Remix.run Logo
Tell the EU: Don't Break Encryption with "Chat Control"(mozillafoundation.org)
294 points by nickslaughter02 7 hours ago | 44 comments
m12k 6 hours ago | parent | next [-]

I like to compare this to mandating surveillance cameras in every home. It would certainly make detecting and investigating many crimes easier. And the government might pinky swear to never watch without a warrant. They may even keep that promise. But that slippery slope is far from the only issue. Even more damning is that as long as this exists, whether used in official capacity or not, it will be the most sought after thing by hackers from crime organizations and hostile nations. Espionage, blackmail, you name - no person or organization would ever be safe, everybody's privacy and security is undermined.

raxxorraxor 5 hours ago | parent | next [-]

There is a reason why they added exemptions for themselves. Either they believe it is unsafe or perhaps there is a problem with child abuse on the EU legislator level which they want to cover up.

We are at a point where we shouldn't have to justify opposition to it. Just hold legislators of the EU accountable. If that isn't possible, hold the whole EU accountable and if that isn't possible, the EU has no legitimacy for such laws in the first place. Back to those responsible on a national level and repeat.

gloosx 4 hours ago | parent | prev | next [-]

I don't think comparing it to something like camera surveillance inside your home is a good idea.

You kind of own your home – if someone places camera in your property, you can just remove it / obstruct vision / sound etc. If doing that will send you to jail then the level of dystopia around is so big it's irrelevant anyway – you're a slave with no rights and you will do that the shocking stick tells you to do.

Phones are different - you kind of don't own them by default because bootloader is locked so you are not free to execute the code you want on the device, as well as app store exists which it tells you what you can install and what you cannot install. The only leverage they have is to make Apple/Google remove certain apps from the EU stores.

that_guy_iain 5 hours ago | parent | prev [-]

How about we compare it with something more realistic? Like https://en.wikipedia.org/wiki/ECHELON. Since 1971, the 5 eyes countries have been spying on people en masse and scanning communications.

You probably don't like the comparission because you want to be an alarmist who is acting like this is new. All the fears you have, have literally been proven to be...

untrimmed 6 hours ago | parent | prev | next [-]

If the EU, a supposed bastion of human rights, forces this through, what argument do we have when more authoritarian countries demand the same thing from Apple, Google, or Meta?

Balinares 6 hours ago | parent | next [-]

Just because the EU is not as egregiously awful as some other places does unfortunately not make it a bastion of human rights. The same forces are at play there as everywhere else in the West.

sunaookami 2 hours ago | parent | prev [-]

>supposed bastion of human rights

Ever wondered why they position themselves like that? Because they repeated it so often that everyone believes it now.

sschueller 7 hours ago | parent | prev | next [-]

Why don't we do a trial run first? How about all communication from EU lawmakers is made public. Let's break that encryption.

nickslaughter02 7 hours ago | parent [-]

> “The fact that the EU interior ministers want to exempt police officers, soldiers, intelligence officers and even themselves from chat control scanning proves that they know exactly just how unreliable and dangerous the snooping algorithms are that they want to unleash on us citizens,” commented Pirate Party MEP Patrick Breyer. “They seem to fear that even military secrets without any link to child sexual abuse could end up in the US at any time. The confidentiality of government communications is certainly important, but the same must apply to the protection of business and of course citizens communications, including the spaces that victims of abuse themselves need for secure exchanges and therapy. We know that most of the chats leaked by today’s voluntary snooping algorithms are of no relevance to the police, for example family photos or consensual sexting. It is outrageous that the EU interior ministers themselves do not want to suffer the consequences of the destruction of digital privacy of correspondence and secure encryption that they are imposing on us.”

EU ministers want to exempt themselves (https://european-pirateparty.eu/chatcontrol-eu-ministers-wan...)

nickslaughter02 6 hours ago | parent | prev | next [-]

I think many outside of EU dismiss this as an EU only thing and don't think much about it.

1. Have you ever texted someone from EU? You are now chat controlled too.

2. EU is pumping billions to foreign countries to promote EU values. How long until they condition this "help" with chat control?

rkomorn 6 hours ago | parent [-]

And if other governments see the EU get away with this, they'll also have a blueprint for success.

hannesfur 7 hours ago | parent | prev | next [-]

Whenever I look at these proposals I am never sure if the people that wrote that law are not aware that you can’t tap one person without making spying on everyone really easy very quickly, they don’t care or they actually want it. Although this seems like a slightly more sensible version of what they proposed years ago (which was essentially adding the government to every chat).

