Live data from Hacker News

France threatens GrapheneOS with arrests / server seizure for refusing backdoors

mamot.fr

371–380 of 399 posts

Re: France threatens GrapheneOS with arrests / server seizure for refusing backdoors

#371

Earlier quoted context omitted.

I'm sure you're very familiar with the politics of both countries, but tell me... How is Nicusor Dan a puppet of the EU? More than Calin Georgescu? The guy who actively tried to stage a coup? More than George Simion? Granted, there's no PROOF he's a Russian puppet, but he's a far right twat that has views friendly to Russia. How is Maia Sandu and PES a puppet of the EU? And... let's look at BEP. Voronin, Russia frien…

Remember when they just annulled an election when they did not like the result?

I don't. I do remember when they were annulled after Russian interference and there were other fundamental issue with the first first round and Georgescu's campaign that broke the law.

Re: France threatens GrapheneOS with arrests / server seizure for refusing backdoors

#372
post #360

Earlier quoted context omitted.

I'm sure you're very familiar with the politics of both countries, but tell me... How is Nicusor Dan a puppet of the EU? More than Calin Georgescu? The guy who actively tried to stage a coup? More than George Simion? Granted, there's no PROOF he's a Russian puppet, but he's a far right twat that has views friendly to Russia. How is Maia Sandu and PES a puppet of the EU? And... let's look at BEP. Voronin, Russia frien…

> I know it's easy to look at this stuff from the outside and say, oh, yeah, the EU is interfering in elections, but there's a lot of history here There being "history" is not a valid excuse for openly manipulating elections. Especially not as the EU Commission throws around unproven allegations of the very same all the time.

When I say history, I mean more than just the decision, which might look like "oh, they didn't like the results", but also the events that lead up to it, the campaign. I'm not even going to go into the coup d'etat he attempted after the elections with a group of far right mercenaries, or the things that came out about the campaign and Georgescu that weren't known at the time (which, obviously, couldn't have been a factor, but confirm that this was the right decision).

I'm not sure what the accusations you're talking about are

Re: France threatens GrapheneOS with arrests / server seizure for refusing backdoors

#373

Earlier quoted context omitted.

The chances of Russia invading a NATO country are essentially zero simply because it would, almost certainly, lead to nuclear war. The idea that nukes wouldn't come out is contradicted both by decades of wargaming. In fact this is exactly what led to the end of the Cold War. At one time the US thought we could end the Cold War by waving a bigger stick. But Proud Prophet [1] was an extremely elaborate war game played…

This has nothing to do with anything. Nobody said anything about nuclear war or formal invasion. Let's review. Russia shot down a civilian airliner, killing all 298 people onboard, mostly Dutch nationals. Russia performed a radioactive poisoning attack on British territory, contaminating British civilian areas and Russia also used a deadly nerve agent twice within a few months on British territory, including poisonin…

His comment said that "in Europe we already live in a completely safe society in historical and geographic terms." And in the past Europe dealt with never-ending wars which culminated in a war that left tens of millions dead. And even after that war, there was the never-ending threat of nuclear annihilation that was 100% justified as both sides lined up their nukes at one another and very nearly fired them. Nothing in your list is anywhere near the same scale. The only thing that would suffice is a fear that Russia invades a NATO country and effectively triggers WW3.

Re: France threatens GrapheneOS with arrests / server seizure for refusing backdoors

#374

Earlier quoted context omitted.

I agree with your overall sentiment, except: "Like, in Europe we already live in a completely safe society in historical and geographic terms" Russia. Putin.

The chances of Russia invading a NATO country are essentially zero simply because it would, almost certainly, lead to nuclear war. The idea that nukes wouldn't come out is contradicted both by decades of wargaming. In fact this is exactly what led to the end of the Cold War. At one time the US thought we could end the Cold War by waving a bigger stick. But Proud Prophet [1] was an extremely elaborate war game played…

none of the countries that Putin could and would invade, e.g. Finland, the Baltics, Poland, have nukes.

It would depend on the UK, France, and the US to back them with nuclear weapons. Would the UK electorate be willing to trade their existence -- potential nuclear holocaust -- for Latvia?

And the US is under Putin's puppet, so they're not launching nukes.

Would Britain and France go to war over an invasion of Poland? They did once, and didn't have a great time...

Re: France threatens GrapheneOS with arrests / server seizure for refusing backdoors

#375

Earlier quoted context omitted.

"... the appeal of burning it all down and living in a cabin in the woods." I hope that's not what you think libertarianism is about. I'm sure there are libertarians who DO feel that way, but it's not a core tenet to personally isolate and live off the land. Libertarianism sees not left vs right, but instead the people against the government. Libertarians focus on personal liberty and solving problems together, volun…

Libertarians reject governmental force but provide no barriers to corporate force. There are innumerable documented examples of corporate force having greater control over the population than a government. These examples are not just historical but also include the time we are currently living in.

