News for hackers. Stuff that matters.
Re:We Chat, They Watch by FreakyT on Thursday May 07, 2020 @09:02PM (#23110281)
This narrative of false equivalency is dangerous, IMO.

WeChat has been proven to be a heavily monitored and censored network. Whatever security failings iMessage and WhatsApp have, they pale in comparison to what's in place for WeChat.

Re:We Chat, They Watch by forgot_again on Thursday May 07, 2020 @09:42PM (#23110500)
The false equivalency also begs a deeper moral analysis. Let's assume the US government has as complete access to iMessage and WhatsApp as the CCP does to WeChat. The story doesn't end there, since you have to examine the nature of the entities that have access to your information.

Would I prefer that access be held by the US Government, which for all its faults is extremely engaged with and integrated into the global system, beholden to Law and a robust court system which enforces a strict set of checks and balances on its behavior, and is philosophically rooted in individual liberty?

Or would I prefer the CCP, which does not even recognize the concept of individual liberty, is beholden to no one but itself and its own desires, and ruthlessly upholds its iron and unquestioned (unquestionable, at least in China) will upon the entire nation with absolutely 0 oversight?

Yeah, gonna go with the US here.

Re:We Chat, They Watch by cyphar on Thursday May 07, 2020 @10:16PM (#23110707)
I disagree with several aspects of your depiction of the US's "robust court system" (especially in the case of mass surveillance). There have been several attempts by citizens to sue the US Government for their illegal and indiscriminate surveillance programs, but have been stonewalled for years by government lawyers arguing that such cases should not happen in public courts (where they could be held accountable) due to "national security risks". Not to mention that the NSA has their own interpretation of the US Constitution which completely twists the meaning of "collection" to allow indiscriminate mass surveillance to not be seen as "unreasonable search and seizure". Then there's the whole FISA court system, which rejects so few requests that it is in every sense of the word a rubber stamp court. And even if the court system is "robust" -- let's not forget that the PATRIOT Act exists (though it turns out that the NSA actually violated even the minimal restrictions present in the PATRIOT Act).

Now, is China any better? Of course not, and the CCP has countless policies which are far worse to their own people than the US. But the key question is -- do you live in or have any connection to China? If not, then I would go with the CCP surveillance because there is no obvious mechanism for such surveillance to harm you directly. On the other hand, if you live in a 5-EYES country (as I do), any data obtained from US surveillance can be used in parallel construction (or other not-entirely-legal methods). Hell, here in Australia our mass surveillance systems have been used to punish minor infringements such as littering.

Obviously I'd prefer not to be surveilled at all, but between the two I'd choose the one that has the smallest threat of direct impact on my life.

Re:We Chat, They Watch by nyolfen on Thursday May 07, 2020 @10:32PM (#23110818)
> But the key question is -- do you live in or have any connection to China? If not, then I would go with the CCP surveillance because there is no obvious mechanism for such surveillance to harm you directly.

they can spy on your business dealings and potentially find material to blackmail you

Re:We Chat, They Watch by edmundsauto on Thursday May 07, 2020 @11:06PM (#23110998)
Do you feel the same way about, say, Russian surveillance? Would you rather be surveilled by Russia than the US, by the same logic?
Re:We Chat, They Watch by Cyph0n on Thursday May 07, 2020 @10:38PM (#23110856)
> But the key question is -- do you live in or have any connection to China? If not, then I would go with the CCP surveillance because there is no obvious mechanism for such surveillance to harm you directly.

Tell that to the forcibly disappeared political dissidents, or to the Uyghurs who are being "re-educated" as we speak.

And remember, even if you're not connected to China now, that can always change in the future.

Re:We Chat, They Watch by throw37543 on Friday May 08, 2020 @01:44AM (#23111751)
US military uses meta data for drone strikes,

> In 2014, former CIA and NSA director Michael Hayden said in a public debate, “We kill people based on metadata.”

> According to multiple reports and leaks, death-by-metadata could be triggered, without even knowing the target’s name, if too many derogatory checks appear on their profile. “Armed military aged males” exhibiting suspicious behavior in the wrong place can become targets, as can someone “seen to be giving out orders.” Such mathematics-based assassinations have come to be known as “signature strikes.”

https://www.rollingstone.com/politics/politics-features/how-...

