Signal warns it would pull out of Canada if made to comply with lawful access bill

a month ago by floofloof to c/technology

Secure messaging service says it will not weaken its encryption, privacy safeguards for government
NarrativeBear 173 points a month ago

This just in, Canada post and other mail providers will now be opening all envelopes and packages sent. All contents will be scanned or photographed and held on file for 2 years time, and released to relevant authorities upon request of investigation. To make things easier please do not seal packages or envelopes for easier and more convenient access.

All photos and scanned documents will be held in a highly secured database with easy backdoors access!

Pretty much the equivalent in terms of what Canada wants to implement with access to signal chats, VPN logs, and asking ISPs to keep logs for 1-2 years minimum.

Somehow our politicians don't seem to see the similarities between sending a message online vs sending a physical envelope in the mail. Also, in both cases a person could encrypt their messages/letters if they choose leaving regular folks with less security.

path: 0 23895313, hotness: undefined, score: 173, children: 11
Zen_Shinobi 42 points a month ago

Crazy, it's almost like they treat us like inmates!

path: 0 23895313 23896431, hotness: undefined, score: 42, children: 0
fizzle 40 points a month ago

The thing is, anyone with nefarious intent will just use something else. Theres a zillion ways you could give someone an encrypted message.

path: 0 23895313 23896738, hotness: undefined, score: 40, children: 1
Pika 1 point a month ago
path: 0 23895313 23896738 23897583, hotness: undefined, score: 1, children: 0
nul42 14 points a month ago path: 0 23895313 23902699, hotness: undefined, score: 14, children: 2
quips 5 points a month ago

Authoritarianism. Now its your turn to do something Canadians, don’t let it spread.

path: 0 23895313 23902699 23911363, hotness: undefined, score: 5, children: 0
NarrativeBear 5 points a month ago

Well fuck

path: 0 23895313 23902699 23903851, hotness: undefined, score: 5, children: 0
cabillaud 11 points a month ago

To make things easier please do not seal packages or envelopes for easier and more convenient access

Sealing packages and envelopes is now actionable with a limitation period of 10 years.

path: 0 23895313 23897196, hotness: undefined, score: 11, children: 0
VeryInterestingTable -5 points a month ago

Hmmm they do? They've been opening mails ever since it exists and now they are mad because they can't open emails? At least I would think so. I don't think governments ever refrained from opening mails and packages if they felt like it.

path: 0 23895313 23896321, hotness: undefined, score: -5, children: 3
snowykitty 9 points a month ago

they're being sarcastic

path: 0 23895313 23896321 23896519, hotness: undefined, score: 9, children: 2
VeryInterestingTable 5 points a month ago

Sarcasm went way above my head on that one. My bad.

path: 0 23895313 23896321 23896519 23897828, hotness: undefined, score: 5, children: 1
snowykitty 3 points a month ago

it's oki :3

path: 0 23895313 23896321 23896519 23897828 23905201, hotness: undefined, score: 3, children: 0
aeronmelon 63 points a month ago

Good Signal. pats head

path: 0 23896053, hotness: undefined, score: 63, children: 0
Leviathan 31 points a month ago

Fuck this bill.

path: 0 23898953, hotness: undefined, score: 31, children: 1
floofloof 13 points a month ago

Only a day or two left to write to your MP and object to it.

path: 0 23898953 23899437, hotness: undefined, score: 13, children: 0
hirihit640 22 points a month ago

how many countries has Signal pulled out of so far? I keep hearing about it

path: 0 23897482, hotness: undefined, score: 22, children: 4
Pika 22 points a month ago

They've threatened to for a lot of them, but I'm not actually sure if they've actually done so.

There's a few countries that blocked signal, but I don't know if signal has voluntarily pulled out of any country yet

For example, they've threatened to leave Canada, Sweden, and Australia so far from memory

path: 0 23897482 23897616, hotness: undefined, score: 22, children: 2
hirihit640 10 points a month ago

I believe the UK too

path: 0 23897482 23897616 23897920, hotness: undefined, score: 10, children: 0
sister 1 point a month ago

The pollies know the value of encrypted messaging, don't think there'll be enforcement as long as they stand to benefit

path: 0 23897482 23897616 23901313, hotness: undefined, score: 1, children: 0
badgermurphy 16 points a month ago

I don't know of any yet, but these "encryption is for crooks" laws all keep barely failing, so they have not had to yet, from what I've seen.

path: 0 23897482 23897626, hotness: undefined, score: 16, children: 0
9488fcea02a9 8 points a month ago

I dont understand how they will pull out of canada... will the google play store have geo-restrictions on installing the apk?

or will they just deactivate any account with a canadian phone number?

path: 0 23898652, hotness: undefined, score: 8, children: 5
Cocodapuf 22 points a month ago

Pulling out is super easy. Just don't release a compromised version of the app. Done.

If the app in its current form doesn't comply with Canadian law, then the play store can't legally distribute it. So, problem solved.

So basically Signal can pull out of Canada by doing nothing different than they're already doing.

