Live data from Hacker News

ChatControl: EU wants to scan all private messages, even in encrypted apps

metalhearf.fr

101–110 of 656 posts

Re: ChatControl: EU wants to scan all private messages, even in encrypted apps

#101

What would prevent me from writing my own program to do something simple like sending encrypted messages? Or just emails...

The proposed regulation only applies to publicly available services, and only binds service providers, not end users. There is nothing preventing you from sending encrypted emails, just as there is nothing preventing you from pasting encrypted messages into WhatsApp or storing and sharing encrypted files in Dropbox.

Re: ChatControl: EU wants to scan all private messages, even in encrypted apps

#102
post #25

Earlier quoted context omitted.

As shown on the other side of Atlantic that is worthless when no one upholds the constitution.

I think of constitution as a contract between the citizens and the state and the (judiciary?) Like, constitution both defines the rights of citizens and the limits of those rights and the same goes for the states. I feel as if the creators of constitutions think that it is a set of checks and balances... Just as if how a citizen violates something written in the constitution, the state can punish it. In the same mann…

A large portion of the population either does not believe or does not mind the violations of our constitution to achieve their desired outcomes. As an American, it came as a surprise to me that we do not, in fact, have broadly shared values about our system of governance. This year has been a devastating blow to my confidence in our democracy and the ability of people to govern themselves generally.

Re: ChatControl: EU wants to scan all private messages, even in encrypted apps

#106
post #17

Earlier quoted context omitted.

The accepted solution is to have a constitution that says otherwise. Which is a bit complicated here, as the EU has no real constitution and this 'law' (really a regulation) is a blatant violation of the constitutions of countries that did choose to establish secrecy of correspondence.

EU has the Charter of Fundamental rights which is a part of the Treaty of Lisbon which is the constitutional basis of EU: https://en.m.wikipedia.org/wiki/Charter_of_Fundamental_Right... In the charter, the protection of personal data and privacy is a recognized right. So chat control is also probably against the EU law.

Both the right to privacy and the right to protection of personal data appear to have pretty big exemptions for government.

The right to private communications was modified by the ECHR to give an exemption for prevention of crime/protection of morals/etc.[1] and the right to protection of personal data exempts any legitimate basis laid down by law[2].

I imagine they'd be able to figure out some form of Chat Control that passed legal muster. Perhaps a reduced version of Chat Control, say, demanding secret key escrow, but only demanding data access/scans of those suspected of a crime rather than everyone.

Legal rulings also seem to indicate that general scanning could be permitted if there was a serious threat to national security, so once a system to allow breaking encryption and scanning is in place, then it could be extended to what they want with the right excuse.

[1] https://fra.europa.eu/en/eu-charter/article/7-respect-privat...

[2] https://fra.europa.eu/en/eu-charter/article/8-protection-per...

Re: ChatControl: EU wants to scan all private messages, even in encrypted apps

#107

Earlier quoted context omitted.

> prevent them from being pushed over and over Solve the problem it's trying to solve, then it won't be proposed again.

The problem it's trying to solve is mass surveillance...

The motivation in Denmark was some big cases where organized crime was only caught due to a huge hacking operation where the police was able to monitor communication on the apps commonly used by the criminals. That allowed them to take very dangerous people off the streets and now they want to do more of that, more easily. I think the discussion can never be in terms of absolutes. If your family was murdered by some criminal that was never caught earlier , but could have been if the police had access to their chats, would you still be against it? We need to remember that we’re making that decision for some future victim if we do agree that this will assist the police effectively. The other side says the police will undoubtedly abuse their powers. In which case how does the results compare?? If you think the answer is easy, one way or another, you are definitely wrong.

Re: ChatControl: EU wants to scan all private messages, even in encrypted apps

#109

I wonder where platforms like slack would land in all of this, and how would they go about akeeping people from just using their own encryption e.g. pgp over unencrypted channels? Is public key cryptography too weak to matter?

Slack is not end-to-end encrypted and belongs to a US company. So there is no need for ChatControl there: the US government already has access to everything that is written on Slack.
Post reply on HN