825
top 50 comments
sorted by: hot top controversial new old
[-] Quik@infosec.pub 236 points 1 week ago* (last edited 1 week ago)

"Arguing that you don't care about the right to privacy because you have nothing to hide is no different than saying you don't care about free speech because you have nothing to say"

Snowden

[-] floofloof@lemmy.ca 66 points 1 week ago* (last edited 1 week ago)

I expect many people might read this and think "yep, fair enough, I have nothing to hide and nothing to say" and still not understand why either privacy or free speech are valuable.

[-] SlopppyEngineer@lemmy.world 59 points 1 week ago* (last edited 1 week ago)

And the things that are perfectly okay today might be the things you want to hide tomorrow. Abortions and pregnancies, thoughts about labor rights or climate, sexual orientation, ...

[-] SoleInvictus 15 points 1 week ago

As an American, I can vouch for this.

[-] gedaliyah@lemmy.world 187 points 1 week ago

The only thing that can stop a bad guy with access to my private phone data is a good guy with access to my private phone data. /s

[-] ArbiterXero@lemmy.world 45 points 1 week ago

Fuck me, that’s good

I’m stealing that

[-] riot@lemmy.world 36 points 1 week ago

In the same vein, with my family I've been using the analogy of "Imagine that all law enforcement had a key to your home, and they could enter at any time and look through your things, but you wouldn't even know it if they did, or if they took photos or recorded videos of your place to take with them. Their argument is that the only way to keep you and your stuff safe from the bad guys is for the good guys to have access. But because the good guys now have access, it's also easier for the bad guys to get in, because now there's all these extra keys to your home out there, which might fall into the hands of the bad guys."

Not a perfect analogy, but it seems to make them consider the issue from a more personal angle. And for those that argue, "Well, I don't have anything to hide.", I usually counter with "Then why do you close your curtains/blinds when you change your clothes or get out of the shower?" With my dad who grew up during the World War II, it also helped to mention that a law like this, once on the books, will not be easy to overturn, and while he might be fine with our current regime having access to all his data, that might not be the case with future authorities.

[-] floofloof@lemmy.ca 8 points 1 week ago* (last edited 1 week ago)

Instead of extra keys, perhaps describe it as weaker locks. Would you consider the lock to which every cop had a key to be as strong and secure as a regular lock? And look at the USA for an instance of a new regime that can potentially use vast amounts of personal data to persecute and oppress anyone the fascists don't like. Many people might have (naively) trusted the government with the surveillance Edward Snowden and others revealed, back when they did not perceive the US Government as an immediate threat to ordinary Americans. But the new regime quite clearly is ready to persecute and punish people for their political views, their race, their gender or their sexual orientation, and it now has all that data.

[-] ilinamorato@lemmy.world 18 points 1 week ago

I'm not the person you're replying to, but "weaker locks" feels like something you can make allowances for or work around. "Extra keys" feels like the Damoclean threat that it is.

[-] Reyali@lemm.ee 5 points 1 week ago

I’d combine both metaphors: police have keys and deadbolts are banned.

The “good guys” CAN get in, and the bad guys can easily break in.

[-] cley_faye@lemmy.world 6 points 1 week ago

Yeah. Also we don't have good guys either, but, that sounds nice.

[-] RobotToaster@mander.xyz 96 points 1 week ago

It feels like the UK and France are in a competition to see who can steamroller their peoples' rights the fastest.

[-] ramble81@lemm.ee 31 points 1 week ago

Isn’t Sweden trying something stupid too?

[-] lazynooblet@lazysoci.al 13 points 1 week ago

Although not in the same way, the US is leading the charge on that front.

[-] sugar_in_your_tea@sh.itjust.works 11 points 1 week ago

Well, they gotta fight about something...

load more comments (1 replies)
[-] zephorah@lemm.ee 62 points 1 week ago

Signal, Tuta, Proton. And that Apple bullshit.

This push to know everything about everyone is outrageous, expected, and depressing.

[-] makyo@lemmy.world 17 points 1 week ago

Almost seems like they're afraid of us or something

[-] zephorah@lemm.ee 11 points 1 week ago

Luigi wasn’t talking with anyone. None of this would’ve helped them with him.

[-] SacralPlexus@lemmy.world 15 points 1 week ago

I think you’re falling into the trap of making a good faith argument when the people pushing to destroy encryption are not.

load more comments (5 replies)
[-] Yingwu@lemmy.dbzer0.com 51 points 1 week ago

A reminder that the people voting for these laws do not understand technology. They don't get it. Yes, this law sucks, but even if it passes, I'd be really surprised if it was actually enforceable.