I don't think this is true of libertarianism. Libertarians reject use of force, except to prevent other use of force. I.e. I can use force to stop someone else from using force on me (or others).

Corporations are not exempt from this. A libertarian would support using force to stop a corporation from using force to coerce people to do something.

But Libertarians reject a premise that a corporation is required to serve you. You can opt-out and the corporation should leave you alone. But you are not entitled to service or employment from that corporation. Your rights cannot depend on the performance of another. I have a right to produce or purchase my own food, but I do not have an right/entitlement to food that I have not purchased or produced.

Re: France threatens GrapheneOS with arrests / server seizure for refusing backdoors

#376
post #285

Earlier quoted context omitted.

They can't bypass disk encryption that way: https://news.ycombinator.com/item?id=46038241 It does appear to be what they want from us, but it's not possible to bypass the Weaver disk encryption throttling via compromised OS updates or even secure element updates. It's fully not possible to bypass the security of a strong passphrase, which we encourage via optional 2-factor authentication support for fingerprint+PIN a…

Once they've established a rule that you have to help them in all cases, what stops them from forcing you to push an update to a phone while the user still has it , to collect information from the phone while actually unlocked and in use?

French laws... A warrant is needed !

Re: France threatens GrapheneOS with arrests / server seizure for refusing backdoors

#378
post #279
post #240

Earlier quoted context omitted.

You use the signing keys for GrapheneOS to push an update to a single user.

That doesn't offer a way to bypass disk encryption for data protected by the per-profile lock method. GrapheneOS cannot bypass the brute force protection implemented by the secure element. Google cannot bypass the brute force protection either because they designed the Titan M2 to require the Owner user successfully unlocks in order to update it. Weaver + insider attack protection for the secure element are among our…

That's all great but what prevents the OS from reading the /dev/input/* device that corresponds to the touchscreen while they enter that password? Or, XKCD#1200 style ("they can get my browser and app data but at least they can't get my disk password") reading all data after 'disk' unlock

Assuming Canada is like most countries and there exists an agency (or laws can be passed to create an agency) which has the authority, optionally after running it by a judge, to compel an entity to secretly implement a backdoor of their choice and they hand such an order to Google, Shiftphone, GrapheneOS, LineageOS, Samsung, or anyone else that is operating within their jurisdiction. Not meaning to single you out, but needing to trust your OS' updates does seem fundamental for a practically workable threat model. Unless you trust your vendor to prefer going out of business and destroying the keys on the way out, over implementing a backdoor for 1 user and tripping the warrant canary (many people will have that level of trust in GrapheneOS but not, say, Samsung; it's a tall ask of any vendor though)

Re: France threatens GrapheneOS with arrests / server seizure for refusing backdoors

#379

Earlier quoted context omitted.

The chances of Russia invading a NATO country are essentially zero simply because it would, almost certainly, lead to nuclear war. The idea that nukes wouldn't come out is contradicted both by decades of wargaming. In fact this is exactly what led to the end of the Cold War. At one time the US thought we could end the Cold War by waving a bigger stick. But Proud Prophet [1] was an extremely elaborate war game played…

none of the countries that Putin could and would invade, e.g. Finland, the Baltics, Poland, have nukes. It would depend on the UK, France, and the US to back them with nuclear weapons. Would the UK electorate be willing to trade their existence -- potential nuclear holocaust -- for Latvia? And the US is under Putin's puppet, so they're not launching nukes. Would Britain and France go to war over an invasion of Poland…

I think there are three big factors that make involvement almost guaranteed. The first is that in modern times political leaders prefer to believe what they want to believe, instead of what is genuinely most probable. They won't see it as trading their existence for anything. They'll convince themselves that they'll decisively win, or that Russia won't retaliate, or won't be able to retaliate.

The second is that the leaders of these countries are very unpopular. Starmer has an approval rating of 22% which is somehow twice as high as that of Macron who has reached a simply impressive 11% approval rating. Politicians love nothing more than war when they're unpopular, because it gives the electorate something to focus on outside of their own internal problems -- Diversionary War Theory. Also I certainly disagree regarding our insecure 'peace president' who has an affinity for bombs and a trend towards megalomania.

And finally there is the wargaming results. Some of the actions that led to nuclear holocaust were relatively innocuous, including performative nuclear strikes intended to 'send a message' rather than actually cause much real damage. It doesn't even sound like a bad idea, at first. Make it clear that you're serious and this is the path we're going down.

But it fails to consider the most probable response. You want to send me a message? Okay, here's your answer. How do you like my message? And of course you can't let such a provocation then go unmet. It's easy to see how what sounds like a reasonable idea is in reality a very bad one, but modern political leaders in the West make endless poor decisions with predictably poor results. You've gotta be something special to have an approval rating of 11%. Were such things measured in the past, even Caligula would probably be looking down at you!

Post reply on HN