Encrypting private data and private communications is now an ethical duty
blog.tripu.info
blog.tripu.info
In days of yore my CS law module was taught by a QC - that's a high ranking barrister in the UK - who explained the world of difference between the "The Rule of Law" and "the law" in a class called "jurisprudence".
Rule of Law (capitalised conceptual) is there as permanent ground truth in contrast to the ephemeral du-jure laws.
At times I still struggle with that profound counter-intuitive idea; that if one deeply, passionately believes in the necessity of The Law and all of society's institutions, one must with equal passion break laws and throw rocks at the police when they are tools of tyrants, idiots and dumb laws.
Indeed today I think that opposition to technological tyranny has become the mark of the true conservative, and that defenders of common sense and simple human dignity are forced to assume the "radical" position.
High ideals are very expensive.
"-- That whenever any Form of Government becomes destructive of these ends, it is the Right of the People to alter or to abolish it, and to institute new Government, laying its foundation on such principles and organizing its powers in such form, as to them shall seem most likely to effect their Safety and Happiness."
I would guess that most anthropologists, for instance, would say it's rubbish -- people who have studied the exceedingly wide variation in what is considered moral or immoral across cultures. A duty in one community may very well be a prohibition in another.
But you don't need to believe in any kind of "permanent ground truth" law in order to "break laws and throw rocks at the police". You merely have to believe that the current laws/administration are acting unjustly according to the local morals of the time and place.
Everything else gets layered on top, with more and more sophistication.
Ethics and morals are attempts to encode various ideas of long term successful strategies for that longer term goal, to help counteract many of the shorter term incentives. But, like most ‘shoulds’, they are often just wishes by those disconnected from the actual reality on the ground or from those that have no ability to make them actually make sense.
Local vs Global maxima perhaps? Or ideal vs reality? Or protective delusions? Or wisdom of the ages? Or tools to direct the median? Or longer term goals?
For someone wiser than me to decide, I imagine.
Underlying it, those who survive will justify however they want, they’ll be the ones writing the history books.
Practically, how do you propose acquiring that power, or having anyone to rule over, that would not leave you vulnerable to all those other things I listed?
As in, whatever power you have being used to serve someone elses interests instead of your own, or even be used to destroy you. Or your own basic needs being sabotaged behind your back to murder you.
There is a reason why dictators and kings tend to have somewhat predictable endings, and it's rarely 'passing away peacefully in their sleep at a ripe old age'.
This is a common misconception. A lot of surviving and reproducing is possible when you work together and cooperate. As King Pyrrhus found out the hard way fighting the Romans.
Sure he initially succeeded in defeating a roman army or two. But you know what? Due to their superior organization skills, the Romans could just field another one. And another one.
"If we are victorious in one more battle with the Romans, we shall be utterly ruined"
Excessive control and violence is almost always as losing a battle as excessive permissiveness/peace.
America is for example in a pretty strong position, but maintains power by doing diplomatic stuff. Being in some sense the leader of a big coalition of friendly countries (imagine if we had to force EU countries to accept our bases by violence, it is way cheaper to just be on friendly terms with them and pay a little rent). Being the world’s reserve currency. Setting up and having outsized influence in international organizations.
That sort of stuff requires give-and-take diplomacy, cooperation, and setting up a system of international norms and laws that everyone at least pretends to respect.
Might might make right, but a complex system of rules, conventions, laws, negotiations, reputations and even person-to-person relationships made quite some might. It’s sorta chicken and egg.
All of those systems are a response to “might makes right” and the history of violence with the ultimate conclusion in the trenches of WWI and WWII. Wars to decide whose might is rightest became so destructive in the modern era that we created all these complex systems of geopolitics - because few of us can stomach destroying a century of industrial progress to prove our might anymore.
“Might make right” still dominates the interactions between unequal states.
If this sort of military force can’t be produced without a bunch of willing allies, then the force is just an intermediary step. It is constrained by the need to keep those allies willing.
I’m not saying the world is all butterflies and roses, just pointing out that that constraint is real, and I think it is not really what people think of when they say “might.”
I think the standard example of this is whether you marry your brother's widow.
On the other hand, there is a large list of phenomena that are observed in every documented culture, such as marriage.
I am no anthropologist myself but I remember hearing that this list is actually rather small. Religion was an example that was given and I would believe marriage. How many others, though?
Some level of prohibition against lying in court, judicial corruption and generally perverting the course of justice must exist in order for a system of law to operate.
In some cultures, marrying your brother's widow is prohibited because it counts as incest.
I don't know how I would describe the state of this variable in modern western cultures. In modern America, I tend to think it would raise eyebrows and people would be uncomfortable with you.
This seems to be fairly well documented without even a need to leave the Jewish tradition: https://www.thetorah.com/article/the-priestly-repudiation-of...
> Despite the great store Deuteronomy places on this practice, the Priestly Torah seems not to endorse yibbum. It legislates the following blanket prohibition:
> [Lev 18:16] Do not uncover the nakedness of your brother’s wife; it is the nakedness of your brother.
> Here the text forbids a brother from marrying his brother’s wife, ostensibly even after the brother has died. No exception is noted for the brother’s childless widow.
> This problem so bothered the Sages, that they list it within a collection of contradictions in the Torah whose reconciliation is a feat so intangible “that the mouth is unable to utter and the ear unable to hear"
> The cumulative evidence suggests that P/H did not consider yibbum an option, and likely repudiated it. Perhaps the Priestly authors did not feel that incest should have any exceptions—yibbum, which involved a woman marrying her brother-in-law, is at its core incest with an “indulgence.”[5]
> [5] The Sages seem aware of this problem. See, for instance, Tosefta Yebamot 6:10 (cf. Yeb. 39b):
> A man who goes in unto his childless sister-in-law for the sake of beauty or for the sake of property is to be considered as if he is committing incest
Natural law is a completely different concept.
I dipped into it a bit in my study of ethics, and there's many eye opening passages, though it's mostly a rehash of Nietzsche, minus the compassion and good humour :)
Today it's regarded by some as a seed of "far right supremacist" thinking. And sadly these ideas are confused with the work of Darwin etc.
We should also note many historical counterparts, and remember that, for example, the Greeks rewarded soldiers with "spoils" as payment.
I think what I'm saying about upholding the principle of Rule of Law above the laws of foolish men is quite separate from this - although when governments test their people to the point of rebellion it is about the brute reality that might does not lie where it is supposed.
[0] https://archive.org/details/might-is-right-by-ragnar-redbear...
I find it much easier when it is defined in contrast with “not rule of law” or “arbitrary rule by men” as it is traditionally described.
The point being that it is not about the laws themselves, but rather the manner in which power is exercised. Laws may exist, but if some people are not be bound by them, and are able to wield the laws however they wish (we call these people tyrants), then you don’t truly have rule by law, you are rule by arbitrary will. In order to have rule by law, the law must be the source of power itself, and must apply to all people equally.
This is where resistance to unjust laws or unjust authorities comes in. When people use their authority to put themselves above the law or excised use the law in an unjust/unequal manner, then we are stepping outside the bounds of the rule of law itself. The law is reduced to a mere tool of oppression rather than a source of legitimate authority.
A corollary to this, as mentioned by another commenter, is the concept of so called “natural law”, that is law that exists as an antecedent to human law or is given by god/some other non human source. Note that rule of law is not the same as nor is it dependent on a concept of natural law. The concept of “The Rule of Law” is much older than that of “natural law”.