[-] floofloof@lemmy.ca 19 points 1 week ago* (last edited 1 week ago)

It could be enforced for the majority of people just by blocking the download of non-backdoored software from well known sources. And then for the relatively few tech-literate types who still obtain and use E2EE messaging software, the government will have a ready way to prosecute you whenever you do anything inconvenient, or look like you might do something. So it can be a serious problem even if it can't technically be enforced for everyone.

[-] cley_faye@lemmy.world 11 points 1 week ago

The law is enforceable. If the options you're given is "put a backdoor in your product or stop operating in the country", it'll happen. And even if you reply "then I'll go away", laws like this, stupid, dangerous, breaking everything, will keep popping in one country after another until it's too late.

It not making sense have no bearing on whether it can be enforced or not. And the mere existence of the law may be enough to later put you in hot water if you have some de-facto illegal software on your phone or computer, for example. It would not be automatic everywhere, but another tool to just legally have something against most people.

[-] fuzzzerd@programming.dev 5 points 1 week ago

That's being too generous. Some may not fully understand, but many do and simply don't care. Not sure if better or worse, but its not entirely lack of understanding.

[-] stevedice@sh.itjust.works 48 points 1 week ago

TSA officers steal from passengers

This may seem unrelated but it gives a real life physical example on exactly why backdoors shouldn't exist.

load more comments (15 replies)
[-] cupcakezealot 39 points 1 week ago

Correction. The worst surveillance law in the EU so far

[-] sapetoku@sh.itjust.works 36 points 1 week ago

France is a police state in which citizens are all suspects. Cryptography was illegal until 1996 outside of government/military use and it's one of the worst countries for any hobbyist who needs to use radio frequencies, fly stuff around or even mere street photography. This law will make it easier for the government to crackdown on anyone using encrypted messaging as a pretext to arrest them or put them under surveillance.

Note that the current interior minister and his predecessor both are vile fascist scum.

[-] index@sh.itjust.works 36 points 1 week ago

The government is not your friend, we are ruled by power tripping authoritarian rulers. They are using security and defense as a pretext to abolish your rights. You can solve the narcotraffic problem by simply legalizing drugs, they are going after encryption for something else, they want to control everything and everyone.

[-] uriel238 23 points 1 week ago

The eventual outcome of this sort of thing is more widespread use of steganographic data storage schemes. We already have plenty, such as ones that make your data look like unused LTS blocks of garbage and code blocks with multiple hidden partitions, so that you can open one block showing pedestrian data and the court unable to prove there are other hidden blocks.

These are technologies that already exist for those people who are really interested preserving their renegade data.

But if I own a business and I don't want my rivals reading my accounting, and open crypto is illegal, I may go stegan whether or not I have secret slush funds.

[-] meowmeowbeanz@sopuli.xyz 23 points 1 week ago

Backdoors for 'good guys' don't exist—this is a shortcut to mass exploitation.

😾

[-] StringPotatoTheory@lemmy.ca 16 points 1 week ago

If this is passed, would this only apply to people in France? Like Signal and WhatsApp, etc, could they make a different version of the app / backend that's unencrypted just for them? Is that even possible? I can't imagine Signal adding a backdoor for everyone in the world.

Or would they just outright pull their software / apps from being used in France? But then what's stopping someone in France from sideloading the app and using a VPN?

[-] Tsuroth@lemmy.world 37 points 1 week ago

Signal has already threatened to pull out of both Australia and the UK when they were talking about passing similar laws.

[-] grehund@lemmy.world 32 points 1 week ago

And Sweden, just this week.

Yeah, if Signal is pulling out of your country, you dun goofed.

[-] EngineerGaming@feddit.nl 11 points 1 week ago

This is yet another way tying accounts to phone numbers can come back to bite you! I guess pulling out means denying registration from the country's numbers as well? So that would mean either a constant additional expense (which might be significant for poor people), or constantly risk getting the account deleted if you tied it to one-time rental.

[-] Zak@lemmy.world 11 points 1 week ago

But then what’s stopping someone in France from sideloading the app and using a VPN?

The need for a phone number and SMS verification to create an account. Signal should do something about that.

There are ways around that, but the goal isn't to stop everyone from using E2EE; it's to make E2EE non-mainstream.

[-] floofloof@lemmy.ca 12 points 1 week ago* (last edited 1 week ago)

Nothing technically stops you. But if the government can prove you have been using Signal, all of a sudden you can be in a lot of trouble. This could be used for political oppression. Plus, the fewer the number of countries allowing E2EE, the less incentive there is to make or distribute such software. As it becomes harder to find, most people will end up using sanctioned, backdoored software, which makes the few that don't stand out even more.