Re:We Chat, They Watch by cyphar on Thursday May 07, 2020 @10:52PM (#23110932)
I'm not sure I see where we're disagreeing. Yes, if you have a connection to China then you should opt to evade CCP surveillance and there are many CCP policies which are awful towards groups in China. That's what I said.

My point is that if you have a connection to the US (as all 5-EYES and allied countries do), then today that has a more direct impact on your life than any theoretical future risk that the CCP will be able to have a direct impact over your life. The premise of this discussion is that you have to choose one or the other. I am well aware of the massive threat that is retroactive surveillance, which is why I would choose neither (obviously).

> Tell that to the forcibly disappeared political dissidents, or to the Uyghurs who are being "re-educated" as we speak.

Those are all people who have direct connections to China in some respect, and what has been done to them are all horrific human rights abuses. However, I don't see what that has to do with what I said.

Re:We Chat, They Watch by Cyph0n on Thursday May 07, 2020 @11:16PM (#23111063)
If you only consider the direct, personal impact on you as an individual with no current or future ties to China, then sure, the risk is probably lower. However, it is important to note that CCP surveillance is much more intrusive in general.

The point I'm trying to make is that you're not taking into account the fact that your use of CCP-backed services implicitly contributes to human rights and surveillance abuses within China. Once you consider this, I think minimizing the use of these products and services is worth incurring the added "risk" of being surveilled by the Five Eyes.

Re:We Chat, They Watch by elefanten on Thursday May 07, 2020 @10:37PM (#23110854)
In aggregate, the systems of governance and human rights that we endorse for the world will have a direct impact on our lives in the long run.

If you think you're marginally more likely to be arrested and prosecuted for littering because of super secret iMessage collection... why not consider the marginal effects of turning a blind eye to (and contributing to the economic expansion of) an illiberal, anti-democratic power that, in your words, does "far worse to their own people than the US"?

They seem to already be comfortable collecting your data as they please and influencing various levels of your government. What harm could it do to enthusiastically profile yourself for them?

Re:We Chat, They Watch by cyphar on Thursday May 07, 2020 @11:15PM (#23111049)
I'm not endorsing, nor turning a blind eye to China's government. I was responding to a comment which was only critising China, while arguing that the US has all of these protections and thus was effectively endorsing the US government (to the point of saying that they prefer US government surveillance). I on the other hand, do not endorse the vast majority of the US government's actions, hence the criticism.

It's a bit silly to require every comment which critises the US to also have to include a disclaimer that "yes, I also think China/Russia/other-enemy-of-the-US is bad".

> They seem to already be comfortable [...] and influencing various levels of your government.

I'm really not sure what you're referring to. If you're talking about the Australian government, I'm not aware of any substantial evidence that the CCP has actually influenced our government. Our government is friendly with China and does many things against the interests of the public as a result, but there is far more evidence of just ordinary domestic corruption.

I will also point out that there is strong evidence that the US (in particular, the CIA) effectively helped facilitate a soft-coup in Australia in 1975 (in response to Menzies' threat to close Pine Gap because the US lied about what it was used for). Oh, and the CIA offered $24m of laundered money to the Opposition for that election in order to help them win -- if only there was a word to describe that...

So if we're going to point-score about foreign influence in the Australian government -- the US literally replaced our prime minister in a (to quote Victor Marchetti, a former CIA officer) "kind of Chile coup". But I'd love it if nobody interfered with other countries' democratically-elected governments.

Re:We Chat, They Watch by kyuudou on Friday May 08, 2020 @12:04AM (#23111278)
"Australia started preparing — in 2008?

The United States is not the leader in this process. It’s a kind of follower because the first government that publicly declared that China has to be contained was Australia’s government.

The government of Australia in 2008 had already issued a white paper clearly stating that if we do not contain China, if our allies don’t contain China, then even Australia will become a Chinese colony.

So the Australian government had already taken a clear position. We have a choice: we either contain China or we become a Chinese colony.

Then, in 2011, just immediately after the tsunami and earthquake, [Australian] Prime Minister Gifford came to Tokyo. She made a little trip up to Fukushima when she arrived, just to show she is not afraid, and then she gave a speech in Tokyo, saying very clearly that Australia and the United States, Japan, have to cooperate to hold back China.