However, we are humans and thinking that "we have arrived" and "I know Utopia" is full of pride and not humble.
Rule of Law is a *process*, that is, it should (ideally) be procedurally symmetrical to all people it applies to based on each person's applicable merit or demerit. So long as you live in a republic, you should try to follow the Rule of Law. No, you are not obligated to throw rocks at police, even when they are tools. You fight tyrants where it matters to them, in the courts, voting box, and make the rule of law apply to them. Tyrants won't care if you injure an officer, in fact, they will use that against you (see rules for radicals, they want your reaction). You find the real battle and fight there.
That's a strange way of articulating it. The Rule of Law is simply the concept that a society is ruled (hence the name) by the body of law that it passes. That, quite literally, the ruler of the land is the Law.
It's that simple!
> We should all use PGP, SSL or equivalent tools; VPNs, Tor and/or SSH tunnelling; IPFS, or other distributed file systems — and ditch proprietary OS's in favour of Linux or truly free Android distros... Those tools and techniques should cease to be arcane nice-to-haves for nerds: we must get more non-technical people onboard.
This is so unrealistic and impractical as a moral "duty" for "all", it undercuts my ability to take the rest of the piece seriously. It's not any kind of seriously considered ethical analysis, weighing the pros and cons of what's actually best or most effective in the real world -- it's a pipe dream.
The only universally used tech on this list is SSL, because end users don't need to "install SSL and learn to use it" - we had to put in the work to upgrade or shitty servers, and they get the benefits.
Time had proven that the "don't you care about your privacy" argument doesn't work, so it's up to us to make the privacy-respecting tools better than the alternatives
If you're of above average intelligence, remember that you're likely biased to assume the average person is more intelligent than they actually are.
To me, the sociological aspect is in the way we act together as a society, helping others do what we think is good, providing support. Not simply how one is expected to somehow learn and do everything out of nowhere.
The decentralized nature of the technologies mentioned contributes substantially to their resilience. Re-centralizing them opens new avenues of attack and new targets to silence and corrupt for the state.
All kinds of technical difficulties can be fixed with effort and talent of a few people, but if something requires will of the masses and there's a lack of will, that thing is simply not going to happen no matter what you do - because there's no "just" with respect to lack of will, that's lack of something necessary that you can't easily create.
This comes across as rude, especially in response to someone that did not themselves say anything warranting a rude response. You can disagree and make your point without doing this. I'm pointing it out because you genuinely may not be aware and I want to give the benefit of doubt (something I myself too often do not do online).
E.g., People for whom significant, immediate, unexpected mechanical feedback in operating something simple, like window blinds, wouldn't cause them to consider whether they might be doing something wrong, and instead continue operariting the blinds in the wrong direction until they snap and break, genuinely being unaware that they were doing it wrong.
People who are genuinely lacking the common sense you'd expect a human to have, not even with any cognitive disability or learning disorder of any kind - just genuinely stupid but otherwise ordinary people.
Ironically, that's a stupid assumption to have. You might be in your own bubble, but I know many very intelligent people who do not have the time or interest in gaining digital privacy. It's not as easy or without compromise as you seem to think.
People who care will figure it out, and those who don't will be left behind.
But no, thats not acceptable because you have to gouge everyone to make as much money as possible nowadays.
I often have trouble convincing people to install Signal, which requires about two minutes for people who barely know how to use their smartphones and under one for people who know where the app store is. If a majority people don't have the motivation to do that much, we have a very uphill battle.
People who care will figure it out, and those who don't will be left behind. Is that not the case for most of history? Atleast apps as you say are accessible to everyone without them having to invest a second thought.
Why should the average joe have to consider a second thought? If my Dad wants to watch his favourite TV show, he should be able to do that in the most accessible way possible.
Perhaps Microsoft shouldn't have built a GUI and should've kept the CMD line around so that we would've all had to learn to "do it the hard way" and wouldn't have been infantilizing us with buttons, graphics, file explorers, hyperlinks and applications.
Yes, I agree that everyone should have access to those technologies by default. I also think that the implementation for the layperson will make the projects almost unrecognizable.
This lack of ability to be able to control your emotions undercuts my ability to take the rest of the comment seriously at all. It's not any kind of seriously considered rational comment, weighing the pros and cons of the thoughts presented -- it's bad commentary.
If those tools cease to require arcance incantations and work seamlessly like every other thing everyone else is already using, then I don't think it's unrealistic at all.
The fact is that developers very (very) rarely have to interface directly with TLS or the Signal protocol, yet billions of non-technical users implicitly use them in our browsers and via Signal or WhatsApp.
In my view, the challenge in the adoption of secure/private-by-design tech is the simplicity and usability of the interfaces and the capabilities these tools provide.
We need secure tools to compete on capability in order to garner mass usage. Without (significant) feature superiority there's little reason for users to make the switch. I'm actively trying to solve some of these problems at Backbone [0]; aiming to build a usable, secure experience for end users and a simple, robust end-to-end-encryption interface for developers.
Problem is – if you can't trust any server, end-to-end encryption naturally often leads to feature inferiority in the context of multi-device usage.
At some point, going to the moon was unrealistic. Right now, ending wars is unrealistic, but it's also absolutely necessary.
However, that doesn't mean it can't be a gradual process that takes years or generations even.
I'd certainly support it. What he's calling for - it's similar to the dominant spirit in the US after the Edward Snowden revelations. It resulted in a lot of ethical and beneficial stuff happening in a relatively short amount of time.
Not just in tech, even news orgs lost much of their aversion to covering surveillance abuses. At least for a time.
The only reason we currently have any message encryption is because a few tech companies have made the decision to protect as many as possible by releasing products which enable it (iOS, Whatsapp, and now texts via Google Messages). Not everyone who uses these products knows they're protected and not everyone will care if they were to turn off E2EE tomorrow.
Completely false. Phil Zimmerman gave us PGP for free in 1991, and numerous open encryption standards now belong to the general public. Giving credit to Apple, Meta, and Google for this isn't just blatanly incorrect; it erases the hard work of genuinely good people, and shifts the credit to user-hostile mass surveillance corporations.
My wording wasn't exact; other encryption programs have enabled secure messaging, but without big players it would've been outlawed by now because it would've been easier to say "only criminals" use encrypted communication.
As for the "numerous open encryption standards", these are fairly irrelevant since the foremost goal is not encrypted messaging, but mostly for creating a secure way for business to interface with customers (can't run a startup or Fortune 500 business without being able to trust requests and responses). Getting people to use encrypted communications is the hard part, not designing the encryption or even implementing it.
didn't help as much as they hoped, as there are no trustworthy platforms to run any of it.
You claim that _every single person on the planet_ can use the corporate apps, which implies that every person is able and willing to buy a device which can run them. Not everyone can buy a smartphone, and not everyone is willing to buy one for various reasons, but anyone with access to ANY computer can run PGP.
As long as computers exist, we'll have PGP. The other messengers rely on centralized infrastructure which could go down by accident or by hostile actors. Even Signal, which I love and recommend - and was not mentioned by the post I was replying to earlier (why?) - could easily end its services one day.
