Client-Side-Scanning: Chat Control Is Pure Surveillance State | Hacker News Reader

Client-Side-Scanning: Chat Control Is Pure Surveillance State

netzpolitik.org

54 pointsjanandonly15 comments

Tempted to create a device for me and my friends with just a screen and a blackberry-type keyboard.

Correct me if I'm wrong, but the proposal is to have messages scanned on-device, by an offline process, right? Which, of course, is impossible and ridiculous, and compromises the privacy of whatever message happens to match, but isn't mass, centralized scanning.

I think the question is, what happens when you attempt to send something illegal?

Does it just prevent you from sending? If so, it seems like you could game that system very easily.

Or does it notify the government that you have committed a crime?

That's a good question, probably reports you somewhere so they can look at your messages?

>Which, of course, is impossible and ridiculous, and compromises the privacy of whatever message happens to match, but isn't mass, centralized scanning.

...Which set of boxes are you drawing? Because I see the box around all covered entities as a whole, and in the architecture diagram, regardless of whether the software is deployed in a decentralized way, it is toward a goal that is indistinguishable from centralized scanning by or on behalf of the State.

Maybe we'll go full circle and go back to sending letters for communication.

That's probably what the actual criminals will do. And the rest of us will get 5€ fines for using inappropriate language in our chats.

so whats the whole fucking point of E2EE now? you mean your neigbourhood script kiddle shouldnt use firesheep to snoop on your password credentials but big brother must know all your secrets because.

"protect the children!!!" my ass

this is literally 1984

The whole fucking point of E2EE is that you use it with a service which does not try to circumvent it. Find an XMPP server or - better still - install one yourself and point Conversations (Android) or Gajim/Dino (desktop) at it. Configure those clients to use OMEMO and you'll keep the authorities and other nosy malcontents out.

need a copy of signal that generates fake messages and floods the spools with junk data

Come on, people. You have to fight this. Even we in Russia don't have anything like that and the government doesn't seem to be planning that.

> We don't have anything like this

How do you mean? Is anything e2ee actually "allowed"? Aren't VPNs illegal? Telegram doesn't count

I mean we don't have client-side scanning.

VPNs aren't illegal, they are only (somewhat) blocked in Russia if they provide access to the sites blacklisted by Russian government.

I don't know what's you problem with Telegram, but WhatsApp and Signal aren't blocked either.

Reply on news.ycombinator.com