News for hackers. Stuff that matters.
Re:EU Draft Council Declaration Against Encryption [pdf] by Arathorn on Sunday November 08, 2020 @03:41PM (#25028797)
https://matrix.org/blog/2020/10/19/combating-abuse-in-matrix... is our attempt at Matrix to spell out what a catastrophic idea it is to backdoor end-to-end encryption (and to provide an alternative proposal in the form of using decentralised reputation to mitigate abuse. We're kicking decentralised reputation work off in earnest tomorrow, so watch this space to see how it goes).

I guess we'll be weighing in on the EU proposal as well as the 7-eyes one.

Re:EU Draft Council Declaration Against Encryption [pdf] by part1of2 on Sunday November 08, 2020 @04:49PM (#25029396)
What about proposing encryption as an EU human right? Has that been attempted?
Re:EU Draft Council Declaration Against Encryption [pdf] by feanaro on Sunday November 08, 2020 @04:53PM (#25029432)
I don't know whether this has been tried before, but it is definitely the right move. The governments should be busy fighting and trying to shut down our proposals and not the other way around.
Re:EU Draft Council Declaration Against Encryption [pdf] by gcpwnd on Sunday November 08, 2020 @06:59PM (#25030226)
Without public pressure it is not going to happen. German politicians have been positive towards this move recently (althought without mentioning it is already in progress). Sadly politics think it is the easiest solution to counter torrorism.
Re:EU Draft Council Declaration Against Encryption [pdf] by harha on Monday November 09, 2020 @02:50AM (#25032314)
While at the same time these governments fail to properly use the information they have and are able to gather through traditional intelligence work properly to avoid the type of attacks they claim putting up backdoors will prevent.

Most recently last weeks attack in Austria could have been avoided if the information the authorities received from a neighboring country of an attempt to purchase weapons by the attacker would have lead to actions. (I’ll try to find a link, apparently they had months to process and act)

So I think this makes the situation more unsafe in two ways - back doors will lead to all sorts of issues from leaking private communication to impersonation and authorities still don’t take responsibility and fix their processes so they can do their jobs.

Re:EU Draft Council Declaration Against Encryption [pdf] by harha on Monday November 09, 2020 @05:53AM (#25033454)
Too late to edit my previous post, but here is the article:

"Fejzulai is also believed to have travelled to neighbouring Slovakia in July accompanied by another man, where he attempted to buy ammunition suited to the weapons he used in the attack, but the sale reportedly fell through after he failed to produce a firearms licence.

Slovakian authorities are said to have informed their Austrian counterparts at the time. The men travelled in a car registered in the name of the mother of an Islamist known to police."

https://www.theguardian.com/world/2020/nov/04/police-investi...

Re:EU Draft Council Declaration Against Encryption [pdf] by daniellarusso on Monday November 09, 2020 @06:35AM (#25033698)
In the US, most states allow you to order ammo online or via mail order without any license, and shipped to your home.
Re:EU Draft Council Declaration Against Encryption [pdf] by harha on Monday November 09, 2020 @07:18AM (#25033960)
In Europe this is highly irregular, and it did raise a bunch of red flags, as it should.

Unfortunately no actions were taken, there seem to be communication issues within and across the ministries involved.

As long as this isn’t fixed, more data won’t help, quite to the contrary it might tie up resources even further.

Re:EU Draft Council Declaration Against Encryption [pdf] by vbezhenar on Monday November 09, 2020 @05:39AM (#25033367)
They are either stupid or they don't care about terrorism. It's very easy to develop simple encryption scheme. It could be implemented by any half-competent developer. And I'm sure that global terrorists have enough money and people to make it happen. So terrorists won't care about this law. They'll switch from Telegram to Terrorgram and that's about it. But global spying over citizens will be achieved. I'm sure that politicians are just envy over China and want to replicate their measures. Many countries already replicate Great Firewall to some extent. Now they want to implement a global surveillance to strengthen their powers and prevent any kind of riots. That's terrorists they care about.
Re:EU Draft Council Declaration Against Encryption [pdf] by brabel on Monday November 09, 2020 @07:30AM (#25034057)
> I'm sure that politicians are just envy over China and want to replicate their measures.

China has the same goal as the Western powers have: to be able to keep spying on anyone they deem enemy of the state.

The difference is who they define as enemy of the state. In China, that includes pretty much anyone that criticises the Government, as well as what they see as hostile nations (probably the USA, maybe UK, which openly call China their enemies mostly without real provocation, and perhaps Japan due to its closeness to the US and its past of barbarities committed during the occupation of nearly half of the Chinese territory).

In most western democracies, the enemy would be terrorists (they claim) and, as we now know, pretty much any other Government, ally or not... and that's what we currently know, there is probably a much wider reach still that we may never know for sure... the Snowden leaks show that they will collect mass surveillance not only on foreign heads of state, but on their own populations without any restrictions, just in case they need it later. Given that, I am not even sure China actually has more surveillance in place than the USA and the UK, for example. It's a huge disappointment for anyone thinking the western world holds the moral ground, we who live here need to get our Governments understand we will not accept this!

Europe and some developing countries did not really react when it was revealed the US was mass-spying on its Government officials because they obviously are doing the same, they just didn't get caught in the same way yet. The people behind all this spying believe they are doing good as they're keeping world peace. I think they do the opposite: because other governments' counter-intelligence probably know more or less who is doing what against them, they're kept in a constant state of readiness for conflict. True world peace can only come when there's mutual trust between countries... While everyone spies on everyone else, we'll continue to live in a world on the brink of WW3. You think WW3 is impossible? Well, read about WW1 and how basically no one expected it at all. Circumstances today are even more heated than at the time WW1 broke out. Funnily enough, the only thing that's holding WW3 back is the nukes behind the big armies which make full-on conflict a very uncomfortable prospect indeed.

Re:EU Draft Council Declaration Against Encryption [pdf] by feanaro on Monday November 09, 2020 @02:50AM (#25032312)
Public pressure rarely materialises spontaneously, out of a vacuum. For it to materialize, someone has to rally for it. A manifesto needs to be written, the goals written down and elaborated. It has to be pushed into the media.

It's not easy, but it's the only thing that will work.

Re:EU Draft Council Declaration Against Encryption [pdf] by freeflight on Monday November 09, 2020 @02:32AM (#25032206)
Privacy is already a UHR according to UDHR article 12 [0]

The problem with applying this is that the violation of privacy is not arbitrary, from the draft:

> Law enforcement and judicial authorities must be able to access data in a lawful and targeted manner

So this is framed as an matter of lawful and targeted intercept, not blanket bulk access, like pretty much all of the mass surveillance creep.

[0] https://www.un.org/en/universal-declaration-human-rights/

Re:EU Draft Council Declaration Against Encryption [pdf] by phkahler on Monday November 09, 2020 @11:12AM (#25036240)
>> Law enforcement and judicial authorities must be able to access data in a lawful and targeted manner

As is the case everywhere, they claim to want lawful access. In reality that's a minor point, what they really want is access to information without the knowledge of its owner. They're OK with needing approval or getting a warrant to read your email just as long as it's some 3rd party granting access so you won't know. Otherwise just get a warrant for Alice and Bob's email and compel them to decrypt it. No new laws or systems are actually required for that.

Re:EU Draft Council Declaration Against Encryption [pdf] by StanislavPetrov on Monday November 09, 2020 @09:49PM (#25042391)
>They're OK with needing approval or getting a warrant to read your email just as long as it's some 3rd party granting access so you won't know.

Of course nobody will ever examine the warrants or the approval process to ensure that "lawful access" is only granted when even the minimal evidentiary standards they require are met. And if they do someday examine those warrants, and find out that they are riddled with falsehoods and inaccuracies that resulted in unlawful spying, it will all be swept under the rug and nobody responsible will be held to legal account - as we have seen in the US.

https://www.npr.org/2020/03/31/824510255/justice-department-...

Re:EU Draft Council Declaration Against Encryption [pdf] by phkahler on Tuesday November 10, 2020 @07:35AM (#25045257)
>> Of course nobody will ever examine the warrants or the approval process to ensure that "lawful access" is only granted when even the minimal evidentiary standards they require are met.

Yet another reason they dont want to serve warrants directly on individuals. If people know it's happening they'll question it and make public anything corrupt in the process.

Re:EU Draft Council Declaration Against Encryption [pdf] by Cthulhu_ on Monday November 09, 2020 @03:25AM (#25032551)
As it should, but who will verify it's only used in that way? Who watches the watchmen? Snowden revealed that the watchmen (NSA) are scooping up all data they can find, and that they have easy access to big internet companies' data (and they're not allowed to mention your data was accessed, even if no charges were made).
Re:EU Draft Council Declaration Against Encryption [pdf] by Shivetya on Monday November 09, 2020 @05:52AM (#25033449)
Well that is the crux of the issue, how much do you trust your government and what are your options in supporting change. This may require a level of involvement in politics that is more time consuming than most want to expend or can.