The wrong thinking I see in your post and the earlier one is this:
1. Lots of smart people create encryption schemes
2. Phil Zimmerman invents and releases PGP, giving the power of encryption to everyone with a computer.
3. Years pass...
4. In the smartphone era, Google, Facebook, and Apple incorporate encryption into their apps, in order to entice users to use their platforms and take their friends with them.
5. You and that other guy are all like, "Praise be to Google and Meta and Apple for giving us the power of encryption!"
And if people say, "but our country is free", tell them that if your country was not, how would you get back to freedom? Is your software and hardware free and open so that you could do this?
If the E.U. really made Chat Control, it would require a DRM that would restrict non-signed OS from running. How would you install freedom software under this situation?
The only way is to prevent the implementation of locked hardware in the first place.
I have seen this claim, but I don’t believe it is necessarily true. If EU legislation limits encryption on WhatsApp and other messengers offered on the Play Store, then that already implements the law for the vast majority of the population. Us nerds might be able to run whatever OSs we want, but we and even non-nerd sideloaders are nearly a rounding error.
Since most Android phones and all iPhones cannot install freedom software, they don't have to explicitly put a DRM at the hardware level, because it is already there from Apple or most Android manufactures.
Apple devices can only install software from a signed key. Most Android phones can only install Android from the device manufacture signed key (unless Google Pixel for example).
However, Android allows installing apps from not just the Play Store on most devices, so either the Android OS would need an update, or the hardware would need an update.
1. My government will use this tech only for good. 2. I don't live in China, so why should I care about that.
If you say that your current government loses freedom and how do you go back to freedom, then they think differently.
It makes them think they need freedom now in hardware and software, so they can go back to freedom, instead of being permanently stuck in non-freedom.
Precisely, and even now there are a steady stream of examples of people in power using tech for no good, here's just a tiny snippet of examples where police had mis-used databases to spy, stalk and harass:
USA:
N.J. cop used police databases to stalk ex-girlfriend, investigators say https://www.nj.com/monmouth/2023/01/nj-cop-used-police-datab...
Officer Fired for Allegedly Using Police Database to Stalk, Harass Women https://www.newsweek.com/officer-fired-allegedly-using-polic...
Australia:
Former policeman accused of using force database to stalk ex-wife and girlfriend https://www.theage.com.au/national/victoria/former-policeman...
Former federal police officer faces new charges over stalking of ex-girlfriend https://www.canberratimes.com.au/story/6138318/former-federa...
(Note the two above articles are not the same person)
UK:
Met police officer 'used CCTV cameras to stalk his ex-girlfriend after telling her to take up sex work to pay her bills' https://www.dailymail.co.uk/news/article-11868575/Met-police...
Creepy cop saw attractive woman on the road and 'looked up her license plate number so he could stalk her on Facebook' https://www.dailymail.co.uk/news/article-2178556/Officer-Jef...
The more you look, the more you find - and this barely scratches the surface of ways that systems that hold personal data can be abused.
When designing any new law, we must always consider the fact that there is no such thing as "good guys" and "bad guys". The potential for abuse must be extremely limited and the benefits of the law should legitimately outweigh the potential abuses.
How about saying I have lots to hide.
I want to hide what I had for breakfast. I want to hide what book I'm reading. I want to hide what time I went to bed. I want to hide how many times I go to the gym each week. I have lots and lots to hide. I am not the property of the state and neither are my actions; I have lots to hide.
This hypothetical situation is not made materially worse by the existing backdoor.
So your assertion fails before you even get to merits.
Besides, "you need to protest RIGHT NOW so that you can delay total surveillance regime by a year or two if the government eventually turns North Korean" does not sound like a strong call to action to me.
No, it doesn't, because it's not an argument. It's just an assertion--and one which, as another poster has pointed out, is false. Everyone has things to hide. But "hide" is not a pejorative term here; it's just a recognition of the fact that people have private lives that they don't want to share with everyone. The so-called nothing to hide "argument" depends on ignoring that fact and treating "hide" as if it had to be something nefarious.
> We should all use PGP, SSL or equivalent tools; VPNs, Tor and/or SSH tunnelling; IPFS, or other distributed file systems — and ditch proprietary OS's in favour of Linux or truly free Android distros.
This is not anything the general public, for whom today their mobile phones with Play Services are the default device and things like WhatsApp their means of communication, is going to do. All the state needs to do is force weaker encryption on the common apps offered on the Play Store, and that covers the vast, vast majority of the population.
Yes, I know SSH tunnelling and compiling your own Android are tall orders for the average user. Here I'm just hinting at some examples that are well-known among us geeks, but there are easier to use alternatives to all that. I suspect Protonmail is as easy to use as GMail. VPNs are so easy to use nowadays. The UX on Signal isn't particularly challenging to the average user of WhatsApp.
There is a lot we techies can do to educate normies and respectfully push them in the right direction, but we keep on neglecting that responsibility under the excuses of bad usability, lack of features, or convenience for users.
On an earlier draft I also had a sentence like: “a big effort in usability and outreach is needed”. Definitely so.
My point is not that we can get all EU citizens to switch to SSH tunnelling and Purism, but that we IT professionals should spend more time and effort educating a fraction of the population to move the deal in the right direction and avert catastrophe.
A value leverage point to look at is; why are these perceived to be in tension in the first place?
Revising the concepts of "convenience" and "usability" to incorporate not having your life, business and affairs ruined petty tyrants seems the way to go.
It seems quite possible to design software such that it's more difficult not to encrypt than it is to use insecure defaults.
That's more or less what happened with browsers vis a vis https by default, no? I really have to go out of my way these days to view a plain http site.
Catastrophe, you mean like thousands of radicalized people meeting securely in secret online to disrupt an objectively legitimate thing?
I would like more widespread penetration of critical thinking (such as teaching people to pattern-match on the most common fallacious techniques used by cults, conspiracy theorists, propagandists, modern snake-oil salesmen, and other ne'er-do-wells) before we deploy some "mass security recommendation" that would enable people to more comfortably plan things like firebombing vaccination centers based on secretly-exchanged nonsense. I mean, isn't that why "the authorities" (assuming they are good actors, which is of course an unknown) are nervous about pervasive, easily-accessible security?
Fortunately, it seems like most bad actors are idiots who have zero qualms about insecurely broadcasting their thoughts on social media leading up to their committing of despicable acts. But your efforts might make such "precognitive noise" "secure by default".
(In principle, I agree with you. This Martin Fowler piece on privacy, I consider seminal: https://martinfowler.com/articles/bothersome-privacy.html I'm just saying that no single technology seems to be a universally-satisfying panacea.)
Do the bad guys use these technologies? Yes, but so what? It's like saying that we shouldn't educate people about knives because some guy can use it to kill people.
This whole fear of educating people about privacy tools because some criminals will use it is so tired and irrational. Criminals do it already and have done it for a long time. It's inevitable that more people will use them in the future, including the "bad guys". How about we just accelerate it and instead think of why people commit crimes in the first place? Nah, too hard, let's try to ban math instead.
> Fortunately, it seems like most bad actors are idiots who have zero qualms about insecurely broadcasting their thoughts on social media leading up to their committing of despicable acts.
At some point they'll stop doing it and become more aware of their OPSEC. Or they do it intentionally because they want to get caught.
This isn’t something you’ll find universal agreement about. My own position is that we techies are seen as weirdos by most of the population, and what we should do is leave normal people alone. Definitely not try to “educate” them – think about how elitist that’s going to sound to many of them.
