Live data from Hacker News

Facebook, WhatsApp Will Have to Share Messages With U.K.?

bloomberg.com

251–260 of 591 posts

Re: Facebook, WhatsApp Will Have to Share Messages With U.K.?

#251

Earlier quoted context omitted.

If I can compile audited code from source myself, without any backdoors, then I can be reasonably assured there aren't any backdoors (excluding perhaps hardware level backdoors--but that's why we do the encryption in software). Implementing hardware backdoors that are opaque to end users is theoretically possible, but more difficult in practice. You could, for example, build a screen/monitor that just captures everyt…

Reflections On Trusting Trust: https://www.archive.ece.cmu.edu/~ganger/712.fall02/papers/p7...

I like this as a good counterpoint: https://www.schneier.com/blog/archives/2006/01/countering_tr...

If you have multiple compilers and they all aren't infected in exactly the same way (e.g. one is not infected, or they have different types of infections) then you can detect there's a problem with them.

Re: Facebook, WhatsApp Will Have to Share Messages With U.K.?

#252
post #24

Earlier quoted context omitted.

And it's misleading -- the article and the article's headline say nothing about adding a backdoor. There's not enough detail in the article to say exactly how this decision will affect WhatsApp. (The headline on Bloomberg, "Facebook, WhatsApp Will Have to Share Messages With U.K. Police" is more restrained.)

On re-reading the sort article, I realize it only says they will be compelled to share "encrypted messages" and "information to support investigations". It never says anything about decrypting the messages. If that is literally all it is, then it is quite misleading.

What use would ciphertext be to GCHQ? I’m fairly certain that “encrypted messages” describes which messages they will have to provide in plaintext, not the format they will come in.

Re: Facebook, WhatsApp Will Have to Share Messages With U.K.?

#253

Earlier quoted context omitted.

Disagree on hypocrisy. US still affords significant freedoms and largely respects human rights. Whether your communications can be decrypted or intercepted on networks that are government regulated anyway is not hypocritical. Residents of the US are still free to use whatever mathematical algorithm they want to encrypt their comms. Transporting OTP's across physical borders is trivial, and not technically illegally i…

Disagree. The end goal has always been to make civilian use of encryption in a such a way as to prevent government from being able to intercept communication illegal. That’s where we will end up.

Four lights. Nice try, Madred.

Re: Facebook, WhatsApp Will Have to Share Messages With U.K.?

#254

Earlier quoted context omitted.

> Are they going to outlaw encryption libraries? Yes. Absolutely. That's the only logical endgame.

What indication is there of this?

There is no other endgame in which this is pointful.

Re: Facebook, WhatsApp Will Have to Share Messages With U.K.?

#255

The idea that moves like this will "keep us safe" is utterly preposterous; there are a multitude of other ways in which terrorists (or the boogeyman de jour ) could communicate - are the UK and US governments going to insist on backdooring IRC, Slack and face-to-face conversations? Are they going to outlaw encryption libraries? I truely fear for the future that western governments, in particular the 5 eyes members, a…

> Are they going to outlaw encryption libraries? Yes. Absolutely. That's the only logical endgame.

I've said this before, but you can't outlaw the maths. There's nothing stopping anyone from rolling their own encryption, using well documented algorithms. You'd need to literally outlaw Wikipedia. Hell, even one-time-pads could still be used by truly motivated bad actors that wanted to communicate securely.

Re: Facebook, WhatsApp Will Have to Share Messages With U.K.?

#256

The idea that moves like this will "keep us safe" is utterly preposterous; there are a multitude of other ways in which terrorists (or the boogeyman de jour ) could communicate - are the UK and US governments going to insist on backdooring IRC, Slack and face-to-face conversations? Are they going to outlaw encryption libraries? I truely fear for the future that western governments, in particular the 5 eyes members, a…

Disagree on hypocrisy. US still affords significant freedoms and largely respects human rights. Whether your communications can be decrypted or intercepted on networks that are government regulated anyway is not hypocritical. Residents of the US are still free to use whatever mathematical algorithm they want to encrypt their comms. Transporting OTP's across physical borders is trivial, and not technically illegally i…

> Policing the airwaves and internet pipes hardly qualifies as some major abuse of human rights

The leaders of today are not the same as those of tomorrow - sweeping powers to invade anyone's privacy and communications could easily be used for nefarious purposes. I don't trust our current leaders with such powers, much less potentially worse ones.

