'Encryption is deeply threatening to power': Meredith Whittaker of Signal
theguardian.com
theguardian.com
At the same time, the Clinton administration endorsed surveillance advertising as a business model, so there was an incentive to gather data about your customers in order to sell to them.
I assumed the lack of trustworthy small payments on the internet pushed adtech forward as an alternative income source, even without the governement endorsing anything.Does someone know more?
I believe that an educated population poses a greater threat to "power" more than anything else. If more people understood what encryption is and how it affects the integrity and confidentiality of communication(and understood what those terms mean) and why privacy is important, we would be having a much more constructive discussion or at least adopting a more united adversarial stance against attacks on these technologies and rights, similar to the 90s when the online population was generally more technical and concerned about these issues as a whole.
More than anything, attacks on encryption and privacy should be seen as attacks against the social contract we have with those in power, and they're failing to provide adequate justification for the mass erosion of privacy.
Although with things like Monero and other privacy coins we have suddenly got an asset that is actually private and therefore fundamentally resistant to taxation. It is a weird development with hard-to-foresee implications.
If I hide my finances to evade taxes, it's a crime, and there are consequences if I get caught. If crypto becomes an issue, they can just make it illegal like in China. We've also had the ability to perform tax evasion using cash for quite some time.
In a past world ability to communicate easily, cheaply, fast, around the whole world was definitively threatening. In the present hyper-surveilled world let's pretend for an instance that Signal is a totally good netizen, once used on closed source Android-based macro-bugs (aka smart-phone, the big bug bout and kept working by the spied target instead of by the spy) how can it's encryption "encrypt" anything? All you type is typed with a closed virtual keyboard on a connected closed system...
Even in the past those who know, so those who can be a threat for those in power also know how to communicate covertly, it was not cheap, not fast, not sure and not easy, but it was done in every single historic moment.
The threat nowadays for the oppressor is the individual ability to communicate, no matter if in clear text or not, but the ability to communicate uncensored, the ability to own, devices and data, the ability to be autonomous instead of depending on the big and powerful. So Signal might be a threat to WA, not to the government. The threat is the fact that almost everybody can run their own XMPP server, a small SIP Witch instance, or maybe a Murmur/Mumble one, the ability to operate in an open network without depending on the GAFAM and without easy censorship.
In term of secrecy even if we print something we can't trust modern printers, proprietary iron, connected, with enough resources to offer a webapp for configuration and so on, we can't be safe that the printer itself do not store and send here an there any documents, do not inject dots-signature to identify the printer and so on. We can't even talk in a modern connected car confident that the car OEM do not get the complete record. Encryption in that sense matter very, very little. At maximum it makes less easy to plant false evidence in citizens systems in case the government or someone else want to falsely accuse them of something. A classic accusation let's say for a new disturbing candidate of CSAM-related and tax-fraud related stuff to be found thereafter for a just-in-time show-trial.
These things are power and they can be co-opted to decrypt the messages of any target surreptitiously, without even the knowledge of Signal.
Centralized power you have no vote in is a dictatorship, and dictatorships have a single point of failure, no matter how benevolent, that will be co-opted by a more powerful governing body.
Centralized control of communications is fundamentally incompatible with the free and private speech required for a functioning democracy.
Delete Signal and rebuild your social graphs on fully open decentralized or federated platforms.
It doesn't matter how federated your system is if the pipes are controlled by an autocracy.
Your points are pretty accurate and yet lead folks into 'shred your social networks, the other side is greener'. I've been generally following the advice wherever I can without success for long term now.
- First it was dump Gmail etc taking aim at Google messenger / Google Chat, folks ask why you are walking away from the connection / leaving them and only your parents install Signal, and a decade later one sibling does but only uses it every other time they message.
- Dump Facebook and What's App, recommend folks snag Signal etc, none do since all their international comms are What's App only. Take a look at options beyond Signal and laugh.
- Telegram is like for like situation as a friend tried to do the same with his graph that I did with mine on What's App, unsuccessful and he's back to Telegram as the graph is more worth it to him.
- Drop Slack or other group chats w/o E2EE, even though they are technical groups maybe 1 in 20 grab Signal, losing the group aspect of that social graph. They won't still have Signal installed 5+ years later.
- Dump discord next too? What replacement would you consider for that last centralized bastion providing voice + text? Self host matter most with me and myself while walking on my social friend groups on Discord next?
- Do we draw the line before or after HN?
Why isn't the recommendation to just run away from anything social graph related at this point? The experience of swapping and dumping for better options never brings along the social parts that brought you to the bad option in the first place like Discord or Facebook.
TL;DR: I've been shredding my social graph in the name of privacy for quite a while, it's an efficient means at losing friends along the way though.
Signal has managed to create a product that is so easy to use that my non-technical brother-in-law got my wife's entirely-non-technical family to choose it over various Facebook properties and other clearly-worse-than-Signal for-profit chat apps. That's extremely impressive, and part of what makes that level of ease of use possible is that there's only one Signal server.
In the absence of Signal someone like my brother-in-law wouldn't have been able to navigate Matrix himself, much less help my mother-in-law to do so—in the end he would have pointed everyone at WhatsApp. Signal isn't hurting adoption of federated tooling, Signal is stealing mindshare from for-profit data hoarders, and that's something I can wholeheartedly endorse even with their imperfections.
Also known as The Copenhagen interpretation of ethics, and once you know it, you see it everywhere.
https://gwern.net/doc/philosophy/ethics/2015-06-24-jai-theco...