article

toot

easily contact your MEP: https://fightchatcontrol.eu/

top 55 comments

sorted by: hot top controversial new old
[–] 108 points 1 year ago (6 children)

This is the worst thing in ages. I'm 50+, very good with IT, and I understand that we MUST act against it.

But I'm tired, boss.

Surrounded by lemmings and sheep that love Facebook and WhatsApp. People are stupid. I don't have the energy to fight so much ignorance and stupidity - willful or otherwise.

  • source
  • hideshow 6 child comments
  • [–] 5 points 1 year ago (2 children)

    Just a few years older, in IT as a career, and absolutely the same.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 2 points 1 year ago (1 child)

    You know what though, when encryption was first developed in the form of pgp, the whole point was that it was to sidestep the government being able to spy on you.

    Perhaps we just need to accept that we need to take encrypted communication into our own hands and not rely on messaging apps to protect us

  • source
  • parent
  • hideshow 1 child comment
  • [–] 3 points 1 year ago

    The issue came down to ease of usability. PGP simply wasn’t plug-and-play, hell it wasn’t even easy to set up. And most importantly, it absolutely depended on the other person having the same configuration.

    As messaging platforms like Signal has shown, security and encryption needs to be transparent and unnoticeable. It needs to be totally frictionless and thinking-free in order for the average Joe to want to use it.

    And that is even before other issues such as platform stickiness, which Signal has issues with.

  • source
  • parent
  • [–] 38 points 1 year ago (10 children)

    Oh shit - I thought they dropped this! JFC, EU! What TF are you doing?

  • source
  • hideshow 10 child comments
  • [–] 60 points 1 year ago (9 children)

    There seems to be some kind of group repeatedly pushing this crap every other year, with increasingly shady tactics.

    I would for sure like to know from where this emanates...

  • source
  • parent
  • hideshow 9 child comments
  • [–] 43 points 1 year ago (4 children)

    It's the pro-surveilance people that want to monetize your data. They try and lean on fear and push this "only ISIS uses Signal" narrative that is obviously false.

    It's just so preposterous - businesses and payment processors rely on e2ee just as much as anyone else does. The one time we're on the same team they just want a carve out for businesses or something I expect.

  • source
  • parent
  • hideshow 4 child comments
  • [–] 18 points 1 year ago (3 children)
  • [–] 21 points 1 year ago* (last edited 1 year ago) (8 children)

    Ok how do they plan to enforce that?

    By banning HTTPS at the ISP level?

    Edit: and then how do they enforce GPDR? Because you better believe everyone and their mother is going to snoop on every communication made.

  • source
  • hideshow 8 child comments
  • [–] 9 points 1 year ago (2 children)

    Blocking HTTPS would be frighteningly hilarious. My employer is one of thousands of websites that utilizes HSTS, which tells web browsers to use HTTPS. Our implementation of HSTS, like lots of banks etc. is also listed with HSTSpreload, which means browsers like chrome will only ever use HTTPS with our site.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 4 points 1 year ago (1 child)

    What if they just do MITM with a Trusted root? Does HSTS provide a method to do cert pinning?

  • source
  • parent
  • hideshow 1 child comment
  • [–] 2 points 1 year ago

    HSTS just enforces HTTPS over HTTP.

    I seriously doubt Chrome or Firefox would ever be coerced into trusting a cert like that. If they did then you would see a very rapid shift away from those browsers to one or more of the open source alternatives.

    And any CA that issued such a cert that allowed for wholesale MITM access like that would be blacklisted by all the browsers very quickly as well. That would put the CA out of business very quickly.

  • source
  • parent
  • [–] 2 points 1 year ago* (2 children)

    By banning HTTPS at the ISP level?

    I think you might not be aware of it but big institutions like governments and such can basically already circumvent HTTPS encryption by supplying fake root certificates and forcing the ISP to redirect traffic through their own servers.

