Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

U.K. demand for a back door to Apple data threatens Americans, lawmakers say

washingtonpost.com

Post reply on HN
Print view View original

51–60 of 331 posts

Re: U.K. demand for a back door to Apple data threatens Americans, lawmakers say

#51

Post by jtbayly »

Shank wrote: post #5

I think this is an unquestionable overreach on the UK's part. If you live in any country that isn't the UK, you should feel the threat from this: the UK government believes that it is entitled to a backdoor on your hardware, even if you've never stepped a foot on UK soil or intend to. Mass surveillance is a threat to everyone, but this is not an instance of that, which has guards against it, like encryption. This is…

Kind of like the EU overreach on privacy. Whether it’s for a good cause or a bad one, these sorts of overreach are to be opposed.

Re: U.K. demand for a back door to Apple data threatens Americans, lawmakers say

#52

Post by whatever1 »

AnimalMuppet wrote: post #32
whatever1 wrote: post #21

Earlier quoted context omitted.

What encryption ? He is given the keys to confidential federal documents, systems and lists.

Which is not the topic we are discussing here, and is therefore a complete non sequitur. Do you have anything to say about the topic at hand?

The topic is the bar for revealing your citizens data. My thesis is that Elon sets the bar. UK as a longtime vetted ally easily clears it.

Re: U.K. demand for a back door to Apple data threatens Americans, lawmakers say

#53

Post by swores »

kitd wrote: post #50
Shank wrote: post #5

I think this is an unquestionable overreach on the UK's part. If you live in any country that isn't the UK, you should feel the threat from this: the UK government believes that it is entitled to a backdoor on your hardware, even if you've never stepped a foot on UK soil or intend to. Mass surveillance is a threat to everyone, but this is not an instance of that, which has guards against it, like encryption. This is…

Here's the BBC report on the matter: https://www.bbc.co.uk/news/articles/c20g288yldko It applies to content stored using ADP, Apple's E2EE tech. A backdoor into that would mean applying a backdoor into iOS on the phone itself, which is a much larger attack surface than anything centralised. All of which highlights the clownish nature of these regulations. They are so easy for bad actors to circumvent (eg using their…

I'm entirely against what the UK government wants, however I would say:

Although you're right that tech people would still be able to choose secure encrypted options, the fact is that the majority of criminals by pure numbers are not very sophisticated - so while this sort of backdoor obviously wouldn't be a guarantee that every criminal conversation could be snooped on, it would work on the 90-99% (I'd guess towards 99) who aren't both cautious enough to try to be secure and tech savvy enough to make the right choices.

(But it's still a terrible idea, both for the sake of general privacy principles, and for the risk that current or future governments or personnel will abuse the access, and for the risk that criminals outside government will be able to take advantage of the same backdoor.)

Re: U.K. demand for a back door to Apple data threatens Americans, lawmakers say

#54

Post by matt-p »

Shank wrote: post #5

I think this is an unquestionable overreach on the UK's part. If you live in any country that isn't the UK, you should feel the threat from this: the UK government believes that it is entitled to a backdoor on your hardware, even if you've never stepped a foot on UK soil or intend to. Mass surveillance is a threat to everyone, but this is not an instance of that, which has guards against it, like encryption. This is…

Right. Who would be the first country the US might go to if it wanted to spy on it's citizens from abroad? Perhaps one who already does this for them using other methods such as wire tapping?

Re: U.K. demand for a back door to Apple data threatens Americans, lawmakers say

#57

Post by gruez »

gman83 wrote: post #40

Why is it ok that the American government have a backdoor & have access to all non-American's personal data, but when the UK/EU wants something similar, suddenly it's a massive outrage. Is it just "we're stronger than you", so it's ok when we do it?

Define "backdoor". US authorities being able to demand data service providers have access to (eg. your gmail account) is nowhere comparable to an encryption backdoor, which is what's proposed here.

Re: U.K. demand for a back door to Apple data threatens Americans, lawmakers say

#58

Post by shakna »

throwaway290 wrote: post #41
jeroenhd wrote: post #12

Earlier quoted context omitted.

A similar law passed in Australia a few years ago; various Australian law enforcement agencies can request or even demand companies to make changes to their code (read: introduce backdoors). Until people and companies start treating Australian-made software as dangerous to the extent that it affects the economy, other countries will probably follow with similar laws. That should include being hesitant to use American…

With a warrant a company can be forced to implement this capability for a specific case. Is it the same?

"TCNs are orders that require a company to build new capabilities that assist law enforcement agencies in accessing encrypted data. The Attorney-General must approve a TCN by confirming it is reasonable, proportionate, practical, and technically feasible."

It's a step above a warrant, as an order, when building a new capability. But yes, its focused in on one case. As to "reasonable" - our current AG is a strong supporter of expanding government powers as a way to fix any new problem that appears. He's done some good. And some bad. It isn't hard to see him rubber-stamping these, if someone across the hall needs it done.

Also... If a TCN order comes through, you're not permitted to tell the business that you've been ordered to create a backdoor in them. And they can order random anyone in the company to comply - it doesn't have to go to the C-level.

Post reply on HN