• @MigratingtoLemmy
    link
    587 months ago

    My point being, what are they going to achieve with this? Ask WhatsApp to pass over their encryption keys?

    It should be pretty obvious that you shouldn’t be sharing sensitive stuff on chat apps controlled by the NSA. Use element with encryption or something, maybe Briar etc. What are they going to do if you insist on using apps which use asymmetric client-side encryption, break TOR? Force you to use symmetric encryption and give the government your decryption keys?

    I don’t see how they are going to spy on sensitive details of Europeans with this. They might as well ban phones completely if they want to limit communication.

    • @[email protected]OP
      link
      fedilink
      English
      98
      edit-2
      7 months ago

      These laws are being passed by politicians who generally don’t understand technology. What they will achieve is a reduction in privacy and liberty for every citizen in the EU and easier methods to clamp down on dissent. Just because it’s not technically perfect or difficult to implement fully doesn’t mean it’s not a threat. It’s one step closer totalitarianism, and what’s stopping totalitarianism is everyday people, one step at a time, battling it back.

      • @[email protected]
        link
        fedilink
        52
        edit-2
        7 months ago

        A more cynical take is that they understand very well, but are being compensated by big tech for looking the other way.

        Good people often can’t comprehend how evil people work, and they say “everyone makes mistakes”, or “they don’t understand fully”. Because we want to think that everyone is mostly good.

        It’s not like that. :/

        • @[email protected]
          link
          fedilink
          57 months ago

          It was found that johannson was lobbied by non-profit funded by ai startup that develop csam detect and groom detect and other bullshit. startup from the us

          our politician now get bribed by us company. what the fuck?

      • @MigratingtoLemmy
        link
        167 months ago

        Well I get that they are stupid, but unless it’s their fetish to catch 14 year olds trying to spread rubbish propaganda, I doubt they’re going to get much. Any reporter, activist and consumer knows that anything they put on these apps goes straight to the NSA’s and MI6’s AI algorithms at the very least, and now they’re going to go to the rest of Europe.

        Yes, we should be protesting against this. Does Europe have an equivalents of the EFF to fight for such rights?

        • @Eheran
          link
          117 months ago

          I have to strongly disagree, you overestimate what people know/can/want to do. Some, sure, but not the majority. They either stay ignorant or are too lazy. Just look at add blocker usage. I can not even imagine to live without them, but here we are, I am the tiny minority! Most either do not care or are too stupid or somehow happen to not know about them.

    • @[email protected]
      link
      fedilink
      51
      edit-2
      7 months ago

      It’s literally in the article: They want to use client-side scanning. The client already has the data decrypted. This is much like what Apple wanted to introduce with CSAM scanning a while back. It’s a backdoor in each client and it’s a matter of time until it will be abused by malicious entities.

      • @[email protected]
        link
        fedilink
        157 months ago

        Yea, it is clear if there is just one closed-source app. But if we’re talking XMPP/Matrix - they have multiple open-source clients, even if some of them does introduce scanning, no way it wouldn’t be forked to remove it.

        • @[email protected]
          link
          fedilink
          97 months ago

          If a messaging service is non-compliant, the government could theoretically take action with court orders against domain owners, server owners or pursue anyone hosting a node in case of a distributed setup. In a worse case scenario, they might instruct ISPs via court orders to block these services (e.g. The Pirate Bay in some countries)

          • @MigratingtoLemmy
            link
            87 months ago

            Yeah let’s have them block github. I kind of want to see a federated git hosting platform integrated with the fediverse

            • @kbotc
              link
              English
              57 months ago

              They literally will do that. GDPR shows that they will go after big American companies (That’s the point, a huge chunk of this is protectionism to build a tech industry in the EU that they control)

            • CEbbinghaus
              link
              27 months ago

              This has actually been my dream for some time now. Not AP/Fediverse since that is built for social networks, but some platform that federates decentrally and functions closer to GitHub/Forgejo. Ideally with the ability to fork repositories across servers and the ability to hook up hosted runners github style. It would be an absolute dream to have a platform that lets anyone explore projects from any of the other nodes and build upon them.

          • @[email protected]
            link
            fedilink
            27 months ago

            Where I live, a lot of popular services, including major foreign social media and torrents everyone uses, are blocked - yet they still have a massive userbase.

            And since the scanning is supposed to be client-side, how would a server check if the scanning was really performed? What if the server does receive and log the needed responses, just to be safe, but the client actually just sends them automatically while lacking such functionality?

    • @[email protected]
      link
      fedilink
      English
      217 months ago

      You are 100% right.

      They can’t ban encryption, yet they can make it difficult. If all noobs don’t use encryption, only the pros are left. That means they only have to spy on 10 instead of 100 people. Those that don’t use encryption aren’t interesting.

      The problem is that they can’t spy on the 10 and hence they spy on the 90 and wait for the 1 guy making a mistake and becoming one of the 90.

      • @MigratingtoLemmy
        link
        27 months ago

        Fairly sure my good Eastern Europeans don’t give a fuck about what France and Germany think and will pirate and TOR and I2P their merry life away (or so I’d like to think - you tell me)

    • @Wooki
      link
      10
      edit-2
      7 months ago

      When the endpoint is controlled the keys are published

    • @vxx
      link
      27 months ago

      As far as I know, Prism is able to read encrypted messages.

      • @MigratingtoLemmy
        link
        87 months ago

        Prism has broken AES-256???

        It is more likely that Prism can use android exploits to read data before it is encrypted by the client

        • @vxx
          link
          2
          edit-2
          7 months ago

          deleted by creator