Education has always been and always will be an uphill battle. No one likes to be taught. We do it anyway, because both are enriched in so doing.
By analogy, I wouldn't mind a friend with medical training sharing what they know about heatstroke prevention to a group of us before we embark on an hike. I would mind them giving me nutrition advice based solely on what I ordered at a restaurant.
(Edited to fix wording)
I think this is a mistake. If you actually want to switch to FLOSS and control your own devices, you should abandon semi-proprietary technology relying on a huge corporation and switch to a GNU/Linux phone, like I did.
End-to-end encryption without a trusted server makes multi-device usage rather complicated within a number of contexts. Full-text search for example then requires all your e-mails to be indexed on each individual device you're using for accessing Protonmail, and you need to keep that index permanently unless you want to re-download all messages and re-index them again the next time you need to search something.
I don't very frequently use full-text search from my phone for example, but when I need it, I do need it, so neither proposition (permanently occupying valuable space on my mobile phone with a search index I only occasionally need, or else wasting a noticeable amount of time and data volume to re-index all mails every time I want to search something) sounds really enticing.
Yes it goes into arm-waving rant well beyond benefit of encrypt/private data.
SSH tunneling can wrap communication in another layer of encryption but so what. Distributed filesystem is not a magical privacy sauce. Proprietary OS (commercial or my home-developed POSIX compliant OS?) is bad how? While telemetry by commercial OS may be a concern it is not the same concern as me keeping my files private with encryption.
The author slips toward Richard Stallman activism about related and wide-ranging issues, which detracts from achieving engagement by average person. https://www.fsf.org/blogs/rms
I moved my wife and I to a Matrix server that I control, with disk encryption on top of the Matrix encryption. Signal was great for us, for a long time, but it was time to move on.
I've even set up a Matrix chat server for my business for "office hours." The governments of the world have no right to see my comms with my (future) customers.
And as soon as I can (when I have customers), I will be donating to the people who run Matrix. I'll probably set up a support contract.
If you can set up a Matrix server for friends and family, do it.
Also, I believe we as programmers have more duties to stop this tide of authoritarianism. I'm writing a blog post now called "Your Loved Ones Are Prisoners, and You Made the Chains" because yes, this is partially our fault.
So we need to step up and do more to stop this.
Am looking forward to your blog post!
Thank you.
The bottom line though is that people that are more tech savvy and more knowledgeable will always have better privacy no matter what, unless you literally enforce Linux and all that on everyone, which is just not gonna work.
And even if it does, you'll then have to ensure they actually use it properly without screwing things up and compromising their privacy, by which point you'd need every person to know a good amount about networks, security, operating systems etc, which is even harder.
The best course of action is making privacy tools easier to use, so that more people can use them. But without some massive change initiated by corporations or governments, it's infeasible that everyone suddenly gains privacy. YOU have to put the work in to protect yourself, not someone else. And most people don't care. And that's fine. Most people suck anyways!
It's easy enough to become aware of privacy issues in the modern world, don't pretend like people don't know about them. If people care about them, they will learn how to solve them for themselves, there's plenty of info. If they don't, there's literally nothing you can do.
Most people aren't given the choice. When they are actually presented an equally simple decision between more privacy and less privacy, nearly everyone chooses privacy.[0] Making privacy just as easy as not-privacy is exactly what needs to happen, and that is likely to only happen through regulation. We can already see how hard companies work to avoid complying with GDPR and the cookie law.
[0] https://www.flurry.com/blog/ios-14-5-opt-in-rate-att-restric...
My informal observations at TSA gates indicate 99.9%+ of people opt-in to the voluntary full body scan privacy invasion. Some people are enthusiastically posing for the TSA voluntary facial recognition cameras. Vast majority of people act like they don't care about privacy.
The original blog post is good though.
This is straight up crass and off-putting. These shitposting emojis do not belong in a serious pitch.
This might just be me feeling like this, but even considering geo-residency in some of my early prototype designs feels very odd.
I was optimistically hoping PaaS providers would catch up and fill in the middle ground. But seemingly for every Enterprise customer I'm manually filling out a document declaring our data residency, our vendors residency and how we use certain data.
I'm an advocate for privacy, but f* me this is getting to be overwhelming.
It's like complaining that the GDPR is causing cookie banners on every site. That's only half the reason. The real reason is that the websites need one's opt-in to do something they shouldn't be doing. Obviously the law should have been crafted with an automatic system to reject all non-necessary cookies in mind, but the fault for the cookie banners still lies with the website.
Either a solid and affordable PaaS solution or at the very least a single global international standard is sorely needed here. The current model is barely sustainable as it is, and it's getting worse, even for privacy-respecting endeavors.
sometimes they get big enough comply or change laws later
remember there’s always later
https://www.numerama.com/tech/1533652-attaque-a-arras-darman...
I'm Spartacus.
Whatever protection I'm getting from non-consensual surveillance, I am declining it.
I'm not sure if we're mindful of this but Gov's only ethical purpose is to serve us. Past that, it has lost it's way.
So far as I know, the only way to do that is to leave whichever country is doing this, which — trust me on this as one who has done so for slightly messier reasons — is a right PITA even when going somewhere else that has a functioning society. I don't think there's any other way to make yourself an "outlaw" in the old-fashioned sense of the word: https://en.wikipedia.org/wiki/Outlaw
I get that. My point was more about the value of the protection - of being kept safe from things like FBI's handcrafted terror plots.
The bonus is now everyone knows they do which further erodes the base legitimacy of the institution, increasing the likelyhood of reformative action potentials.
Besides using encryption, I also have surveillance-evading conversations and activities; I even hide thoughts in my head.
At some point we might want to recall that not being snooped on is a natural state.
If they actually want to catch all crime, the only way to do it is mass physical surveillance, either with laser microphones Van Eck phreaking, or with smart-dust and the like. These technologies aren't limited to just government surveillance, so I've been saying for ages now to anyone who will listen that we need to massively alter our "common sense" attitudes to crime and punishment before organised crime starts using it to automate mass-scale blackmail: a judge or a police officer snorting cocaine would be demonstrating poor judgement just to perform the act, let alone as a result of the drug itself, but society is much worse off if a mafia records them doing it so they can get their people off the hook for bigger crimes.
And no, governments can't just use such surveillance to arrest everyone who breaks the laws: my go-to example of this is heroin in the UK, because as far as I can tell nobody defends heroin, yet enough people use it (200k) that fully enforcing the "no possession" law for that substance alone and nothing else would nearly triple the current UK prison population (95k, though I'm assuming that at most only a small percentage of them are currently getting heroin into their prison).
I don't know what the best way to approach things like this would be, only that it's not going to be an easy thing that can fit into a comment box — the best I can do is say that my vibe is instant-and-tiny penalties, so a speeding offence might be £0.1/minute/(MPH over the speed limit)/(thousand pounds of monthly disposable income) or something like that.
Doesn't Protonmail decrypt at the server? That is, can't Protonmail read your encrypted messages? And don't they have form for grassing people up?
I'm not sure about those two claims. But that's the point - it's difficult for even a techie to use crypto(graphy) safely. If you want to use it as an impediment to snoopers, or as some kind of statement, cool. But if you let the server decrypt your messages, you aren't really safe.
Signal disloses your phone number.
