Signal boss warns app will exit Australia if forced to hand over users’ encrypted messages

a year ago by maniacalmanicmania to c/australia

Signal president Meredith Whittaker is prepared to withdraw the privacy-focused messaging app from Australia — saying she hopes it doesn’t become a “gangrenous foot” by poisoning its entire platform by forcing it to hand over its users’ encrypted data to authorities.

Ms Whittaker says Signal would take the “drastic step” of leaving any market where a government compelled it to create a “backdoor” to access its data, saying it would create a vulnerability that hackers and authoritative regimes could exploit, undermining Signals’ “reason for existing”.

Pressure has been mounting on Signal and other secure messaging platforms. ASIO director general Mike Burgess has urged tech companies to unlock encrypted messages to assist terrorism and national security investigations, saying offshore extremists use such platforms to communicate.

archive.today

quokka 67 points a year ago

offshore extremists use such platforms to communicate.

Yes, yes they do. But that is not justification for reading everyone's messages.

path: 0 18515813, hotness: undefined, score: 67, children: 6
LodeMike 31 points a year ago

additionally if the app is compromised these "extremists" will just move to one that isn't.

I swear COVID made people forget that actions have consequences. You can't just change something and expect all other things to be equal.

path: 0 18515813 18517080, hotness: undefined, score: 31, children: 0
No1 24 points a year ago

As our esteemed PM Malcolm Turnbull said way back in 2017:

"The laws of mathematics are very commendable but the only law that applies in Australia is the law of Australia"

path: 0 18515813 18519033, hotness: undefined, score: 24, children: 4
MHLoppy 5 points a year ago

Haha, that was Turnbull? It really sounds more like an Abbott thing to have said!

path: 0 18515813 18519033 18519671, hotness: undefined, score: 5, children: 3
princessnorah 5 points a year ago

Too big words for him.

path: 0 18515813 18519033 18519671 18521432, hotness: undefined, score: 5, children: 2
MHLoppy 7 points a year ago

This is now becoming incredibly tangential to the original post, but the comment thread reminded me of the time the hacker known as "Alex" uncovered Tony Abbott's passport and phone numbers, who reacted pretty well to it: https://mango.pdf.zone/...

And then Tony Abbott just… calls me on the phone?

Mostly, he wanted to check whether his understanding of how I’d found his passport number was correct (it was). He also wanted to ask me how to learn about “the IT”.

He asked some intelligent questions, like “how much information is in a boarding pass, and what do people like me need to know to be safe?”, and “why can you get a passport number from a boarding pass, but not from a bus ticket?”.

The answer is that boarding passes have your password printed on them, and bus tickets don’t. You can use that password to log in to a website (widely regarded as a bad move), and at that point all bets are off, websites can just do whatever they want.

He was vulnerable, too, about how computers are harder for him to understand.

“It’s a funny old world, today I tried to log in to a [Microsoft] Teams meeting (Teams is one of those apps), and the fire brigade uses a Teams meeting. Anyway I got fairly bamboozled, and I can now log in to a Teams meeting in a way I couldn’t before.

It’s, I suppose, a terrible confession of how people my age feel about this stuff.”

Then the Earth stopped spinning on its axis.

For an instant, time stood still.

Then he said it:

“You could drop me in the bush and I’d feel perfectly confident navigating my way out, looking at the sun and direction of rivers and figuring out where to go, but this! Hah!”

This was possibly the most pure and powerful Australian energy a human can possess, and explains how we elected our strongest as our leader. The raw energy did in fact travel through the phone speaker and directly into my brain, killing me instantly.

When I’d collected myself from various corners of the room, he asked if there was a book about the basics of IT, since he wanted to learn about it. That was kinda humanising, since it made me realise that even famous people are just people too.

path: 0 18515813 18519033 18519671 18521432 18521937, hotness: undefined, score: 7, children: 1
pulsewidth 35 points a year ago

To the ASIO chief claiming that they need this to monitor terrorism I would answer that legislation has already made it illegal to not unlock your phone if you are presented with a 'data access order' - which police can obtain from a judge. Their claim of 'but terrorists' falls apart when they are free to surveil suspected terrorists in 1000 other ways and can then arrest them with very loose suspicions, hold their phone while they obtain a data access order, and then force them to unlock it and see all the Signal chat data and groups they're in. If you don't unlock your phone it's fines or 2 years in jail.