[-] Zak@lemmy.world 9 points 1 week ago

I don't think the current proposal in France sanctions individuals for using E2EE; it sanctions service providers for providing it.

[-] cley_faye@lemmy.world 4 points 1 week ago

It is possible to do, to some extent. Everything's possible. But then, when people that are on both side of this encryption barrier wants to talk, then both must use unencrypted messages. You'd also have the obvious case of someone having a phone/device/account from country A temporarily crossing through country FuckingFranceOrUK, so what do you do in that case?

You'd need to implement that, add UI features to know if you're using encryption or not, and above all, it's fucking stupid and against what most sane messaging solutions wants to do.

I'm sure it's possible to find people that would gladly do all that. Hopefully those people are not in the business of making all the useful communication services we currently use.

[-] Ulrich@feddit.org 16 points 1 week ago* (last edited 1 week ago)

Its funny, I'm watching this show called Prime Target and basically the NSA is trying to prevent people from figuring out some sort of mathematical equation that would instantly break all encryption and talking about how it would be the end of the world as we know it.

Meanwhile the EU is forcing everyone to put in an express lane IRL.

[-] floofloof@lemmy.ca 10 points 1 week ago* (last edited 1 week ago)

I haven't seen that show, but it sounds like it has a basis in reality: there has been a real concern that quantum computers might be able to break much of current encryption because they are far quicker than classical computers at problems like finding the prime factors of a number, and widely used schemes like RSA encryption depend on that being hard to do. And that could be fairly catastrophic, not only for current communications and for data encrypted at rest, but because communications data can be collected now and decrypted later when the technology becomes available. As far as we know, no one has done it yet, but quantum computers are developing rapidly so the day may well come. So there's a reason to move to encryption algorithms that are hard for quantum computers, even before such computers become a practical reality.

load more comments (1 replies)
load more comments (4 replies)
[-] daggermoon@lemmy.world 11 points 1 week ago

But they're not the good guys either

load more comments (1 replies)
[-] x00z@lemmy.world 7 points 1 week ago

Ah yes, for the upcoming Ministry of Love.

[-] RegalPotoo@lemmy.world 6 points 1 week ago

So I'm going to get down voted to hell for this, but: this kind of legislation is a response to US tech companies absolutely refusing to compromise and meet non-US governments half-way.

The belief in an absolute, involute right to privacy at all costs is a very US ideal. In the rest of the world - and in Europe especially - this belief is tempered by a belief that law enforcement is critical to a just society, and that sometimes individual rights must be suspended for the good of society as a whole.

What Europe has been asking for is a mechanism to allow law enforcement to carry out lawful investigation of electronic communications in the same way they have been able to do with paper, bank records, and phone calls for a century. The idea that a tech company might get in the way of prosecuting someone for a serious crime is simply incompatible with law in a lot of places.

The rest of the world has been trying to find a solution to the for a while that respects the privacy of the general public but which doesn't allow people to hide from the law. Tech has been refusing to compromise or even engage in this discussion, so now everyone is worse off.

[-] stevedice@sh.itjust.works 15 points 1 week ago

I can invite someone over to my house and talk about anything I want with no risk of government meddling. Why should it be any different in online communication regardless of the country?

[-] SoleInvictus 5 points 1 week ago

Continuing the analogy, government agencies can absolutely eavesdrop on in-person conversations unless you expend significant resources to prevent it. This is exactly what I believe will happen - organized crime will develop alternate methods the government can't access while these backdoors are used to monitor less advanced criminals and normal people.

load more comments (17 replies)
[-] uriel238 4 points 1 week ago

It sounds like you haven't observed the conversation.

And it's not the tech companes so much as the Linux community who have pushed for e2e.

Considering how many abuses (pretty clear violations of the fourth amendment to the Constitution of the United States) have been carved out by SCOTUS during mob investigations and the International War on Terror, no, the people of the US want secure communication. The law enforcement state wants back doors and keep telling tech folk to nerd harder to make back doors not already known to industrial spies, enthusiast hackers and foreign agents.

You're asking for three perpendicular lines on a plane. You're asking for a mathematical impossibility.

And remember industrial spies includes the subsets of industries local and foreign, and political spies behind specific ideologies who do not like you and are against specifically your own personhood.

load more comments (1 replies)
load more comments
view more: next ›
this post was submitted on 27 Feb 2025
825 points (100.0% liked)

Technology

64937 readers
3590 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots


founded 2 years ago
MODERATORS