Under British and UK Legislation anyone using or developing end-to-end encryption is now a “hostile actor”
from tastemyglaive@lemmy.ml to privacy@lemmy.ml on 21 Feb 04:52
https://lemmy.ml/post/43479367
from tastemyglaive@lemmy.ml to privacy@lemmy.ml on 21 Feb 04:52
https://lemmy.ml/post/43479367
Surveillance strategies in the UK and Israel often go global
threaded - newest
Was this written by a native English speaker?
It’s hard to take seriously with so many grammatical errors
It’s called legalese.
No, beyond the legalese. For example, the comma placement in:
The comma should go after “them”, because “unknown to them” constitutes the entire aside.
If you delete the aside in this, it reads “which national security”, whereas it should read “which threatens national security”.
This is just the first one I found; I didn’t go hunting for them. It’s one of those grammatical mistakes that actively ruins the cadence of the sentence as you read it in your head.
And worse mistakes:
I have complete sympathy for non-native speakers writing papers, but it also raises the question of whether they properly understand the source material they’re referencing.
I will inform you that this excerpt is correct English. There needn’t be an article like “a” or “the” before “possibility”. It reads awkwardly in everyday language, but that really is just innocent “legalese” phrasing.
Thanks for the correction. Rereading it I can kind of see if they mean possibility as an abstract concept, so I’ll take the L on it.
But I still maintain it’s a pretty fucked way of phrasing it.
That is perfectly grammatical English, especially in legal texts.
Probably ai generated let’s be honest here
It’s British, so no.
These people are clueless
They don’t care how it affects normal people’s lives or what we sacrifice to pay for their incompetent leadership.
It doesn’t affect just normal people, but when you make encryption weaker, the foreign state (i.e. bad actor) surveillance also benefits.
It denies normal people the ability to retain their privacy from corporate and government surveillance.
Which is exactly what any government these days wants.
they are evil, not necessarily clueless.
What is the fundamental difference. Evil men and arrogant idiots might as well be the same thing.
Ironically that’s kinda the argument being made in the document above
focusing on the ‘they are idiots’ fallacy completely misdirects blame and disencourages deeper critical thought. they have a plan and we need one too.
the real misdirection is focusing on individuals and their blame. The real question is why does UK political system produces these people rule and how do they keep ruling.
sure, focusing on how dumb they are isn’t very condusive to discussing the intricacies of capitalism.
seriously though, they do have a plan. we need to figure out ours.
Both parties were captured by the aristocracy/super rich, call them what you will, and they support a total surveillance of a population they obviously fear and want tools to persecute as they see fit. Starmer is a perfect example of this, he’s done more damage arguably than the tories did in over a decade. Their betrayal of the country will throw the elections to the far right too, that is the only protest vote against the status quo, and they will affix themselves in power and implement even worse privacy.
A popular reform party would fix the problems but the aristocracy is too greedy and arrogant for that, thinking they can control a far right party or otherwise shut them out electorally indefinitely and continue to sell out the public to the rich, even as discontent is increasing and the plutocratic rot is visible on the surface and spread throughout the whole.
Its quite explicitly malicious. If you do anything they think is not in national security interests: treason.
“Never attribute to stupidity that which is adequately explained by malice.”
or something like that…
Can’t wait to hear about all the upcoming data breaches. RIP all your medical records…
No way this lasts or holds up to basic scrutiny. End to end encryption is a de-facto standard for so fucking much technology.
Like fucking HTTPS.
Well if they commit to this, it will never affect “e2ee” options that collaborate with feds e.g. whatsapp, imessage. If you can kill Refaat Alareer with it rest assured you will be able to keep it in your phone anytime
Yes, the trick is to outlaw it entirely then enforce the law selectively against those whom you find politically awkward.
TLS is not typically considered end-to-end encryption. It’s transport encryption.
what the fuck mate. Just take a shit on your citizens and wonder why the largest empire in the world now sucks off an orange paint face micro dick to make sure people still recognize they might be someone…
.
What document is this from?
I would like to know too please
hold on hold on, it’s in my bookmarks somewhere I just saved a screen and prioritized alarmism
I found it and posted a link in this thread.
I found it:
gov.uk/…/report-of-the-independent-reviewer-of-st…
It’s an independent review of some UK laws concerning national security, and the reviewer is warning that the laws could be used against people unfairly. Note the last sentence of the section: “Serious responsibility is put on police to use the power wisely.”
It’s a screenshot of this report from a review of the UK’s security and terrorism legislation, published in December.
TechRadar article discussing the specific encryption issue here.
I was skeptical given the grammar issues others have pointed out but it seems legitimate.
