-
Regarding “Child-Safe Places” on the Internet
The whole thread is worth exploration, however the attached is my longest contribution to it: Unroll There are no such things as “adult places” or “child places”, so much as places which are intended for an adult or child. In the real world there are fast cars, and dangerous spikes, and toxic chemicals, which may…
-
Example of why social networks need *more* end-to-end encryption, not less, in order to protect their users:
https://www.latimes.com/california/story/2021-08-23/icloud-photo-theft-nude-women?_amp=true&__twitter_impression=true
-
Encrypted Communications in the UK are NOT “beyond the rule of law”, they are already dealt with in the Regulation of Investigatory Powers Act 2000
Unrolled Prof. Aiken, your tweet denies that people can think or say one thing in private, versus another publicly; in fact it seems to deny privacy whatsoever. Something private is not "beyond the rule of law", it is merely private. The law already knows this: The Regulation of Investigatory Powers Act 2000 already recognises that…
-
Unroll: The Telegraph & Cressida Dick’s article on End-To-End Encryption, is part of a deeper political project
1/ It's tempting to be darkly snarky about this article, along the lines of "Met Commissioner Cressida Dick calls for more terrorists to be 'known to the police' before committing atrocities" …the allusion being that (continued) https://www.telegraph.co.uk/news/2021/09/11/tech-giants-making-impossible-stop-terrorists-says-dame-cressida/ 2/ The allusion being that Security Services are already swamped in more "data" than they are "intelligence". Evidence?…
-
Propublica Think That Whatsapp Abuse Reports Are A Backdoor
I'll be blunt: I love @propublica, they have some great people, do some great reporting, they have an Onion Site even… But this article by them is egregious, insinuating clickbait which harms the cause of end-to-end encryption, and it even admits it: https://www.propublica.org/article/how-facebook-undermines-privacy-protections-for-its-2-billion-whatsapp-users The gist is: "Facebook promises that Nobody Else Can Read Conversation Messages!…
-
Matt Green on the NSA Juniper Backdoor revelations & strong-arming
Unroll Oh wow. https://finance.yahoo.com/news/juniper-breach-mystery-starts-clear-130016591.html The story here, for those who may have forgotten 2015 (it was a long time ago!) is that the NSA inserted a backdoor into a major encryption standard and then leaned on manufacturers to install it. Thread. 1/ The backdoor was in a pseudorandom number generator called Dual EC. It wasn’t…
-
INDEX: Religion, Spirituality, & Religious Kooks on the #Darknet
It used to be that people got drugs on the “darknet”*; now they get “Soul-Raising Sessions with Shiva” *Aside: there is no “darknet”, there is only “browser software and communications protocols with better-than-typical security.” Source. Bible4u uncensored Bible for Darknet https://bible4u2lvhacg4b3to2e2veqpwmrc2c3tjf2wuuqiz332vlwmr4xbad.onion/ Welcome To Meru University – A Spiritual University For Advanced Initiates https://w4r7ow7g7qj2mpbjqfoqgjzl442caal62mi3wcml7rwdsyfahydh2zqd.onion/ HeartsCentre: Experience…
-
Advice to a Novice Infosec: Work Commitment and Personal Life
Dear Novice Infosec, I will probably get criticised for writing this, but dammit, I’m now at a point in my life where I don’t have to care about that any more, so I might as well exercise this freedom for “good”. Every so often you will encounter some fool trying to “gatekeep” access to the…
-
So @pwnallthethings decided to try calling out @wcathcart and @WhatsApp as “scanning content” like Apple; here’s why that’s incorrect & misleading
First up: a disclaimer: I worked at Facebook between 2013-16 and I led the team which built “Messenger Secret Conversations”, referenced below. I know my shit, but I may be a little dated. Also: I am currently working on an Internet-Draft with the intention of it becoming an RFC, to help people understand and falsify…
-
A “Duck Test” for End-to-End Secure Messaging
I’ll be presenting this to the CFRG (Crypto Forum Research Group) at IETF 111, late on Friday evening (London time) “A ‘Duck Test’ for End-to-End Secure Messaging”https://alecmuffett.com/alecm/ietf-111/draft-muffett-e2esm-v1.18a.pdf It’s a simple, robust, and easily understood metric for people to use when judging assertions like: “The GCHQ ‘Ghost’ Proposal does not harm End-to-End Security” …claims which are popular in…
-
A long thread discussing End-to-End Encryption with @terrorwatchdog …
This is possibly the longest and politest thread I’ve had on Twitter; it’s required some unpicking to make it into a linear narrative but I’ve done my best, below. PART 1 THREAD: That’s a great question, and there are benefits to end-to-end technologies in several dimensions – to the people who use it, to the…