DeepSeaTortoise 5 hours ago | parent | next [-]

I always find it very ironic people apply the "don't attribute to malice what can be explained by incompetence" principle to politicians, who are part of the government.

Have you ever had a really great mentor or teacher who was excellent at explaining things to you? Good news, you've now got a budget to hire several of them in full-time exclusively for yourself.

Unsure about something? Just ask and a huge apparatus of several departments, featuring dozens of expert panels with hundreds of domain specific experts each will sift through huge databases, many of them not available to anyone else but the government, of state-of-the-art research, current events, historic events, standards, whatever ..., they will analyze your problem from every possible perspective and make the result of these efforts available to you, together with several recommendations of actions according to the guidelines you provided.

I highly doubt that there are more than a hundred people on this planet who could be incompetent under these conditions. What we're observing is not incompetence, but a conflict of interests, between what they want and how often they need to throw you a little bone to keep you obedient.

palata 7 hours ago | parent | prev | next [-]

I think they are not in a position where they have to actually solve the technical problem, but rather in a position where they decide what they believe is best for the society.

"If you were able to break encryption only for criminals, it would increase the security of the people. Please try to break encryption only for criminals" is not completely unreasonable.

The problem, of course, is that it's not possible. But for those politicians, cryptography is pretty much magic. Why wouldn't it be possible?

Same thing happens for climate change: instead of understanding the problem and facing reality, politicians (and honestly most people) stop at "scientists just need to find a way to remove CO2 from the atmosphere efficiently". That's not how it works, but it doesn't prevent them from behaving as if it was possible. "It's magic, just do this one more spell".

nickslaughter02 7 hours ago | parent | prev | next [-]

Analyzing text is still debated and not ruled out completely.

Tangurena2 4 hours ago | parent | prev [-]

> I am never sure if the people that wrote that law

No. Much of the legislation that gets introduced is provided as "model legislation" by political action groups (such as ALEC). This is why so many states seem to introduce the same legislation all at once.

The party whip tells them what to vote for. Sometimes, sensible people stop deranged legislation from getting out of committee (such as banning all mRNA vaccines (ID in 2024 & 2025, KY in 2025) or requiring blood banks to provide "pureblood" (from people who never had covid vaccines) at no additional cost to anyone requesting same (ID & KY in 2025). Or the one from ID in 2024 that would have made providing blood from a person who had a covid vaccine a felony.

You can follow along with the state legislatures at: https://www.billtrack50.com/info/

And the feds at: https://www.congress.gov/

For example, HR 22 passed the House of Representatives along party lines. The Senate has not scheduled the bill for hearing/vote yet. This bill is only 2 pages long, but I would like you to read it and take a guess at who they are trying to ban from voting in Federal elections. It has never been legal for non-citizens to vote in federal elections.

https://www.congress.gov/bill/119th-congress/house-bill/22/t...

> A form of identification issued consistent with the requirements of the REAL ID Act of 2005 that indicates the applicant is a citizen of the United States.

This is called an Enhanced Driving License and only 5 states (MI, MN, NY, VT, and WA) issue these. From the front, they look just like the REAL ID compliant ID/DL from that state but with a cute little American flag on the front. The back has the funny OCR text like the page in your passport that has on the page with your picture.

They are trying to ban the following from voting in Federal elections:

1. Transgender people.

2. Non-citizens.

3. Women who took their husband's name upon marriage.

4. People who changed their name.

5. People who can't afford the $200 for a US Passport (if you never had one before, or lost yours like I did, this is about what you have to pay, otherwise it runs $110).

6. All of the above.

7. Something else (please explain)

catoc 3 hours ago | parent | prev | next [-]

Breaking encryption to stop criminals and CSAM-sharing bastards does not work. Breaking encryption will only harm honest, law-abiding citizens. Criminals will just use “illegal” real encryption. It’s easy, the implementation details are everywhere.

The EU knows this.

They’ll always include “CSAM” as a validation, but the true underlying desire is surveillance.

gloosx 5 hours ago | parent | prev | next [-]

It’s funny — Chat Control is not aimed at people who actually care about privacy. Those will always find a way to keep using encryption. The math doesn’t vanish because a law says so, and the open-source projects aren’t going away.

