this post was submitted on 27 Jul 2023
307 points (96.7% liked)
Technology
59740 readers
3679 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related content.
- Be excellent to each another!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, to ask if your bot can be added please contact us.
- Check for duplicates before posting, duplicates may be removed
Approved Bots
founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
VPN tunnels don't magically become transparent when packets pass UK fiber and routers. And legislation doesn't translate well into which software people are allowed to run, for endpoints in UK. They can try to become North Korea of course, good luck with that.
I'm aware, but most software utilizing E2EE are maintained by corporations. If those companies want to operate in the UK, they will need to implement a back door, most companies utilize encrypted traffic to and from their server rather than E2E, and most people don't know someone outside of the UK able to create a vpn tunnel that isn't operated by a company. I'm willing to bet that the UK is also prepared to leverage lawsuits and warrants against individuals that write encryption algorithms without a back door, regardless of what country they live in. I'm willing to bet github and gitlab also don't want to take the risk in hosting encryption algorithms that don't comply.
They won't do that, they'll either turn off the option of E2EE or pull the app from the UK market if the app is entirely E2EE, because the UK market isn't big enough to be making worldwide demands like this.
I generally agree, Apple has threatened to remove some apps from the UK market over this, so it's not like this will be accepted lying down. But the reality still exists that most things like VPN tunnels are operated by companies, so they can't legally operate in the UK without the backdoor. Overall, this will primarily hurt UK citizens, but this law threatens to impact everyone on Earth
But are e2e from big corp REALY e2e? Like whatsapp? How many cases there were "Whatsapp Chats from the attacker showed that they were backed by terrorists" or so. Github.... was github EVER encrypted? or Gitlab? They dont want big corporation rather "small" open source like the matrix chats or other sorts of real encrypted chats.
End To End Encryption (E2EE) is a very precise term meaning that something gets encrypted on your device and doesn't (usually can't) get decrypted by anything other than the destination. I don't know what they call it, but if Whatsapp calls it E2E then it's a misnomer. They encrypt to and from their central server, which is not E2EE.
WhatsApp claims it is true e2ee. Do you have evidence of it not?
That what i said
Yes, WhatsApp is fully E2EE, there is no back door, Meta can't see or be forced to hand over your messages. I've never seen those headlines personally, but they probably got just got access to their phones.
I don't know about GitHub, is there any reason to believe it isn't encrypted?
Whatsapp had been ever back doored. In germany there are so many news "Whatsapp chats show terrorist was a bad guy", "Facebook gave police chats of a suspect"....
If you really think even if it is really E2EE, does a data greedy company not have that encryption key? Are you really that Mainstream Apple fan?
Is there any reason to belive it IS encrypted?
Lol wait, so you're making the claim that an app that's widely known to be encrypted isn't encrypted because you made assumptions based on news headlines and you want me to prove it is encrypted? Well that hardly seems fair...
But sure, I'll do it anyways.
https://www.justsecurity.org/79549/we-now-know-what-information-the-fbi-can-obtain-from-encrypted-messaging-apps/
FBI themselves admitted they can't get messaging data from WhatsApp. At best they can get iCloud or Drive backups, but even those use full encryption now.
https://faq.whatsapp.com/444002211197967
In fact, WhatsApp straight up tells local law enforcement that no, you can't request messaging data.
But sure, yeah, let's go with your German headlines that I'm pretty sure you've misinterpreted.
Whatsapp is NOT widely known to be encrypted of a privacy killing company. I really doubt that still. I have heard of Signal that they give no f*cks about law enforcements. But never Whatsapp. And we cant trust if they are just backdooring it for them and only in the dark giving them to the fbi. Do you really think that meta "encrypts" anything REALLY.
I work in this industry, yes, it is. Just because you don't know something doesn't make it not true.
No actually, they still have to respond to requests for metadata. They actually do very much give a fuck about the laws of the countries they operate in.
They aren't, I literally just sent you proof of that.
Yes, because they do.
Man you're off your fucking rocker dude.
Wow just another troll who doesnt understand when to stop. Who is a corporate fanboy who trust in big corporation not to f.. around and sell any data they have. As Meta or rather Facebook is very trustworthy not to sell your data ;). And again from someone from lemmy.ca
Riight, I'm the troll, because I'm responding with links and sources proving your bullshit wrong. Ok bud.