News for hackers. Stuff that matters.
Re:Nations unite against Facebook over encryption plans ‘tha... by rstuart4133 on Sunday July 30, 2023 @10:58PM (#36938349)
> I am not suggesting weaking e2ee crypto but requiring lawful intercept capabilities into messaging apps.

I'm an Australian, and Australia has already done this. It's the "Assistance and Access Bill (2018)". One link: https://carnegieendowment.org/2021/03/31/encryption-debate-i...

In principle, I agree with you. In practice, that particular piece of legislation looks to strive to get balance between privacy and a democracy defending itself against destabilising influences (like say tax evasion, importing weapons, and terrorism) right. But it fails spectacularly at it in one area: sunlight.

I'm sure it was written by and for the Law Enforcement Agencies (LEA's), and it boils down to letting them see anyone's activities should it be deemed important enough. Everyone that is, except them. The bill says the can force computer companies to help them, and when they do an automatic gag order applies, forever. Reporting on how much it is used is limited to a count, supplied years after the use has occurred.

> You don't think the government can be trusted? So what, we live in a society.

Yep. So do Russians and the Chinese. This demand by the LEA's that be allowed to their stuff without the society they are supposedly serving knowing has a very authoritarian overtone, more reminiscent of them than us. "We know what's best for you - so it's safer you don't know". It seems it's the LEA's in the Five Eyes nations think they should be allowed to operate.

Re:Nations unite against Facebook over encryption plans ‘tha... by badrabbit on Monday July 31, 2023 @01:33AM (#36939128)
I did not support gag orders or lack of transparency, quite the opposite. I am suggesting the app/protocol to publicly log lawful intercept access and for there to be public auditing for the reasons behind the requests (the time, id and jurisdiction are logged publicly).

The problem you are describing is political ultimately. If the premise is that government's can't be trusted then the protocol/app shouldn't be operated by entities like signal or the tor project who have to answer to them. P2P+e2ee+stego is probably best. But a messaging app operating within the law by corporations must allow lawful access but as part of an established and auditable process, not one off targeted access.