So they don't need to have a backdoor into Signal or any other E2E encrypted chat to 'stop terrorism'. It's just a wishlist item because they're jealous that they can't hoover up everyone's chats to datamine any more.

path: 0 18520614, hotness: undefined, score: 35, children: 1
TeraByteMarx 1 point a year ago
path: 0 18520614 18537686, hotness: undefined, score: 1, children: 0
naught101 26 points a year ago

Well that would be incredibly fucked.

path: 0 18513937, hotness: undefined, score: 26, children: 15
shads 17 points a year ago

Yes it would be, let's hope more companies follow that example. The more companies that make it clear that Australian politics are never an excuse for compromising the privacy and safety of their users the more hope there is that the message will start to get through. Plus we could serve as a salutory warning for the rest of the world... "Wow go down the path of driving whole market segments out of your economy has bad effects on that same economy."

path: 0 18513937 18514164, hotness: undefined, score: 17, children: 14
naught101 15 points a year ago

I can totally see Australian politics being OK with signal leaving, since that would push users on to other less secure/more compliant apps

path: 0 18513937 18514164 18514199, hotness: undefined, score: 15, children: 13
shads 14 points a year ago

You might be right, but its going to get harder for them to crow about the wins ASIO is making when competent people are spinning up more bespoke solutions they have even less hope of compromising. Plus when people go down the current path that the UK populace is what are ASIO going to claim next, VPNs have to be banned. You know Australia lacks the technical competence to implement that correctly, suddenly every business is having their workflow broken to appease a bunch of "intelligence" wonks. The further they over reach the more likely they will trip themselves up.

path: 0 18513937 18514164 18514199 18514562, hotness: undefined, score: 14, children: 11
naught101 4 points a year ago

A messaging app is extremely hard to "spin up bespoke solutions" for, because a solution's success is 99% dependent on the network effect.

Perhaps when a protocol like signal but decentralised is available, then we might be able to say that.

path: 0 18513937 18514164 18514199 18514562 18515717, hotness: undefined, score: 4, children: 3
maniacalmanicmania 2 points a year ago

I think that the number of folks who will run bespoke solutions will be so small that it'll be insignificant. Signals benefit is its ease of onboarding. If Signal leaves ASIO knows there's nothing else out there for 99% of it's users.

path: 0 18513937 18514164 18514199 18514562 18515047, hotness: undefined, score: 2, children: 6
quokka 3 points a year ago

You mean apps that they'd really like you pass age verification by having MyGovDigitalSurveillanceDefinitelyNotTrackingYou app?

path: 0 18513937 18514164 18514199 18517661, hotness: undefined, score: 3, children: 0
ZoDoneRightNow 22 points a year ago

This just in: Offshore extremists are allegedly using a substance commonly known as "water" to maintain hydration levels.

path: 0 18519805, hotness: undefined, score: 22, children: 3
beeng 5 points a year ago

DiHydrogen Monoxide can kill you!

path: 0 18519805 18520827, hotness: undefined, score: 5, children: 0
Madagaskar_sky 4 points a year ago

Stop, they night actually fall for this. Recently all my sense of normal and impossible behaviour had been called into question.

path: 0 18519805 18520175, hotness: undefined, score: 4, children: 1
msage 4 points a year ago

Recently? This has been happening for many decades. I remember the fall of privacy and law after 9/11, and that wasn't the start.

path: 0 18519805 18520175 18520522, hotness: undefined, score: 4, children: 0
melbaboutown 22 points a year ago

Has Australia just completely decided to go for broke

path: 0 18514931, hotness: undefined, score: 22, children: 11
No1 10 points a year ago

We're trying desperately to outdo the UK....

path: 0 18514931 18518416, hotness: undefined, score: 10, children: 0
quokka 10 points a year ago