This means if not actively supporting a candidate or current representative who shares your views that you instead convince them your view is worthwhile. If not actively finding one who does. Then even once that is accomplished you likely will need to be involved in writing to other representatives as well and coordinating with similarly minded groups across your country.

Politics is all about the networking to get enough voices to be heard and for something as arcane as encryption; and yes it is arcane for most; will not have as many groups focused on it. So your work is cut out for yourself in finding such groups or forming one.

in the US we have EFF and others; I am found of cato but many here do not understand libertarians. the truly sad part is most people really would be happy living in a police state as long as you don't call it one. they don't recognize how they could be in one because their view of what a police state is very heavily influenced by the media and even hollywood. most of what hollywood presents is truly exaggerated dystopian types that are borderline absurd but in truth it is the slow chipping away if not giving away of rights that does the same

Re:EU Draft Council Declaration Against Encryption [pdf] by marcus_holmes on Monday November 09, 2020 @07:18AM (#25033962)
This. It gets framed as "encryption = child abuse" and anyone who supports private encryption is obviously a pedo.

There doesn't appear to be an emotional argument the other way - I guess "so you're happy with random police officers[0] browsing your nudes, then?".

It needs to be framed as an emotional argument, because that's what cuts through to the audience these days. Only HN is interested in logical discussions ;)

[0] Actually, not even police officers - there is always an escalation of government departments able to access data that was originally captured to prevent serious crime.

Re:EU Draft Council Declaration Against Encryption [pdf] by JumpCrisscross on Monday November 09, 2020 @10:18AM (#25035622)
> so you're happy with random police officers[0] browsing your nudes, then?

Your kids’ photos.

Many people don’t have nudes on their phones. Most people do have photos of their kids and know their kids have sensitive photos of themselves. “Think of the children” can be flipped if you can get the public suspicious of spooks.

Re:EU Draft Council Declaration Against Encryption [pdf] by foldr on Monday November 09, 2020 @10:54AM (#25036030)
>I guess "so you're happy with random police officers[0] browsing your nudes, then?".

I agree with your point, but I think a lot of people aren't actually too worried about the specific case of random police officers seeing their nude selfies.

Re:EU Draft Council Declaration Against Encryption [pdf] by nitrogen on Monday November 09, 2020 @12:22PM (#25037096)
It's hard to convey the idea that a real person is behind the faceless snooping, but usually people don't want a real person looking at their private info. "Do you want the cop who pulls your daughter over for forgetting to put the new sticker on her license plate to be able to look up all her beach photos during the stop?"
Re:EU Draft Council Declaration Against Encryption [pdf] by stjohnswarts on Monday November 09, 2020 @10:43PM (#25042624)
Cops want to be able to see everything. I don't think it comes necessarily from want to see nude in particular. Government likes power, the more they get, the more they want. That includes cops. They can't think beyond their own mind often. Most people would probably (at the beginning) use backdoors responsibly, but when it becomes mundane they will use it all the time and without compuncture. This leads to power grabs and politicization. If it's not an option at all, it helps a lot.
Re:EU Draft Council Declaration Against Encryption [pdf] by marcus_holmes on Tuesday November 10, 2020 @09:12AM (#25046092)
This. Hence the proliferation of government access to CCTV footage that was originally collected for "serious crime" only.

It'll start out with "we only need to break your e2e encryption for serious crime cases", but in 10 years your local council will be breaking into your dm's to see if you used the right recycling bin.

Re:EU Draft Council Declaration Against Encryption [pdf] by stjohnswarts on Monday November 09, 2020 @10:40PM (#25042616)
I appreciate libertarian ideas about privacy, freedom to own weapons, speech, religion, etc. I just don't agree with them a whole lot on economic issues, but they have personal freedom down pat. I think the point about government isn't that I'm so worried about the government --currently--, but I know government almost never gives something back that they take away. In this case it's privacy. Hopefully the EU government (or at least the members of the EU individually) will realize this is an autocratic power grab and doesn't make anyone safer. You'd think they'd have had enough with dictators and autocratic governments knowing everything you do given what happened in WW1 and WW2
Re:EU Draft Council Declaration Against Encryption [pdf] by Zenst on Sunday November 08, 2020 @05:21PM (#25029660)
I'd of thought that Article 8 of human rights would encompass this.

https://www.equalityhumanrights.com/en/human-rights-act/arti...

Re:EU Draft Council Declaration Against Encryption [pdf] by int_19h on Monday November 09, 2020 @12:03AM (#25031626)
That's right to privacy, not right to encryption specifically. And governments cracking down on encryption will, of course, claim that it is a matter of national security, and is a proportionate action to fight terrorism, child pornography, and other crimes.
Re:EU Draft Council Declaration Against Encryption [pdf] by Cthulhu_ on Monday November 09, 2020 @03:27AM (#25032564)
Just like phone taps and listening devices. That said, those should only be employed if there is reasonable suspicion; iirc they still need a judge to approve employing these tools.

The fear with this is that they will try and catch all messages and retroactively look for bad actors. And of course that the backdoors will be discovered and abused by bad actors.

Re:EU Draft Council Declaration Against Encryption [pdf] by stjohnswarts on Monday November 09, 2020 @10:45PM (#25042634)
They need a judge currently. However in the USA it's a rubber stamp and warrants are almost never not given. It's around 98-99% are granted in FISA courts and it's a total joke.
Re:EU Draft Council Declaration Against Encryption [pdf] by posterboy on Monday November 09, 2020 @12:47PM (#25037383)
> iirc they still need a judge to approve employing these tools.

that's a weak point, not a strength, in various scenarious

a) Agency XYZ files a motion to have a member of their legal team promoted to judge at the respective courts. Motion accepted, judge signs off on all requests

b) judge simply doesn't care for privacy, if it hinders the boys at work, signs off on it, gets appealed later, slap on the wrist, no consequences, learn from mistakes, rinse and repeat, obey formal obligations this time

c) Police and Attorneys construct evidence to construe threats, judge Joe Shmoe believes it, signs off on it

Besides, the whole system has been found to hinder investigation. The need for a warrant in night time emergencies is already relaxed in some countries, far as I know.

d) More over, the judge is bound by law, so you can trust as much confidence in the judge as you want. Once precedent is established at federal court level, because of your we can trust the judges, it will be a slippery sloapy down-wards spiral for more invasive access for less serious matters -- if it isn't already. This is effectively the federal judge signing off on all warrants, subject to veto by a lower judge, what can be escalated back up the chain due to the power of attorney. Vice-versa, the state attorney is bound by executive orders from the ministry -- as was surely the case after Snowden ("no evidence") -- which has been repeatedly red flagged by EU reports (that are otherwise quite benign).

The defense is the defense attorney. The precedent is frequently established because a single lawyer fails to make a case. Subsequent cases are only accepted on special occasion, otherwise declined due to precedent. Subsequently there is only limited control over a lower court's decision. The guideline cited in all commentaries on German constitutional law is, when the decision looks plain wrong. It is of course a little bit more involved in detail, but the principle is not a judge but one single judge gets to decide. Which lays a whole lot of preassure on them. Of course you get a second chance pretty much unconditionally, but that's a concern for later only if something was found, in which case the chances for an appeal on principle grounds are obviously against you. Eitherway a due notice remains at the secretion of the court (§101b (6) StPO), which may mean the judge presiding over the chamber, or the court, I'm not sure.

An ironic corralary is that, of course they will at least take a look, which has to sound but cynic in this scenario.

Wikipedia lists several points of criticizm against the new president of the Bundesverfassungsgericht (SCoG) https://en.wikipedia.org/wiki/Stephan_Harbarth

> The fear with this is that they will try and catch all messages and retroactively look for bad actors.

Said Stephan Harbarth was in parliament and worked on a law for collective mass surveillance, which was subsequently called by the supreme court, in which he later went on to lead. Which is incomprehensible, because I was under the impression chief justices needed to climb the ladder first (ref, probably: BVerfGG).

Very similar, good ol' Mr. Biden signed responsible in 1991 on the American bill that is equivalent to the act under discussion here: https://www.congress.gov/bill/102nd-congress/senate-bill/266 (see Title II, SubSection B: Electronic communication) not saying much at all.

This is entirely dystopic. The Bad Actors I have in mind are the good guys, I don't want to see the bad guys.

Re:EU Draft Council Declaration Against Encryption [pdf] by andor on Sunday November 08, 2020 @06:05PM (#25029936)
I don't think that would help. Most rights are not absolute and can be restricted by other laws. For instance:

* Freedom of movement is clearly restricted for people on a jail sentence.

* We have secrecy of communication but also lawful interception.