At that time, the prime minister was Mr. Kan, and Mr. Ichiro Ozawa was a very influential politician. Ozawa believed in containment.

So, the Australian prime minister comes to Tokyo and tells the Japanese: “Get up. Deal with this issue. Face China.”"[1]

I haven't vetted any of this but FYI.

[1]http://japan-forward.com/asias-next-page-india-japan-must-sh...

Re:We Chat, They Watch by wolco on Friday May 08, 2020 @12:14AM (#23111331)
Why can the governor general replace a prime minister who has a majority?

Why did the citizens reward and vote in the party who pulled those election tricks.

Why would you blame the US but not bother to change the laws? This can happen again.

Re:We Chat, They Watch by cyphar on Friday May 08, 2020 @02:48AM (#23112067)
> Why can the governor general replace a prime minister who has a majority?

It's one of their constitutional rights. Their purpose is to act as a surrogate for the Head of State (currently Queen Elizabeth II) and the role was designed to mirror the process of the UK's Head of State -- the Queen picks her ministers and in theory doesn't need to choose the leader of the party with the largest number of seats.

Do I think it's a system that should be changed? Yes, but this is complicated by the need for a mechanism for double-dissolution (which cannot be automatic because it could then just be gamed to re-trigger elections).

> Why did the citizens reward and vote in the party who pulled those election tricks.

As is usual, propaganda. The laundered $24m wouldn't have been used to buy toilet paper.

> Why would you blame the US but not bother to change the laws? This can happen again.

Given that the US triggered and orchestrated the constitutional crisis in order to further their own foreign policy (which was confirmed by President Jimmy Carter to have been the case when he vowed that the US wouldn't do it again), I think it's entirely fair to blame the US.

In order to change the role of Governor-General you'd need a constitutional amendment. To say that it's effectively impossible to get a constitutional amendment passed in Australia is an understatement (only 8 amendments have been passed, out of 44 attempts in the past ~120 years -- and most of those were passed soon after Federation). One of those failed amendments was to switch Australia to a republic model which would've replaced the Head of State and Governor-General with a President -- but the overall set of rights given to the President would've been the same.

It should also be noted the inclusion of double-dissolution in our Constitution was somewhat controversial at the conventions during drafting, but was eventually agreed to be vital if the Senate was to have the powers it currently has. So we would need some mechanism to avoid deadlocks, and the lack of obvious alternative solutions to this problem results in most proposals just keeping the existing system but changing how the Head of State and Governor-General are elected.

Re:We Chat, They Watch by turnipla on Thursday May 07, 2020 @10:09PM (#23110661)
> extremely engaged with and integrated into the global system, beholden to Law and a robust court system

Uhm yeah but countries do nothing when Russia annexes Crimea, what do you think they’d do if the US simply spies on them? Absolutely nothing. It’s literally happening right now and it’s public knowledge and “it’s just a matter of national security.” Case closed.

Re:We Chat, They Watch by Silhouette on Thursday May 07, 2020 @10:13PM (#23110686)
This depends on your point of view, of course. If you're a US citizen with US legal protections and representatives in US government and access to US lawyers, you might find that reassuring. From the outside, the picture of the modern US is not nearly as pretty.
Re:We Chat, They Watch by throw37543 on Friday May 08, 2020 @01:42AM (#23111738)
I would prefer the country that I don’t live in and doesn’t have authority over me to have this data.
Re:We Chat, They Watch by namelosw on Thursday May 07, 2020 @09:28PM (#23110432)
For me, this narrative seems to remind people don't over trust iMessage and WhatsApp, instead of "why don't you use Wechat they are not different anyway".

All the westerners I know in China don't send sensitive information through Wechat. It's just good to have a low trust stance by default.

Re:We Chat, They Watch by SiVal on Thursday May 07, 2020 @10:12PM (#23110681)
I totally agree. When you employ lossy compression to reduce a multidimensional assessment of degree and kind of risk to a single bit ("Do any potential risks exist, yes or no?") you are deleting almost all information that can be used for risk assessment. Presumably you would do so either because you genuinely think there is only one bit worth considering or you prefer others not think about the other bits.
Re:We Chat, They Watch by ColanR on Thursday May 07, 2020 @09:37PM (#23110476)
I think the assumption behind your claim of false equivalency is exactly what the parent comment wanted to discuss.