As for the users who already have the app installed, well that's just too bad for the Canadian government isn't it.

path: 0 23898652 23899163, hotness: undefined, score: 22, children: 0
magnue 7 points a month ago

Probably the same way Imgur dealt with the UK age verification. If you're from the UK, you are basically IP blocked from Imgur.

path: 0 23898652 23898766, hotness: undefined, score: 7, children: 0
floofloof 4 points a month ago

Possibly both. Signal will want to protect themselves legally.

path: 0 23898652 23899444, hotness: undefined, score: 4, children: 0
sleepyplacebo 3 points a month ago

It's possible Signal could stop distributing the app through the Play Store and Apple App Store within Canada. Signal is likely to shut off all servers they rent that are hosted inside of Canada at the very least.

In terms of them deactivating people's accounts registered with Canadian numbers that seems less likely to me.

Even if they potentially blocked Canadian IP addresses, Signal already has support for proxies built in and those are ran by diverse people throughout the world. Some individuals host them.

This isn't exactly the same since each situation with each country is different in terms of the law but Signal is banned in some countries such as Iran, Qatar, UAE and others already and people still use Signal by using Signal TLS proxies, VPNs, and other censorship circumvention tools such as Tor.

They didn't deactivate accounts after being banned and they still allow phone number registration in those countries.

For Android people could download the apk file from Signal's website instead of getting it from the Play Store at least.

https://signal.org/android/apk/

While we don't know with certainty what they will do in each situation the past may be an indicator of what they will do to a large extent. But Signal has never pulled out of a country voluntarily before as far as I know so it is uncharted territory.

I think the intentional deactivation of current accounts is unlikely to happen in this case with Canada.

path: 0 23898652 23900041, hotness: undefined, score: 3, children: 0
Flower 1 point a month ago

Play store just checks what location you put in for Google account registration and shows the app or not. It's the same for showing region locked movies.

path: 0 23898652 23899262, hotness: undefined, score: 1, children: 0
Zephorah 6 points a month ago

Damn, Canada, Palantir owns your government too.

path: 0 23910501, hotness: undefined, score: 6, children: 0
DenimFootpath 6 points a month ago

I don’t know about other people but this article is paywalled for me

path: 0 23901736, hotness: undefined, score: 6, children: 1
BakedCatboy 12 points a month ago

I managed to use the reader mode trick to get the text:

Signal warns it would pull out of Canada if made to comply with lawful access bill

Marie Woolf 6 - 8 minutes

Udbhav Tiwari, Signal vice-president of strategy and global affairs, says Ottawa’s Bill C-22 could threaten encryption and make private messaging services a potential target for cyberattacks.

Secure messaging service Signal, which uses end-to-end encryption, is warning it would withdraw from Canada if asked to compromise its users’ privacy under Bill C-22, Ottawa’s proposed lawful access legislation.

In an interview, Udbhav Tiwari, Signal vice-president of strategy and global affairs, said the company has deep concerns about measures in the bill, including its potential to introduce security vulnerabilities.

Mr. Tiwari said that Signal “would rather pull out of the country than be compelled to compromise on the privacy promises we have made to our users.”

He expressed fears that Bill C-22, which is currently being scrutinized by Commons committee, could threaten encryption.

Mr. Tiwari also warned changes to systems required under the bill could make private messaging services a potential target for cyberattacks.

“Bill C-22 could potentially allow hackers to exploit these very vulnerabilities engineered into electronic systems, with private messaging services serving as an ideal target for foreign adversaries,” he added in a text message.

Spy watchdog asks for greater oversight of proposed lawful access regime, including to boost public trust

Signal was founded in 2012 and is not linked to major tech companies. It has millions of Canadian users and is used for secure communication by journalists, dissidents, government agencies, private citizens and politicians.

The bill would require telecoms, internet companies and other electronic service providers to make changes to their systems to give surveillance capabilities to police and the Canadian Security Intelligence Service to combat threats and criminal activity.

Signal runs on its own centralized servers. The only user data it stores are phone numbers, users’ last login information and the date they joined the service. Users’ contacts, chats and other information are stored by users themselves, on their phones.

The bill would require “core providers” – which would later be defined through regulations – to retain metadata for up to a year.

The metadata would not include e-mails, web-browsing history, social-media activity or text messages, but it could include information about which telephone numbers have been in touch with each other, and data allowing someone’s location to be pinpointed.

“End-to-end encryption is incompatible with exceptional access, no matter how creative the route taken to achieve it,” Mr. Tiwari added in a statement. “Provisions that enable the deliberate engineering of vulnerabilities into critical infrastructure like Signal are a grave threat to privacy everywhere.”

White hat hackers warn lawful access bill could make it easier for criminals to penetrate Canadian systems

Last year, a Signal chat between U.S. national security officials and Defence Secretary Pete Hegseth mistakenly included a journalist. The chat specified timings of warplane launches and when bombs would drop in planned attacks on Yemen’s Houthis.

