676
Chat Control 2.0: EU governments set to approve the end of private messaging and secure encryption
(www.patrick-breyer.de)
this post was submitted on 14 Oct 2023
676 points (98.7% liked)
Privacy
31954 readers
518 users here now
A place to discuss privacy and freedom in the digital world.
Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.
In this community everyone is welcome to post links and discuss topics related to privacy.
Some Rules
- Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
- Don't promote proprietary software
- Try to keep things on topic
- If you have a question, please try searching for previous discussions, maybe it has already been answered
- Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
- Be nice :)
Related communities
Chat rooms
-
[Matrix/Element]Dead
much thanks to @gary_host_laptop for the logo design :)
founded 5 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
I would be wary of this messaging.
There were a number of other times when it was being reported that the EU was going to do some moustache twirling kind of manoeuvre, and so far it was always deeply misreported - it was going to be the end of privacy but if you read the actual proposal it was actually sensible and not remotely close to what news said about it.
I haven’t read this proposal yet, but I wouldn’t be surprised if this was the same as always.
So you're completely uninformed and yet chime in with your opinion? The danger is real and this isn't a reporting issue.
"I have done 0 research on the issue, here is my reasoning on why it is a non-issue."
That’s not what I said. What I said is: until now similar headlines and articles were bullshit, so I’m skeptical of this one too, exercise caution
I guess that's fair since most of these tend to be clickbait, but in this case these proposals are genuinely extremely bad, because adding client side scanning to E2E messaging and photos is only one overreaching policy away from being a full backdoor for other purposes in the name of "public safety" since the technology would already be implemented, which would absolutely be the end of private messaging and secure encryption.
What is the problem if it’s client side though? Traffic is still not intercepted, communication is still private. Going from here to a full blown backdoor seems a bit far fetched…
"What's the problem if the government had one random inspection of your house per year. Nobody entering or leaving your house is getting searched, just the house itself and whatever you store in it. Your house is still private. Nobody else is getting let in, just the government." They'll only use this new search power to look for pedophiles. Promise.
The problem is you have a right to privacy. The government should have to prove a reasonable basis to suspect you of a crime to violate it, and at least in theory that authority is overseen by an independent judiciary. Owning a phone isn't a reasonable basis to suspect you of a crime and read all your text messages. Privacy and free speech are basic human rights, they are necessary for democracies to function properly and for us to advance as a civilization and share information and ideas and grow.
No ok that’s fine but if the check is client side, it happens offline and no data is sent to the servers unless a match is found, your privacy is still yours unless you’re sending CP no?
The way I intend client-side is that ideally the client would have the CP hashes built in and would only trigger on a hash match, that is, when it’s 100% sure that your picture is ID’d.
The problem I have is that if it’s server side it’s indeed a horrible privacy violation, if it’s client side it’s trivial to bypass through some decompiled version of the app - so there is no good way to sell this.
We’re splitting hairs here, I agree with you generally speaking.
Yes. But the government can provide an "updated" hash database. Such updates would be frequent. There is no way for whatsapp to know what files were used to make those updated hashes. Unless the government distributes copies of the underlying CSAM to the messenger app providers which kinda goes against supposedly trying to stop the proliferation of CSAM in the first place.
I'd be curious how sensible you'll find this proposal.
Well, they'll never be caught in a Google location dragnet and arrested, dontchaknow? That's all just fake news!! /s
People like that never think beyond the simplistic view of the moment.
They don't believe innocent people have been jailed on bad evidence, or that the government would lie and use this stuff against someone, despite it being in the news almost daily.