Re:EU Draft Council Declaration Against Encryption [pdf] by Uke on Monday November 09, 2020 @03:08AM (#25032444)
perhaps even "lawful" interception shouldn't be lawful after all?
Re:EU Draft Council Declaration Against Encryption [pdf] by neolog on Sunday November 08, 2020 @06:21PM (#25030029)
Sure but it could still help.
Re:EU Draft Council Declaration Against Encryption [pdf] by raxxorrax on Monday November 09, 2020 @06:18AM (#25033586)
We also have unlawful state interception as evidenced by leaks from Snowden and multiple others. I think states currently should not get any concessions from secure communication platforms.
Re:EU Draft Council Declaration Against Encryption [pdf] by josho on Sunday November 08, 2020 @05:33PM (#25029742)
Maybe generalize that further, a right to privacy.
Re:EU Draft Council Declaration Against Encryption [pdf] by feanaro on Sunday November 08, 2020 @05:37PM (#25029759)
Perhaps, but see Article 8 which is cited in your sibling comment. It already contains a right to privacy.

But the term privacy is not very rigid. It can be taken and interpreted in various ways. It's certainly a good thing to mention it, but encryption needs to be mentioned explicitly, spelled out even.

There cannot be any room for interpretation: citizens have a right to encrypt their communication, end-to-end with their intended party.

Re:EU Draft Council Declaration Against Encryption [pdf] by JoshTriplett on Sunday November 08, 2020 @05:59PM (#25029897)
That still leaves too much room for interpretation (namely, quibbling over the definitions of "encrypt" or "end-to-end").

People have a right to encrypt their communication, end-to-end with their intended participants, such that no one other than their intended participants can decrypt any aspect of their communication.

Re:EU Draft Council Declaration Against Encryption [pdf] by feanaro on Sunday November 08, 2020 @06:17PM (#25030002)
I agree. Your expanded definition is better. Now let's flesh it out into a full-fledged proposal, put it up on a website and disseminate it among the people. Let's get it into the parliaments as something that the parliament members have to discuss and finally either accept or reject.

Let's give them a good fight.

Re:EU Draft Council Declaration Against Encryption [pdf] by justinclift on Sunday November 08, 2020 @11:07PM (#25031368)
> Let's give them a good fight.

Possibly the wrong goal.

How about "Let's win." instead? :)

Re:EU Draft Council Declaration Against Encryption [pdf] by JoshTriplett on Monday November 09, 2020 @03:02PM (#25039211)
I'm all for it, but I don't think posting it on a website is going to suffice. Get the EFF behind it, get others experienced with lobbying behind it, then it might get some momentum.
Re:EU Draft Council Declaration Against Encryption [pdf] by feanaro on Monday November 09, 2020 @02:52AM (#25032330)
You're right. You can tell this topic makes my blood boil, unfortunately.
Re:EU Draft Council Declaration Against Encryption [pdf] by anticensor on Monday November 09, 2020 @01:47AM (#25032029)
What about this tech-agnostic version: citizens have a right to deprive the unrelated citizens from accessing their communications using any means. Note that this includes E2E encryption, whisper, face-to-face private conversation, rubberhose encryption, noise insertion and steganography all in one.
Re:EU Draft Council Declaration Against Encryption [pdf] by feanaro on Monday November 09, 2020 @02:58AM (#25032367)
I like this "right to deprive" wording and toyed with it myself. Reminds me of the way DMCA anti-circumvention works. Perhaps we could call this the anti-snooping right.
Re:EU Draft Council Declaration Against Encryption [pdf] by anticensor on Monday November 09, 2020 @07:07AM (#25033898)
Anti-snooping would be much more useful than anti-circumvention in fact.
Re:EU Draft Council Declaration Against Encryption [pdf] by kebman on Monday November 09, 2020 @04:03AM (#25032812)
Some idiot will cut off someones ears and then say to the police that, "it was to deprive him of accessing our communications by using any means. It says so in the law, Sir!"
Re:EU Draft Council Declaration Against Encryption [pdf] by anticensor on Monday November 09, 2020 @05:28AM (#25033310)
It would still be criminal on the grounds of breaking the bodily integrity, which is an infringement of someone else's life and health, which is normally considered more protected than privacy.
Re:EU Draft Council Declaration Against Encryption [pdf] by kebman on Monday November 09, 2020 @03:08PM (#25039275)
I think you underestimate the amounts of rain dance magic lawyers can produce with wording like "using any means." ;)
Re:EU Draft Council Declaration Against Encryption [pdf] by Dahoon on Sunday November 08, 2020 @05:58PM (#25029883)
We already have a right for privacy in the EU. That's why the EU court has declared mass logging of meta data by ISPs and mobileproviders illegal.
Re:EU Draft Council Declaration Against Encryption [pdf] by JumpCrisscross on Sunday November 08, 2020 @09:23PM (#25030840)
> What about proposing encryption as an EU human right? Has that been attempted?

Rights conflict. Every new right influences the others. It is easy to shorthand every problem to a human rights declaration. But just like the right to bear arms, that can have unintended consequences.

Re:EU Draft Council Declaration Against Encryption [pdf] by part1of2 on Sunday November 08, 2020 @10:38PM (#25031241)
You did not define a conflict or the unintended consequence here
Re:EU Draft Council Declaration Against Encryption [pdf] by tempestn on Monday November 09, 2020 @12:10AM (#25031650)
The unwanted consequence of the US second amendment is that the US has one of the highest gun death rates in the developed world.
Re:EU Draft Council Declaration Against Encryption [pdf] by KMag on Monday November 09, 2020 @01:26AM (#25031944)
The U.S. certainly has a problem with gun violence, but I fear gun access is the proximal problem while our cultural relationship with violence and revenge is the root of the problem. (See also death penalty support, recent violent protests in Oregon and Washington, etc.) Note that the areas with very high rates of legal gun ownership aren't the hotspots of gun violence [0]. Switzerland and several other Eurpean countries have very high rates of gun ownership, but low rates of gun violence. Certainly, fixing a sick culture is more difficult than reducing gun access, but I think long-term, we need to figure out how to be a more peaceful and forgiving society, or much of the gun violence will just shift to (granted, much less efficient) knife violence. I think improving America's culture of violence and revenge will also pay mental health dividends. Sometimes you really need a crutch or a bandaid, but it's important not to mistake it for an end-goal solution.

Do any of you have any insights into ways individuals can ensure they at least leave the culture less violent than they found it?

[0] https://www.nytimes.com/2019/07/22/us/gun-ownership-violence...

Re:EU Draft Council Declaration Against Encryption [pdf] by freeflight on Monday November 09, 2020 @02:46AM (#25032288)
> Switzerland and several other Eurpean countries have very high rates of gun ownership, but low rates of gun violence.

They also have vastly stricter gun regulation laws, and while ownership rates are high in some, the US is an extreme outlier and no other country comes even close.

Because nobody in any European country thinks they have a "right" to own a gun, most of them could if they wanted to, but they simply don't want to deal with the hassle that owning a properly regulated firearm entails.

As it should be, owning a deadly weapon is a lot of responsibility that not everybody is up for/actually wants. The importance of that responsibility gets completely lost when firearms are treated like cool toys that everybody should have and exist in abundance.

That's why headlines like "toddler shoots mother" or "dog shoots owner" don't exist in Europe, but are a sad somewhat regular thing out of the US. These toddlers and dogs didn't do that because they watched too much violent media, they did that because the actual owners of the guns where irresponsible individuals and never should have owned one in the first place.

Re:EU Draft Council Declaration Against Encryption [pdf] by jordanbeiber on Monday November 09, 2020 @03:10AM (#25032461)
The fact so many people feel they need a gun for safety is the first and biggest issue IMO.

This is fueled by movies and culture - have the gun in your possession and you’ll automatically win the fight - that was easy!

I’ve read countless comments from Americans that they have a gun to shoot intruders. Statistics telling you there’s a bigger chance someone else will get hurt be damned.

These ideas are have to be fueled by big money is my guess.

Also we humans really like our toys, so I can get that aspect of it. Wanna take my toy? Forget about it.

Re:EU Draft Council Declaration Against Encryption [pdf] by bigbizisverywyz on Monday November 09, 2020 @07:59AM (#25034276)
>The fact so many people feel they need a gun for safety is the first and biggest issue IMO.

And the reason for that is simple - marketing.

Here in Switzerland I basically see no guns unless I go to the shooting club. There's none sold in the shops, there's none advertised in newspapers, tv or on the radio. And there is definitely no gun offered when opening a bank account.

Basically if you want a gun for whatever reason - usually for recreational shooting at the shooting club, then you have to go out and look for it.

In the US I have the feeling that they're marketed as a penis extension, and you're not a proper man unless you shoot things, with the view that you'd be quite happy to project a slug of lead into somebody else at high velocity to prove you're more of a man than they are.

To solve the problem in the US I think you need to ban the advertising - like cigarettes.

Caution: This weapon inflicts pain suffering and death to others. User may be incarcerated for murder if ever used. If in a situation of conflict, gun only increases likelihood of extreme violence - leave at home.

Re:EU Draft Council Declaration Against Encryption [pdf] by KMag on Monday November 09, 2020 @08:49AM (#25034749)
I spent over 30 years in the U.S., mostly in the upper Midwest, and the only gun advertisements I remember seeing were in sporting magazines or in sporting goods stores. I think your perceptions of U.S. gun advertising is either greatly exaggerated, or your experience is from a very different part of the country. Maybe things have changed drastically in the 8 years since I left, but I doubt it.
Re:EU Draft Council Declaration Against Encryption [pdf] by nitrogen on Monday November 09, 2020 @12:46PM (#25037372)
Maybe things have changed drastically in the 8 years since I left, but I doubt it.

