Live data from Hacker News

WhatsApp would not remove end-to-end encryption for UK law, says chief

theguardian.com

161–170 of 173 posts

Re: WhatsApp would not remove end-to-end encryption for UK law, says chief

#161
post #117

Earlier quoted context omitted.

Just block the UK and make everyone use a VPN this is already the case with age verification for adult content.

VPN wouldn't work. Whatsapp is tied to a mobile number so they would just blacklist all +44 numbers. No matter where you are, even if your an expat, it won't work....

What if I enter +44 118 999 88199 9119 725 3 as my phone number?

Re: WhatsApp would not remove end-to-end encryption for UK law, says chief

#163
post #117

Earlier quoted context omitted.

Just block the UK and make everyone use a VPN this is already the case with age verification for adult content.

VPN wouldn't work. Whatsapp is tied to a mobile number so they would just blacklist all +44 numbers. No matter where you are, even if your an expat, it won't work....

If they really don't want to serve the UK market, then they can block +44 but given the prevalence of WhatsApp in UK and rest of the world(except for the US), I can see how people can start shipping EU SIMs to UK for WhatsApp use or create SIM SMS relay service with foreign numbers.

Re: WhatsApp would not remove end-to-end encryption for UK law, says chief

#164

Earlier quoted context omitted.

> the decision is not a dichotomy between complete surveillance of all communication and doing nothing at all The problem is that from a security perspective, it sort of is all or nothing.

You misunderstood me, I did not want to say that you can have some partial end-to-end encryption, I meant that not outlawing end-to-end encryption does not mean that you do or can do nothing against illegal content, i.e. there are other ways to fight this problem besides outlawing end-to-end encryption.

Oh! Hah. The exact opposite of what I thought you meant, then :)

Re: WhatsApp would not remove end-to-end encryption for UK law, says chief

#167

Earlier quoted context omitted.

A reference to this community quote: > Britta: Shouldn't have worn that petard if you didn't want to be hoisted by it. > Jeff: ...What do you think the expression "hoisted by your own petard" is referencing? > Britta: I guess I just assumed that in the old days a petard was a special outfit like a leotard, with a lot of fancy buckles and loops on it, and that rich people would wear them when they were feeling especia…

Was this written by a bot? Makes no sense.

https://youtu.be/KuuafUtVte0

Re: WhatsApp would not remove end-to-end encryption for UK law, says chief

#168
post #106

Instead of removing end-to-end encryption, there may be alternative solutions to address law enforcement concerns. For example, law enforcement agencies could work with WhatsApp to develop lawful access mechanisms that allow them to access messages in specific cases where they have a legitimate need to do so. These mechanisms could be subject to strict oversight and transparency to prevent abuse.

If the messages are end-to-end encrypted, there is no way to do this. A backdoor or other mechanism means it is no longer end-to-end - some third party is involved. Furthermore, the UK has a long history of such “strict oversight and transparency” hardly existing, when it comes to these matters, with numerous controversies with police and other agencies abusing their access to systems. It is worth noting, however, th…

Maybe it can still be called e2ee, but instead of having 2 ends you have 3.

Much like on a group where everyone involved in a group chat has access to the messages. With UK law, all 1 on 1 chats would turn into group chats: 2 people + UK law enforcement.

So it's not like everyone and your grandma will have access to your messages. It's you, the people you chat with and law enforcement.

But regardless, I still think this is stupid because not even governments can be trusted with our privacy, much less law enforcement. Not to mention leaks.

Re: WhatsApp would not remove end-to-end encryption for UK law, says chief

#169
post #75

Earlier quoted context omitted.

Or people not on Apple devices side-load the app anyway (F-Droid). Assuming the corporate action is just to remove the market from the Play store.

If the law is enacted, and that seems unlikely, just removing it from app stores doesn’t seem sufficient to comply. Besides side-loading, users will just keep the old version of the app. WhatsApp can pretty clearly know if a user of the app is in the UK based on their account’s phone number country code and GeoIP. So if they wanted to comply by pulling out of the UK completely they’d probably have to make some attemp…

It is not my responsibility to make sure that citizens of Elbonia aren't able to use my application if I don't operate a business or live in Elbonia.

It comes down to jurisdiction. If you don't have it on the default marketplace for the region, and don't have a physical business presence in the region, it can be argued, you've done enough and aren't subject to the jurisdiction and are not doing business there.

That users may bypass and side-load your application is immaterial. If a user in the UK uses a US based VPN, they can also still use the app even if you added IP blocking, and IP blocking in and of itself is less than perfect often subject to false positive/negatives, and best to be avoided.

Re: WhatsApp would not remove end-to-end encryption for UK law, says chief

#170
post #154

Earlier quoted context omitted.

Just take a foreign prepay number and sideload the app :) It won't really stop people.

1) are you joking, that will stop 99. some number of 9s % of the population; 2) I'm not making any claims about it being desirable or effective, I'm just explaining what 'exiting the UK' means or what they'd be required to do. The crown won't sue a foreign company because a citizen found a way to workaround it not being available here - that would be like criticising the manufactuter of an illegally dangerous electri…

People didn't use to be so stupid. If they could manage Word Perfect 5.1 they can surely sideload a little app :P

I think it's more of a "don't want to know" than anything, in which case it's their own problem IMO.

Post reply on HN