As a citizen, I don’t understand what the UK government thinks they are getting here - other than the possibility of leaks of the nation’s most sensitive data.
Also is it not possible to set up my Apple account outside of the UK while living here?
Also is it not possible to set up my Apple account outside of the UK while living here?
Amusing when you consider the National Cyber Security Centre (NCSC, a part of GCHQ), along with the Information Commissioners Office, both publish guidance recommending, and describing how to use, encryption to protect personal and sensitive data.
Our government is almost schizophrenic in its attitude to encryption.
The US has problems (don't get me wrong, look at our politics, enough said); but the UK seems to be speedrunning a collapse. The NHS having patients dying in hallways; Rotherham back in the popular mind; a bad economy even by EU standards; a massive talent exodus (as documented even on HN regarding hardware engineers); a military in the news for being too run down to even help Ukraine; and most relevant to this story - the government increasingly acting in every way like it is extremely paranoid of the citizens.
Any personal thoughts?
https://www.bbc.com/news/articles/c99n0x4r17mo
Probably your money would go futher in Albania, and they've got a cool flag, but the devil's in the details.
I don't think anywhere in the EU really describes itself as Eastern Europe, though. That's Ukraine, Belarus, Moldova. So really just Romania, sometimes.
For my education, which countries?
If it was an option, I would seriously look to emigrate again, but I honestly don't know where. The most appealing option for me is Australia, but my age works against me. I know everywhere has its issues, but I'm just so worn down by the horrible adversarial political system and gutter press in the UK right now. We seem unable to do anything of note recently. A train line connecting not very much of the UK has cost so much money, and in the end it hasn't even joined up the important part.
I don't know, life is good at a local level. I am privileged and live in a fantastically beautiful town, and life here is safe and friendly. If I ignored everything else for a while it would probably do me good.
Imagine hiring someone you didn't know had an Australian dual citizenship and two years later all your customers' data is leaked onto the net.
This UK request as reported would not be legal in Australia.
> Technical Capability Notices (TCNs): TCNs are orders that require a company to build new capabilities that assist law enforcement agencies in accessing encrypted data. The Attorney-General must approve a TCN by confirming it is reasonable, proportionate, practical, and technically feasible.
> It’s that final one that’s the real problem. The Australian government can force tech companies to build backdoors into their systems.
https://www.schneier.com/blog/archives/2024/09/australia-thr...
That blog's own reference points this out:
> Regular use of encryption as electronic protection, such as online banking or shopping, is not of primary concern in the Act. To reinforce this, the Act includes safeguards between government and industry, such as restricting backdoors and decryption capabilities, preventing the creation of systemic weaknesses, and accessing communication without proper jurisdiction, warrants, or authorisations.
So I can only assume that the author is either too lazy to bother reading their own reference in full (let alone researching the topic of their blog), or is being knowingly dishonest.
Are you also an immigrant to the UK? I suggest you embrace it.
> The NHS having patients dying in hallways
Sadly routine in winter. Nobody wants to spend the money to fix this. Well, the public want the money spent, but they do not want it raised in taxes.
> Rotherham back in the popular mind
The original events were between 1997 and 2013. The reason they're back in the mind is the newspapers want to keep them there to maintain islamophobia. Other incidents (more recently Glasgow grooming gangs) aren't used for that purpose.
> a bad economy even by EU standards
Average by EU standards. But stagnant, yes.
> the government increasingly acting in every way like it is extremely paranoid of the citizens.
They've been like this my entire life. Arguably it was a bit worse until the IRA ceasefire. Certainly the security services have been pushing anti-encryption for at least three decades.
Now we're probably just waiting for a law mandating encryption of cloud data. Let's see whether Apple will actually leave the UK market altogether or introduce a backdoor.
Of course: it's not a monolithic entity. It's a composite of different parts that have different goals an interests.
It won't. The courts will refuse to force them to stop, and even if the courts attempt to force it, some government departments just won't listen, and be protected from the consequences.
This is another case of "the law applies to you, but not to me".
So that's NOT what the law says.
The law says that private sector entities cannot have effective encryption (so NOT government agencies). Why do I put it like that? Because it MUST be possible for the security services to get access to any data they can intercept in any way WITHOUT telling/alerting the participants. They must be able to ALTER those communications. Or to make it more practical: any software maker MUST be able to provide access to any data the security services physically intercept, encrypted hard drives, ssh capture ... anything. And no, there is no exception for open source software.
ANYONE who puts this in software is criminally liable, as well as any firm (director/...) of any firm that has software doing this:
// we're done with the key for this session, erase the key
key := 0
But there is one VERY specific limitation. Only the government gets to complain about this, and obviously, there is zero plans to enforce this equally. The government sure as hell is not planning to actually put in the effort to make the encryption they use compliant with this law. It's just to get at the contents of confiscated harddrives. It's just to force foreign companies to unlock phones that have been confiscated.
Oh and there's stricter punishments if you tell anyone you're complying with this. This law can be used to arrest Linus Torvalds until he backdoors encrypted loop devices, and threaten him with decades prison if he tells anyone he's done that.
And can I just say? If this law was put, properly explained, to the people of the UK, there's no way it would get 50% of the vote.
> And yet if I steal your money and refuse to give it back, or let you steal it back, you'll call that hypocritical.
That's a bad analogy.
> What does the size of an entity have to do with whether this is idiotic or not?
Because it's not about the size, and I said nothing about the size. It's about it being composed of different minds, organized into different organizations, focused on different goals.
It's just not going to behave like one mind (without a lot of inefficiency, because you'd need literal central planning), because that's not the kind of thing that it is.
The ability to turn on Advanced Data Protection does seem to be tied to your iCloud region (as of now I can still turn it on, and I’m in the UK but have an account from overseas).