I think they have. I've also seen more gun stores opening, with provocative names.

I've no problem with firearms used responsibly for hunting or recreation, but in the very few cases I've seen someone open carrying a handgun (once at a very crowded national park, and once at a residential picnic area, both just this year) it was clear they didn't have a gun to defend themselves (if that were the case you don't need to show it off), but to threaten others. And for defending yourself against wild animals, bear spray is far more effective.

Re:EU Draft Council Declaration Against Encryption [pdf] by KMag on Monday November 09, 2020 @04:56PM (#25040438)
Crazy. How often do you see TV ads for firearms, firearms dealers, or gun shows these days?

I figured that the US just seemed to get crazy around 2012 because I switched to primarily external news coverage of the U.S. when I moved abroad.

Actually, now that I think about it, I think I have seen TV ads for both Remington and Beneli shotguns in duck hunting and fishing shows in the U.S. But, I'm pretty sure I've never seen TV ads for pistols in the U.S., or long guns outside of hunting/fishing shows.

Re:EU Draft Council Declaration Against Encryption [pdf] by agensaequivocum on Monday November 09, 2020 @09:04PM (#25042156)
> but to threaten others.

No. I've open carried. We do not do it to threaten people. There are many reasons to one chooses to open or conceal carry.

Re:EU Draft Council Declaration Against Encryption [pdf] by nitrogen on Monday November 09, 2020 @11:55PM (#25042915)
One of the dudes was wearing a t-shirt with wording that strongly supports my evaluation. But even if you aren't trying to threaten, the visible presence of a deadly weapon (especially a sleek semi-auto as opposed to a revolver) creates a pretty negative "vibe". Note that I'm talking about handguns stuffed into a belt or on a leg holster, not e.g. a hunting rifle or shotgun.
Re:EU Draft Council Declaration Against Encryption [pdf] by NoImmatureAdHom on Monday November 09, 2020 @09:27AM (#25035113)
Agreed, people who aren't in to firearms or firearms-related sports will basically never see an ad for a gun in the U.S. I do think the penis-extension bit gets the gist of much of the marketing that does exist right, though.
Re:EU Draft Council Declaration Against Encryption [pdf] by jordanbeiber on Monday November 09, 2020 @11:30AM (#25036455)
I’d say action movie content serves as massive marketing. American film is stacked with guns. It’s kind of ridiculous.

There have to be money involved.

Re:EU Draft Council Declaration Against Encryption [pdf] by Cthulhu_ on Monday November 09, 2020 @03:30AM (#25032583)
It's the wild west mentality that the US never grew out of. Can't blame them either, given the apparent incompetence of the police.

It's an issue that won't be solved by banning weapons. Educating people (e.g. mandatory background checks, operation and safety training, and safe storage) and solving the underlying problems will work. I mean a lot cite defense from home invasions as the reason to own a gun. Why do people invade homes? If they had a reasonable income and comfortable life they wouldn't have a reason to.

Re:EU Draft Council Declaration Against Encryption [pdf] by agensaequivocum on Monday November 09, 2020 @09:20PM (#25042257)
> mandatory background checks,

This is only effective with a gun registry which gun owners will not accept.

> operation and safety training

Are you required to take civics to vote?

> safe storage

If you simply mean prosecution for being negligent, that's fine. If you mean it has to be in a safe unloaded, that defeats their use for self-defense in the home. It would likely be held unconstitutional.

Re:EU Draft Council Declaration Against Encryption [pdf] by jfk13 on Monday November 09, 2020 @05:06AM (#25033201)
> Statistics telling you there’s a bigger chance someone else will get hurt be damned

Nobody believes the statistics are relevant to them. Statistics are about all those dumb other people; but I'm always the smart, responsible exception.

Re:EU Draft Council Declaration Against Encryption [pdf] by NoImmatureAdHom on Monday November 09, 2020 @09:29AM (#25035139)
As I mentioned elsewhere, I think those urban-legend statistics are probably wrong in aggregate. That said, people do have knowledge about their specific situation that they bring to bear in a valid way. Crazy, violent ex? Yeah, your ratio of chances of using a gun in a way that makes sense to chances of accidentally hurting someone is way better than average.
Re:EU Draft Council Declaration Against Encryption [pdf] by NoImmatureAdHom on Monday November 09, 2020 @09:25AM (#25035079)
I think you're on the mark talking about them as toys for adults. I don't think most people want them because they really fear for their safety without, though the ability to defend oneself may be a bonus. My feeling is mostly it's just a fun hobby and it's also a clear signal of group membership.

I think your claim about there being a higher chance of accidental injury vs. self defense is probably wrong. The issue is a little muddy, but there are only ~800 firearms accidental deaths per year (0.00024% of pop.) and about 50,000 self-defense uses per year (https://www.bjs.gov/content/pub/pdf/fv9311.pdf)

I'm also not convinced about movies. I bet other places have very similar mixes of actual watching and the same selection given the internet.

Re:EU Draft Council Declaration Against Encryption [pdf] by jordanbeiber on Monday November 09, 2020 @01:08PM (#25037645)
You might be right about the injury thing.

I still believe many people see guns as a solution to a problem and on top of that vastly overrate their own abilities in a pressure situation.

If you’ve not trained many many hours in a setting resembling this pressure to a high degree you really have no idea how you’ll react.

It seems really easy in movies!

Can’t speak for the source but first hit on google:

http://features.hollywoodreporter.com/the-gun-industrys-lucr...

Re:EU Draft Council Declaration Against Encryption [pdf] by NoImmatureAdHom on Monday November 09, 2020 @06:39PM (#25041309)
Agree that serious training seems necessary.
Re:EU Draft Council Declaration Against Encryption [pdf] by stjohnswarts on Monday November 09, 2020 @10:49PM (#25042652)
People who would like to take guns away should start working on changing the Constitution. Looking at the current lineup in the Supreme court all I can say is good luck. I totally support a country's choice to de-arm their populace. However I also wish they would quit trying to push their beliefs on the USA as well. Nothing in this world is safe, from driving to work, to walking down a street you don't know, to repelling off a cliff, or parachuting for fun yet no one says "don't do that, let's make it illegal", yet with guns they freak out.
Re:EU Draft Council Declaration Against Encryption [pdf] by agensaequivocum on Monday November 09, 2020 @09:15PM (#25042222)
> This is fueled by movies and culture - have the gun in your possession and you’ll automatically win the fight

No. It's not automatic. But my wife has a much better chance against a 250lb 6ft man with one than without one.

Re:EU Draft Council Declaration Against Encryption [pdf] by jordanbeiber on Thursday November 12, 2020 @03:04AM (#25067589)
That is still assuming a lot of things IMO.

I’d love to see stats on these scenarios... are they common?

Re:EU Draft Council Declaration Against Encryption [pdf] by NoImmatureAdHom on Monday November 09, 2020 @09:39AM (#25035241)
Saying Switzerland has "vastly" stricter gun laws /might/ be true if mushing the U.S. into a whole, but it ignores the very important variations at the state level. Some states have very strict regimes that compare to Switzerland's, and in some you can just walk into a store and buy long guns if you're of age.

I totally agree about the responsibility thing.

Concerning the "dog shoots owner" headlines, you should ignore that sort of thing. Those sorts of incidents are super rare. They hit headlines /because/ they're rare and therefore interesting.

Re:EU Draft Council Declaration Against Encryption [pdf] by freeflight on Monday November 09, 2020 @12:58PM (#25037537)
> Some states have very strict regimes that compare to Switzerland's, and in some you can just walk into a store and buy long guns if you're of age.

Which is exactly why the regulation in the US does not work; Anybody who disagrees with their states particular laws can just cross into another state to get their fix there.

That why any proper regulation needs to happen on a federal level so individual states won't act as a loophole.

> Concerning the "dog shoots owner" headlines, you should ignore that sort of thing. Those sorts of incidents are super rare. They hit headlines /because/ they're rare and therefore interesting.

It's something that should be non-existent, I haven't seen it anywhere else in the world. But only a couple of days ago there was yet another example out of the US [0].

These are the kind of absurd situations that simply do not happen in any other place as other places lack the "firearm saturation" that enables this in the US. So something that should be improbable, still ends up being a regular thing.

[0] https://www.nbcdfw.com/news/local/dog-accidentally-shoots-ow...

Re:EU Draft Council Declaration Against Encryption [pdf] by agensaequivocum on Monday November 09, 2020 @09:09PM (#25042191)
> Anybody who disagrees with their states particular laws can just cross into another state to get their fix there.

If you mean purchase something you cannot buy in your state, that's not true. Interstate handgun purchases are completely banned and long guns can only be sold if the sale complies with both state laws.