What it really does is push "regular" people back into surveillance by default. Most already assume their chats might be scanned or their phone might be listening, so they self-censor anyway. The law just bakes that into the mainstream tools, while the rest of us will keep using the same workarounds we always have.

johnisgood 7 hours ago | parent | prev | next [-]

Funny thing is, my private conversations of sexual nature with my 28 years old girlfriend could probably flag "their" system as CSAM. It has happened to a couple of people before from what I recall.

If this passes, just stop using anything inherently insecure. You may want to stop using WhatsApp, Instagram, Facebook, etc. for private conversations. I already do this.

There are alternatives that will not be affected by this, stick to these. I would give you a list, but I should better be quiet about it.

HelloUsername 6 hours ago | parent | next [-]

> There are alternatives that will not be affected by this

An app, in an official app store no less, is not going to be a solution for long. If you want an actual technical attempt at a solution you first need to regain ownership over your computing devices.

nickslaughter02 7 hours ago | parent | prev [-]

> There are alternatives that will not be affected by this

For how long?

palata 5 hours ago | parent | prev | next [-]

One problem, if I'm being honest, is that whatever you try to do, you will have a vocal group of people who will explain why it will destroy life as we know it. And everybody in that group of people will genuinely believe that it is absolutely insane to not share their beliefs.

Obviously, some groups are more right than others. If you are into cryptography, you know about the risks coming from Chat Control. But politicians are not part of your group. And what they see, from their point of view, is what I said above: whatever they try to do, there will be a vocal group of people who will genuinely believe that it is completely unreasonable.

That, to me, explains why it keeps coming back: because really, if we could break cryptography only for the bad guys, it would help a lot. "Okay, those people say that it is stupid, just like for everything else we try to do. What makes this group of people more right than the others?"

fl0id 4 hours ago | parent | prev | next [-]

I'd really like them to bury this once and for all. It's really exhausting that it's like an undead zombie that always comes back.

deepriverfish 5 hours ago | parent | prev | next [-]

I wonder if they'll insist politicians have backdoors in their chat apps too.

ptman 5 hours ago | parent [-]

“The fact that the EU interior ministers want to exempt police officers, soldiers, intelligence officers and even themselves from chat control scanning proves that they know exactly just how unreliable and dangerous the snooping algorithms are that they want to unleash on us citizens,” commented Pirate Party MEP Patrick Breyer.

bradley13 7 hours ago | parent | prev | next [-]

This is everywhere, in every Western country, somehow all at the same time. Real identities for social media, electronic IDs, electronic currencies run by the government, backdoors in encryption

This is dystopian. Who is behind this coordinated attack?

johnisgood 7 hours ago | parent | next [-]

Not just Western, Chat Control affects whole EU, including Central / Eastern European countries. Fucking Hungary (i.e. Orbán) agreed to it, for one.

pndy 6 hours ago | parent | prev | next [-]

The politicians from all sides. It appears they want to solidify their power for years, and no matter how ridiculously this may sound like - also introduce some caste system where they're above law and we won't do anything but spend money and consume certified media because anything else is against the law.

fusionadvocate 5 hours ago | parent | prev [-]

We enjoyed a peaceful 'air pocket' in tech, but this is over. And it makes sense. Technology is rendering regular people useless. And when they eventually get destitute they will rebel. If I were the ruling elite I too would move fast to increase my control over the masses.

permo-w 7 hours ago | parent | prev | next [-]

obviously in a couple of years they'll try again, but it was blocked aready, right?

nickslaughter02 6 hours ago | parent | next [-]

They haven't stopped trying continuously since late 2021. You don't hear about it for a few months only because some countries are more aggressive about it than others.

amelius 7 hours ago | parent | prev [-]

In a couple of years they have backdoors installed in the silicon directly.

seydor 6 hours ago | parent | prev | next [-]

They aren't really breaking encryption, more like banning it, right?

nickslaughter02 6 hours ago | parent [-]

They are breaking the idea that you can have a private conversation without the government spying on you. The how doesn't matter.

BSDobelix 7 hours ago | parent | prev | next [-]

Exactly what China and Russia want (from the security perspective), and the US (from a economical one).

zecg 6 hours ago | parent | prev | next [-]

Let me be reasoned and measured and say fuck the entire gallery of those assholes. I only use Signal now, but I'm fully willing to give that up as well if this goes through and go full GPG-encrypted e-mail with keys exchanged IRL. The only thing I use the smartphone for other than Signal is navigation and OSMand works offline perfectly, I'll just pop my simcard into the cheapest dumbphone I can find and occasionally connect my phone to wifi to download new vector maps.

rnhmjoj 6 hours ago | parent | prev | next [-]

The opposition to chat control is really missing the point: chat control does not break encryption, the law is about mandating client-side scanning, not weakening cryptography so law enforcement can break it more easily or introducing backdoors. If you say "don't break encryption", they will just respond that this will not break encryption, which is true, but also completely irrelevant.