Yep. And meanwhile the kids will be chatting/abusing in Google Docs. Or IRC servers they spin up for free in AWS or whatever. Or, shock, SMS.

path: 0 18514931 18517650, hotness: undefined, score: 10, children: 4
melbaboutown 3 points a year ago

Google docs getting censored as well for some reason

path: 0 18514931 18517650 18517755, hotness: undefined, score: 3, children: 3
quokka1 3 points a year ago path: 0 18514931 18517650 18517755 18517944, hotness: undefined, score: 3, children: 0
maniacalmanicmania 2 points a year ago

For real?

path: 0 18514931 18517650 18517755 18517987, hotness: undefined, score: 2, children: 1
melbaboutown 4 points a year ago

If their filter catches anything ‘inappropriate’

path: 0 18514931 18517650 18517755 18517987 18518551, hotness: undefined, score: 4, children: 0
null_dot 8 points a year ago

Not really.

This happens everywhere. It's the police job to ask for access and it's the signal CEO's job to decline.

Ultimately the ASIO (aus federal police) won't call signal's bluff because signal leaving isn't good for them. Threat actors would just use some alternative platform.

path: 0 18514931 18516147, hotness: undefined, score: 8, children: 3
pupbiru 9 points a year ago

australia is also a special kind of fucked up with this though… the assistance and access act that passed in 2018 is absolutely horrible

path: 0 18514931 18516147 18517238, hotness: undefined, score: 9, children: 0
Zagorath 3 points a year ago

ASIO (aus federal police)

I mean, sort of? The Australian Federal Police would be the Australian federal police (the hint is in the name!). But it's true that ASIO does take on many roles that in America are done by the FBI, while AFP does more typical things associated with policing.

path: 0 18514931 18516147 18519160, hotness: undefined, score: 3, children: 1
null_dot 2 points a year ago

Amazing.

path: 0 18514931 18516147 18519160 18519192, hotness: undefined, score: 2, children: 0
pulsewidth 5 points a year ago

Its just pressure from the ASIO chief (our NSA equivalent) at this stage. No legislation.

The Signal CEO is rightly firing back saying it'll never happen, and if push comes to shove they'll leave.

path: 0 18514931 18520530, hotness: undefined, score: 5, children: 0
KitKatKitCat 21 points a year ago

I've been using Signal for almost a decade. If Australia tries to force their hand, I don't know what alternatives I'll have to use.

path: 0 18515201, hotness: undefined, score: 21, children: 30
Zozano 10 points a year ago

Signal?

Just download the .apk directly from the signal website.

Or from the github repo

Or download it through f-droid

Or install Obtainium

path: 0 18515201 18521442, hotness: undefined, score: 10, children: 0
Funky_Beak 9 points a year ago

Turn on your vpn or buy server space and routing all traffic through that's my plan b here.

path: 0 18515201 18515460, hotness: undefined, score: 9, children: 17
null_dot 9 points a year ago

So you can talk to.... yourself?

path: 0 18515201 18515460 18516056, hotness: undefined, score: 9, children: 1
Funky_Beak 1 point a year ago

Run a matrix server to my friends if came to it or have the sever point to the outside web and use it as an end point. Im talking nuclear solutions here that would cost me to achieve. I really dont like security being missmanaged in the name of public safety. If you want my data, get a warrent arrest me and demand my passwords.

path: 0 18515201 18515460 18516056 18671547, hotness: undefined, score: 1, children: 0
KitKatKitCat 3 points a year ago

A VPN should have been my first thought. Rookie error on my part.

path: 0 18515201 18515460 18516301, hotness: undefined, score: 3, children: 4
JackbyDev 2 points a year ago

As someone who has toyed with using one to get around my state's porn ban a little, sometimes it just routes me other states with porn bans. So it's not necessarily a magic fix. It's better than nothing but if everyone starts banning something you will have trouble.

path: 0 18515201 18515460 18516301 18518660, hotness: undefined, score: 2, children: 3
Rivalarrival 2 points a year ago

Any good VPN will let you choose the jurisdiction of the endpoint.