Re:EU Draft Council Declaration Against Encryption [pdf] by freeflight on Monday November 23, 2020 @08:06AM (#25186341)
I mean bypassing state-level mandatory background checks by travelling to a state where those are not required for private sales and just buy a firearm there with zero regulation and documentation.
Re:EU Draft Council Declaration Against Encryption [pdf] by jordanbeiber on Monday November 09, 2020 @02:24AM (#25032169)
Personally I believe it’s about individualism vs the collective.

Here in Sweden we’ve seen a horrible development regarding gun violence - easy to chalk up to “immigration” and “soft laws” but in my mind it’s a lot deeper - interesting enough this is at the same time we have a record amount of dollar millionaires in the country.

We used to work as a collective but our economic policies are turning more and more neoliberal and thus individual. This exacerbates the issue of creating a new “class” of citizens already left partly out of the loop of riches.

If we take care of each other in a better way as a collective there’s a chance to turn things around. It’s all about increasing the chance of a good outcome per individual. This is the secret to a lot of the success in northern Europe - if you’re born here chances are great that you’ll get an education and that you live a long and healthy life.

Regarding crime and violence specifically I’ve read a lot about the “group violence intervention” program and a lot of it is about cooperation and taking care of people in a humane way.

Here’s David Kennedy speaking in Sweden where this has been worked successfully:

https://youtu.be/wu00H7eeWVM

In short - don’t be to afraid of taxes, and vote in a manner where money can be spent more wisely. Funneling tax money to havens by way of “entrepreneurs” seems less well spent... problem is that when such a system is set it will want to be conserved - looking at the US and it’s kinda dark over here as well.

All I can do is try to mold my children into caring human beings hoping to influence culture that way.

Re:EU Draft Council Declaration Against Encryption [pdf] by lenkite on Monday November 09, 2020 @04:12AM (#25032875)
Isn't the majority of crime in Sweden committed by migrants ? https://link.springer.com/article/10.1007/s12115-019-00436-8
Re:EU Draft Council Declaration Against Encryption [pdf] by bildung on Monday November 09, 2020 @05:13AM (#25033230)
It appears this study shows that the majority of suspects for crimes are immigrants, which is an important distinction. I have no knowledge about the situation in Sweden, but in Germany there are known statistical problems like immigrants both having a higher chance of becoming suspects ("Tatverdachteffekt") and crimes where an immigrant is suspected are more likely to be reported ("Anzeigeeffekt").

Stastistics about suspects are most commonly used in studies like these because the police, due to the seperation of powers, usually has no or at least less statistics of the actual results of charges.

Re:EU Draft Council Declaration Against Encryption [pdf] by NoImmatureAdHom on Monday November 09, 2020 @09:31AM (#25035161)
I would bet basically anything that inferring "did commit" from "is suspect" works very well in aggregate.
Re:EU Draft Council Declaration Against Encryption [pdf] by bildung on Wednesday November 11, 2020 @08:36AM (#25058247)
"Recent figures show that only 15 percent of all crimes are solved." https://sverigesradio.se/artikel/5399870

That low resolution rate alone introduces a margin of error that is larger than the difference between immigrant and non-immigrant suspects. It is therefore possible that the much higher immigrant suspect rate is entirely a result of biases.

Re:EU Draft Council Declaration Against Encryption [pdf] by nitrogen on Monday November 09, 2020 @12:51PM (#25037430)
This doesn't work numerically if each crime averages more than one suspect.
Re:EU Draft Council Declaration Against Encryption [pdf] by NoImmatureAdHom on Monday November 09, 2020 @06:39PM (#25041305)
This is a good point! I wonder how often that's the case...
Re:EU Draft Council Declaration Against Encryption [pdf] by jordanbeiber on Monday November 09, 2020 @04:23AM (#25032952)
Yes, exactly kind of my point.

I’m not suggesting however that because they are immigrants they commit more crime. Note most violence is committed by 2nd generation immigrants - so they’ve been born here. How’s that for a failure of society...

They are simply people on the outside living surrounded by people leading lives they cannot relate to.

We’ve made it terribly difficult to attain this norm life as well making it even more unrelatable.

Re:EU Draft Council Declaration Against Encryption [pdf] by NoImmatureAdHom on Monday November 09, 2020 @09:33AM (#25035177)
One thing that's great for societal stability is not too much inequality of wealth. Another thing is cultural homogeneity. We're probably seeing both at play in Sweden.
Re:EU Draft Council Declaration Against Encryption [pdf] by jordanbeiber on Monday November 09, 2020 @12:59PM (#25037543)
Young men shooting at each other in the street sure is a culture clash. This culture need to be canceled!
Re:EU Draft Council Declaration Against Encryption [pdf] by depressedpanda on Monday November 09, 2020 @03:42AM (#25032663)
Just to make sure I understand you correctly: You think the strong trend toward more incidents of more extreme violence in Swedish society is because we have more dollar millionaires?
Re:EU Draft Council Declaration Against Encryption [pdf] by bildung on Monday November 09, 2020 @05:47AM (#25033419)
Income inequality universally is a pretty good predictor for violent crime: https://www.economist.com/graphic-detail/2018/06/07/the-star...

As the (still very low) income inequality is rising in Sweden(https://nordregio.org/nordregio-magazine/issues/state-of-the...), it isn't surprising violence rises, too.

Re:EU Draft Council Declaration Against Encryption [pdf] by jordanbeiber on Monday November 09, 2020 @04:17AM (#25032910)
More dollar millionaires, and at the same time more people on the outside, point towards specific type of policies being enacted.

This has been 30-40 years in the making.

Yes - it is related, just as it is in the US.

Re:EU Draft Council Declaration Against Encryption [pdf] by NoImmatureAdHom on Monday November 09, 2020 @09:16AM (#25034989)
I agree with you. I don't have any answers to your question, but it made me think about it. It strikes me as insightful and the right question to ask.
Re:EU Draft Council Declaration Against Encryption [pdf] by NoImmatureAdHom on Monday November 09, 2020 @09:07AM (#25034914)
This is a bit of a hobby interest of mine. While it's possible that your statement is true, I think it misses the point. Gun murders in the U.S. are a very low percentage of deaths (0.39%) and preventable deaths (~1.1%, there's some disagreement about what's "preventable"). This excludes suicides. You may wish to include them if that makes sense given your interests. People love to focus on relative comparisons (e.g., Scotland vs. US), but miss the forest for the trees. Some tiny proportion being 5x some other country's tiny proportion is irrelevent.

If your goal is to prevent untimely, unwanted deaths there are oh so many other ways to apply your resources that will yield orders of magnitude more improvement per dollar / per minute.

People like to pay attention to it anyway for a few reasons. One is that we evolved to think specifically about interpersonal violence (~5-15% of prehistoric deaths, but way more than that for non-old people), which makes us good at luridly imagining interpersonal violence, and so comparatively we're bad at thinking about an early death due to diabetes and therefore bad at caring about it. Another reason is it's a hot-button red team/blue team political issue, so it's not so much about the issue per se but rather whether $OTHER_SIDE gets what it wants or not.

Re:EU Draft Council Declaration Against Encryption [pdf] by JumpCrisscross on Monday November 09, 2020 @01:09AM (#25031883)
Every right reduces the clarity and scope of every other right. This creates grey areas for interpretation by the state.
Re:EU Draft Council Declaration Against Encryption [pdf] by IgorPartola on Sunday November 08, 2020 @10:33PM (#25031212)
So really it wouldn’t be encryption so much as right to have secrets. Because whether I use EDCA or a really strongly in crackable safe, my right to privacy should be a thing?

It sounds like somewhat of a stronger version than the US’s fifth amendment which says that you have a right to privacy unless it has to do with the crime currently being investigated. And come to think of it, encryption is unconstitutional as in because the government can subpoena or obtain a warrant to your information it may not be able to enforce it because of the encryption. So either the government has no right to subpoena or encryption is illegal.

Re:EU Draft Council Declaration Against Encryption [pdf] by shostak on Monday November 09, 2020 @06:03AM (#25033509)
This is incorrect. The fourth amendment gives people the absolute right against "unreasonable search and seizure". This means the police may be granted access to search someone's property by a judge, if they are suspected of a crime. It does not give the government the right to find anything, only to search. Furthermore, the fifth amendment grants people the absolute right to not incriminate themselves. So if you know something (information about where the bodies are buried, passwords for decryption of encryption keys, etc.), you have the absolute right to not divulge that knowledge. So the people here have more rights than the government when a crime is being investigated.
Re:EU Draft Council Declaration Against Encryption [pdf] by IgorPartola on Monday November 09, 2020 @07:29AM (#25034046)
Ah you are correct. But let’s make a physical analogy. If I can make an uncrackable safe in which I put evidence of a crime along with lots of other secrets. The police come to my door with a reasonable search warrant. I tell them I have the key to the safe but will not tell them where it is. They know they have absolutely no way to get into my safe without taking about 100 years and $2 billion. What happens next?
Re:EU Draft Council Declaration Against Encryption [pdf] by Zak on Monday November 09, 2020 @11:02AM (#25036144)
The law isn't entirely settled on the matter, but some rulings so far suggest that the government can compel the surrender of a physical key, but not the disclosure of a combination.
Re:EU Draft Council Declaration Against Encryption [pdf] by IgorPartola on Tuesday November 10, 2020 @06:13PM (#25053374)
So by that definition since my private key is a lot like a combo to my safe, the government cannot compel me to disclose it? That sound like good news.