So literally everyone in the UK using any website that uses TLS is now a hostile actor?
Essentially everyone’s a criminal which is a huge boon for the government. They can now get rid of anyone they want at any time, legally.
That’s what the governments in 1984 could do as well.
TLS is not typically considered end-to-end encryption. It’s transport encryption.
I don’t get it. E2ee is about encryption in transit not encryption at rest. TLS sounds exactly like e2ee
E2E is about the sender encrypting, and only the intended receiver decrypting, with nothing in the middle able to read the data.
TLS is not designed for that, as the server you connect to is not necessarily the intended receiver, yet it can see everything.
With E2E, you can send data to a server, which is not the intended receiver, and it won’t be able to read it.
Your explanation assumes that scope and scale are part of the definition which it is not.
If you keep zooming in or zooming out the definition of E2E keeps changing under your statement.
If the only knowledge a system has is between a sender and a receiver (Which satisfies even your definition of “intended recipient”) then TLS is E2E encrypted.
The definition of E2EE has evolved since the concept surfaced. You seem to be stuck with the original meaning.
TLS does not fit the modern definition.
Do they strictly define end to end encryption in this bill?
If not, then yes, TLS is “end to end” as the sender encrypts the message, and the receiver decrypts it. Each “end” to each “end” is encrypted, satisfying the semantics of the term.
That is longstanding, the US and the UK both have been writing laws broadly enough for them to take down anyone for them, or at least charge, we all just trust it won’t be abused, but as we’ve seen with the uk and their bad faith terror designations, that trust is misplaced, and the mask is coming off society. They aren’t pretending anymore, and cynically think “democracy” such as it is, is already dead in all but name, it’s only the citizenry that doesn’t know it yet, and or is contesting it.
Does the government have the right to monitor any and all communications corporate, private or political?
No. Whether they believe otherwise or not.
“…would make it more difficult for UK security and intelligence services to monitor communications…” As if they have a right to do so already.
This is such a stupid law. A lot of things require encryption, even the government itself need end-to-end encryption. Are they going to ban Signal and Briar next?
These laws are made by people who have the slightest knowledge about the subjects they’re making the laws on. Oppressing the people is their only concern, everything is else anti-nationalist activity.
This is the first biggest step towards a totalitarian society: cut all (end-to-end encrypted and private) communications across citizens. I hope the people there realise this and protest against this law or something. U.K. is literally becoming Oceania.
The United Kingdom didn’t stop being an evil empire or it’s own volition. The culture of oppression was never really challenged, the pool of potential victims just severely reduced.
Considering how trivial it is to build, and the plethora of working examples on github, I expect anyone is one chatgpt prompt away from running afoul of this.
That’s often the point of this kind of legislation. The review from which this comes points out that the law is very broad and a lot is left up to the discretion of the police about how to apply it. In other words, they implement a law that just about everyone is breaking, then enforce it against environmentalists, critics of Israel, privacy advocates, socialists, anarchists and human rights campaigners, while leaving Meta execs, MPs, banks and the far-right untouched.
Yup, it’s surveillance police state shit.
Yes I am a hostile actor. We are not property! Fight back!
If I were to send a physical letter written in code that can only be decrypted with a cipher would I now be breaking the law?
What about radio or telephone conversations in code?
Can I still password protect my zip files or encrypt my NAS or PC before boot?
Using password protection for files is definitely work of terrorists you should be imprisoned for life. \s
If so we should all start sending cryptic sounding gibberish around the world. Like from random lists send emails to foreigners with some random gibberish like product codes written in that look like encrypted messages, xg0-fs39450, or whatever, just as a form of protest.
if im alone in my car, i’ll just start talking gibberish or about that time i kicked a cyber-dolphin through the moon. just in case the man is training some ai on what my phone’s microphone picks up.
The speedquack cyrocrunk failed, need pryoram ciclicogram asap,
According to this legislation, using https is against the law.
Not as long as UK is the root CA, I suppose.
Normally the certificate signing authority should never see, not need to see anybody’s private key, so no.
But they can, taking help from the DNS (or ISP), send you to a fake website.
Make sure you only use transparent envelopes.
Yeah, who needs TLS anyways?
TLS is not typically considered end-to-end encryption. It’s transport encryption.
I understand that in a system with clients and servers having encrypted communications between the server and the clients is not enough to have end-to-end encryption.
Even then I find it strange to cobsider TLS not end-to-end, the whole gist of TLS is enabling confidential communications between 2 network nodes without any of the intermediate nodes participating in the communication being able to decrypt the data.