> Residents of the US are still free to use whatever mathematical algorithm they want to encrypt their comms. Transporting OTP's across physical borders is trivial, and not technically illegally if not mistaken. Strong encryption is open source as you've pointed out. There's no law against using those open source libraries, nor any discussion to try to censor/outlaw them, AFAIK.

Do you really think things will stay this way?

It seems to me that TFA is just the next step on a slow, but steady, march towards an authoritarian nightmare - once they've worn us down some more, there will be serious moves against encryption (it's happened before, and politicians have been bringing it up a lot in the past 10 years or so).

Re: Facebook, WhatsApp Will Have to Share Messages With U.K.?

#257
Yes, this is exactly what I meant when I said that you either do what the Government says, or you go down. This is why I do not believe statements of privacy from Apple (such as we keep your data safe, 100% secure, etc.), for example. If they really have no backdoors or any other ways for the Government to access your data, then the Government would go after Apple. If the Government were to request your data, they would hand it over, right? Is this incorrect? If yes, why?

Re: Facebook, WhatsApp Will Have to Share Messages With U.K.?

#258

Earlier quoted context omitted.

What exactly leads you to believe that posting your credit card number on hacker news is somehow equivalent to not being outraged by the U.S. sharing _encrypted_ messages of suspected terrorists with the UK? Let’s not pretend the world is so black and white.

I was arguing against the idea of "if you're not doing anything wrong you have nothing to hide". It's a bad attitude to have because allowing the government to have that power at all is a problem, even for terrorists and murderers and pedophiles. Because we don't know if people are those things until we investigate them, which means the government gets broad powers to investigate people to look for those kinds of cri…

Also because "good" democratic governments that respect human rights and personal freedoms deteriorate to oppressive tyrannies all the time. What's to say that your country won't?

Who'll protect you when they come knocking on your door to talk about that thing you posted about somewhere online, which used to be quite legal and no problem, but now is super illegal for some oppressive reason or another?

    First they came for the socialists, and I did not speak out—

         Because I was not a socialist.

    Then they came for the trade unionists, and I did not speak out—
         Because I was not a trade unionist.

    Then they came for the Jews, and I did not speak out—
         Because I was not a Jew.

    Then they came for me—and there was no one left to speak for me.

Re: Facebook, WhatsApp Will Have to Share Messages With U.K.?

#259
post #233

Earlier quoted context omitted.

I'd wager that fewer than 1/100,000 humans on the planet could feasibly build Gentoo from source.

I've done two "stage one" builds of Gentoo. I'm not super skilled but, I had a lot of time and reference material. My bet is that folks could but would not want to. There is significant time cost. Also, I'm still using one of those original builds on my laptop - upgraded of course...still mad love for my daily driver.

>folks could but would not want to.

And so they never learned, and so they "can't".

In the same way, I can't use Gentoo or vim or compile either or ski or... :D

Re: Facebook, WhatsApp Will Have to Share Messages With U.K.?

#260

Earlier quoted context omitted.

> Are they going to outlaw encryption libraries? Yes. Absolutely. That's the only logical endgame.

I've said this before, but you can't outlaw the maths. There's nothing stopping anyone from rolling their own encryption, using well documented algorithms. You'd need to literally outlaw Wikipedia. Hell, even one-time-pads could still be used by truly motivated bad actors that wanted to communicate securely.

They can make it so if they spot you using it (for other than communication with approved banks and retailers and such, maybe), that's instantly something they can charge you with. Then go after a few people who're spotted using it on the Internet by traffic sniffing, meaning the only folks left using it are cranks and actual bad guys.
Post reply on HN