The Swedish government can go suck a lemon.
Privacy
A place to discuss privacy and freedom in the digital world.
Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.
In this community everyone is welcome to post links and discuss topics related to privacy.
Some Rules
- Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
- Don't promote proprietary software
- Try to keep things on topic
- If you have a question, please try searching for previous discussions, maybe it has already been answered
- Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
- Be nice :)
Related communities
much thanks to @gary_host_laptop for the logo design :)
I really like that Signal is able to update itself. Even our of the stores, it can still be up-to-date.
Because that worked so well with the US government’s back door into telecom companies. I don’t think they got the Salt Typhoon group out of the system yet.
Governments have long wanted backdoors on secure private communication, and so long as we have an ownership class, they always will.
And backdoors will always be more useful to hackers, industrial spies and terrorists than they are these departments of state looking to ensure national security (or watch for proletariat unrest. We're already pissed.)
And the private sector will always route around these backdoors, possibly by modding the client or offering new services that are still secure.
States should get used to disappointment. Investigation bureaus should prepare for going dark. Once upon a time they had to rely on detective work rather than asking Google whose phones were near the incident or what web-surfers were asking questions about the circumstances pre-hoc.
"Every house should break open a wall and build a door only to be used by the police whenever they want to. It will only be used for your protection ;)"
A rep for the Centerparti literally used this argument on the news today, they are very against it. It is just a proposal at the moment, even the military passovely criticized it as they use Signal for communication.
Hopefully that's enough for it not to pass but you never know. If it passes that's a new low.
That's good to hear.
With a universal key to every single door that is easily copyable and sharable, but not really possible to know if one bad cop decides to share it for $$$$
Exactly. We have to think about the children..
Its jot the parents responsibility to be apart of their kids lives and bring them up properly. That responsibility have been pushed onto the governments so that they can leverage it against peoples right to privacy
Best comment.
People host signal proxy for countries where it is banned already. The primary impact of this law is on non technical people and new users thinking to switch to.
The real danger is people downloading random apks that could be compromised.
Or even backdoored by state actors.
Oh that irony would be painful.
Here's the repo in case anyone is interested in hosting an instance: https://github.com/signalapp/Signal-TLS-Proxy
Then they get it through fdroid?
Wherever a service with encryption exists any government in the world thinks they need to be the special child with the access to the contents.
E2E with privately generated and held keys, have you published your PGP public key yet?
E2E with privately generated and held keys, have you published your PGP public key yet?
Exactly. You can't stop secure encryption.
I remember in the very old days of the internet when only the US had strong encryption and thought it was some gotcha. They labeled it a weapon to prevent overseas export. Phil Zimmerman created PGP, lobbed the source into a book (protected under 1st amendment) then shipped it overseas.
If strong encryption exists and people want to use it, you're just not going to be able to stop them.
Reminds me of the story of immigrants who tatooed the algorithm on their back. It was illegal to send them back.
I wish PGP was easier to use. The barrier to entry is way too high for everyday use.
There's a function built into Thunderbird to create keys, and I think publish the public cert directly to the MIT repo.
As a sweed, I get really irritated at my country. We were also the ones who introduced chat control into the EU... I fear we're turning into the USA...
Nah. You guys make more weapons per capita than us. We could never catch up to your weapons industry.
Who do you sell to, btw?
don't worry about it
Definitely don't tell trump.
Not only USA, but Chains and "Great" Britain as well. You saw how they magaged to get access to all encrypted data stored on Apple's servers within UK.
The politicians in power in Sweden, currently, explicitly said no to chat control 2.0 during the election process. They get voted.. And now they pushed it into the EU and are supporting it. Terrible.
Yeah, I kind of want to get in to politics more... when I get my life in order...
It's not stopping the far-right, don't let it stop you!
https://runforsomething.net/ (American-centric site, but I think the resources and advice within are still useful)
How does this even make sense? The criminals would just move to another platform like SimpleX or use a VPN.
Whole article in English:
The encrypted messaging app Signal is growing - now even the Swedish Armed Forces use it.
But the government wants to force the company to introduce a technical backdoor for the police and Säpo.
- “If this becomes a reality, we will leave Sweden,” says Signal's CEO Meredith Whittaker, in an exclusive interview with SVT.
If the government gets its way, the bill will be passed in the Riksdag as early as March next year.
The bill states that companies such as Signal and Whatsapp will be forced to store all messages sent using the apps. Leaving Sweden
Signal - which is run by a non-profit foundation - has now told SVT Nyheter that the company will leave Sweden if the bill becomes reality.
- “In practice, this means that we are being asked to break the encryption that is the basis of our entire business. Asking us to store data would undermine our entire architecture and we would never do that. We would rather leave the Swedish market completely,” says Signal's CEO Meredith Whittaker.
She says the bill would require Signal to install so-called backdoors in its software.
- “If you create a vulnerability based on Swedish wishes, it would create a path to undermine our entire network. Therefore, we would never introduce these backdoors.
But don't you have a responsibility as a supplier to support anti-crime efforts?
- Our responsibility is to provide technology that upholds human rights in an era where those rights are being violated in more and more places. In today's digital world, there are very few places where we can communicate privately or whistleblow. Armed forces critical
Whittaker cites the 2024 attack by the Chinese state actor Salt Typhoon on several internet service providers in the US, where text messages and phone calls were leaked. She argues that a Swedish backdoor would open up for the same thing.
- “There are no backdoors that only the good guys have access to.”
The aim of the bill is to allow the Security Service and the police to request the message history of criminal suspects after the fact. Both authorities were positive in the consultation.
- “The ability of law enforcement authorities to effectively access electronic communications is crucial,” said Minister of Justice Gunnar Strömmer (M) earlier at a press conference.
But the Swedish Armed Forces are opposed and recently urged their personnel to start using Signal to reduce the risk of interception.
In a letter to the government, the Swedish Armed Forces wrote that the bill could not be implemented “without introducing vulnerabilities and backdoors that could be exploited by third parties”.
How does this even make sense? The criminals would just move to another platform like SimpleX or use a VPN.
Next move (and not just from Sweden): make the use of a VPN (and any fully encrypted service) illegal for the average citizen—who needs a backdoor when the law makes it a crime to simply use full E2EE? Let those be used with trust by the army, the press, organizations and people like that just not by common people that should have no privacy at all.
Politician incompetency and dishonesty will finish to ruin what little of Europe remains and what the word democracy was supposed to mean (which is not to consider your citizen like clueless children that can't understand shit and that can't be trusted).
But in exchange of ruining that they will get some more power and/or money, so that's fine I suppose.
You can still download the APK from their repository, install it, and use signals built in censoring-evasion setting as far as I know.
They are even working on self updating app feature IIRC.
This is why I donate to signal. I know there are decentralized alternatives but I can barely get my family and friends to use Signal.
I highly recommend Obtainium to anyone who wants to keep their apps updated without needing a central report (save for the APKs that only publish on f-droid etc)
I have gotten a few family members and friends to use signal as I stated to them that this is the only way to get ahold of me. Other than this, you won't. And because of me, they decided to do so :P some haven't, but its up to them to decide.
I did not expect this from Sweden.
They can't deal with the influx of criminals due to mass immigration so they think this is the answer.
I most definitely did.
Sweden is bizarre sometimes.
Why swedes, why?
The current government promised they would be "tough on crime" but have been largely unsuccessful in reducing gang related criminality. Now they are trying to find new tools to get to the leaders of those gangs. Sadly, they don't understand technology.
Before any politician asks for a backdoor into an encrypted service they should be required to explain Project Rubicon