

Some of them are useful idiots, and some of them are working with State security & intelligence, which want full-spectrum communication access.

[–] possiblylinux127@lemmy.zip 7 points 1 year ago

That's the point

[–] Deckweiss@lemmy.world 2 points 1 year ago

https://balkaninsight.com/2023/09/25/who-benefits-inside-the-eus-fight-over-scanning-for-child-sex-content

This independent report has been posted here a while ago. They seem to be smoking big US tech dollars.

[–] NuXCOM_90Percent@lemmy.zip 9 points 1 year ago (1 children)

I am glad you had fun writing that blog post but, for any purpose that matters: Yes, it is possible. And we are already seeing the pathway to it

  1. Increasingly build a narrative that encrypted communication is for CSAM. The tor crowd are already doing a good job of providing fuel for this.
  2. Argue "terrorism" for the rest. "Fortunately" people have realized the mess in Israel/Palestine is a lot more complicated, but it is only a matter of time
  3. Strongly pressure/incentivize the major app/social media companies either disable it at the app level or maintain internal keys to decrypt messages (effectively disabling it)

End result? Only "tech savvy" people will know how to set up their own entirely parallel "internets" (similar to tor). And then the phone and OS app stores increasingly lock down on third party apps for "security". Hell, I can even see a world where Redhat and Ubuntu strongly discourage these tools from being allowed in any official repositories because they want the government contracts for their premium OSes.

Will e2e truly be "banned"? No. But the only people doing it have insanely janky phones and linux.users with laptops. Which means it is nigh useless for the vast majority of whistleblowers and that "secretly being gay or a woman" becomes a huge mess where the vast majority of people will never understand how to protect themselves.

[–] minnix@lemux.minnix.dev 6 points 1 year ago (1 children)

I am glad you had fun writing that blog post

Who are you talking to?

[–] Starglasses@lemmy.blahaj.zone 7 points 1 year ago* (last edited 1 year ago) (1 children)

It sounds like they are talking to the person who wrote the blog post. The author of the blog post that was posted.

[–] spacecowboy@sh.itjust.works 7 points 1 year ago

How do you know such things? Tell us your secrets.

[–] phase@lemmy.8th.world 7 points 1 year ago

I find this article more complex than it should. For me the logic is more basic:

You want to ban encryption? So no https so no banking online.

[–] Gabu@lemmy.world 5 points 1 year ago

That was a fun read.