Also, I guess I am storing all my keys at STL files that get 3D printed and destroyed upon first use. Hello protection from search warrants!

Re:EU Draft Council Declaration Against Encryption [pdf] by shostak on Wednesday November 11, 2020 @12:32AM (#25055769)
It's the password required to decrypt the secret key that you would not need to disclose. They'll likely end up with the encrypted secret key, but no way to access it. That's because the password is something you know, and divulging it could mean self-incrimination.

Courts have ruled, for example, that the police can compel a suspect to put their face or finger up to a phone to unlock it through biometric means, but a suspect cannot be compelled to divulge their PIN. That's why using biometrics, while convenient, is a bad idea.

Re:EU Draft Council Declaration Against Encryption [pdf] by thw0rted on Monday November 16, 2020 @09:25AM (#25111954)
This is also a great example of how you can follow what sounds like logical principles to a completely bonkers end-state. Knowledge is protected but your bodily autonomy is not? Eesh.
Re:EU Draft Council Declaration Against Encryption [pdf] by thayne on Monday November 09, 2020 @12:15AM (#25031676)
> encryption is unconstitutional as in because the government can subpoena or obtain a warrant to your information it may not be able to enforce it because of the encryption

No, you can't subpoena information from someone that doesn't have it. So the government can subpoena the cyphertext, but can't ask for the plaintext if the provider never had access to it.

Re:EU Draft Council Declaration Against Encryption [pdf] by part1of2 on Sunday November 08, 2020 @10:36PM (#25031226)
Wouldn't you want the word 'encryption' to be in the description, so there is no evil solicitor trying to argue about what 'secrets' meant. Or 'the right to confidentiality whenever, where-ever, and with whomever the person pleases'
Re:EU Draft Council Declaration Against Encryption [pdf] by IgorPartola on Monday November 09, 2020 @12:03AM (#25031624)
But I would also not want the method of storage of secrets to become obsolete. The important thing is that I’m able to keep a secret, not how the secret is stored. For example, say quantum encryption comes to be known as “q-store” and is always said to be different from encryption. Now, what does that do to my rights if I move from traditional encryption to quantum algorithms?
Re:EU Draft Council Declaration Against Encryption [pdf] by tripzilch on Monday November 09, 2020 @07:05AM (#25033882)
Well it worked for copyright, we're kinda stuck with it, regardless of how much the we ways we store things have changed.
Re:EU Draft Council Declaration Against Encryption [pdf] by JAlexoid on Monday November 09, 2020 @02:11PM (#25038487)
Privacy isn't secrecy.

That's the argument.

I prefer my conversations to be secret, not just private

Re:EU Draft Council Declaration Against Encryption [pdf] by gfxgirl on Sunday November 08, 2020 @09:35PM (#25030911)
While adding backdoors to encryption is a bad idea my gut sys decentralized reputation is just a bad. Most here know the Black Mirror episode "Nosedive". But it's worse than that, people on different sides of the political spectrum will work to "cancel" people of the other side by working to lower their rep via crowdsourcing. 4chan type groups will do the same for "the lulz", I can even imagine the ransomware people trying to find a way to make bots and "pay us or we destroy your rep"
Re:EU Draft Council Declaration Against Encryption [pdf] by Arathorn on Monday November 09, 2020 @03:20AM (#25032522)
Totally agreed that badly designed rep systems can rapidly descend into Black Mirror territory. In Nosedive for instance the score you get is absolute, while the thing we’re proposing here is entirely relative and subjective. The idea is to empower users to maintain their own view of the world. If a voting ring of idiots conspire to try to trash someone’s reputation... you’d filter out the voting ring from your reputation feeds; it should stand out very clearly. That goes whether it’s bots or humans behaving like bots. Alternatively, you could choose to hang out with that tribe and believe their rep data if you so desired.

We’ve been wargaming through all the various ways this could go horribly wrong (and have a few fun scenarii off the back of it - look for the GPT-3 example below), but on balance it feels a lot better than the Black Mirror episode where encryption is fatally weakened...

Re:EU Draft Council Declaration Against Encryption [pdf] by contravariant on Monday November 09, 2020 @09:27AM (#25035106)
Maybe you've answered this point already somewhere but how exactly are you planning to make censorship (for lack of a better word) stand out?
Re:EU Draft Council Declaration Against Encryption [pdf] by Arathorn on Monday November 09, 2020 @12:05PM (#25036883)
Overloading the word 'censorship' is going to get a bit confusing here ;)

"Censorship", meaning: "malicious server or ISP silently blocks or withholds traffic from you" is a risk in Matrix today, completely independently of the reputation stuff being discussed here. The mitigation is to get rid of servers (and even ISPs), as per https://matrix.org/blog/2020/06/02/introducing-p-2-p-matrix/

"Censorship", meaning: "your server admin subscribed to a blocklist of child abuse content published by someone like iwf.org.uk" would stand out to users by the server publishing the names of the blocklists that their server admin has deployed. I'd call this server-side filtering or something instead, given the filters are visible. If the server admin withholds info about their filters, then you're back in the traditional sense of censorship from the prior paragraph.

Re:EU Draft Council Declaration Against Encryption [pdf] by buisi on Wednesday November 11, 2020 @03:59PM (#25062909)
Are the blocklists public? I thought these schemes involved uploading files to a "trusted third party" like Microsoft, and for them to decide if the files are lawful?
Re:EU Draft Council Declaration Against Encryption [pdf] by buisi on Wednesday November 11, 2020 @03:49PM (#25062821)
Unfortunately, I don't think that'll work. For it to work, you would need every actor to play along, otherwise someone could just move to Tor to do the exact same thing. I don't think it's possible to eliminate what they want to eliminate, and they will only push for more and more.
Re:EU Draft Council Declaration Against Encryption [pdf] by TeMPOraL on Monday November 09, 2020 @02:42AM (#25032266)
Gives a new meaning to the term "character assassination".
Re:EU Draft Council Declaration Against Encryption [pdf] by eznzt on Monday November 09, 2020 @05:32AM (#25033335)
My suspicion is that this system is a cop-out, like when Google blames their screw-ups on "the algorithm".

There probably has been a recent surge of right-wing users and, the Matrix administrators, which probably lean left-wing, have seen that surge as a problem and have created the reputation system as a way to get rid of those users or, at least, to give them the hypothetical yellow badge. And if someone says "censorship", they will blame it on the "downvotes" those users got.

Re:EU Draft Council Declaration Against Encryption [pdf] by SheinhardtWigCo on Sunday November 08, 2020 @05:19PM (#25029649)
Thanks for Matrix.

This proposal seems to address general abuse, spam, propaganda, filter bubbles, and so on. While these are worthy issues to tackle, the authors of the 7-eyes statement are not really interested in them.

What they say they want is for terrorism and child pornography to be detectable or meaningfully reduced. Do you think a relative reputation system will solve that problem?

Re:EU Draft Council Declaration Against Encryption [pdf] by Arathorn on Sunday November 08, 2020 @05:44PM (#25029805)
Yes, we think it will help meaningfully help detect and reduce abuse - mainly because it's shamelessly mimicking the way society works in real life. Many (most?) abusive communities are at least adjacent if not overlapping with publicly visible communities. Simply put, they need a way to advertise and recruit.

So, just as in person you might stay away from a given political party / religious institute / youth club because your social graph has warned you that it might actually be a front for whatever obnoxiousness, the same approach can work online (or, conversely, could also be used to help hunt down abuse in the first place). It's then up to the authorities to investigate what's going on - which is quite possible through infiltration etc without having to go and blanket break encryption for the whole of society.

To be clear: this is still largely sci-fi, and we don't think this is a perfect solution, especially given this is a fundamental problem of the human species which nobody has yet solved. Our proposal doesn't solve lone wolf situations, for instance. So perhaps for that you need the ability to gather evidence from endpoints post hoc.

Unrelated: one particularly dark dystopian outcome we've been wargaming is: what if someone (not us!) used decentralised rep to seed a GPT-3 style bot to locate abusive communities, and then automated the process of infiltrating & investigating them... only to then end up ascending the ranks while preserving its cover and accidentally triggered some atrocity. So, um, let's not do that.)

Re:EU Draft Council Declaration Against Encryption [pdf] by skissane on Sunday November 08, 2020 @06:29PM (#25030070)
> Unrelated: one particularly dark dystopian outcome we've been wargaming is: what if someone (not us!) used decentralised rep to seed a GPT-3 style bot to locate abusive communities, and then automated the process of infiltrating & investigating them... only to then end up ascending the ranks while preserving its cover and accidentally triggered some atrocity. So, um, let's not do that.)