Yeah it’s confusing. The implicit assumption in E2EE is that it is taking place on the application layer, while transport encryption happens on the, well, transport layer, or somewhere in between. I think the authors in the linked document mentioned chat communications between users which is definitely application layer.
Yes end to end encryption is for hostile actors why don’t you send your nuclear launch codes in plain text.
Rules for thee not for me.
Oh great more mens rea-less laws.
Nothing like police showing up for reasons that you don’t understand and charging you for crimes that you were not even aware that you were committing.
I forget which page this was on the in book of Democracy, but I’m pretty sure it was towards the end.
It’s in the Oligarchic Repression Chapter I think.
So any time your imagination runs away with you, you need to treat others as your enemies?
A Cypherpunk’s Manifesto
By Eric Hughes
This was written in 1993? Huh, I keep seeing cyber punks around in different contexts too, like some music mixes from some cyber punk festival at least.
In the old days, the British Empire steamed open everyone’s mail and read it, at least coming from the colonies like India.
This is cypherpunk, not cyberpunk. Common roots, but important distinction.
Cyberpunk is an aesthetic style.
Cypherpunk is not.
Cyberpunk is a genre first and foremost. A critique of capitalism set in a corporate dystopia with transhumanist themes.
A lot of the aesthetic is rooted in the culture of the time period that it was created in (the 80s). The cultural fear, more specifically. A time where American corporations, and by extension the US government and population, were afraid of the Japanese economic boom and saw a future where the dollar was replaced by the yen and Japanese supplanted English as the lingua franca of the world, Japanese culture was exported the way American culture is, and Americans started eating their meals with chopsticks instead of forks.
Setting a factory in France is a hostile activity too?
I guess using Olvid is terrorism.
Paving roads makes it easier for an invading army to get around.
This is great.
If you are (or know) a UK citizen, please let them send this with the above context to their representative.
No-one’s invading Lincolnshire then.
Easier, not possible.
Our governments are hostile. Act accordingly.
.
All of them, AFAIK
Thank god I’m not British.
I wish I wasn’t.
Not surprised with the mindset of current admin. Awful people.
Don’t talk without electronic devices around because it might be hostile activity.
Can you provide a source for this document?
The source can be found here: terrorismlegislationreviewer.independent.gov.uk (direct link)
It’s an independent report by Jonathan Hall KC presented to parliament. I think everyone is under the impression that those highlighted paragraphs are a statement of law, they’re not. But they are the guy’s (correct) interpretation of existing law - namely, Schedule 3 of the Counter-Terrorism and Border Security Act 2019.
The report itself is a good thing, coz now we know how far the UK government will try to stretch their powers and what we need to repeal when Labour (and the Tories) fucks right off.
As part of his summary:
“Innocence proves nothing”
Some 40k shit.
Why do you think the UK is the birthplace of the most famous dystopian fiction?
Because something like 90% of it’s media is just Robert Murdoch’s own personal sock puppe.
Seems appropriate, since the game was invented by brits and the Imperium is an unholy amalgamation of the Roman and British Empires
Oh yeah? I’ll train an army of crows to transfer messages in exchange for specific shiny objects.
Seriously though - the constant hypocrisy and attempt to make our lives undeniably worse for their control obsession is either going to force our hand or end with the enslavement of the human race. These people are truly mad.
They choose force your hand. Draw the line where you wish. They will arrive at it given enough time.
Fucking hell…
So they’re happy for us to read all their messages, right?
I heard reddit sends out warnings for updating certain comments these days.
So every financial institution and everyone using WhatsApp
I think whatsapp it’s already sharing chats with a few governments
thats what happens when we as society become ignorant and inept, and therefore we vote for inept and ignorant people to represent us.
When has the majority not been ignorant and inept?
Back when societies collective knowledge was like 4 things?
They are not all inept.
They know exactly what they are doing.
It is a hostile act to create information the state isn’t privy to. That is a very deliberate act.
Fascista
I think this is more malice than it is ineptitude tbh.
If i remember correctly, a few weeks ago a government party had their signal chat leaked. Those people have since ceased using signal right?
There’s no problem with Signal’s encryption. It’s the same issue with any and to end encryption scheme, at either end is a person who can very easily copy and paste everything that has been said in the conversation and send it off to anybody they wish.
No of course. I meant that if at least one party in the UK gov is using signal, with end to end encryption, they are no longer using it because they are now considered ‘hostile actors’
Well, yes, generally the recipient of a message has to get access to its content.
