this post was submitted on 25 Feb 2025
563 points (99.3% liked)

Privacy

34247 readers
1023 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago
MODERATORS
 

Swedish government wants a back door in signal for police and 'Säpo' (Swedish federation that checks for spies)

Let's say that this becomes a law and Signal decides to withdraw from Sweden as they clearly state that they won't implement a back door; would a citizen within the country still be able to use and access Signals services? Assuming that google play services probably would remove the Signal app within Sweden (which I also don't use)

I just want the government to go f*ck themselves, y'know?

top 50 comments
sorted by: hot top controversial new old
[–] Mio@feddit.nu 3 points 2 hours ago

Stop this!

Would anyone accept if the government installed a door into your house that only they have the key to?! Just in case they need to come in and avoid kicking the normal door when I am not home...

[–] captainlezbian@lemmy.world 1 points 1 hour ago

And I want a better future. Guess we're both gonna be disappointed ain't we

[–] ChaoticEntropy@feddit.uk 4 points 3 hours ago

As ever, a "technical backdoor" for anyone is for everyone.

[–] ArtemisimetrA@lemmy.duck.cafe 1 points 2 hours ago

Only Swedish backdoor I want is...

[–] Korhaka@sopuli.xyz 3 points 3 hours ago (2 children)

This is why you make a protocol rather than an app so there is no owner.

[–] douglasg14b@lemmy.world 2 points 2 hours ago

Protocols are much more difficult to create and implement.

The barrier for technical ability and maturity is much higher. Which is why you don't see them as often, and when you do see them they tend to suck, have massive gaps, or some other significant failing that prevents them from really scaling out.

Building reliable and robust protocols with a hobby project is a nearly impossible task, it takes a lot of effort and a lot of minds over a long period of time to settle on the specifications. And just as long to actually implement it.

Usually this requires some sort of funding and dedicated resources from the get-go. Which many of these projects lack.

[–] Brumefey@sh.itjust.works 1 points 3 hours ago (1 children)

Can’t the protocol be blocked at networking level by the ISPs ?

[–] Korhaka@sopuli.xyz 2 points 2 hours ago

Just send it through SSH?

[–] LiamTheBox@lemmy.ml 5 points 5 hours ago

Article with no trackers

The encrypted messaging app Signal is growing – now even the Swedish Armed Forces are using the app.

But the government wants to force the company to introduce a technical backdoor for the Police and the Swedish Security Service.

"If it becomes a reality, we will leave Sweden," says Signal's boss Meredith Whittaker, in an exclusive interview with SVT.

If the government has its way, the bill will be passed in the Riksdag as early as March next year.

The bill states that companies such as Signal and Whatsapp will be forced to store all messages sent using the apps.

Leaving Sweden Signal – which is run by a non-profit foundation – now states to SVT Nyheter that the company will leave Sweden if the bill becomes a reality.

"In practice, this means that we are being asked to break the encryption that is the basis of our entire business. Asking us to store data would undermine our entire architecture and we would never do that. We would rather leave the Swedish market completely," says Signal's head of Meredith Whittaker.

She says the bill would require Signal to install so-called backdoors in the software.

"If you create a vulnerability based on Swedish wishes, it would create a path to undermine our entire network. Therefore, we would never introduce these backdoors.

But don't you as a supplier have a responsibility to support efforts against crime?

"Our responsibility is to offer technology that upholds human rights in an era where those rights are being violated in more and more places. In today's digital world, there are very few places where we can communicate privately or whistleblow.

The Armed Forces critical Meredith Whittaker mentions the Chinese state actor Salt Typhoon's 2024 attack on several internet service providers in the United States, where text messages and phone calls were leaked. She believes that a Swedish back door would open the door for the same thing.

"There are no back doors that only the good guys have access to.

The purpose of the bill is to enable the Security Service and the police to request subsequent notification history for persons suspected of crime. Both authorities were positive in the consultation round.

"The opportunities for law enforcement authorities to effectively access electronic communications are absolutely crucial," Justice Minister Gunnar Strömmer (M) said earlier at a press conference.

But the Armed Forces are negative and recently the Armed Forces urged their personnel to start using Signal to reduce the risk of eavesdropping.

In a letter to the government, the Armed Forces writes that the bill will not be able to be realized "without introducing vulnerabilities and back doors that may be used by third parties".

[–] Chais@sh.itjust.works 15 points 8 hours ago (2 children)

The Swedish government can go suck a lemon.

[–] Lifter@discuss.tchncs.de 2 points 3 hours ago

The government is very split on many questions. Privacy being a weird one because it's the (somewhat) left-leaning Social Democratic that usually come up with these crazy ideas without understanding the implications of privacy.

