News for hackers. Stuff that matters.
Re:UK Government is breaking the law by collecting everyone'... by OJFord on Wednesday December 21, 2016 @07:40AM (#13228613)
> Under [the new Investigatory Powers Act], the state now also has access to every person’s internet use – every website visited or app used – which service providers must generate and store for 12 months.

"App used"? How? I understand that "website visited" is clearly 'public' even if not recorded by ISPs for the state, but I don't understand how, technically, "app used" is known - unless it means "web application visited", which is of course exactly the same as "website visited".

I saw a very interesting hearing when the Bill was still at committee stage, discussing concerns raised by small and community-run ISPs that although they of course have every intention of complying with the law, it's so non-technical and under-specified that it's not at all clear to them what they need to actually do: precisely what to record, how to store it, what guarantees they need to be able to make (e.g. are they liable if data is corrupted? If they're hacked?) etc.

Re:UK Government is breaking the law by collecting everyone'... by doc_holliday on Wednesday December 21, 2016 @07:56AM (#13228700)
I would imaging they are simplifying slightly, by using the term app. They wouldn't know for completely offline apps.

They probably mean for instance the Gov would know when you use Instagram, Facebook etc on your phone.

As the iOS or Android app will be sending requests to Instagram, Facebook etc IP and the Gov will log this.

Re:UK Government is breaking the law by collecting everyone'... by gutnor on Wednesday December 21, 2016 @12:03PM (#13230665)
Indeed, the simplification is probably for reader: so they don't think they can avoid being monitored by simply using the facebook app rather than facebook in a browser.
Re:UK Government is breaking the law by collecting everyone'... by shubb on Wednesday December 21, 2016 @03:49PM (#13232503)
However, this is a law, and laws must be written to be read very litterally.

They could have made the law more general by talking about 'messages' or 'accesses a server'.

They said app used. That genuinely could compel Google or Apple to hand over your usage metrics.

Re:UK Government is breaking the law by collecting everyone'... by OJFord on Wednesday December 21, 2016 @08:00AM (#13228726)
> They probably mean for instance the Gov would know when you use Instagram, Facebook etc on your phone.

But how?

> As the iOS or Android app will be sending requests to Instagram, Facebook etc IP and the Gov will log this.

That says that I "visited" (in a sense) Instagram, Facebook, etc. - not that I used the Instagram or Facebook app to do it.

I don't think that's a meaningless distinction.

Re:UK Government is breaking the law by collecting everyone'... by doc_holliday on Wednesday December 21, 2016 @08:07AM (#13228762)
Yes, you are right in strict definition that they won't know specifically which app you used to visit a site. Yes you visited for example Hacker News (according to the IP log) but they wouldn't know which of the many Hacker News apps you used to visit it. That is right and accurate, so yes they don't know which specific app you used.

However, the use of the term app is probably more to do with vast usage of apps to now consume the internet. So if you now just use the term "website", many of the general populace (who aren't technical) will think that's fine they won't know because I use apps for Facebook etc.

It's important people know that this covers access through apps. So they simplify the usage of that term.

Technically incorrect yes, but probably a proper description for general readers.

Re:UK Government is breaking the law by collecting everyone'... by TheGrumpyBrit on Wednesday December 21, 2016 @08:07AM (#13228765)
I would assume it's something like the difference between visiting "facebook.com" and "api.facebook.com"
Re:UK Government is breaking the law by collecting everyone'... by Proof on Wednesday December 21, 2016 @08:05AM (#13228753)
While I think you are correct in your prediction, I also think that the UK government can simply outlaw any type of attempts at protecting ones' data, such Tor, VPN ect.

At the very least, they could make a law that would focus most of the energy in hacking those who do try to conceal and protect their privacy. They blindly believe the time trotted motto of "if you're doing nothing wrong, you have nothing to hide."

Re:UK Government is breaking the law by collecting everyone'... by 75398731 on Wednesday December 21, 2016 @10:56AM (#13230045)
Brainwashing program of citizens has been successful. They are unaware its tool to oppress political opponents, activists, journalists, whistle blowers and undesirables. Very impressive results.
Re:UK Government is breaking the law by collecting everyone'... by petre on Wednesday December 21, 2016 @01:34PM (#13231456)
There was another motto like this one. It went in the lines if "If you are not with us you are against us".
Re:UK Government is breaking the law by collecting everyone'... by prodmerc on Wednesday December 21, 2016 @06:32PM (#13233574)
Eh, this is just another step towards the Great Island Firewall.

I Googled some info on Sudafed dosages (specifically interested in pseudoephedrine, even though they changed that to phenylephrine apparently) and half of the links were blocked because they were "adult content".

Well fuckers, if you're blocking information like that, good fucking job. It will not affect anyone but the general population, so it's all good. The Brits are pretty complacent with what the government tells them, compared to many other countries.

Re:UK Government is breaking the law by collecting everyone'... by kodroid on Wednesday December 21, 2016 @07:56AM (#13228701)
API endpoints could point to what apps are in use
Re:UK Government is breaking the law by collecting everyone'... by OJFord on Wednesday December 21, 2016 @08:02AM (#13228738)
Endpoints wouldn't be known, assuming HTTPS. `api.instagram.com` or whatever, sure, but that still doesn't say that I used the Instagram app.
Re:UK Government is breaking the law by collecting everyone'... by desas on Wednesday December 21, 2016 @09:10AM (#13229169)
It's not about which app you used, it's about what server you connected to and when you did it.