Live data from Hacker News

Earn-IT threatens encryption and therefore user freedom

fsf.org

91–100 of 209 posts

Re: Earn-IT threatens encryption and therefore user freedom

#91
post #20

I feel like they missed the primary point which is that E2E encryption is the primary thing protecting everyone from hackers/criminals/other-governments. Without it the criminals WILL have access to your systems and data and then you can basically say goodbye to anything being valuable at all. Locking your door at night is a poor metaphor. A criminal can literally infiltrate and search through every unsecured compute…

> Making crypto illegal will ensure that only criminals have the ability to use it.

The right to bear digital arms.

Re: Earn-IT threatens encryption and therefore user freedom

#92

Throw away account (does not do much good with modern AI and ML). But here goes. I am a US citizen (never left the country) and I always vote Republican. Down-vote away! The FBI came to my house in October 2021. Two special agents (one of which I knew from prior IT Security engagements) and a 'Threat Assessment' Police Officer from the local police department. They asked me if I was an Islamic extremist/terrorist. I…

I know this isn't the point of your post, but what does your party affiliation mean in this context? I have known people from both parties who believed their party affiliation was central to their anti-authoritarian stance, and people from both parties who thought that their preferred form of good government would control people.

Do you think your party loyalty made you a more likely target, or should have made you a less likely target?

That said, I use Tor for anything medical related. The NSA might wonder why I am licking my paws so much, or why I keep worrying about foxtails in my ears, but they haven't knocked on my door yet.

Re: Earn-IT threatens encryption and therefore user freedom

#94
post #81

This particular article (not the subject) looked suspicious to me, since I didn't see it contain a link to the EARN-IT bill. I respect that it was created by the FSF, but they really should link to the bill's text. The bill's text is here. [1] I don't think it does anything that is stated in the article. It's stated purpose is to create a commission that will create recommendations that nobody will have to follow. It…

The part of the bill that mentions E2EE (Section 5) is an amendment to the Communications Act of 1934, namely the famous Section 230 which contains: "No provider or user of an interactive computer service shall be treated as the publisher or speaker of any information provided by another information content provider."

So the EARN-IT act would seem to me to modify Section 230 to not apply in cases of child sexual exploitation law, importantly "any charge in a criminal prosecution brought against a provider of an interactive computer service under State law regarding the advertisement, promotion, presentation, distribution, or solicitation of child sexual abuse material". However despite this amendment, using E2EE would not "serve as an independent basis for liability of a provider", whatever that means.

This seems more notable to me than the whole "creating a committee to create best practices" sections but I could be misreading or misinterpreting the bill honestly, I'm no expert.

Re: Earn-IT threatens encryption and therefore user freedom

#95
post #92

Throw away account (does not do much good with modern AI and ML). But here goes. I am a US citizen (never left the country) and I always vote Republican. Down-vote away! The FBI came to my house in October 2021. Two special agents (one of which I knew from prior IT Security engagements) and a 'Threat Assessment' Police Officer from the local police department. They asked me if I was an Islamic extremist/terrorist. I…

I know this isn't the point of your post, but what does your party affiliation mean in this context? I have known people from both parties who believed their party affiliation was central to their anti-authoritarian stance, and people from both parties who thought that their preferred form of good government would control people. Do you think your party loyalty made you a more likely target, or should have made you a…

Why do you go out of your way to protect medical information? If the government cared enough to get your medical information illegally, couldn't they just get it from your doctors? And if they did decide you were an "enemy", what good would knowing your medical information do?

Re: Earn-IT threatens encryption and therefore user freedom

#96
Could it be suggested that banning end-to-end encryption may put citizens, businesses,institutions & infrastructure at risk from hostile nations (Russia in this instance), who may seek this as a potential attack vector?

Therefore we position EARN-IT as a national security threat over individual privacy.

Re: Earn-IT threatens encryption and therefore user freedom

#97

I have said this before: this is a losing battle for individuals striving to protect the freedom, if we just try to do it individually. People bringing this get paid to do this during office time (and maybe after office time too by lobbyists) so they will keep at this; my protests require me to do it by taking time out of the limited time I have left after office. Fight fire with fire, fund EFF so that we have our ow…

Thanks for reminding. Sent 0.026 btc to EFF.

Re: Earn-IT threatens encryption and therefore user freedom

#98

Throw away account (does not do much good with modern AI and ML). But here goes. I am a US citizen (never left the country) and I always vote Republican. Down-vote away! The FBI came to my house in October 2021. Two special agents (one of which I knew from prior IT Security engagements) and a 'Threat Assessment' Police Officer from the local police department. They asked me if I was an Islamic extremist/terrorist. I…

>Now, I also encourage people to not use Tor. I feel it is backed-doored and mostly controlled by Nation State actors to identify 'interesting' subjects via meta-data analysis alone.

No, you should encourage them to use it as much as possible to increase the anonymity set. Tor is not 'backdoored' (it is Free Software) and it is incredibly unlikely for most relays even to be malicious. Rather, Tor has a defined threat model and in the interest of offering high performance with low latency at a low cost, eschews the so-called 'Anonymity Trilemma' and it is thus possible to trace connections through the network if you can monitor the entry stream as well as the exit stream. There are a large number of entities who control various parts of the physical infrastructure between each link of your Tor circuit, from your router, to your ISP, to the local internet exchange point, and every other hop along the way to a destination. If an adversary controls even one of these entities in between you and your chosen guard relay, and between your chosen exit relay and the destination (including even the destination logs), it may be possible to perform correlation attacks to confirm whether or not a particular user connected to a given host (something which is easier to do if the stream is more 'distinct' from other streams, as well).

Tor is a tool which serves to significantly increase the cost of undermining user privacy, and while it is true that it should not be treated as some end-all-be-all of internet privacy, I fail to understand why it should be discarded, rather than treated as just one of a number of tools in the toolkit. For example, if you are attempting to make it more difficult for these global adversaries to trace you, you may consider physical indirection (driving around), adding a layer of wireless relays before the connection to the Internet backbone, exclusion of relays in countries which your own nation can more easily influence in your torrc file, inducing dummy traffic in some capacity, preferring anonymity over pseudonymity, and a myriad of other techniques.

Re: Earn-IT threatens encryption and therefore user freedom

#99
post #65
post #59

Where can I find more detailed information on how Earn-IT changes encryption law? I just skimmed the Wikipedia article but it doesn't seem to insist that this act changes encryption law. Just that "best practices" that would provide "guidance" to sites might include backdoors. I'm all for encryption rights, but if I'm going to call my congressional rep, I want to know what I'm talking about, and the FSF link really d…

The bill is written in an intentionally obtuse way so that they can say they're not banning anything; they're just giving "requirements". But the only way to meet the bill's requirements is to eliminate E2EE.

This comment is written in an intentionally "hand wavey" way so that they can say nothing substantive about the proposed bill text, but maintain an air of alarmism.

Re: Earn-IT threatens encryption and therefore user freedom

#100
post #79
post #22

I'm not even a US/UK/EU citizen. Is there any way I can contribute? Or do I just sit and watch the world burn as policymakers elsewhere indirectly make policies that might inadvertently affect people far far away as well?

Donate to the EFF: https://www.eff.org/deeplinks/2020/01/congress-must-stop-gra...

EFF really failed to connect the dots here.

I don't see how, from a plain reading of the bill's text, one can argue what their letter claims.

Can someone connect these dots?

Post reply on HN