At a Commons committee hearing on Bill C-22 earlier this month, Public Safety Minister Gary Anandasangaree, who introduced the bill, was asked about its impact on encrypted services, and described it as “encryption-neutral.”

Tech companies, including Apple, and the Canadian Chamber of Commerce have warned the lawful access regime proposed by the bill could weaken or break encryption.

Meta, which owns encrypted messaging service WhatsApp, testified earlier this month to a Commons committee examining the bill. Rachel Curran, the tech giant’s head of public policy in Canada, warned that the bill “could conscript private companies into service as an arm of the government’s surveillance apparatus – with expansive scope and insufficient safeguards.”

“As drafted, the bill could require companies like Meta to build or maintain capabilities that break, weaken, or circumvent encryption or other zero-knowledge security architectures, and force providers to install government spyware directly on their systems,” she said.

Simon Lafortune, a spokesperson for Mr. Anandasangaree, said Wednesday: “We want to reassure Signal and all service providers that we are not legislating to require them to install capabilities to enable surveillance and any assertions otherwise are false.”

The broadly worded bill could lead to the rollout of forced metadata collection for messaging apps, said Kate Robertson, a senior research associate at the University of Toronto’s Citizen Lab whose expertise includes cybersecurity, state agencies’ use of personal data and surveillance activities.

Ms. Robertson said that when recently pressed to commit to protection for encryption, “government officials were reticent.”

“Encrypted communication systems are a lifeline for human rights defenders, journalists and dissidents around the world,” she said.

Matt Hatfield, director of OpenMedia, a non-profit that advocates for widespread and affordable internet access, said “Signal, WhatsApp and other encrypted messaging services could clearly be scoped into Bill C-22 under its current definitions of electronic service providers.”

“A future public safety minister could issue orders to them requiring them to retain user metadata,” Mr. Hatfield said in an e-mail.

Michael Geist, Canada Research Chair in internet and e-commerce law and professor at the University of Ottawa, said he expected private messaging services to become a high-value target for law enforcement if the bill becomes law, including for obtaining metadata.

He said that currently, courts focus on obtaining data itself, but the lawful access regime would mandate permanent structural changes to company systems.

“There is a significant difference between court-ordered disclosures and mandates to retrofit or change technical structures,” he said.

path: 0 23901736 23904794, hotness: undefined, score: 12, children: 0
TerdFerguson 4 points a month ago path: 0 23904689, hotness: undefined, score: 4, children: 0
TerdFerguson 1 point a month ago

FWIW, my MP responded to my message confirming his opposition to C-22 and his understanding of this legislation as advancing provisions for mass surveillance.

path: 0 23956543, hotness: undefined, score: 1, children: 2
floofloof 1 point a month ago

Mine (Liberal) sent a form letter that stated strong support for it and claimed (falsely) that this just brings Canada into line with what its allies have already done.

path: 0 23956543 23959060, hotness: undefined, score: 1, children: 1
TerdFerguson 2 points a month ago

Well I guess if our 'allies' do it... its fine or Canada. No need to think about it. Also.. FUCKING BULLSHIT, you're right its completely false.

I'm sorry to hear that. My MP responded with a thoughtful, lengthy, and well articulated message that seemed to be personally written and not made of LLM slop.

It made me glad I voted for him in our riding

path: 0 23956543 23959060 23960228, hotness: undefined, score: 2, children: 0
TarantulaFudge -6 points a month ago

Maybe we should be looking at the larger picture here this is exactly why Signal or any other privately owned centralized messaging system can never be trusted. Stop using Signal or WhatsApp.

Look at alternatives like Matrix that are immune to this sort of thing.

path: 0 23900142, hotness: undefined, score: -6, children: 4
Netrunner 8 points a month ago

The point flew over your head so hard. People already use and can look into matrix and that makes this still bad.

path: 0 23900142 23901776, hotness: undefined, score: 8, children: 0
breadguy 4 points a month ago

matrix is not immune to this lol

path: 0 23900142 23902352, hotness: undefined, score: 4, children: 1
Arondeus 2 points a month ago

Not trying to be a jerk, I just don't understand. If the government ordered matrix to put a backdoor into the code, couldn't we just install a version that doesn't have the backdoor? It's open source, someone is bound to fork it. So then the government's only option is to hunt down every matrix server in canada that doesn't have a backdoor and persecute the owner, which would be time and cost intensive but I guess possible. So at that point could we not just host the servers outside of Canada? What do they do in that case?

path: 0 23900142 23902352 23909780, hotness: undefined, score: 2, children: 0
floofloof 1 point a month ago
path: 0 23900142 23903006, hotness: undefined, score: 1, children: 0
Treczoks -17 points a month ago

I seriously dislike those "lawful access" shit, but Signal getting out of somewhere is a win.

path: 0 23899464, hotness: undefined, score: -17, children: 1
floofloof 13 points a month ago

Why is it a win, and for whom?

path: 0 23899464 23899527, hotness: undefined, score: 13, children: 0
technology
technology

@lemmy.world

login for more options
85657
20003
16397

This is a most excellent place for technology news and articles.

Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots


go to feed...