Live data from Hacker News

EU Draft Council Declaration Against Encryption [pdf]

statewatch.org

281–290 of 780 posts

Re: EU Draft Council Declaration Against Encryption [pdf]

#281

I want to also give some perspective why this is bad even IF we can make sure that only governments will have the keys. We have just uncovered an organized crime at the top levels in Slovakia where even the President of police is part of it and they influenced many court cases and were accessing secret information and databases on citizens, basically a mafia. And we are part of EU. I don't trust our goverment to use…

I also don't trust my goverment to use the keys only for good purpose, recently in Spain a commissar was paying girls to have sexual contact with influential people to get information about politiceans.

In our case those guys had direct access to police systems, they could look up anything (and they did!). Now imagine if they could also read all your messages. The EU proposal will actually weaken the security of its own citizens. The IT community must fight back.

Re: EU Draft Council Declaration Against Encryption [pdf]

#282

Earlier quoted context omitted.

Matrix is awesome. Also, doesn’t the French government use Matrix? Are they trying to outlaw their own policies?

Several EU governments use Matrix - so yeah, there's a paradox here. On one hand Element (the company set up by the core Matrix team) depends on government work to keep the lights on for Matrix work, but on the other hand we feel a clear responsibility to push back on backdoors, given backdoors are intrinsically flawed and dangerous. This is why we're proposing a (hopefully) better alternative instead (and this is al…

It's probably something along the lines of 'guns for me but not for thee'. But they don't even have the excuse of encryption actively hurting anyone, so it's more like 'strong walls for me but not for thee'

Re: EU Draft Council Declaration Against Encryption [pdf]

#283

Earlier quoted context omitted.

Legislation in most countries does not come from elected officials, it typically is drafted up by lawyers. That's not a good argument. With the commission a lot of what ends up on the proposals is lobbied by citizens and it's the MEP that vote on it before becoming law who are elected. I vote liberal parties in my country and that has done jack shit to prevent shitty laws to be passed because the majority seems to be…

The difference is that you can vote for people who choose lawyers and they can influence what lawyers write. You dont have this much control in the EU.

The governments of each country in the EU, elected democratically, are the people who choose the specific law-writers (council of ministers) who you are critical of for proposing this law in this story.

https://en.wikipedia.org/wiki/File:Organs_of_the_European_Un...

To the extent that conspiracies of “deep state” or “lobbyist” are involved, the only reason the EU is different to the member states themselves is that it’s a single big target instead of a lot of small ones.

Re: EU Draft Council Declaration Against Encryption [pdf]

#284
post #235

Earlier quoted context omitted.

Secure communication is not a purely defensive technology. It allows you to safely coordinate an attack.

By this logic home ownership is an offensive technology because it allows you to safely coordinate an attack.

And indeed it would be. Conversely, if you only used a gun to defend your self it would be a defensive technology. Seems like classifying technology as either offensive or defensive is a fool's errand. Perhaps you should try a different argument.

Re: EU Draft Council Declaration Against Encryption [pdf]

#285

Earlier quoted context omitted.

First step is finding a way to educate the mainstream (including politicians) on the dangers of master keys and backdoors. It is too easy for many politicians and security agencies to think that their master keys and backdoors won't ever fall into the wrong hands, that they're careful, etc. And if you point out the problem, they'll tell you they'll be even more careful. Think about it from a non-techie perspective. I…

E2E encryption is scary. I'm also in the "you can't ban math, why try" camp. But I can't see authorities/politicians give up the idea of getting access to decrypted communications after court orders, in a 100 years, even if everyone completely understood the topic. It's just not happening.

Why is E2E encryption scary?

This is a genuine question because it's a counterintuitive notion to me since I find the lack of E2E encryption scary.

Re: EU Draft Council Declaration Against Encryption [pdf]

#286

Earlier quoted context omitted.

Yes. So for a static location that's feasible. But the status quo is they can also tap old school mobile voice calls and text messages.

The status quo today is that various encrypted messaging apps exist without any apparent backdoors. This has been the case for several years already. The status quo from not long before that was that mobile phones and text messages didn't exist at all.

Yes. Perhaps the endgame here is that when "old school" voice/text shrinks, so does that avenue for eavesdropping, and once it's almost zero, then allowing any e2e doesn't mean a loss of ability anyway.

Also, so long as metadata is available from cell towers, you can still use the most useful piece of data: that someone's phone was at a crime scene, even if the communication itself was encrypted. That will always be the case (unfortunately also in authoritarian regimes).

Re: EU Draft Council Declaration Against Encryption [pdf]

#287

https://matrix.org/blog/2020/10/19/combating-abuse-in-matrix... is our attempt at Matrix to spell out what a catastrophic idea it is to backdoor end-to-end encryption (and to provide an alternative proposal in the form of using decentralised reputation to mitigate abuse. We're kicking decentralised reputation work off in earnest tomorrow, so watch this space to see how it goes). I guess we'll be weighing in on the EU…

What about proposing encryption as an EU human right? Has that been attempted?

Maybe generalize that further, a right to privacy.

Re: EU Draft Council Declaration Against Encryption [pdf]

#288

https://matrix.org/blog/2020/10/19/combating-abuse-in-matrix... is our attempt at Matrix to spell out what a catastrophic idea it is to backdoor end-to-end encryption (and to provide an alternative proposal in the form of using decentralised reputation to mitigate abuse. We're kicking decentralised reputation work off in earnest tomorrow, so watch this space to see how it goes). I guess we'll be weighing in on the EU…

Matrix is awesome. Also, doesn’t the French government use Matrix? Are they trying to outlaw their own policies?

They use allright it when it's for their own benefit.

Re: EU Draft Council Declaration Against Encryption [pdf]

#289
post #20

Earlier quoted context omitted.

In that regard, is any large organisation different? I tried to convince the UK government this was a terrible idea when the Investigatory Powers Act was going through. I failed to make any difference at all to any part of it, but I did learn about Select Committees while trying to find out which MP I had to try to convince given my local MP was a powerless newbie.

With the UK, I've found (as a foreigner with voting rights previously) that it's best to build your relationship with a seniorish MP, and if that doesn't work, cough up to donate around 8-10k to the parties every year (for much more senior access). You'll pop a few eyeballs in Labour with such a donation, while the Conservatives have their own special interest groups for donors (although these usually end up as mass…

I don’t know if I should be happy to know I personally can afford to buy access to UK politicians, or embarrassed that they are so cheap, but either way that is a very interesting anecdote.

Re: EU Draft Council Declaration Against Encryption [pdf]

#290
post #236

This is madness. Oh, of course, it's much easier to put a wrench into some gears to show that you are actually working at "solving the terrorism problem" than shaving the yaks, but that machine is actually important for other things. We live in a dangerous world. We cannot control everything. I don't mind a slight risk of terrorist attack on myself or my family (caveat lector: I am young), if that means greater freed…

>We live in a dangerous world. No we don't, but that's what the Politicians try to implement in our brains.

It's easy for people to lose sight of this with all the bad news we're seeing in 2020, but the present is the safest time in history when zoomed out to a scale of decades. The decline in violence since the 1900s to today is essentially global and scales from bar fights to wars.
Post reply on HN