See Chat Control 2022-2024 https://www.techradar.com/computing/cyber-security/chat-control-all-you-need-to-know-about-the-eu-plan-to-scan-all-your-whatsapp-chats

[–] f314@lemmy.world 2 points 3 hours ago

I don’t think this will happen: Their department of defense has adopted Signal for internal communication, and there is no way in hell they would want a backdoor built in. In fact, the article says they have already opposed the suggestion.

[–] phase@lemmy.8th.world 6 points 10 hours ago

I really like that Signal is able to update itself. Even our of the stores, it can still be up-to-date.

[–] Geodad@lemm.ee 26 points 16 hours ago

Because that worked so well with the US government’s back door into telecom companies. I don’t think they got the Salt Typhoon group out of the system yet.

[–] uriel238@lemmy.blahaj.zone 42 points 20 hours ago (1 children)

Governments have long wanted backdoors on secure private communication, and so long as we have an ownership class, they always will.

And backdoors will always be more useful to hackers, industrial spies and terrorists than they are these departments of state looking to ensure national security (or watch for proletariat unrest. We're already pissed.)

And the private sector will always route around these backdoors, possibly by modding the client or offering new services that are still secure.

States should get used to disappointment. Investigation bureaus should prepare for going dark. Once upon a time they had to rely on detective work rather than asking Google whose phones were near the incident or what web-surfers were asking questions about the circumstances pre-hoc.

[–] icmpecho@lemmy.ml 1 points 3 hours ago

it always bugs me how governments who demand backdoors continuously fail to realize that even if they backdoor the encryption of Signal: PGP, or more similarly to Signal, Pidgin+OTR and/or OMEMO all still exist, are well maintained and are designed to work on top of insecure channels. This isn't gonna be the way to catch actual bad actors, they'll all just get SimpleX or Pidgin or any other number of things and continue communicating and "going dark".

...not to mention that Signal's source code is open, so even if they compromise the Signal client, you can just switch to Molly or build an older version - or if the server is compromised, you can run your own with the backdoor disabled or stripped out. This is a zero-sum-game all the way down.

[–] x00z@lemmy.world 193 points 1 day ago (6 children)

"Every house should break open a wall and build a door only to be used by the police whenever they want to. It will only be used for your protection ;)"

[–] jamie_oliver@lemmy.world 43 points 1 day ago (1 children)

A rep for the Centerparti literally used this argument on the news today, they are very against it. It is just a proposal at the moment, even the military passovely criticized it as they use Signal for communication.

Hopefully that's enough for it not to pass but you never know. If it passes that's a new low.

[–] x00z@lemmy.world 14 points 23 hours ago* (last edited 23 hours ago)

That's good to hear.

With a universal key to every single door that is easily copyable and sharable, but not really possible to know if one bad cop decides to share it for $$$$

load more comments (4 replies)
[–] serenissi@lemmy.world 33 points 1 day ago (2 children)

People host signal proxy for countries where it is banned already. The primary impact of this law is on non technical people and new users thinking to switch to.

[–] GrumpyDuckling@sh.itjust.works 19 points 20 hours ago (1 children)

The real danger is people downloading random apks that could be compromised.

[–] serenissi@lemmy.world 8 points 14 hours ago (1 children)

Or even backdoored by state actors.

[–] dance_ninja@lemmy.world 4 points 14 hours ago

Oh that irony would be painful.

[–] loutr@sh.itjust.works 18 points 23 hours ago

Here's the repo in case anyone is interested in hosting an instance: https://github.com/signalapp/Signal-TLS-Proxy

[–] ShellMonkey@lemmy.socdojo.com 142 points 1 day ago (3 children)

Wherever a service with encryption exists any government in the world thinks they need to be the special child with the access to the contents.

E2E with privately generated and held keys, have you published your PGP public key yet?

[–] khannie@lemmy.world 46 points 1 day ago* (last edited 1 day ago) (1 children)

E2E with privately generated and held keys, have you published your PGP public key yet?

Exactly. You can't stop secure encryption.

I remember in the very old days of the internet when only the US had strong encryption and thought it was some gotcha. They labeled it a weapon to prevent overseas export. Phil Zimmerman created PGP, lobbed the source into a book (protected under 1st amendment) then shipped it overseas.

If strong encryption exists and people want to use it, you're just not going to be able to stop them.

[–] phase@lemmy.8th.world 4 points 10 hours ago

Reminds me of the story of immigrants who tatooed the algorithm on their back. It was illegal to send them back.

load more comments (2 replies)
[–] HappyFrog@lemmy.blahaj.zone 70 points 1 day ago (8 children)

As a sweed, I get really irritated at my country. We were also the ones who introduced chat control into the EU... I fear we're turning into the USA...