path: 0 18515201 18515460 18516301 18518660 18520834, hotness: undefined, score: 2, children: 2
psud 3 points a year ago

I'm using signal right now for a family group, so complex solutions won't work

path: 0 18515201 18515460 18519845, hotness: undefined, score: 3, children: 0
theroff 2 points a year ago

Will Signal block Australian IP addresses, or nix accounts that have a +61 phone number? I'd assume the former but if Signal and other social media platforms go for the latter it will be painful for Australian netizens.

path: 0 18515201 18515460 18521694, hotness: undefined, score: 2, children: 0
melbaboutown 2 points a year ago

I’m not au fait with this but can you use a raspberry pi for a makeshift vpn or something?

Seems like a thing the tech savvy people do

path: 0 18515201 18515460 18515607, hotness: undefined, score: 2, children: 7
null_dot 4 points a year ago

You can but it's unnecessary. For most people just configuring each device to use a vpn is the path of least resistance.

path: 0 18515201 18515460 18515607 18516163, hotness: undefined, score: 4, children: 2
melbaboutown 3 points a year ago

I’ve just seen a comment about the UK floating vpn bans and am considering the possibility in Australia so I’m probably commenting in the wrong thread.

path: 0 18515201 18515460 18515607 18516163 18516338, hotness: undefined, score: 3, children: 1
Bob_Robertson_IX 3 points a year ago

The problem is everyone you chat with would also have to do this... unless you're talking with people outside of Australia or can convince everyone else to also get a VPN.

path: 0 18515201 18515460 18515607 18516223, hotness: undefined, score: 3, children: 1
melbaboutown 1 point a year ago
path: 0 18515201 18515460 18515607 18516223 18516335, hotness: undefined, score: 1, children: 0
Funky_Beak 2 points a year ago

The raspi still needs to be out of the country for it to work how you want it to. If you have the raspi in the same area then the data is still vulnerable. They may block vpn providers, but they just can't block wireshark connecting to a off shore server because they would shutdown alot of methods, buissnesses use to transfer data. Well they could but it be some next level stupid.

path: 0 18515201 18515460 18515607 18526427, hotness: undefined, score: 2, children: 1
melbaboutown 2 points a year ago

Ah that’s a shame. I guess it could still be used as an adblocker. Time to go research VPNs

path: 0 18515201 18515460 18515607 18526427 18533094, hotness: undefined, score: 2, children: 0
Zagorath 8 points a year ago

Threema is a good option. Not an easy option, but a good one. It uses the Signal protocol, but your private key stays on your device, and you manaage which users you trust to save their public key for communicating with them yourself, including giving three levels of verification for (1) if it's a random person and you have no way of verifying who they are, (2) if it's a person whose ID matches someone in your address book, and (3) if it's someone you've met in person and scanned a verifying QR code.

path: 0 18515201 18518997, hotness: undefined, score: 8, children: 2
psud 2 points a year ago

Is it available for both smartphone ecosystems?

path: 0 18515201 18518997 18519823, hotness: undefined, score: 2, children: 1
Zagorath 4 points a year ago path: 0 18515201 18518997 18519823 18520292, hotness: undefined, score: 4, children: 0
quokka 4 points a year ago

as with Signal, is not really about what you'll use, but what alternative gains traction and you can persuade your contacts to use. I hope one of the decentralised alternatives is able to rise to mainstream status.

path: 0 18515201 18515794, hotness: undefined, score: 4, children: 3
KitKatKitCat 5 points a year ago

Persuading enough people I know to use Signal was hard enough already. I only got lucky because I already had some other friends who were already on the platform. It's much easier to persuade people if you tell them other people are already using it. I just get frustrated that people are too lazy to tap a couple of buttons on their phone to download an app.

path: 0 18515201 18515794 18516289, hotness: undefined, score: 5, children: 2
JackbyDev 2 points a year ago

One of my friends is just so opposed to using anything else other than Meta Messenger and SMS. He says he doesn't want app bloat. I get it, but I'd also like to not have corporations spying on our chats. 🙄

path: 0 18515201 18515794 18516289 18518685, hotness: undefined, score: 2, children: 1
KitKatKitCat 2 points a year ago

App bloat lol. Meta apps are some of the most bloated and resource hungry apps out there.

path: 0 18515201 18515794 18516289 18518685 18522011, hotness: undefined, score: 2, children: 0
shirro 2 points a year ago

There are a number of good alternatives. Signal wins because it's well known, easy to use and install. Governments are targetting private communications, not a specific app so their entire class is under threat and alternatives that can be backdoored will be.

