Britain has passed the ‘most extreme surveillance law ever passed in a democracy’.
The law forces UK internet providers to store browsing histories — including domains visited — for one year, in case of police investigations.
Archive | Cryptography
EU cryptic on encryption
The European Union intends to simplify investigative authorities’ access to encrypted content. This emerged from the replies to a questionnaire that was circulated to all Member States by the Slovak Presidency of the EU Council. After a “reflection process”, efforts in this area are, according to the summary of the replies, intended to give rise to a framework for “cooperation” with internet providers. It remains unclear whether this will take the form of a recommendation, regulation or directive or, indeed, what “cooperation” might mean.
EDRi: New EU network to combat the “challenges stemming from encryption” »
Net platforms ask Trump to support encryption
The Verge: Facebook, Google, and Twitter urge Trump to support encryption and immigration reform »
Interesting… and a bit scary
Google Brain has created two artificial intelligences that evolved their own cryptographic algorithm to protect their messages from a third AI, which was trying to evolve its own method to crack the AI-generated crypto. The study was a success: the first two AIs learnt how to communicate securely from scratch.
Ars Technica: Google AI invents its own cryptographic algorithm; no one knows how it works »
Does this make us all terrorists?
Falkvinge: In the UK, running a blog over HTTPS is an act of terrorism, says Scotland Yard »
The Case Against a Golden Key
What I have learned over the past 25 years is that encryption saves the lives of people who are working to protect human rights and advance freedom around the world. It is clear that the FBI is willing to compromise the security of our national electronic infrastructure and to risk the lives of activists to advance their short-term institutional interests. The question for the rest of us, for the White House and for Congress, and also for the American people, is are we willing to massively degrade security for everyone, and weaken journalists and independent groups, simply to add to the FBI’s already enormous powers?
The work of independent, nongovernmental groups moves us all forward toward a more just and respectful world. This is, by far, the best defense against terrorism, particularly against the terror wreaked by the police and militaries that commit the majority of the world’s violence against civilians. Today, putting people’s physical security first—whether it’s against repressive governments, cybercriminals, or even nongovernmental terrorists—requires strong digital security.
Patrick Ball in Foreign Affairs: The Case Against a Golden Key »
France, Germany and crypto backdoors
In a world where terrorists deliberately encrypt their connections, how big is the chance that a terrorist would (continue to) use a service that is known to be insecure? Our guess: as soon as the European Commission introduces legislation forcing services such as Telegram to decrypt secure communications, terrorists will turn to alternative tools. (…)
The idea that the way to gain access to terrorists’ communications is by backdooring services such as Telegram, is preposterous. Let’s be clear, the French and German proposal will undermine the security of every single person, under the populist guise of improving security. Or, in the words of cryptographer Phil Zimmerman: When crypto is outlawed, only outlaws will have crypto.
EDRi: When crypto is outlawed, only outlaws will have crypto »
France & Germany vs. encryption
EDRi: France and Germany: Fighting terrorism by weakening encryption »
Fortune: Why France and Germany’s Encryption Stance May Be More Bark Than Bite »
Mixed messages on encryption
In a new level of dumb, Germany and France are demanding strong encryption for all citizens at the same time as they demand this strong encryption to be breakable. They also demand messaging providers of end-to-end encryption to provide police with keys they don’t have, and for terrorists to stop using freely available strong encryption without a messaging provider. You really couldn’t sound dumber if you tried.
The EU vs. Whatsapp
The Guardian: EU to crack down on online services such as WhatsApp over privacy »