Conversation

Notices

1. Embed this notice
   Carlton Gibson 🇪🇺 (carlton@fosstodon.org)'s status on Tuesday, 25-Feb-2025 23:09:43 JST Carlton Gibson 🇪🇺

   Thinking about governments requiring encryption backdoors. The UK with Apple last week. Sweden here with Signal (potentially). Etc etc.

   As ever, there are arguments each way. Even if you’re pro encryption, you have to grant that.

   But look around.

   The pendulum is clearly swinging into the Misuse of Powers territory (to put it mildly). Anyone with even half an ounce of sense would be hitting pause on the Lets Empower the Authorities Further button. Doesn’t seem hard.

   https://swedenherald.com/article/signals-ceo-then-were-leaving-sweden

   • Embed this notice
     Alexandre Oliva (lxo@snac.lx.oliva.nom.br)'s status on Tuesday, 25-Feb-2025 23:09:41 JST Alexandre Oliva

     in reply to

     • João S. O. Bueno
     it's not really E2E when the messages are encrypted and decrypted on a device remotely-controlled by an intermediary. you'd have to do the crypto yourself or use a separate device that was not compromised to make it credibly end-to-end. it's delusion otherwise, not anything you can count on for your own safety against powerful enemies. as always, it's about the threat model. absolutes can be misleading.
     
     CC: @carlton@fosstodon.org
     
     翠星石 likes this.
   • Embed this notice
     João S. O. Bueno (gwidion@floss.social)'s status on Tuesday, 25-Feb-2025 23:09:42 JST João S. O. Bueno

     in reply to

     @carlton The main difference being unlike Apple's, at least Signal's clains of e2e encryption are credible.

   • Embed this notice
     翠星石 (suiseiseki@freesoftwareextremist.com)'s status on Tuesday, 25-Feb-2025 23:13:23 JST 翠星石

     in reply to

     • João S. O. Bueno
     @gwidion @carlton Sure Apple implements e2e encryption and device encryption (often insecurly, but oh well) - the thing is that apple has total control of all their devices, thus if they want anything, they can simply command any device to decrypt anything on the device and send it to them via their backdoor.