I think you greatly overestimate the abilities of GPT-3. GPT-3's writable memory is short-term only – its long-term memory is read-only – so by the end of a conversation, it has permanently forgotten what the topic was at the beginning. Given its lack of writable long-term memory, it is completely incapable of succeeding at any tasks involving long-term planning, such as the infiltration and investigation of a social group.

Of course, you said "GPT 3 style bot", not GPT-3, but the AI you have in mind has significantly greater capabilities than GPT-3 has, so isn't fairly said to be "GPT 3 style" at all.

Re:EU Draft Council Declaration Against Encryption [pdf] by Arathorn on Sunday November 08, 2020 @07:19PM (#25030314)
Sure - "GPT-3 style" here meant "something along the lines of GPT-3" rather than anything specific to GPT-3 actual capabilities. The context being dystopian sci-fi thought experiments :) (That said, I suspect you could train GPT-3 to automatically get vetted into some fairly nasty places if you so desired).
Re:EU Draft Council Declaration Against Encryption [pdf] by TechBro8615 on Sunday November 08, 2020 @04:54PM (#25029447)
Matrix is awesome. Also, doesn’t the French government use Matrix? Are they trying to outlaw their own policies?
Re:EU Draft Council Declaration Against Encryption [pdf] by Arathorn on Sunday November 08, 2020 @05:12PM (#25029597)
Several EU governments use Matrix - so yeah, there's a paradox here. On one hand Element (the company set up by the core Matrix team) depends on government work to keep the lights on for Matrix work, but on the other hand we feel a clear responsibility to push back on backdoors, given backdoors are intrinsically flawed and dangerous. This is why we're proposing a (hopefully) better alternative instead (and this is also why we're soliciting funding to support reputation work via the Matrix.org Foundation at [email protected], just in case any YC billionaires happen to be reading this...)
Re:EU Draft Council Declaration Against Encryption [pdf] by novok on Sunday November 08, 2020 @05:31PM (#25029728)
It's probably something along the lines of 'guns for me but not for thee'. But they don't even have the excuse of encryption actively hurting anyone, so it's more like 'strong walls for me but not for thee'
Re:EU Draft Council Declaration Against Encryption [pdf] by SiempreViernes on Sunday November 08, 2020 @08:48PM (#25030678)
It does hinder police investigations, so it comes down to how much harm you think obstructing the police causes.
Re:EU Draft Council Declaration Against Encryption [pdf] by novok on Monday November 09, 2020 @02:39AM (#25032240)
So does the right to a trial, habeas corpus, the need for a warrant, juries, the right to remain silent and many other protections...
Re:EU Draft Council Declaration Against Encryption [pdf] by magnusmundus on Monday November 09, 2020 @07:21AM (#25033982)
> strong walls for me but not for thee

Good analogy, especially because governments themselves are living in the same walls (i.e. using the same apps) and this effort will hurt their own security.

Re:EU Draft Council Declaration Against Encryption [pdf] by agumonkey on Sunday November 08, 2020 @05:58PM (#25029881)
No it simply means two leagues, just like before. Politicians have tools that are not accessible to the citizen. Nothing new in a way :)
Re:EU Draft Council Declaration Against Encryption [pdf] by petre on Sunday November 08, 2020 @05:34PM (#25029745)
They use allright it when it's for their own benefit.
Re:EU Draft Council Declaration Against Encryption [pdf] by orbifold on Sunday November 08, 2020 @06:25PM (#25030045)
I was under the impression that all the mobile communications standards had provisions for lawful intercept, is it such a leap to think that the baseband processor is compromised aswell? Maybe the EU is just salty that they don't have the same kind of access the NSA has.
Re:EU Draft Council Declaration Against Encryption [pdf] by ppafin on Sunday November 08, 2020 @10:16PM (#25031141)
Yep, it's not about encryption. It's about monopoly for information feed access.
Re:EU Draft Council Declaration Against Encryption [pdf] by resynth1943 on Sunday November 08, 2020 @03:44PM (#25028833)
You have my full support, Matthew :-) I'll be keeping an eye on it, too.
Re:EU Draft Council Declaration Against Encryption [pdf] by raxxorrax on Monday November 09, 2020 @06:16AM (#25033581)
I don't like it because they advocate a social credit system as an alternative, but their criticism against back doors is on point.

I am in communities that don't use such tools and somehow there is no problem that would require any, but if that is the preference you have the option. I don't see further issues.

Re:EU Draft Council Declaration Against Encryption [pdf] by Arathorn on Monday November 09, 2020 @12:08PM (#25036915)
It's not a social credit system!! It's empowering users to track their own view of reputation, as opposed to having an authority determine it.
Re:EU Draft Council Declaration Against Encryption [pdf] by Daniel_sk on Sunday November 08, 2020 @05:18PM (#25029642)
Do you take donations?
Re:EU Draft Council Declaration Against Encryption [pdf] by Arathorn on Sunday November 08, 2020 @05:21PM (#25029658)
Yup, the "Support Matrix" section at the bottom of https://matrix.org/ has the details. (thanks!)
Re:EU Draft Council Declaration Against Encryption [pdf] by rkagerer on Sunday November 08, 2020 @05:53PM (#25029856)
Interesting read, though it sounds more like decentralized censorship. It's a little unclear where you're talking about reputation of individuals vs. reputation of content.
Re:EU Draft Council Declaration Against Encryption [pdf] by Arathorn on Sunday November 08, 2020 @07:24PM (#25030337)
Censorship implies that information has been invisibly removed by some absolute authority. Whereas here we're talking about empowering users to filter out the stuff on their terms - i.e. subjective/relative reputation. It's possible that a server admin might apply unilateral filters, but a) the user would be able to visualise those (assuming the server admin doesn't maliciously withhold that info), b) the user can switch to another server with different filtering rules. So, I definitely wouldn't characterise it censorship (although I can see why many have a kneejerk reaction of "ooh, this sounds a lot like censorship").
Re:EU Draft Council Declaration Against Encryption [pdf] by infogulch on Sunday November 08, 2020 @08:01PM (#25030492)
Does the idea you're proposing enable recording reputation scoring on the scope of a single post/message?
Re:EU Draft Council Declaration Against Encryption [pdf] by Arathorn on Sunday November 08, 2020 @09:51PM (#25031007)
Yes. The idea is to build it to be agnostic to the objects whose trust is being tracked, but for Matrix at least the main building blocks are rooms, users, communities, servers, messages & attachments. However you could use it for other things too if you so wanted (eg client IPs, server IPs, netblocks, ASes, E.164 numbers, URLs etc)
Re:EU Draft Council Declaration Against Encryption [pdf] by markvdb on Sunday November 08, 2020 @04:49PM (#25029400)
Thank you Matthew!
Re:EU Draft Council Declaration Against Encryption [pdf] by Veedrac on Sunday November 08, 2020 @11:34PM (#25031489)
While I know I'm just attracting downvotes, your points, in order:

1)

a: It's really not that hard to think of ways to solve backdoor problems with a mix of technical and social approaches. For example, having shared keys burned onto silicon, making physical access mandatory, and split between both the law enforcement and the company, so that both parties must knowingly engage.

b: Most software already practically backdoored already, and it's really not that big a deal. Microsoft can push whatever updates they want whenever they want. They already have the keys to the kingdom! Google doesn't store everything E2E encrypted. They also already have the keys to the kingdom! Things have mostly worked out regardless.

2) That a measure will be imperfect is not an argument that it will be ineffectual. In fact it's pretty obviously false; making abuse harder on mainstream platforms will make abuse less mainstream.

3) This is like arguing governments shouldn't be allowed to regulate weapons, because it would be hypocritical, given they own weapons themselves, and it might normalize other countries taking away their citizens' weapons, which might prevent them fighting back. That seems like an obviously bad argument.

4) Yes, your platform that makes oversight impossible is not compatible with regulations requiring oversight. That's not an accident, in either direction.

The idea later in the post seems not really honestly engaging with the topic, that it's not about ‘someone who believes birthday cake is undesirable’, but about networks which are systematically and in actuality doing things like trafficking children for sexual abuse, and that there is a moral imperative for governments to deal with this beyond just letting people choose not to engage.

Re:EU Draft Council Declaration Against Encryption [pdf] by vorpalhex on Sunday November 08, 2020 @11:44PM (#25031530)
1a - Because that worked out so well for HDMI? It'll be what, maybe 90 days before those "law enforcement keys" are public?

1b - If it's already backdoored then there is no need for such an act, the problem is already solved.

2 - It's ineffective for it's stated goal because the stated goal is not the real goal. The goal is to enable a continued abuse of power, one which is already ongoing, and one which produces no actionable results or meaningful outcomes. Five eyes & co is upset that they're losing some of their toys.

3 - Who says governments should be able to regulate weapons? Likewise these days, who is to say they meaningfully can?

4 - Sex trafficking existed prior to encryption. The government failed to stop it then. I strongly suspect that even if the government gets it's way and breaks encryption, sex trafficking will continue exactly at the same rate. Most sex traffickers are not technology ept, nor do they need to be - the track record for capturing them is atrocious. Epstein anyone?