I think I understand the limitations of PGP/GPG; I'd use that, if my correspondents had ever heard of it (and if I were sure that they weren't going to forward/reply-to my messages in plain, or store the plaintext on some Google server). But at the moment, the state of end-user encrypted messaging software doesn't look very safe to me. What I would like to see is an end-to-end scheme that can't be used unsafely, even if the user is an idiot, and that is used more-or-less universally.
Otherwise I'm reluctant to SHOUT my secrets over the internet.
It doesn't decrypt them server-side, but since they're the ones serving you up with the webmail interface, you still need to trust them that the webmail code doesn't do anything nasty it shouldn't actually do.
https://www.youtube.com/watch?v=TaWSqboZr1w
Hardly a new problem, but certainly a recurring theme in history.
It is hypocrisy and lunacy that take over fundamental respect for individual privacy. It is inescapable in the current global exchange.
Have a gloriously wonderful day =)
I'm having a feeling that the OP either had a lot of luck at persuading and educating non-techie people or hasn't yet had many such encounters with the general population.
Free speech is a joke in Europe (despite loud denials from Europeans who insist free speech exists in Europe and the restrictions are /necessary/ in the war against misinformation).
The right to protest is slowly getting strangled. How are Europeans OK with protests requiring /permission/ from the police?
Government transparency? Zero to none. You'll get stonewalled or ignored when you ask for information. Don't be so difficult. Just believe the government has the /best intentions/.
Surveillance cameras on every street corner. No store accepts cash money anymore. Your car and phone track and store your every move.
This crackdown on encryption is just another domino about to fall.
* Superset of bare metal recovery readiness, proven backups, monitoring, availability, and warm storage integrity.
** Superset of consistency, isolation, referential integrity, and data hygiene.
*** Superset of authenticated, G4+ FHE, and/or zero-knowledge encryption at rest and in-flight, elimination of side-channels, least privilege access control of metadata and data, removing plaintext paths, reducing privacy-liability metadata, and eliminating bleed-through of internal metadata externally.
https://www.youtube.com/watch?v=Fzhkwyoe5vI
^he has a video on this topic, its a rather philosophical channel, and this is a rather philosophical video
ie, legitimate political opposition to the "only the state can see all of your secrets" is actually "let everyone's secrets be out in the open, those of politicians too"
if opposition starts using the logical endpoint of this line of reasoning, perhaps these constant attempts at removing our freedoms might diminish in quantity
If yes, how to achieve that without compromising the security of encryption of all your data?
You can also break up keys into multiple parts, such that you need N pieces of M total to recover the key. e.g. N = 2, M = 3: you derive three subkeys, two of which are needed to recover the key. Or, you could require the key stored in the will, plus any number of other keys for recovery.
Cryptographers have spent a long time doing math to make these kinds of key systems possible. I've gone down many a wikipedia rabbithole in the past about such problems.
> (Norway) the most robust democracy in the world (which also happens to be a EU member state)
Norway is not in the EU.
> Hungary and Poland, are still immature barely-liberal regimes with more than a whiff of political repression (“flawed democracies”)
Coming from a Spaniard? Go fuck yourself.
Like tripu, I am strongly and vocally in favour of privacy and individual agency. But some of the ideological drip in this piece left a bad taste in my mouth.
You are right, thank you! I just fixed that.
> Coming from a Spaniard? Go fuck yourself.
I was already fixing the error, and writing in my head the kind answer above. I hadn't seen this nasty comment.
Why the ad hominem?
I'm ranking governments — not individuals — according to international reports I've seen. Those classifications are debatable, of course. There might be bias, or nuances I'm missing. But why do you presume malice on my part?
How on Earth is it relevant that I'm a Spaniard?
He probably can't trust you because _he's known too many Spaniards_. (Sorry for being off-topic, but I really could resist making that reference to the greatest movie of all time;-).)
More on topic:
> Hungary and Poland, are still immature barely-liberal regimes with more than a whiff of political repression
I don't know what reports you've read, but I don't think we have any "political repression" here in Poland. Mind you, we had a huge demonstration opposing the ruling party 2 weeks ago (and many more in earlier months/years), and I haven't heard about any nasty consequences for people taking part in them. Though there is a lot of propaganda, both in the country and abroad, painting the government (which, by the way, was more or less voted out two days in an election) as some kind of evil empire, but that is just that - propaganda.
That said, I understand that (almost) nobody has time to study politics of 50+ (or more) countries just to write a blog post or something, so it's not like I blame you.
I used these reports, which I already knew before writing this post:
• Both Poland and Hungary are classified as “flawed democracies” by The Economist. Only 24 countries are considered to be “full democracies” (and this is irrelevant, but Spain happens to be among them). https://pages.eiu.com/rs/753-RIQ-438/images/DI-final-version...
• On a scale of 0–100 on political freedom, Freedom House gives Poland 81 points and Hungary 66 points. (This is irrelevant, but Spain gets 90 points.) https://freedomhouse.org/countries/freedom-world/scores?sort...
• The UN's Human Development Index ranks Poland #34 and Hungary #46. (This is irrelevant, but Spain ranks #27.) https://hdr.undp.org/system/files/documents/global-report-do...
• Amnesty International on Poland: “Access to abortion was further limited. Criminal charges were used to curtail freedom of expression. The authorities continued to erode the independence of the judiciary. Freedom of peaceful assembly was restricted. Violations of LGBTI rights persisted.” https://www.amnesty.org/en/location/europe-and-central-asia/...
• Amnesty International on Hungary: “Discrimination against LGBTI and Roma people persisted. Women’s sexual and reproductive rights suffered significant rollback. Teachers were denied the right to strike. Pushbacks of refugees and migrants continued in violation of EU law. The European Court of Human Rights ruled that Hungary had violated the ban on collective expulsions. Other judgments from the Court were not fully implemented. […] The European Parliament declared in September that Hungary could not be considered a full democracy.” https://www.amnesty.org/en/location/europe-and-central-asia/...
That is still compatible with a dispassionate evaluation of the democratic quality of its political system.
Again, I'm not necessarily defending my sources here. But I'm not automatically discounting them, either.
The Economist classifies Hungary as a flawed democracy due to a very poor mark in "political participation", "functioning of government" and "civil liberties". Those sections look at measures such as "voter participation/turn-out for national elections", "the degree to which the judiciary is independent of government influence", "the degree to which citizens are treated equally under the law", "how pervasive is corruption", "is there an effective system of checks and balances on the exercise of government authority", etc.
Freedom House ranks Hungary poorly in aspects such as "are safeguards against official corruption strong and effective", "are there free and independent media", "is there freedom for nongovernmental organizations, particularly those that are engaged in human rights– and governance-related work", "is there an independent judiciary", etc.
If you have reports that put Hungary at the top on rankings of democratic health, freedom, civil rights, etc — please share them, and we can evaluate their merits. Otherwise, these reports are the most comprehensive I know of, so I have to use those.
> The authorities continued to erode the independence of the judiciary.
This is highly debatable, though I do not claim to know enough about this issue to be able to say a lot.
> Violations of LGBTI rights persisted.
I'm not sure what exactly they mean, but I suspect this may be about so-called "same-sex marriage". The definition of marriage as a union of one man and one woman is fortunately written into Polish constitution, which is quite difficult to change, so there's that. (Also, not calling a same-sex relationship a "marriage" does not really violate anyone's rights.)