[–] JustEnoughDucks@feddit.nl 2 points 3 hours ago

Also Spain has been full force behind chat control. Something something no independence for Catalan?

[–] Wolfie@lemm.ee 19 points 1 day ago (4 children)

Not only USA, but Chains and "Great" Britain as well. You saw how they magaged to get access to all encrypted data stored on Apple's servers within UK.

The politicians in power in Sweden, currently, explicitly said no to chat control 2.0 during the election process. They get voted.. And now they pushed it into the EU and are supporting it. Terrible.

load more comments (4 replies)
load more comments (6 replies)
[–] Lazycog@sopuli.xyz 80 points 1 day ago (7 children)

You can still download the APK from their repository, install it, and use signals built in censoring-evasion setting as far as I know.

They are even working on self updating app feature IIRC.

This is why I donate to signal. I know there are decentralized alternatives but I can barely get my family and friends to use Signal.

[–] WalnutLum@lemmy.ml 5 points 17 hours ago

I highly recommend Obtainium to anyone who wants to keep their apps updated without needing a central report (save for the APKs that only publish on f-droid etc)

[–] Wolfie@lemm.ee 39 points 1 day ago (3 children)

I have gotten a few family members and friends to use signal as I stated to them that this is the only way to get ahold of me. Other than this, you won't. And because of me, they decided to do so :P some haven't, but its up to them to decide.

load more comments (3 replies)
load more comments (5 replies)
[–] TuxEnthusiast@sopuli.xyz 52 points 1 day ago* (last edited 1 day ago) (1 children)

How does this even make sense? The criminals would just move to another platform like SimpleX or use a VPN.

Whole article in English:

The encrypted messaging app Signal is growing - now even the Swedish Armed Forces use it.

But the government wants to force the company to introduce a technical backdoor for the police and Säpo.

  • “If this becomes a reality, we will leave Sweden,” says Signal's CEO Meredith Whittaker, in an exclusive interview with SVT.

If the government gets its way, the bill will be passed in the Riksdag as early as March next year.

The bill states that companies such as Signal and Whatsapp will be forced to store all messages sent using the apps. Leaving Sweden

Signal - which is run by a non-profit foundation - has now told SVT Nyheter that the company will leave Sweden if the bill becomes reality.

  • “In practice, this means that we are being asked to break the encryption that is the basis of our entire business. Asking us to store data would undermine our entire architecture and we would never do that. We would rather leave the Swedish market completely,” says Signal's CEO Meredith Whittaker.

She says the bill would require Signal to install so-called backdoors in its software.

  • “If you create a vulnerability based on Swedish wishes, it would create a path to undermine our entire network. Therefore, we would never introduce these backdoors.

But don't you have a responsibility as a supplier to support anti-crime efforts?

  • Our responsibility is to provide technology that upholds human rights in an era where those rights are being violated in more and more places. In today's digital world, there are very few places where we can communicate privately or whistleblow. Armed forces critical

Whittaker cites the 2024 attack by the Chinese state actor Salt Typhoon on several internet service providers in the US, where text messages and phone calls were leaked. She argues that a Swedish backdoor would open up for the same thing.

  • “There are no backdoors that only the good guys have access to.”

The aim of the bill is to allow the Security Service and the police to request the message history of criminal suspects after the fact. Both authorities were positive in the consultation.

  • “The ability of law enforcement authorities to effectively access electronic communications is crucial,” said Minister of Justice Gunnar Strömmer (M) earlier at a press conference.

But the Swedish Armed Forces are opposed and recently urged their personnel to start using Signal to reduce the risk of interception.

In a letter to the government, the Swedish Armed Forces wrote that the bill could not be implemented “without introducing vulnerabilities and backdoors that could be exploited by third parties”.

load more comments (1 replies)
[–] tabel2@lemmy.wtf 45 points 1 day ago (4 children)

I did not expect this from Sweden.

[–] TuxEnthusiast@sopuli.xyz 1 points 11 hours ago (1 children)

They can't deal with the influx of criminals due to mass immigration so they think this is the answer.

[–] Kusimulkku@lemm.ee 1 points 3 hours ago (1 children)

It seems like better immigration control would be a more direct solution to that...

[–] TuxEnthusiast@sopuli.xyz 1 points 1 hour ago* (last edited 1 hour ago)

The damage is already done. AFAIK they stopped the flood of immigrants. The only solution would be mass deportation of legal immigrants (with citizenship) that commit crimes.

load more comments (3 replies)
[–] robocall@lemmy.world 38 points 1 day ago
[–] terminhell@lemmy.dbzer0.com 5 points 19 hours ago

Then they get it through fdroid?

load more comments
view more: next ›