You say the security failings of iMessage and WhatsApp pale in comparison to WeChat; I agree with parent comment and ask - in light of PRISM etc. - on what grounds can you say we should not be just as suspicious?

Re:We Chat, They Watch by ivalm on Thursday May 07, 2020 @10:00PM (#23110617)
Whether or not compromised, I am sure my messages on iMessage are not used to train censorship applications by the NSA. Messages on WeChat are used for censorship.

I also, separately, think that in aggregate Apple has incentives to make iMessage secure. While Tencent has incentives to share WeChat data with CCP.

These are among many reasons why the comparison was false equivalence. The world is not just black and white “secure vs not secure.”

Re:We Chat, They Watch by TaylorAlexander on Thursday May 07, 2020 @10:10PM (#23110671)
> I am sure my messages on iMessage are not used to train censorship applications by the NSA

What basis do you have for this certainty?

Re:We Chat, They Watch by elefanten on Thursday May 07, 2020 @10:23PM (#23110746)
To your question: Relative transparency and relative accountability of the governments in question.

But your question is by nature setting up a false comparison. There is no observed censorship apparatus in place in the US. You can always pose "what if" scenarios about super classified efforts, but functionally there is no active system in place.

Compare this to the vastly-resourced, all-encompassing one operated openly and enthusiastically by the CCP.

Re:We Chat, They Watch by boomlinde on Friday May 08, 2020 @09:47AM (#23114808)
Short of absolute transparency and absolute accountability, you can only be relatively certain, i.e. not certain.
Re:We Chat, They Watch by ivalm on Saturday May 09, 2020 @03:33PM (#23127654)
But not all “not certain” are created equal. After all, if you apply a sufficiently strong threshold nothing is certain.
Re:We Chat, They Watch by ivalm on Thursday May 07, 2020 @10:45PM (#23110889)
On the basis that there is no automatic censorship of user content shown to me via iMessage. I am highly certain that my friends can send me arbitrary (within technical reason) text and images and not get censored. This is not the case with WeChat in China right now.

Given societal norms I think there is a strong expectation that my iMessages will not be censored in the near future either.

This means there is little incentive for NSA to train and develop an actionable automatic censorship application.

Again, this is true even if they intercept, decode, analyze, commit physical action on the basis of the analysis, and store every one of my messages.

Re:We Chat, They Watch by TaylorAlexander on Thursday May 07, 2020 @11:12PM (#23111025)
Ah, sorry, I erroneously read "censorship" as "surveillance".

I suppose there is not really the same kind of overt deployed censorship in the US like there is in China. I do personally think that the NSA somehow gets most messages sent in the US, but I have no idea what they would do with it or if that hypothesis is reasonable.

Re:We Chat, They Watch by tjpnz on Friday May 08, 2020 @09:00AM (#23114348)
Just having it on your device is a security risk in itself.
Re:We Chat, They Watch by pengaru on Thursday May 07, 2020 @09:25PM (#23110416)
> This narrative of false equivalency is dangerous, IMO.

What's dangerous is convincing yourself that proprietary systems won't betray your trust.

Re:We Chat, They Watch by adminprof on Thursday May 07, 2020 @09:27PM (#23110428)
That's not what the parent post said, or inferred. Don't put words in others' mouths please.
Re:We Chat, They Watch by pengaru on Thursday May 07, 2020 @10:36PM (#23110839)
> That's not what the parent post said, or inferred. Don't put words in others' mouths please.

I thought it was clear those words came from my mouth.

Re:We Chat, They Watch by IncRnd on Thursday May 07, 2020 @11:12PM (#23111030)
You misread your parent post. Bgorrman didn't say that WeChat being insecure means that iMessage and Whatsapp are insecure. Bgorrman questioned if we have reason to believe that iMessge and Whatsapp are more secure than WeChat.

A implies B & C is not the same as asking whether B & C share the same qualities as A.

You actually created a strawman in order to say that your parent had a false equivalence.