> Access to abortion was further limited.
Which - given how abortion is basically killing innocent human beings - is a huge step towards freedom (more precisely, the right to live).
EDIT: also, I love how you mention Spain time and again. I can only assume you come from there, and if that's the case, I highly applaud your patriotism.
Aparently,
> "by the end of [2022], 79 Polish administrative units still declared themselves so-called 'LGBT-free zones'. [...] LGBTI rights defenders faced ongoing criminal and civil proceedings. [...] In January, during court proceedings brought by one activist who had been arbitrarily detained for 24 hours after the so-called Rainbow Night protest in 2020, the police officer who arrested him admitted: 'We were instructed to stop all persons displaying the colours of LGBT, regardless of how they behaved'".
> Given how abortion is basically killing innocent human beings - is a huge step towards freedom
I don't think that condemning a fetus with terrible congenital defects to be born against the will of its parents is a step towards freedom.
> I love how you mention Spain time and again. I can only assume you come from there, and if that's the case, I highly applaud your patriotism.
I don't know whether you're being honest, or sarcastic. In any case: I tongue-in-cheek "defended" Spain above just because @Radim said to me: "coming from a Spaniard? go fuck yourself" ( https://news.ycombinator.com/item?id=37914718 ), which I found baffling, irrelevant, and very nasty.
I am against all patriotism and nationalism. I am not "proud" or "ashamed" of privileges or defects that I got by chance, or traits over which I bear no responsibility or I can't control.
Assume I'm from North Korea. Or from Vanuatu. Let's discuss ideas, not individuals, please!
This one is a widespread fake. As for the rest, I don't know, though I suspect similar. As for
> LGBTI rights defenders faced ongoing criminal and civil proceedings
at least some of the Polish LGBTI right defenders have a rather... rough relationship with the law (outside their activism).
> I don't think that condemning a fetus with terrible congenital defects to be born against the will of its parents is a step towards freedom.
It is. Every human being, irrespective of their age, has the right to live.
> I don't know whether you're being honest, or sarcastic.
100% honest, sorry for not making it clear enough.
> Let's discuss ideas, not individuals, please!
Patriotism is an idea, and a very noble one at that.
Anyway, thanks for keeping the discussion civil. (Also honestly.)
You'd think the people of Poland and Hungary (who voted in their leaders, democratically, repeatedly) have horns and drink baby blood. This undermines your other valid points re/ privacy – who'd want to hitch their moral wagon to someone this naive?
The "Spaniard" part was in reference Spain being the bedrock of fascism (via Spaniards…), and remaining a dictatorship long after WW2. In stark contrast to the struggles of Poland's "immature" democratic republic during the same period. The irony was too sweet to pass up.
I stand by what I wrote, although it could be argued in less stringent terms.
I don't find it ethical to fight for the privacy just to protect criminals.
No, once things are outlawed you should stop doing them. Any prior messages don't matter since the law can't apply retroactively. I am assuming ex post facto laws are prohibited.
>Plus, having something to hide does not automatically mean you are doing something criminal.
If you the reasoning for hiding is because you don't want the government to see it then it is likely criminal.
Seriously? You must be reading the media that push the narrative a country is democratic if allies of EPP(the largest EU party) win the elections there consistently otherwise it is a horrible autocracy. Imagine people actually voting for who they want for and these people than rule, without asking Brussels for permission! What audacity! They even had the audacity to veto ACTA (remember that)!
It is extremely funny the ruling party that is called "undemocratic" after ruling for 8 years in Poland has now(last Sunday) essentially lost power in democratic elections with the highest voter turnover ever. If this is what happens in a "flawed democracy" I'd not want to live in an "unflawed one".
Also, you seem to be against the overtly autocratic laws proposed by the EU commission like this monitoring law. Perhaps you don't know the party that just has won the election in Poland (the so called "democratic opposition", why democratic? Because democracy is only when they win of course.) is led by Donald Tusk, who was the leader of the previous EU council and is/was the deputy of EPP, the biggest party in Europe (guys that want to pass the law you're so much against).
So where did these "undemocratic" claims come from? In Hungary allegedly there are some curbs on freedom of speech etc. But in Poland? No, the biggest proof is that there are plenty of opposing media (that's why the opposition won).
So why?
Well. The EPP-aligned Po party in Poland when they miserably failed the elections in 2015 immediately started claiming the now ruling party is "undemocratic" (*both parties actually broke the constitution regarding the highest court so there was a typical "pot calling kettle black" situation - that wasn't even the biggest argument, the biggest argument was that they were "power hungry" by rightfully and legally taking power in a country where the majority voted for them by electing their own officials into various state enterprises etc - stuff every single party did before and will do after).
Time has passed, the ruling party has made stupid mistakes, they pissed lots of people by being too religious and pushing their worldview on everyone including myself(for example the high court members elected by them made a ruling you can't abort a pregnancy just because the foetus has a deadly disease, it has always been legal to abort if the mother is in danger) on everyone, but what they also did is they actually fulfilled a number of promises they made prior to the elections. Perhaps that is normal where you live, but it Poland it wasn't. It was normal not just to completely forget all your promises, but to pass laws directly opposing them. They were the only party that actually did what they said they will, also they found and stopped corruption and vat fraud that amounted to 50% more money in the budget during their rule, huge number of roads, motorways etc were built. Also they (called "far right in the west, funny again" increased child benefits essentially getting rid of child poverty). So they won the next election. They continued doing what they did before, but then covid happened and they made stupid mistakes, they were suspicions of corruption on buying respirators etc. Then Russia and Belarus started picking up tens of thousands of people from middle east and africa, flying them to Belarus (for between $5k and $50k per head depending on "class of travel") and forcing these people to attack the polish border in hope Poland will take them in, they will cause mayhem like everywhere else in Europe unconstrained illegal immigration happened turning Poles anti-immigration (guess why, they were hoping well close the borders on Ukrainians). These were people from mild climate countries being dropped in a middle of a forested area with bogs, rivers etc in winter. They were told if they want to get to Germany they have to attack Polish border guards and they did and still do. Why don't they just ask for asylum in Poland, asking the first border guard they meet? Because they want to go to Germany and asking for asylum in Poland means they would be sent back to Poland by the Germans. Until now Polish border guards have saved over 200 people that were stuck in swamps, or having hypothermia etc. They got free heathcare in Polish hospitals. How many if them claimed asylum in Poland? Less than 50. What happened to the rest? They preferred to be dropped of on Belarusian side of the border hoping to try again to cross illegally later.
In this environment the opposition started making baseless claims about "the forest service building mass graves pits" and other bullshit(despite there being lots of humanitarian organisations there illegally), the government instead said they'll build a 180km border wall in 6 months. The opposition said it will never happen, then the wall was built.
Then the war in Ukraine started and specially in the beginning they handled it very well too. Not only Ukrainians were given the same heathcare and rights to work and run businesses like Polish people, but they got the same benefits. Every single government service in Poland has been translated into Ukrainian. 250k Ukrainian kids went to Polish schools. Poland led by that party was the first country to send 200 tanks to Ukraine, anti helicopter rockets, electricity via a new 500kV interconnector and the government did everything in its power to shame pro-Russian countries like Germany and France to help until they did start helping.
Then the inflation happened, still thanks to good economic policy Poland survived it with one of smallest unemployment rates in Europe. Now the inflation is dropping and people forget about such things when times are better.
