I'm so tired of these...

Is there really no way we can make it technologically impossible for them to exfiltrate user data?

You can make it technologically impossible, but they can also come and arrest you just for using such technology. So its not really a technical problem, its a social/political one.

▲

unethical_ban an hour ago | parent | next [-]

It needs to be done on both fronts.

Privacy-conscious apps and communications tools need to be developed, and we need to build the consensus that privacy is important.

▲

jMyles 3 hours ago | parent | prev [-]

Sure, but then they need to send a physical person, which is expensive and impossible to scale. Making it extremely expensive is probably good enough.

(Feels like we have this same discussion over and over on HN.)

	▲	gmueckl an hour ago \| parent \| next [-]
		I don't understand this take. There is no real way in which a private person can make law enforcement "more expensive". The government can always find means as long as it is supported by a sufficiently big fraction of its people.
	▲	2 hours ago \| parent \| prev \| next [-]
		[deleted]
	▲	direwolf20 an hour ago \| parent \| prev [-]
		[dead]

▲

rtkwe 2 hours ago | parent | prev | next [-]

I don't think there's a way with a phone that people would actually be willing to use. At some point it has to be decrypted to be displayed to the user and there's always the chance there's a flaw somewhere in the stack from hardware to OS to app etc that will have a gap to exfiltrate the data.

▲

mghackerlady 3 hours ago | parent | prev | next [-]

Avoiding centralised services is generally a good start. You could also do something like encrypt any messages through PGP even if the service you're using is already "e2e encrypted" like iMessage or signal

▲

a_paddy 3 hours ago | parent | prev | next [-]

The problem is they'll legislate for the providers to insert back doors, negating cryptographic hardness.

▲

TingPing 3 hours ago | parent [-]

They have to make custom software illegal at some point.

▲

digiown an hour ago | parent | next [-]

They don't have to make it illegal. They can just create all kinds of barriers like only allowing government approved OSes for essential services, and then using custom software can become grounds for suspicion and subject you to searches, etc.

	▲	thewebguyd 38 minutes ago \| parent [-]
		I'm certain this is the direction we are all heading, unfortunately. Governments will sanction the major proprietary OSes and compel Apple, Google, Microsoft to participate in their surveillance programs, and those will have remote integrity attestation and will be the only hardware and software you will be able to use to access essential services and the internet as whole, most likely. The usage of alternative software won't be outright illegal, but will get you on a watchlist. Like you said, they don't need to make other software illegal, just make circumventing the blocks illegal. They can't arrest everyone, but, it's one more gray area thing that can and will be used against you should the government ever decide they have a bone to pick with you specifically so you can get away with it for a long time, until suddenly you don't.

▲

0xTJ 3 hours ago | parent | prev [-]

Given how many of these stories have been coming out, I'm sure they're considering it.

▲

briandw an hour ago | parent | prev [-]

https://xkcd.com/538/ User data can only be as safe as the user.