News for hackers. Stuff that matters.
Re:Message encryption a 'problem' – UK home secretary by dm319 on Tuesday August 01, 2017 @05:27AM (#14898989)
I feel like the people who understand encryption and privacy advocates (myself included) are not engaging enough (or maybe effectively enough) with the public in communicating the concerns around trying to 'backdoor' encryption or giving up more of our privacy.

While I think these political statements are often ridiculous, they actually have widespread public support, if my cohort of friends and family are anything to go by.

Do we have people who are better communicators? I don't think even Cory Doctorow's posts/talks are aimed at the non-technical audience.

Re:Message encryption a 'problem' – UK home secretary by gargravarr on Tuesday August 01, 2017 @05:42AM (#14899062)
I've read so many arguments advocating strong encryption, all of which I agree with, and many of them are simplified as best we techies can - check out some of Troy Hunt's posts. But even avoiding the tech aspect completely, there is one thing the government simply refuses to accept.

Banning strong encryption will not stop people using it.

It will stop the 'good' and generally innocent populace using it and severely infringe on their right to privacy, but the 'bad' people will just fork an open-source messaging system that uses E2E encryption and start using that.

As commented in the article, strong encryption cannot be 'de-invented' now it's out in the open. Each and every one of these government statements is a drastically oversimplified knee-jerk reaction to the problem. Bet they think they can get tech companies to implement RFC 3514 to stop hackers.

Re:Message encryption a 'problem' – UK home secretary by zebrafish on Tuesday August 01, 2017 @09:54AM (#14900576)
I think the strongest argument for an American audience who is unfamiliar with technology is that encryption should be included under second amendment rights.

"Guns don't hurt people, people hurt people", "blaming the manufacturer for the actions of the operator", "even if we ban them, bad guys will still use them", etc.

If the right to bear arms is defined as the right to protection against totalitarian government I would think that encryption falls into that bucket.

Maybe we should get the NRA involved in this argument...

Re:Message encryption a 'problem' – UK home secretary by jff on Tuesday August 01, 2017 @11:44AM (#14901929)
Strong crypto used to be considered 'arms'; export was forbidden under ITAR: https://en.wikipedia.org/wiki/International_Traffic_in_Arms_...

If one accepts that part of the intent of the Second Amendment was to allow citizens to defend themselves against a tyrannical government (but please, let's not start the usual argument about asymmetric warfare), strong encryption capabilities would certainly be an important component of that in the modern era.

But that's just my stance, as someone who likes guns and crypto.

Re:Message encryption a 'problem' – UK home secretary by gargravarr on Tuesday August 01, 2017 @10:00AM (#14900651)
As predicted by Randall Munroe some years ago: https://xkcd.com/504/
Re:Message encryption a 'problem' – UK home secretary by zebrafish on Tuesday August 01, 2017 @10:47AM (#14901166)
Granted, guns have serial numbers and there is a list of registered owners. My argument falls apart there.
Re:Message encryption a 'problem' – UK home secretary by Zak on Tuesday August 01, 2017 @12:53PM (#14902776)
In most of the US, no registration or license is required to legally own a gun, and the Federal government is barred from attempting to create a registry.
Re:Message encryption a 'problem' – UK home secretary by eric_h on Tuesday August 01, 2017 @06:27PM (#14906027)
They literally can't even use computers to match weapons to owners. It's all on paper.
Re:Message encryption a 'problem' – UK home secretary by freehunter on Tuesday August 01, 2017 @11:42AM (#14901904)
Legal guns have serial numbers and legal gun owners are registered. My grandpa has a house full of guns with no official registration.

I wouldn't look to that as an example of a well-functioning regulation system.

Re:Message encryption a 'problem' – UK home secretary by hellbanner on Tuesday August 01, 2017 @03:11PM (#14904270)
> It will stop the 'good' and generally innocent populace using it and severely infringe on their right to privacy, but the 'bad' people will just fork an open-source messaging system that uses E2E encryption and start using that.

And that would be the point of the ban - anyone using E2E is bad therefore, gov attacks them.

Re:Message encryption a 'problem' – UK home secretary by gargravarr on Wednesday August 02, 2017 @04:53AM (#14908984)
People smart enough to do this are also smart enough to anonymise their online identity. Banning it will just push the determined further beyond the reach of the security services. Services will either become peer-to-peer (and therefore un-interceptible) or use servers hosted in countries where our governments have no sway. The politicians want the playground to be supervised, but they're going to wind up with no-one in it.

Rather than the dragnet approach favoured by the NSA and an increasing number of politicians, security services need to properly investigate targetted individuals. The panopticon approach is never going to work.

Re:Message encryption a 'problem' – UK home secretary by hendzen on Tuesday August 01, 2017 @07:25AM (#14899564)
The government can legislate the pipes. It's possible to DOS strong encryption at the ISP level. Look at China...
Re:Message encryption a 'problem' – UK home secretary by marcosdumay on Tuesday August 01, 2017 @04:53PM (#14905198)
Yep, look at China and see how it only affects common people. Anybody with a minimum of knowledge is able to open a VPN out of the country.
Re:Message encryption a 'problem' – UK home secretary by shakna on Tuesday August 01, 2017 @05:53AM (#14899111)
> or maybe effectively enough

I'm not sure it is that, or if there is a way to communicate with some of the governments implementing these laws.

