Live data from Hacker News

The EARN IT bill is back, seeking to scan our messages and photos

eff.org

141–150 of 494 posts

Re: The EARN IT bill is back, seeking to scan our messages and photos

#141

Earlier quoted context omitted.

California uses "jungle primaries" where the top two vote getters regardless of party advance to the general election. You can't blame the two-party system here, voters could easily choose another Democrat if that's what they wanted.

Yep, and in this case, it's isomorphic to the question, "Why didn't Kevin De Leon(D) defeat DiFi in the 2018 election?" - question whose answers can range from, "not enough votes," to "less money," to "why did the CA coast prefer DiFi and CA's interior prefer KDL?"

The problem is last time her opponent wasn't reputable enough to be a good counterweight. I wish Katy Porter had run and replaced her. I think she was barely in politics then.

Re: The EARN IT bill is back, seeking to scan our messages and photos

#142
post #94
post #61

Earlier quoted context omitted.

I met her at an SVLG dinner and had a discussion about encryption; it became instantly clear she doesn’t know what a computer is past that it is a TV that takes input, and that encryption is just “evil people wanting to do evil things.” There was no reasoning with her either, frankly because she is well-aged, and thus thinks herself “wise” with very little left to learn. It was honestly infuriating. [edit] In case an…

I met her in 2003, along with her aides at a party I was invited to (in a fluke) in Palm Springs. She was a moron then, and now she's a senile moron. Her aides, who ended up hanging out with me all weekend, were a perfect illustration of the donor class kids who weren't that smart but got into ivy League schools by legacy admissions. Zero intellectual curiosity, super aware of social status, everything they said seem…

Please make your substantive points without calling names.

No one is saying you owe your least favorite senators better, but you owe the community better if you're posting here.

I can't link to the guidelines because I'm on my phone - but this is in there!

Re: The EARN IT bill is back, seeking to scan our messages and photos

#144

Earlier quoted context omitted.

> as for email [passwords], that's again a matter of security I guess if we're nitpicking I'll point out that this is still privacy (how one keeps their password) for the sake of security. Information is kept private and passwords are information.

Perhaps drawing a distinction between outbound and inbound email protocols would be good too. I understand the argument being made, but the sensible assumption is that your email, even with a password, isn't a sensible choice for sensitive communications.

> your email, even with a password, isn't a sensible choice for sensitive communications

This seems like it's shifting the goalposts. Someone says something about "nothing to hide but they have locks on their doors" and you say "security isn't the same as privacy". It's accurate but it's moot. I keep the location of my hide-a-key private so I can continue to keep my house secure with the lock on the front door. I keep my email password private so I can secure the account against unauthorized access.

Some people do use their email for what they would consider sensitive communications, and it's less than helpful to suggest they need better opsec practices in response to someone else saying that they should be able to expect their email to be private. It's saying "just hide it better, lol" when that's literally exactly what many people are trying to do when speaking against this sort of legislation.

Re: The EARN IT bill is back, seeking to scan our messages and photos

#145
post #50
post #27

Earlier quoted context omitted.

Yep. Or the "USA PATRIOT" Act, as it's full name spells. "Uniting and Strengthening America by Providing Appropriate Tools Required to Intercept and Obstruct Terrorism". But by calling it "patriot", it implies that you're not a patriot if you don't support it. Never mind that modern American "patriotism" isn't anything of the sort, but is much closer to nationalism.

Modern American "patriotism" begins with nationalism, and gets darker and weirder from there. As an exercise, imagine someone who self-identifies as a patriot. Ask them what makes them a patriot. (If you're not American, you might not get what I am getting at, but probably Canadians get it)

Real patriots fly flags from their honking F-150s, play in bouncy castles, shit in snowbanks, and call to engage in fervent sexual congress with democratically elected leaders who have great hair.

Do I win a prize?

Re: The EARN IT bill is back, seeking to scan our messages and photos

#146

Earlier quoted context omitted.

For people who say they have nothing to hide, I ask them why they have locks on their doors, passwords to their email, and clothes on their body.

Easy: Thieves, scammers, and public decency laws, in that order.

Unsure if sarcasm but doesn't the exact same reasoning apply to these? If there's things you don't want thieves to steal then obviously you _do_ have something to hide. Or maybe a better word is protect but both apply equally well

Re: The EARN IT bill is back, seeking to scan our messages and photos

#147

Earlier quoted context omitted.

I think the reasoning behind not having an age cap in Congress is that if the people want to elect someone who is old, they should be able to do so. The ultimate check in a democratic society is the people, and like a different commenter said, it's strange that the voters of California continue to vote for Feinstein.