Not running down Signal or any other e2ee client out there. But there are in fact ways to prevent the recipient from retaining and, at least via the device they are using to receive the messages, copying the data within messages. Several banking apps actually include such measures. And perhaps even having a Mission Impossible-esque self destruct on the message where it re-encrypts and then deletes the messages after they have been viewed is a viable way to prevent retention. It would not prevent somebody from using another device to snap a picture of the information in the message, but it would definitely cut down on people’s ability to easily leak private conversations that are intended to stay that way.
No one said there was
Did they also invite a journalist to the group chat?
HTTPS ❌🇬🇧
HTTP ✅🇬🇧
SSH ❌🇬🇧
rlogin ✅🇬🇧
Gee why does the capitalist oligopoly fear communication they can’t monitor it’s not like they are doing anything wrong and have anything to fear from little old us
Shit-flinging desperation at the realization that they have failed to contain dissent via internet-based coordination. Elbit and the UK’s protection of property was defeated by persistent disruption thanks to the work by Palestine Action. Unlike previous forms of communication, the empire has had tremendous difficulty wrestling control away because the materiality of the internet is so dispersed, accessible, and impossible to restrict without dire economic and military consequences.
The autonomous murder bots are not complete yet
I’m just baffled Labour is trying to die on this hill.
I mean, they wouldn’t be wrong, but they don’t know why they aren’t wrong.
“You are a hostile actor if we say you are a hostile actor.”
Reminder, rules for thee, but not for me
The British ought to actively strike against and shut this down ASAP or they will lose their country to complete fascism. Say goodbye to any aspect of democracy.
So google, amazon and Microsoft are hostile actors.every cloud provider is an enemy of uk government. They have gardeners (at best) or lawyers ( most probably), which did their own research.before writing these abominations. At the same time, they want to give all medical datas in the NHS to palantir. This is the apoteosis of incompetence.
All those companies willingly hand over our data when asked. At this point it’s almost a feature
Obviously not. They’re happy to give MI5 a backdoor into all their systems.
The age old question - malicious or stupid.
Guess all transfer of digital medical data between hospitals is a hostile action.
This is actually bonkers and goes to show that governments are loosing this battle, this just means that no matter what we cant stop.
blog.giovanh.com/blog/…/a-hack-is-not-enough/ this article makes a sadly excellent point in response to you here. Fair warning: it’s long. But even if you dip out early I assume you’ll get the point being made
It’s not really wrong though. This kind of legislation certainly makes me hostile.
Wtaf?
Do you have a link to the law?
It’s from this report …gov.uk/…/E03512978_-_Un-Act_The_National_Securit…
I emailed my MP about this before Christmas and am yet to get a reply
That is irritating. Consider writing anew.
Not sure which one is dumber
The USA or UK
Yes.
The UK is the USA of Europe
Dad?
There’s a common saying in Germany that applies. <img alt="Die spinnen, die Britten" src="https://discuss.tchncs.de/pictrs/image/f1cb42d2-f491-495c-9153-8abdc44a3aac.jpeg"> Basically translates to: “Those Brits are crazy”, but the literal translation would be: “The Brits are spinning” (yarn).
Obelix knows best.
What I see here is that the UK is a hostile entity towards humanity. So, fuck the UK government and all their parties. Since we’re here, fuck the French government as well, just in case.
Does the UK create any end-to-end encryption app?
For their own use they have one that would have been a simple off the shelf option for others.
I need full encryption to prevent ads but the originating country doesn’t really matter i’m fine with UK if they have something to offer.
The whole government is currently using the famous ROT26 encryption algorithm.
I am trans and a U.S citizen, the UK govt cannot comprehend how hostile I can towards it.
Hell yeah
<img alt="" src="https://lemmy.ml/pictrs/image/64937658-6e9d-4ba6-8e77-f79bdb7eeff8.jpeg">
Even the US used to ban the export of strong encryption algorithms. You used to have to download the stronger encryption algorithms separately. en.wikipedia.org/…/Java_Cryptography_Extension
Protectind yourself from beind spied on and then potentially blackmailed is a hostile behavior!
…to the blackmailer, yes.
Look mate yaint paid ya proivocy loicence fer ages.
I paid it, but the transaction was private. Have a nice day.
If they’re not doing anything wrong, they don’t need to read private communications.
https has got to go
sneak up into a dark street corner at night
“Ay you got that ed25519?”
No clue where that is from and if it’s already in effect, but what’s marked here only talks about developers, not users. Still, what a world to live in
Bar to become enemy of British crown is getting lower and lower…
Makes me want more E2E encryption.
Welcome to the resistance
always wanted to be a hostile witness
Fuck this shit. The UK is not longer a free country. And fuck Israel even more for their damned work over the decades to make this possible.