Take Australia, recently. The government came out in favour of weakening encryption, after consultation with security and privacy experts, as well as some economics experts and the like.

The thing was though, the usual man who advised them, and has in past similar investigations before creating laws to do with technology, advised them that it was a terrible idea.

He was then dismissed, and a series of other experts were called in, until the government were able to get an expert who saw things their way.

If the decision has already been made, how is anybody supposed to influence it?

Re:Message encryption a 'problem' – UK home secretary by DarkKomunalec on Tuesday August 01, 2017 @05:46AM (#14899078)
I like to take the backdoor argument to its logical conclusion - if we're not going to allow terrorists to hide by encryption, why should we allow them to hide by speaking in private? It's about time construction companies and car manufacturers stopped giving terrorists a place to hide - make always-on microphones mandatory in all homes and cars. Don't worry - they'll need a warrant to access the recordings!
Re:Message encryption a 'problem' – UK home secretary by gargravarr on Tuesday August 01, 2017 @05:50AM (#14899097)
All private homes.

Government homes and offices are special. The general public is not allowed to know what goes on behind their doors.

Seriously, don't give the government ideas :( I am of the opinion that our current PM would gladly shove cameras up people's *sses if she thought it could catch terrorists.

Re:Message encryption a 'problem' – UK home secretary by izacus on Tuesday August 01, 2017 @05:46AM (#14899080)
Thing is, the best vessel for that might be pop culture - Cory Doctorows books convey the issues of surveilance state to the general public way better than any kind of preaching does.

The issue, I think, is that mostly the issues are focusing on fringe activities which aren't approved by most of society (sexting, "hiding things") instead of taking lessons from history of our socialist countries and other widespread abuses of governmental power. We already had surveilance society and it sucked even for people who didn't do anything wrong - we need to repeat those lessons more. Especially since it seems that history in schools seems to be failing at that.

Re:Message encryption a 'problem' – UK home secretary by dm319 on Tuesday August 01, 2017 @07:00AM (#14899412)
There is too much complacency and faith in our democracy in the UK. No one really believes a despot will get into power, despite it happening in recent history to similar european countries.
Re:Message encryption a 'problem' – UK home secretary by chii on Tuesday August 01, 2017 @05:39AM (#14899050)
I found the John Oliver episode about Snowden to be very good at conveying the ideas of privacy. Just mention that the govt can decrypt your dick pics and sexting if these laws pass.
Re:Message encryption a 'problem' – UK home secretary by dm319 on Tuesday August 01, 2017 @07:01AM (#14899417)
You know this argument might well work for Theresa May.
Re:Message encryption a 'problem' – UK home secretary by kitd on Tuesday August 01, 2017 @07:50AM (#14899695)
"You mean GCHQ can see running through wheat field pics? Let's ... let's just take a step back, shall we?"
Re:Message encryption a 'problem' – UK home secretary by daemin on Tuesday August 01, 2017 @08:21AM (#14899885)
"But oh no, they would never do that ... they would only use this technology for productive purposes ... like catching bad guys".
Re:Message encryption a 'problem' – UK home secretary by freehunter on Tuesday August 01, 2017 @11:43AM (#14901919)
I don't want to see Theresa May's dick pics.
Re:Message encryption a 'problem' – UK home secretary by stefs on Tuesday August 01, 2017 @05:38AM (#14899043)
i think the problem is it's a highly technical, mathematical and social problem that isn't easily explained. well, the technical part is even comparatively simple. but the negative implications are usually harder to communicate. the "slippery slope" argument only gets one so far and non-criminals usually can't imagine how it would negatively affect them. "only metadata" doesn't sound too bad!

the opponents of full encryption though have it quite easy by name-dropping the FUD buzzwords - i.e. security and terrorism. and anyway, it's only metadata!

Re:Message encryption a 'problem' – UK home secretary by k-mcgrady on Tuesday August 01, 2017 @06:29AM (#14899277)
I think the problem isn't that the ideas/reasons for privacy aren't being communicated. It's that a lot of people are seriously worried they will be a victim of a terrorist attack (and the government tells them this invasion of privacy will protect them from that) and when they hear the other side's arguments they are happy to fall back on the 'I've got nothing to hide' argument. Honestly it's a nice mindset to be in so I understand why it's hard to convince them otherwise.
Re:Message encryption a 'problem' – UK home secretary by EugeneAZ on Wednesday August 02, 2017 @10:51AM (#14910994)
Let them read George Orwell "1984"
Re:Message encryption a 'problem' – UK home secretary by MarcScott on Tuesday August 01, 2017 @01:41PM (#14903293)
I tried to be as non-technical as possible when I wrote this as an introduction to what cryptography is all about.

http://coding2learn.org/blog/2017/06/11/dear-theresa/

The problem is that the subject is inherently complex, and abstractions and analogies can only go so far.

Re:Message encryption a 'problem' – UK home secretary by dm319 on Thursday August 03, 2017 @10:53AM (#14920078)
That's pretty good, but for the people I'm thinking of, including Theresa May, that's about 10X too long. I like the last 5 points. It reminded me of Cory Doctorow's 'and now you've got two problems'.

Sadly we need something that is not much more than a paragraph. Maybe something that would fit in a tweet. Something that competes with 'people want to blow you up, surrender your privacy so we can catch them'.