Presumably they vote for her because she is a democrat and the other viable candidate, a republican, is completely unpalatable to them. The problem is internal party politics that appear to have an unwritten rule of re-running the same candidate until they lose.

California has had a jungle primary for a bit now, and there has been at least one general election that pitted Feinstein against a Democrat in the general election. As I mentioned elsewhere, the most common argument I got from Democrats around me for voting for her was seniority, for committee appointments and such.

Re: The EARN IT bill is back, seeking to scan our messages and photos

#148

I find myself consistently disappointed when reading blog posts like this. I generally agree with the principles that the EFF advocates for, but it's hard to see this post as anything other than rage-bait. I can't trust it to be an accurate source of information on what this bill actually does. For example, I've repeatedly seen claims that this bill would effectively outlaw end-to-end encryption, but the bill explici…

The EFF seems to be going the way of many advocacy groups, where as time goes by their positions on the things they advocate for become less nuanced and they stop taking into consideration how those things fit into the big picture.

An example of this is the National Rifle Association (NRA). They used to think that carrying guns around in public should be restricted and require licensing, and that dealers should need to be licensed, and that some kinds of guns should be restricted.

For the EFF the thing that made me think that they are going down that road was during the controversy over Apple's plans to scan for CSAM. Apple had actually announced two things: (1) scanning on-device for CSAM in material about to be uploaded to iCloud, and (2) scanning on-device of devices with parental controls enabled to block messages that contained content that might be harmful to children.

Most of the discussion was about #1, both from the EFF and from everybody else. #2 was much less discussed.

Here's how #2 worked in the case where you have a child who is 13 or older with a phone on your family plan and you have enabled scanning.

1. I send your kid pictures of my dick.

2. The software temporarily blocks that and gives your child a modal dialog telling them it blocked something because their parents think it might be harmful, and asking the child if they want to go ahead and view the material.

3. If the child says no the material remains blocked and nothing else happens.

4. If the child says yes my dick picture is unblocked and nothing else happens.

If your child is under 13, here is how it goes:

1-3: same as the 13 and above case.

4. If the child says yes they are given another modal asking of they are sure and reiterating that their parents think the material may be harmful, and telling them if they do elect to view it their parents will be notified. They are again asked if they want to proceed to view it or not.

5. If the child says no, the material remains blocked and nothing else happens.

6. If the child says yes my dick picture is unblocked, and the parents are notified.

The EFF objected to this, on the grounds that #6 violates my privacy since I sent my dick pictures to your kid, not you, and did not consent to you getting access.

WTF? It used to be that a big argument from privacy groups against server-side scanning to protect children is that children shouldn't be getting to the bad parts of the net in the first place, and keeping the kids away was something the parents should take care of with things like time restrictions and parental control software.

Re: The EARN IT bill is back, seeking to scan our messages and photos

#149
post #124
post #91

Earlier quoted context omitted.

Even among the dinosaurs in the US Senate, Feinstein stands alone in her striking ability to be willfully ignorant about anything developed after the steam locomotive. The country would be an objectively better place if both the House and Senate had a mandatory retirement age.

You don't need a mandatory retirement age, just term limits. For example, no more than two terms as a Senator, no more than three as a House member.

Why do you recommend different term limits for house members?

Re: The EARN IT bill is back, seeking to scan our messages and photos

#150

Earlier quoted context omitted.

In an information environment, security and privacy are the same thing. The terms may have different connotations culturally, but good security-in-depth is the same set of practices that enable digital privacy, because the objective is the same: prevent leakage of facts.

> In an information environment, security and privacy are the same thing Yes. Privacy is a subset of security.

I'd argue that they're overlapping sets of concerns, not necessarily identical to or subsets of each other.

Off the cuff:

* Being an anonymous person walking through a city. This is a privacy concern and only becomes a security concern if I'm a public persona or some kind of person of interest.

* Moving to a new school/city/job and not having your social reputation follow you. This allows a lot of people a chance to redefine who they are and how they interact with people around them. This can't happen if everybody always knows somebody's pervious public persona.

* Breaking a law and being fined/punished/imprisoned for it. Without privacy, such a person has a much poorer chance of having a decent life even after they've done their time or paid their dues.

These all strike me as privacy concerns, but not necessarily concerns to security. I think they're all important enough to consider privacy as a good thing in it's own right and that such scenarios signal that it's possible to advocate privacy in the absence of (or opposition to) security concerns.

Post reply on HN