News for hackers. Stuff that matters.

A comment on NSO Group's iPhone Zero-Days used against a UAE Human Rights Defender. Parent comment

Re:NSO Group's iPhone Zero-Days used against a UAE Human Rig... by digi_owl on Thursday August 25, 2016 @03:04PM (#12361552)
> * In the 1990s, strong encryption was called a 'munition' and export was restricted. That turned out to be impractical (it was available in many countries and the Internet has no borders), morally questionable (restricting private citizen's privacy), and it fell apart.

IIRC, thats still on the books. Its just one of those sleeping paragraphs since the PGP release.

[ Parent | on HN ]
Re:NSO Group's iPhone Zero-Days used against a UAE Human Rig... by avian on Thursday August 25, 2016 @03:17PM (#12361659)
Debian documents mention that "BXA revised the provisions of the EAR governing cryptographic software" in October 2000. Debian no longer has separate non-us repositories for crypto because of that.

https://www.debian.org/legal/cryptoinmain

[ Parent | on HN ]
Re:NSO Group's iPhone Zero-Days used against a UAE Human Rig... by makomk on Thursday August 25, 2016 @04:31PM (#12362242)
Open source software is now basically exempt from the crypto export restrictions, which is why Debian doesn't need separate non-US repositories for it anymore. As far as I know closed-source software is still restricted.
[ Parent | on HN ]
Re:NSO Group's iPhone Zero-Days used against a UAE Human Rig... by jeff_marshall on Thursday August 25, 2016 @08:02PM (#12363412)
Only "Military or intelligence cryptographic (including key management) systems" are included in the current US munitions list [1]. Everything else is handled by the Department of Commerce as part of the export administration regulations (EAR) [2].

[1]https://www.pmddtc.state.gov/regulations_laws/documents/offi...

[2] https://www.bis.doc.gov/index.php/policy-guidance/encryption

[ Parent | on HN ]
Re:NSO Group's iPhone Zero-Days used against a UAE Human Rig... by tedunangst on Thursday August 25, 2016 @03:12PM (#12361625)
The book in question: https://www.bis.doc.gov/index.php/policy-guidance/encryption
[ Parent | on HN ]
Re:NSO Group's iPhone Zero-Days used against a UAE Human Rig... by chetanahuja on Thursday August 25, 2016 @09:57PM (#12363855)
"it was available in many countries and the Internet has no borders"

Ummm... tell that to the Chinese or anyone, anywhere in the world trying to watch the complete international Netflix catalog. And as for VPNs, they're like the tunnels under the actual physical borders which are also not impenetrable.

[ Parent | on HN ]