Live data from Hacker News

The EU is set to declare war on encryption

tech.newstatesman.com

31–40 of 167 posts

Re: The EU is set to declare war on encryption

#31
post #24

Maybe they don’t realize that e-commerce wouldn’t exist without trustworthy encryption. They’re taking about sabotaging trillions of dollars of economic transactions in lieu of just doing real police work to find the criminals.

E-commerce would go on just fine even if the government gets a backdoor into the communication.

yup- millions upon millions have been victims of data breaches and (at least in the US) regulators don't have the stones to levy harsh penalties.

Re: The EU is set to declare war on encryption

#32
Do you have any good learning resources on encryption? any Github repositories worth mirroring, with the actual implementations? I am a programmer with zero experience in that area but want to some day be able to "roll out my own crypto" if necessary :)

EDIT: I'm not afraid of all the math I need to learn, just point me in the right direction.

Re: The EU is set to declare war on encryption

#33
post #19
post #17

> EU home affairs officials have grown increasingly concerned about international paedophile networks and in July unveiled plans to force technology companies to take greater responsibility for reporting them. "Think of the children" cliché will never die.

Isn’t that the UK’s line

The UK has no monopoly on wanting to increase digital surveillance. Almost all other Eu nations are slowly treading in their footsteps.

Re: The EU is set to declare war on encryption

#34

Let’s say they ban end to end encryption tomorrow in their save the children and puppies act. Guess who is still going to use it? The criminals are of course. You can’t ban math.

It's not like e2e is heavily utilized must-have for crime either. Tons of crime happen through regular unencrypted text messages, and nobody gets caught. But this isn't about protecting in the first place, so it isn't all that relevant.

e2e is a heavily utilized must-have for any organized crime these days, and this is very frequently a wall that law enforcement hit and cannot get past.

I don't think banning encryption or something silly like that is therefore the solution, but minimizing the problem is not helpful in understanding why there's such a heavy push from all sorts governments, democratic and authoritarian alike, to "deal" with the problem. It's not always because they are Teh Evil Surveillance Statez who want to Take Your Freedom for the sake of Total Control. It's because they are faced with a serious actual real problem of criminals using a technology they barely understand and cannot get past, and so they instinctively reach for the trusty hammer they are so accustomed to using against all serious problems - the Legislative Ban.

They don't understand that using this hammer will have significant unintended consequences, but this isn't malevolence. It's fear and lack of competence.

Re: The EU is set to declare war on encryption

#35
Less just assume that they go ahead, everyone complies... How long until you'd need to revert the law, because all legal traffic is now exploitable, while the criminals are still using good crypto?

How much damage does this need to cause before politicians will sit down and understand while their half-assed idea failed?

Re: The EU is set to declare war on encryption

#36
post #25

The headline doesn’t seem to be backed by the content of the note they’re quoting. I do wish papers would reserve “war” for actual wars; while I would be appalled if this goes all the way through, a note saying “we want to have a chat and this is why” is slightly further from even a metaphorical war on encryption than Farage is from an actual war on Brussels.

This comment needs to be upvoted. The title of the article is completely misleading.

How can a call to 'stimulate a discussion' somehow get characterized as declaring war?

This looks to me like the EU doing its typical thing of issuing memos to generate more memos, that will then generate more memos ...

Re: The EU is set to declare war on encryption

#37
post #24

Maybe they don’t realize that e-commerce wouldn’t exist without trustworthy encryption. They’re taking about sabotaging trillions of dollars of economic transactions in lieu of just doing real police work to find the criminals.

E-commerce would go on just fine even if the government gets a backdoor into the communication.

How long will it survive after the backdoor leaks? How long will credit card stay usable?

E-commerce has enough problems with security already. Adding digital security as another one will be a huge drag.

Re: The EU is set to declare war on encryption

#38
post #32

Do you have any good learning resources on encryption? any Github repositories worth mirroring, with the actual implementations? I am a programmer with zero experience in that area but want to some day be able to "roll out my own crypto" if necessary :) EDIT: I'm not afraid of all the math I need to learn, just point me in the right direction.

Cryptography is more math than programming unfortunately. It might take a lot of time to become apt at it, but it is a very commendable goal.

The problem isn't necessarily in using a weaker encryption, it's that you can detect that you can't break some crypto, and arrest whoever is using that. This won't stop illegal use of course, but will stop anyone interested in their privacy

Re: The EU is set to declare war on encryption

#39

Earlier quoted context omitted.

E-commerce would go on just fine even if the government gets a backdoor into the communication.

How long will it survive after the backdoor leaks? How long will credit card stay usable? E-commerce has enough problems with security already. Adding digital security as another one will be a huge drag.

After the backdoor leaks all they need to do is a key rotation.

Re: The EU is set to declare war on encryption

#40
post #19

Earlier quoted context omitted.

Isn’t that the UK’s line

The UK has no monopoly on wanting to increase digital surveillance. Almost all other Eu nations are slowly treading in their footsteps.

It’s not “illegal” if we just contract a trusted ally to spy on our own citizens. The US, U.K., Germany, and the other five eyes do it. I’d been shocked if the French or Dutch aren’t doing it but I haven’t read about it myself.
Post reply on HN