    That is why End-to-End encryption is such a big deal. Because it cannot be circumvented by the government alone. If done right (proper key exchange), it cannot be broken by anyone but the legitimate recipients. The way WhatsApp does it today, Meta could technically break it too, though i'm not sure whether they do.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 5 points 1 year ago (1 child)

    That's not necessarily very easy. These certs would have to show up in public certificate transparancy logs for most browsers to accept them. If this happens on a government scale it would surely get noticed, though the question remains what you're left to do if the government forces it anyways...

    See https://en.m.wikipedia.org/wiki/Certificate_Transparency section "Mandatory certificate transparency"

  • source
  • parent
  • hideshow 1 child comment
  • [–] 12 points 1 year ago (5 children)

    Aren't Europeans supposed to be the good guys?

  • source
  • hideshow 5 child comments
  • [–] 21 points 1 year ago

    Operation Rubicon!

    This is such a bad idea that even the US stopped doing it to all their enemies (i.e. their allies). Of course they have PRISM instead now which can't be cracked by their enemies (i.e. their enemies and allies).

    https://en.wikipedia.org/wiki/Operation_Rubicon

  • source
  • [–] 18 points 1 year ago (2 children)

    One point of hope is that they mandated cross platform chat compatibility too, and every platform is just... Ignoring it and not doing it with zero consequences.

    Maybe this just also won't happen.

  • source
  • hideshow 2 child comments
  • [–] 9 points 1 year ago

    Feeling hopeful about giant tech companies ignoring attempts to reign them in is unwise, even when it occasionally lines up with something you personally want. And I even say that as someone with permanent distrust of the big power structures doing the regulating.

  • source
  • parent
  • Of course chat control would be practically infeasible. But it's not even about that. It's about the simple fact that the EU commission ignores the will of the people, when the people have already clearly said NO. It's about the disrespect that the EU commission exerts against the people. That in itself is unacceptable.

  • source
  • parent
  • [–] 6 points 1 year ago (2 children)
  • [–] 5 points 1 year ago (6 children)

    In many cases this could be argued as unconstitutional.

  • source
  • hideshow 6 child comments
  • [–] 6 points 1 year ago (1 child)

    In germany, it's not technically unconstitutional (i checked last week because i assumed it should be) but it definitely feels like it should be unconstitutional. After WW2, there was a consensus to not surveil your own population, and this is a very important constraint to keep in mind.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 2 points 1 year ago

    In Lithuania privacy is defined as a fundamental right and it includes correspondence, digital or otherwise.

    Would that prevent passing laws enabling chat control? Doubt it, but I can see it as a good legal argument against it.

  • source
  • parent
  • [–] 0 points 1 year ago (3 children)

    According to the EU constitution?

  • source
  • parent
  • hideshow 3 child comments
  • [–] 1 point 1 year ago

    According to constitutions of member states.
    At least here it's worded in a way that chat control could be argued as unconstitutional (not a lawyer tho).

    I would not be surprised that any other sane constitution protects privacy, and by extension digital correspondence, under fundamental rights.

  • source
  • parent
  • [–] 4 points 1 year ago

    I've contacted them yesterday evening. Funnily enough, all the AfD opposes chat control. They're clever. If chat control were to pass, they could campaign on having opposed it, and then mission creep it once elected.

  • source
  • [–] 3 points 1 year ago

    If it passes in the EU, it will pass in the United States. This affects all of us.

  • source
  • [–] 2 points 1 year ago

    Also get those MPs imprisoned

  • source
  • [–] 1 point 1 year ago

    The site failed at the last step... Fortunately all my reps are opposed

  • source
  • I'm not an EU citizen yet, and as a non-citizen brown man, i doubt the MEP would listen to me. How can I do my part anyway?

  • source
  • EU politicians are probably the only ones who ought to be scanned

  • source
  • [–] 0 points 1 year ago
    [–] -3 points 1 year ago

    This is why Russian, Chinese and other messaging apps (good one is Telegram) are spiking in EU. The kremlin will have my chats, but I never plan on travelling to Russia anyways.

  • source