What we should be advocating instead is the freedom of doing whatever we want with our computing devices, which include rejecting the sort of crap companies and various government like to impose on ourselves.

kevincox 5 hours ago | parent [-]

Yes, it doesn't "break" encryption, it just defeats it.

The client-side scanning means that some amount of your communication will be uploaded in clear text to the government. And unless the government keeps it completely secure (spoiler: they won't) this will leak. Therefore it defeats the point of the encrypted channel.

So sure, it isn't as bad as just removing encryption from these apps. But it is very similar to giving the government a backdoor key to all messages. Maybe you see it as slightly better because only the messages flagged by the automated scanning are made vulnerable or maybe you see it as slightly worse because previously you would need both the backdoor key and access to the original messages and now all of the data you want is in a single location.

But the point is that this significantly weakens the security properties that these E2EE messengers provide if implemented.

martin-t 6 hours ago | parent | prev | next [-]

Assuming there's a tradeoff between safety and privacy (which might be a false dichotomy pushed onto people), I am perfectly fine with the current level of safety. I feel zero need to give up privacy for more safety.

I feel:

- The most danger in my life is from deranged people like some rando homeless person who decides to push me under the subway out of the blue. The second biggest danger is unemployed drug-using losers who might try to rob me in the street. The third danger is aggressive groups of teenagers (which happen to usually be a certain minority where I live) who might try to beat my up because somehow that is how they gain status among each other.

- If I was a woman, the fourth would probably be getting raped. Most probably by an immigrant, usually from a Muslim country. This might be incredibly controversial to US people but in the EU, we hear about these cases regularly. I am not saying every immigrant or Muslim is a rapist. I am not saying they rape at a much higher rate than the native population. This is why I prefaced everything with "I feel" because these 4 reasons are the narrative I see from the media. OTOH I would be surprised if there wasn't _some_ measurable correlation - I would love to see this quantified but at the same time it's the kind of thing where you get accused of being an -ist or -phobe no matter which result you get.

Anyway, taking away people's privacy does not help with any of these.

But that's not the point.

The most danger to a politician's life is from:

- Terrorists.[0]

- Non-deranged (sane) people who are so ideologically opposed to the politician's views and actions that they decide the only way to stop them is to attack them physically.

Taking away people's privacy helps with both of these. If performed by a group of people, there's the obvious need to communicate and organize. If performed by a single individual, then he still has to perform reconnaissance and acquire tools, both of which are likely to be done online to some degree.

---

So you see, it's not about people's safety. It's about politicians' safety.

[0]: Terrorism is by definition the intention to cause fear among the population. It was later redefined as trying to affect political change through violence, which is stupid but it serves the purpose of politicians using terrorists as a source of fear, despite the average person being incredibly unlikely to be hurt by one.

nickslaughter02 6 hours ago | parent [-]

It's about to get worse:

New Pact on Migration and Asylum (https://en.wikipedia.org/wiki/New_Pact_on_Migration_and_Asyl...)

'Women Are No Longer Safe': Critics Blame Surge in Migrant Crime Across Europe (https://www.ibtimes.co.uk/women-are-no-longer-safe-critics-b...)

Am4TIfIsER0ppos 7 hours ago | parent | prev [-]

That's a bit ... off brand coming from you mozilla. How are the governments going to find and censor things you don't like

https://blog.mozilla.org/en/mozilla/we-need-more-than-deplat... https://archive.ph/ia2z4

I see the link is now broken on their site so perhaps they have thought better. STFU and just make firefox.

johnisgood 7 hours ago | parent | next [-]

Say what you will, but I do not care who is pushing AGAINST Chat Control, as long as they are pushing AGAINST it.

cedws 7 hours ago | parent | prev | next [-]

https://web.archive.org/web/20240101011830/https://blog.mozi... Looks like it was removed around Nov 2024, ie around the time it became clear American politics was turning tides and Trump would get elected. Regardless of political position, I have no respect for people or companies that have no principled position and pander to $CURRENT_POLITICS.

saubeidl 7 hours ago | parent | prev [-]

Breaking encryption of private messaging is not the same as not letting propaganda run rampant and to try to equate them is bad-faith propaganda itself.