This is a bad faith argument. "Protecting children" and "stopping terrorists" are the siren's song of every government overreach basically since the dawn of time and yet the government remains terrible at solving either problem. I don't think encryption is really the issue preventing those things from getting resolved. I do think encryption is very inconvenient for a very snoop heavy government.

Re:EU Draft Council Declaration Against Encryption [pdf] by buisi on Wednesday November 11, 2020 @04:06PM (#25062980)
Sex trafficking is a very difficult problem to address. Even if you were to shutdown an online network, someone could fly to a third world country to personally do it, and there are always going to be takers lining up.

People in third world countries are poor, and may be desperate. A purely technical solution is not going to address this. Rather, we need ways to lift people out of poverty, and improve their standard of living. No one should ever have to live like that to survive.

I don't know if it is possible to stop child pornography (anyone anywhere in the world can create it and anyone anywhere can view it), but it should be able to reduce the amount of sex abuse in the world, if the government were to pursue prevention initiatives to stop it where ever possible.

Re:EU Draft Council Declaration Against Encryption [pdf] by GoblinSlayer on Monday November 09, 2020 @04:47AM (#25033106)
>and yet the government remains terrible at solving either problem

You don't kill the cash cow.

Re:EU Draft Council Declaration Against Encryption [pdf] by Veedrac on Sunday November 08, 2020 @11:56PM (#25031590)
> Because that worked out so well for HDMI? It'll be what, maybe 90 days before those "law enforcement keys" are public?

This is a completely different context to having one copy (or a small number) of said low-bandwidth silicon held exclusively by an agency vested in keeping it exclusive, plus another copy held by the company themselves, such that both copies would need to be broken for security to be weakened.

> If it's already backdoored then there is no need for such an act, the problem is already solved.

Seriously? Microsoft having the ability to install a keylogger on any random person's machine is not the solution to finding networks of criminal activity.

> [government bad]

I'll debate the technicals but I'm not going to argue politics here.

Re:EU Draft Council Declaration Against Encryption [pdf] by vorpalhex on Monday November 09, 2020 @12:24AM (#25031714)
I'm going to start naming a few major government security breaches:

+ TSA keys

+ OPM (all of it)

+ NSA's hacking tools

Were these incredible skilled sidechannel attacks? Movie esque infiltrations?

+ TSA accidentally published the keys

+ OPM was a master password from a contractor who was bribed for about the cost of an ipad

+ NSA hacking tools was.. an email trojan? A CD walked?

Do you really trust these people with anything?

Putting a backdoor into encryption is less secure than a random Microsoft employee backdooring me. At least I know it's Microsoft who will be doing the backdoor...

This isn't politics, this is history. This is not the first time, nor the last time we've seen these moves. We know 5 eyes have had major incidents of internal abuse because we have their own documentation on it - and we have their own documentation that they decided to do nothing about it.

It requires external oversight for any organization to truly follow compliance, otherwise the incentives to cheat the system are overbearing. If they won't take us at our word, why would we take them at theirs?

Re:EU Draft Council Declaration Against Encryption [pdf] by Veedrac on Monday November 09, 2020 @12:32AM (#25031752)
> Putting a backdoor into encryption is less secure than a random Microsoft employee backdooring me. At least I know it's Microsoft who will be doing the backdoor...

My point isn't about how much you trust Microsoft, but that Microsoft has keys, which are more easily stolen and in many regards more valuable than the scheme I gave.

> TSA keys

Not remotely comparable. These were never designed to be secure in the sense we're talking here.

> OPM (all of it)

> NSA's hacking tools

Hence the scheme I gave, which isn't vulnerable in the same way.

Re:EU Draft Council Declaration Against Encryption [pdf] by raxxorrax on Monday November 09, 2020 @05:37AM (#25033351)
Basically all your arguments have been proved false in a short amount of time. Agencies could not name a single case where mass surveillance helped. And don't kid yourself, if you have a master key to encryption, it is mass surveillance you try to implement and it will be used as such.

We had security agencies that had the info but didn't act in case of Vienna. Encryption wasn't the issue here, this is an incontinent case of saving face at best, a deliberate attack against civil rights at worst.

> These were never designed to be secure in the sense we're talking here

Encryption today is a protection against access for a limited amount of time. It is an intrinsic rule about every encryption algorithm. It is fundamental property and widely known.

Re:EU Draft Council Declaration Against Encryption [pdf] by feanaro on Monday November 09, 2020 @03:18AM (#25032502)
So you admit defeat on the politics aspect of it? Because every one of your points was political, save for 1a.
Re:EU Draft Council Declaration Against Encryption [pdf] by Veedrac on Monday November 09, 2020 @06:42AM (#25033742)
This kind of comment is exactly why I'm avoiding the politics side of things. I don't want to subject myself to this sort of bad faith jabbing, as much as it comes with the topic.
Re:EU Draft Council Declaration Against Encryption [pdf] by feanaro on Monday November 09, 2020 @10:09AM (#25035528)
It was not meant as a jab, and certainly not bad faith. I'm just telling you that your comment was of exactly the same character. Either refrain from making a political comment yourself or have it be responded to.

Making a political comment but then trying to shut down discussion of it by stating that you will not participate in political discussions is a double standard, though perhaps you were unaware that you were doing it.

Re:EU Draft Council Declaration Against Encryption [pdf] by Veedrac on Monday November 09, 2020 @11:18AM (#25036312)
I never said people couldn't respond to them. I said I wasn't going to debate it. Saying “so you admit defeat” (or the many, many variations) whenever someone exits a heated part of a debate is a textbook jab, and has no place in honest conversation.
Re:EU Draft Council Declaration Against Encryption [pdf] by feanaro on Monday November 09, 2020 @01:12PM (#25037687)
Fair. I retract my comment.

I think what prompted me to react was mostly your `[government bad]` blurb. It felt like you got to state your political position and caricaturise the political position of the responder while avoiding further discussion. That felt wrong.

Re:EU Draft Council Declaration Against Encryption [pdf] by Veedrac on Monday November 09, 2020 @02:48PM (#25039048)
Fair in turn. I'll try to do better next time :).
Re:EU Draft Council Declaration Against Encryption [pdf] by Krisando on Monday November 09, 2020 @06:15AM (#25033573)
> but about networks which are systematically and in actuality doing things like trafficking children for sexual abuse

The state must declare the child to be the most precious treasure of the people. As long as the government is perceived as working for the benefit of the children, the people will happily endure almost any curtailment of liberty and almost any deprivation. --Adolf Hitler

Re:EU Draft Council Declaration Against Encryption [pdf] by Veedrac on Monday November 09, 2020 @08:13AM (#25034418)
I believe this is a misquote.

It's also a morally horrific line of argument. Like saying you shouldn't care about shooting civilians because bad people in the past have used human shields as a war tactic.

These are not imagined people being hurt, spun out of whole cloth.

Re:EU Draft Council Declaration Against Encryption [pdf] by Krisando on Monday November 09, 2020 @10:49AM (#25035951)
> I believe this is a misquote.

It is a legitimate known translation, not a misquote from the Ralph Manheim translation of Mein Kampf (ISBN 0395078016 / year 1943), page 403. Other translations have similar wording on the page, although not in such a nice succint sentence.

Manheim was known to have gone into great effort to create an exact English equivalent of Hitler's work for Mein Kampf.

> It's also a morally horrific line of argument. Like saying you shouldn't care about shooting civilians because bad people in the past have used human shields as a war tactic.

The point of the quote is to show there are no limits curtailing liberties, not an absolute we shouldn't bother. The attempt to spin the quote into something else, probably because, you wish to "protect the children" is proving the point.

Re:EU Draft Council Declaration Against Encryption [pdf] by Veedrac on Monday November 09, 2020 @11:32AM (#25036476)
> The point of the quote is to show there are no limits curtailing liberties, not an absolute we shouldn't bother. The attempt to spin the quote into something else, probably because, you wish to "protect the children" is proving the point.

This is not even remotely how you used it. My argument is one where there are obvious checks and balances, where government power is clearly and significantly limited, and little is left exclusively to government trust.

Yet because I mentioned that there are actual people being actually raped, I get Godwin's Law'd. Not because I advocated for Chinese style state control. Not because I took away liberties that most people even care about, given most people are perfectly happy using Google services. But because I dared mention that real people are suffering.

This happens every time on HN, no matter how moderate my position. Anything even remotely compromising the Bottom Line (universal perfect cryptographic security) is Hitler.

Re:EU Draft Council Declaration Against Encryption [pdf] by Krisando on Tuesday November 10, 2020 @10:59AM (#25047395)
> Yet because I mentioned that there are actual people being actually raped, I get Godwin's Law'd

I looked at your posting history, not much Hitler mentions in responses relating to those topics. This is hyperbolic.

> no matter how moderate my position

If your position was moderate then "Most software already practically backdoored already" would have been sufficient.

> Anything even remotely compromising the Bottom Line (universal perfect cryptographic security) is Hitler.

You're way too focused on Hitler. Pretend it's not Hitler, the point is still valid.