It's all very short sighted. If you really want to stop private communications you have to outlaw all people with technical knowledge and access to general purpose computers. I can cobble something together that is secure enough for a criminal or terrorist to communicate with freely available software but it won't be full featured or nice to use.

Taken to the extreme this thinking ends with sending all the people with glasses to "work" some fields in the country because intellectuals challenge the security of the regime. That makes no fucking sense in a liberal democracy. So why even start down this path. Get a warrant and surveill people at the end points. It's the only acceptable solution.

path: 0 18515201 18535244, hotness: undefined, score: 2, children: 0
Mister_Ruse 2 points a year ago

I use SimpleX.

path: 0 18515201 18519992, hotness: undefined, score: 2, children: 1
KitKatKitCat 1 point a year ago

I had it for a while. Hard to convince people to use it when it has probably less than 10,000 users.

path: 0 18515201 18519992 18521545, hotness: undefined, score: 1, children: 0
Rivalarrival 1 point a year ago

VPN, with an endpoint in a nation where Signal isn't particularly popular, so nobody thinks to fuck with it.

path: 0 18515201 18520816, hotness: undefined, score: 1, children: 0
Jumuta 7 points a year ago

math is math, idiots

path: 0 18525937, hotness: undefined, score: 7, children: 0
sunzu2 4 points a year ago
path: 0 18514954, hotness: undefined, score: 4, children: 15
9tr6gyp3 2 points a year ago

Does Signal not have data?

path: 0 18514954 18516042, hotness: undefined, score: 2, children: 14
TimePencil 3 points a year ago
path: 0 18514954 18516042 18516935, hotness: undefined, score: 3, children: 13
9tr6gyp3 2 points a year ago

I never claimed there was a backdoor...?

Your items 1, 2, 3 are data that Signal stores, as well as the encrypted blobs of our conversations.

Which means they have data, right?

path: 0 18514954 18516042 18516935 18517283, hotness: undefined, score: 2, children: 1
TimePencil 1 point a year ago
path: 0 18514954 18516042 18516935 18517283 18518663, hotness: undefined, score: 1, children: 0
sunzu2 2 points a year ago
path: 0 18514954 18516042 18516935 18517531, hotness: undefined, score: 2, children: 10
TimePencil 4 points a year ago
path: 0 18514954 18516042 18516935 18517531 18518541, hotness: undefined, score: 4, children: 9
pfr 3 points a year ago

They can't get rid of xmpp 😂

path: 0 18522152, hotness: undefined, score: 3, children: 0
heyWhatsay 1 point a year ago

Anyone trying to undermine encryption is a short sighted idiot

path: 0 18537710, hotness: undefined, score: 1, children: 0
australia
australia

@aussie.zone

login for more options
5191
4059
1702

A place to discuss Australia and important Australian issues.

Before you post:

If you're posting anything related to:

If you're posting Australian News (not opinion or discussion pieces) post it to Australian News

Rules

This community is run under the rules of aussie.zone. In addition to those rules:

  • When posting news articles use the source headline and place your commentary in a separate comment
Banner Photo

Congratulations to @Tau@aussie.zone who had the most upvoted submission to our banner photo competition

Recommended and Related Communities

Be sure to check out and subscribe to our related communities on aussie.zone:

Plus other communities for sport and major cities.

https://aussie.zone/communities

Moderation

Since Kbin doesn't show Lemmy Moderators, I'll list them here. Also note that Kbin does not distinguish moderator comments.

Additionally, we have our instance admins: @lodion@aussie.zone and @Nath@aussie.zone

go to feed...