However, this "undemocratic" ruling party that won the elections twice (not in a landslide - 90% Erdoğan's Turkey style, but in difficult coalitions both times) seemed to became tiered. The campaign focused only on how Tusk was a horrible corrupt prime minister before, that he was openly Pro Putin's Russia until it wasn't possible anymore and that his first party was funded illegally by German CDU (it is illegal for foreign organisations to fund parties). Younger people didn't remember his rule and the crapoy campaign from the "undemocratic" ruling party in connection with that it is unlikely to win for the third time meant they lost. They, as a single party, got the most votes, but the "democratic" opposition has more votes together so they basically lost.
As for the stupid claims of spying on "opposition and some journalists" the only proof is that pegasus was found on their phones and one of these people was being investigated at the time (in connection with illegal party funding). How do you know it was Polish police that used Pegasus and not Russia, Israel or any number of other countries? And if they did, what proof is there for it being done illegally? If it happened it required court order and if it did well know everything about it now that the "undemocratic" government lost power in democratic elections.
I mean you can literally go to eastern Europe to see the vestiges of the Stasi where they used to listen to the conversations of their citizens while trying to find dissidents among them. This isn't some kind of distant past, this is almost like yesterday and yet here we are again.
How come we end up here again? Why can't the powers that be just leave the people to live their lives in peace without being snooped on by the surveillance apparatus?
And then to turn around and seeing the EU wanting to give lessons of democracy to China or NK? What a joke.
The future is grim and to be honest I would just rather they came out in the open and acknowledged the fact that democracy and privacy as we know it is dead. Then each and everyone can decide to accept this fact or fight back.
Instead we get this grandstanding about civil liberties but in the background they are ever so working on diminishing our individual freedoms.
Also, assuming high levels of privacy in the days of old might be in error, depending on what you were doing.
That’s exactly what they want to avoid.
Problem/reaction/solution or manufactured consent is much easier.
> How come we end up here again? Why can't the powers that be just leave the people to live their lives in peace without being snooped on by the surveillance apparatus?
You need to read more anarchist/communist literature that explains the situation as it has always been: the presence of a State, as an entity, implies that the population has never been in control. The State has always been. Yes, sure, sometimes the State gives a facade of openness, but it's always been a facade.
Whatever the "free" era we think happened, that era was still definitely not free for a part of the population: marginalized people, non-obedient people, people with an identity considered deviant, .... It wasn't "free", it was just "free for me"
I am not deluded to the point that I think everyone had a great time in the last 30 years or so but since the fall of the USSR and some of it's satellites states , it seemed like we were on an upward trajectory in terms of human rights, democracy and civil liberties.
If the last 30 years have only been a blip in terms of freedom acquired by some parts of the global population, does this mean that we are just returning to the mean value of freedom and that we are by definition always meant to be under some kind of semi-authoritarian regime?
The fall of the USSR is the victory of capitalism and most above all the spread of neoliberalism, definitely not an upward trajectory for human rights, democracy or civil liberties. If you think it's been going up, it's because you were not in the group that has been crushed by it, which means you were in the group that, on the global stage, was crushing the other. Our collective well-being always depends on exploiting someone else, unless you're one of those who is simply exploited
> we are by definition always meant to be under some kind of semi-authoritarian regime?
No, we are not doomed to live under a semi-authoritarian regime because we are not doomed to live under a "regime", or more precisely, a State. Alternatives have existed and have all been crushed by conservative, usually capitalist movements but also Stalinism. They failed not because of their inner issues but because they didn't have enough power in the balance to survive against antagonist movements. Which is enough for me to believe there is some good in it, and it's worth fighting for it
Which is the group being crushed by capitalism? The major complaint against it is inequality, which in practice has meant that it has benefited some people a lot and some people only a little. There are very few people worse off under it than what came before.
Its biggest failings are government failures to appropriately price externalities and the enactment of rules that constrain competition when a government is captured by industry.
But how do you want to fix that? Government-operated commerce certainly doesn't, the environmental record of state-operated industries is catastrophic -- you're essentially asking the industry to regulate itself. Anarchy can't price externalities, how does it propose to prevent anyone from dumping in the river?
So what do you want to do instead?
The workers who are barely paid a living wage, the workers who are currently in a row with Meta because it used their work for mediation but exploited them, the workers who are currently doing all the not-artificial job of teaching AI. Capitalism works by exploiting people, globalization has just made it less visible
> So what do you want to do instead?
I want people, those who wield tools, those who build tools, those who use resources, to be the ones to decide what we build, how we build it, how much we build it. I don't want industry to regulate itself, I want the users to be their own industry, or if they don't want to/can't, to control the industry.
> Anarchy can't price externalities, how does it propose to prevent anyone from dumping in the river?
Contrary to popular belief, anarchism doesn't mean the absence of rules. How does capitalism proposes to prevent anyone from dumping in the river ? It doesn't, there are rules outside of capitalism that block it from dumping. The trick is to work out who decides the rules.
Anarchism is about taking control of our lives, of our futures. It's about doing for ourselves rather than complaining and hoping someone else does it better for us.
We’re the good guys so it would be a good thing. Not a bad thing.
The problem is, they’re almost always the absolute worst to deal with, as almost any evil is excusable when done ‘for the right reasons’ or when ‘we’re the good guys’, where selfish evil at least sometimes takes a break or feels bad. And selfish evil is usually more predictable.
It’s a constant struggle. The underlying need for some to control others, to know what others are doing at all times (and the corresponding elements of control and manipulation) has always lived in every group.
How a group does is more about what it does with it, and how it directs it/reins it in (and acknowledges it), rather than its lack of existence.
Those who cannot remember the past are condemned to repeat it.
It seems to me that most of the Eastern European states would be against this law but as it stands, they most certainly welcome it.
> How a group does is more about what it does with it, and how it directs it/reins it in (and acknowledges it), rather than its lack of existence
I am not sure I understand what you mean
And denying that we could be bad (or have bad tendencies) that need to be resisted makes it more likely that we would, ultimately, be really bad.
But acknowledging we can be bad ‘hurts’. People want to feel good, and right, and justified. The more pain they are in, the more true it is. People don’t like pain. When it gets really bad, they look for scapegoats and seek comfort in delusion, anger, etc.
There is a balancing act in here somewhere. Frankly though, looking at history as best as I can - the wheel exists, and the analogy of the wheel is so apt because it does keep going in cycles. Pretending that knowing history will somehow insulate us from repeating it is a delusion.
It will all happen again.
The best we can hope for, is that we can make it less painful or evil when it does.
But still, I can't help feeling like we are regressing.
Notably, the Stasi was never very effective at many tasks. It definitely turned a blind eye to organized crime, among many other things.
Great at destroying a people though so they can’t be a threat against you though. Apparently.
The Germans I know have noted that it’s still quite clear who grew up in East Germany. And the economy itself is no comparison either.
Through failure of instinct. Seeing government agents open your letters, copy their contents, then re-seal them to send them on their way, or tap your phone and listen attentively with headphones, provokes an immediate, instinctive, visceral reaction. There's no need to construct elaborate scenarios how an ordinary law-abiding citizen could fall afoul of his government to make them see the threat.
But change those human spies into innocuous databases and convenient phones, and you lose the benefit of instinct.
