You guys dont mind if the pigs install malware on your computer do you?
post
Something something european democracy something something bulwark against Russian Chinese authoritarianism, something something east german stasi
Such hollow, opportunistic rehtoric from people and governments who are doing the exact same things they accuse others of. Germany in particular, with it's to-the-hilt support of Israel's genocide, does not seem to have learned it's lesson.
If I ever move to Germany I'll remember to booby trap my doors and windows.
In the US it's always been possible to do this with a proper warrant, though avoiding detection if the person expects something could be difficult. Security cameras and so on.
I'm not too bothered by this given how much work it is. They will only do it if there's a criminal case or some other significant interest to work from. It's not a tool of warrantless mass surveillance even though it's been done abusively/illegally from time to time.
Think about what we did in Ireland in the 80s. It's no different, and it only worked marginally. Although that cpuld be because opsec was pretty good among the provisional IRA active cells.
Idk how stuff was done in Ireland but there weren't so many computers then. It's probably easier to install audio bugs than conduct an "evil maid attack" (infosec term for surreptitiously messing with someone's computer, traditionally in the person's hotel room) if they have taken any precautions.
Feeling like this is a gliding scale though. What's next, a surveillance state?
I think those are two different things. They might do 1000s of secret break-ins per year, maybe 10,000's. But probably not millions. OTOH, mass surveillance is used against just about everyone, i.e. billions. So the scale is different.
Here in the US, I suspect secret break-ins are rare, because they are risky (armed occupants etc). So they do SWAT raids instead. Abusive and too often fatal, but not that secret.
Yeah, it doesn't scale. Most of the surveillance (legal intercept, SINA hardware on ISP) and injection of government malware will be through the hostile network. People who run a tight ship will have a small attack surface.
The Stasi is back
This is kinda silly. Most implants are installed by the NSA at the airport when you buy the device.
It's much easier for them to install implants on devices at the time you order it than to break into your house.
Well, that sounds very undue-processy of them. Obviously what a same, civilized society would allow.
And I'm sure if citizens do anything to remove malware on their devices they'll be criminally charged too 🤡
That's not a police job. Is german secret service entirely useless or what?
Germany fronting some really insidious shit. Again.
If remote installation of the spyware is technically not possible, paragraph 26 explicitly allows investigators to "secretly enter and search premises" in order to gain access to IT systems. In fact, Berlin is thus legalizing – [as Mecklenburg-Western Pomerania did before]– state intrusion into private apartments in order to physically install Trojans, for example via USB stick.
What the fuck 😳
Are explosive usb ports allowed? Or maybe high voltage, welding their equipment in place.
This feels like a “carry your computer with you if possible, back up all your files offsite, install hidden cameras (along with some obvious cameras for misdirection), and wipe everything if you see someone enter” situation..
Would that even be enough? Not for your physical privacy ofc but for avoiding the spyware.
We can expect more of this kind of thing as we get closer to war with Russia.
People whose thread model requires high stakes and serious encryption are probably using PGP with hardware keychain, with Tails or something similar on a live USB.
Adding a high-profile law like this will probably just cause them to increase their op-sec and make it even harder to actually get any evidence where it really matters, while having a huge PR cost and abuse potential. But it's very probably not about catching criminals anyway.
Also, it's kinda funny that they moved from SS to AA :D
How many thread models exist? Kernel thread, green thread,...
These laws aren't to stop security professionals, it's to stop common criminals that don't have or bother with security beyond using third-party apps.
all 22 comments