Not to mention that they would use all this data to train the next generation of algorithms.
The very microsecond that some tragedy befalls the populace, the very first thing people start screaming about is how pathetic the government is for not knowing about the tragedy in advance and preventing it.
We don't live in 1923. We live in 2023. You can't put a secret agent in a room with a bunch of nefarious terrorists anymore, because those terrorists don't sit in a room with each other. They talk on Telegram. We, the tech nerds and libertarians obsessed with privacy and the freedom to do whatever we want, have been fermenting a technological arms race for decades. The more bullet-proof encryption we create, the more the government has to encroach on our privacy to do the thing we require them to do: keep us safe from the real threats that do actually exist in the world, and hide among us.
If you want more privacy, paradoxically, the best thing would be to actually give up some privacy. Telephones and letter mail have been automatically scanned for like 50 years, and this doesn't seem to concern us, and was good enough for intelligence services that they didn't need to collect anything more. So we could stop sending all our communications with bulletproof encryption. We could give the federal government a bypass. Allow the security services to peek under the covers. If we give them some leeway, they won't feel the need to compromise all privacy and security. But if you give them nothing, they literally have no other recourse but to compromise everything, because they don't know where to look and they have no leads.
Nobody wants the government snooping on them. But if you really can't handle any level of surveillance at all, tell your elected officials you no longer want any federal or state intelligence services, and deal with the consequences. When the nation falls to all the other nations' intelligence apparatuses and covert operations, you will decry it and ask why the government did nothing to stop it. You simply can not have your cake and eat it too.
Technically shouldn't be happening? Also, probably shouldn't be happening period. Every time it does, Stuff Goes Wrong (tm).
I think the relevant Franklin quote was: "Those who would give up essential Liberty, to purchase a little temporary Safety, deserve neither Liberty nor Safety."
> When the nation falls to all the other nations' intelligence apparatuses and covert operations, you will decry it and ask why the government did nothing to stop it.
I don't quite understand your logic. My naive intuition says that applying the strongest possible security posture in all aspects of society will lead to the society being at its most secure.
I'm aware that sometimes seemingly counter-intuitive things hold. If you state that weakening civilian security might somehow strengthen overall security, you may somehow be correct. But you're not quite connecting the dots for me here yet?
I agree with you that is true but is there any proof that even if all telecommunications were open completely to the governments, it would be possible to stop every incoming attacks/tragedies?
Because that is the current justification that is being used now. Oh if only we could see your Whats-app messages, then we'll be able to stop these horrors. I am not inclined to agree that this would solve anything at all.
Notwithstanding the umber of false positives that this system would generate, there is no risk zero.
> We don't live in 1923. We live in 2023. You can't put a secret agent in a room with a bunch of nefarious terrorists anymore, because those terrorists don't sit in a room with each other. They talk on Telegram. We, the tech nerds and libertarians obsessed with privacy and the freedom to do whatever we want, have been fermenting a technological arms race for decades. The more bullet-proof encryption we create, the more the government has to encroach on our privacy to do the thing we require them to do: keep us safe from the real threats that do actually exist in the world, and hide among us.
This argument does not make sense.
We accept a certain level of risk that is inherent to living in a modern civilization.
We don't ban cars even though the damage they do to people each year is infinitely greater than terrorist attacks. How many people have died of terrorist activities in the last year vs the number of people who have been killed/maimed by reckless/ drunk drivers?
So on this basis alone, if we aim at reducing the global number of preventable deaths, then banning cars would be the best thing to do.
> If you want more privacy, paradoxically, the best thing would be to actually give up some privacy. Telephones and letter mail have been automatically scanned for like 50 years, and this doesn't seem to concern us, and was good enough for intelligence services that they didn't need to collect anything more. So we could stop sending all our communications with bulletproof encryption. We could give the federal government a bypass. Allow the security services to peek under the covers. If we give them some leeway, they won't feel the need to compromise all privacy and security. But if you give them nothing, they literally have no other recourse but to compromise everything, because they don't know where to look and they have no leads.
This solution only works if the government that is doing the monitoring decides to keep it's pinky promise that it won't use this info to get rid of political dissidents or groups of people that are not acceptable/needed anymore.
Is there any reason to believe that a government that gets all this data would use it only for the good of its citizen and not to target certain populations?
Is there any reason to believe that this data would be kept from being shared without consent?
If we look at the last century of history, any time a government has been granted such access, it used it to the detriment of it's citizen and kept themselves in power trough coercion and threats targeting any one who dared resist them.
So forgive me for not wanting to share even more of my private life with someone would may use it later against me.
Finally, we both know that there is no such thing as backdoor for the good guys only, if it exist it will be exploited by foreign actors as soon as possible.
> Nobody wants the government snooping on them. But if you really can't handle any level of surveillance at all, tell your elected officials you no longer want any federal or state intelligence services, and deal with the consequences. When the nation falls to all the other nations' intelligence apparatuses and covert operations, you will decry it and ask why the government did nothing to stop it. You simply can not have your cake and eat it too.
This is straw-man argument. Just like the argument about saving the children now. So you don't want to have the government read all your messages, and watch your private conversations, surely you must be a child abuser or a friend of the terrorists. Give me break.
More to the point of your comment, how would opening my private life to the government protect my country from being targeted by a foreign government?
> You simply can not have your cake and eat it too.
And that was exactly my point about the coming out with it already. It seems that the governments in the Western world are hellbent on making sure that they are perceived as freedom loving, democracy loving states. This stance comes with all the posturing regarding China and Russia when in fact they dream to have the same access.
So why the charade? Let's call a spade a spade.
If you want access to every thing I read, every single thing I type, every image I share, then this is not freedom. This is a digital prison and I would very much appreciate it if they could stop lying to our faces and be honest about it.
So you... put some secret agents on Telegram to infiltrate the terrorists. In the same way as you got into the room with them before people had portable phones. You bug their phones in the same way as you used to bug their rooms -- through physical access. Which is effective but expensive, and so it works against terrorists and serious criminals but not for mass surveillance.
> When the nation falls to all the other nations' intelligence apparatuses and covert operations, you will decry it and ask why the government did nothing to stop it.
If we actually had sufficiently secure communications to ward off our own intelligence agencies, why would some other country's have any more luck? Preventing theirs from working against us is good.
Take this to NSA levels of privacy invasion and things are about to get _really_ interesting. Nixing candidates is only the beginning, you can sell them protection, or force them to pass/don't pass laws or foreign policy. To me, that's the _real_ benefit of all this. they probably couldn't care less about dissidents.
That's overcooked. We've only had strong end-user crypto(graphy) for about 20 years; you can still have private conversations, whether in a field or in a private space that you are sure isn't bugged. This is no worse than it was 20 years ago. "Democracy [...] is dead" is a counsel of despair.
I believe it never went away and technology simply kept making it more pervasive, more efficient. It didn't suddenly happen in the last ten years or so, it was a continuous progression over decades.
Hopefully technology can also help us defeat it.
It's little bit what we have now with respect to nuclear weapons, where we have used them twice and decided to not do it again (so far).
I just cannot fathom that someone is genuinely ok with having their worst secrets and their deepest fear out there in the open being sorted and analyzed by some black box algorithm who may or may not start an investigation against them because they said the wrong thing or shared the wrong image.
etc. etc.
It's like economic transactions, which the state already tracks.