News: 1643374571

  ARM Give a man a fire and he's warm for a day, but set fire to him and he's warm for the rest of his life (Terry Pratchett, Jingo)

Internet Society condemns UK's Online Safety Bill for demonising encryption using 'think of the children' tactic

(2022/01/28)


Britain's controversial Online Safety Bill will leave Britons more exposed to internet harms than ever before, the Internet Society has said, while data from other countries suggests surveillance mostly isn't used to target child abusers online, despite this being a key cited rationale of linked measures.

Government efforts to depict end-to-end encryption as a harm that needs to be designed out of the internet as it exists today will result in "fraud and online harm" increasing, the Internet Society said this week.

Founded by Vint Cerf and Bob Kahn, the Internet Society is one of the oldest and most well-respected institutions guiding the path of the public internet today. Its cry against the draconian Online Safety Bill (aka Online Harms Bill) should cause policymakers to sit up and pay attention.

[1]

Robin Wilton, the society's director of internet trust, said in a statement: "Today, encryption is an essential component of digitally connected objects like cars, doorbells, home security cameras and even children's toys, otherwise known as the 'Internet of Things' (IoT). It's also essential for national security by protecting highly sensitive systems like the power grid, citizen databases, and financial institutions such as the stock market."

[2]

[3]

Government has been [4]explicit about wanting to ban end-to-end encryption , co-opting willing and eager police forces into a [5]public campaign demonising the safety and security technology .

The Internet Society's Wilton rubbished these calls, saying: "Despite having access to the world's leading cryptographic expertise, the government has been unable to suggest a credible, safe back door that meets their requirements because it does not exist. Instead, the government is trying to make companies design insecurity in by default."

[6]

Quoting government publicity around the Online Harms Bill, he added: "That is not the way to 'harness the benefits of a free, open and secure internet', it's a recipe for fraud and online harm."

"It prevents spies, terrorists and hostile governments from accessing and exploiting confidential communications of government officials, and protects highly sensitive systems intrinsically tied to national security, including the power grid, databases, and financial institutions, from being hacked," he concluded.

Who is govt truly most keen on surveilling? Drug dealers

Meanwhile, more figures emerged tending to show that online surveillance tends to be used by Western governments against drugs gangs rather than child abusers, despite the Online Safety Bill and police campaigns claiming end-to-end encryption (E2EE) will turn social media into a paedophiles' paradise.

Encrypted email firm Tutanota, headquartered in Germany, published research this week suggesting surveillance orders are deployed to target drugs offenders first and foremost.

"Most orders issued to telecommunications providers are in connection with drug offences," Tutanota told The Register . Looking at published data, the company said about 80 per cent of wire-tapping orders granted in the US, one of the more heavily surveilled Western countries, were for drug-related crimes.

[7]MPs charged with analysing Online Safety Bill say end-to-end encryption should be called out as 'specific risk factor'

[8]Privacy is for paedophiles, UK government seems to be saying while spending £500k demonising online chat encryption

[9]Privacy is for paedophiles, UK government seems to be saying while spending £500k demonising online chat encryption

[10]Wah, encryption makes policing hard, cries UK's National Crime Agency

"In recent years, child sexual abuse and child pornography have played only a marginal role in telecommunications surveillance in practice," [11]blogged Tutanota founder Matthias Pfau.

The same held true in Germany, where a specifically broken-out category of warrants granted for child abuse image offences made up just 0.2 per cent of surveillance applications for 2019 – having remained at that insignificant level for 10 years.

[12]

In snoop-happy Australia the situation was only slightly different, with warrants granted under that country's Telecommunications Interception Access Act 1979 being 50 per cent focused on drugs: in 2020 surveillance against child abuse imagery offenders made up just 0.4 per cent of applications, said Tutanota.

"The UK Home Office unfortunately does not provide figures on this," added Pfau, but there is little reason to assume the UK is much different from its sister democracies.

The Online Harms Bill continues its Parliamentary journey. ®

Get our [13]Tech Resources



[1] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2YfQhRO@zgcxBGrYDN3z5CwAAAIE&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0

[2] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44YfQhRO@zgcxBGrYDN3z5CwAAAIE&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0

[3] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33YfQhRO@zgcxBGrYDN3z5CwAAAIE&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0

[4] https://www.theregister.com/2021/12/14/online_safety_bill_report/

[5] https://www.theregister.com/2022/01/20/no_place_hide_campaign_anti_e2ee_ukgov/

[6] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44YfQhRO@zgcxBGrYDN3z5CwAAAIE&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0

[7] https://www.theregister.com/2021/12/14/online_safety_bill_report/

[8] https://www.theregister.com/2022/01/20/no_place_hide_campaign_anti_e2ee_ukgov/

[9] https://www.theregister.com/2022/01/20/no_place_hide_campaign_anti_e2ee_ukgov/

[10] https://www.theregister.com/2018/05/14/encryption_hindering_law_enforcement_says_nca/

[11] https://tutanota.com/blog/posts/wiretap-orders-usa-germany-australia/

[12] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33YfQhRO@zgcxBGrYDN3z5CwAAAIE&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0

[13] https://whitepapers.theregister.com/



msobkow

Yep. They're playing political games with trigger words and phrases to try to convince a slow-witted and gullible public to do what they want based on their emotions instead of any kind of logic.

badflorist

"... playing political games..."

Or internet games, maybe these politicians want their names in some hits/clicks today. Hate is a wonderful advertising tool, facebook exists from it.

Adair

Yep. They're playing political games with trigger words and phrases to try to convince a slow-witted and gullible public to do what they want based on their emotions instead of any kind of logic.

Now where have we come across that before? Wasn't there some kind of vote, or something?

Arthur the cat

Play the same game back at them.

"If you don't have E2EE then perverts will be able to see your children via the babysitting/security cameras in your house and start grooming them for sexual abuse via your smart devices."

So, 0.2% eh ?

Pascal Monett

" a specifically broken-out category of warrants granted for child abuse image offences made up just 0.2 per cent of surveillance applications for 2019 – having remained at that insignificant level for 10 years "

And for those 0.2% we get government mouthpieces actively trying to subvert our civil rights because think of the children .

Well I'm a normal guy. I don't think about the children, I think about women.

And I want my privacy back.

Re: So, 0.2% eh ?

Doctor Syntax

"I don't think about the children"

I do. I used to think about my children. Now I think about my grandchildren. And I think it's wrong of the government to deny them the legal use of secure forms of communication which criminals will continue to use.

Criminals will continue to use them. One thing my experience has taught me is that if a criminal is setting out to commit some offence, say a robbery, which needs some other law to be broken, say stealing a vehicle to use as a getaway car, in support of the main objective, that secondary offence will not inhibit them in the least.

Re: So, 0.2% eh ?

Yet Another Anonymous coward

But if we increase the tax on cars and made the licence more expensive that would prevent cars being used in robberies

Re: So, 0.2% eh ?

Nick Ryan

This is entirely true, but only if taken to the correct end point.

We should make vehicle ownership and operation so expensive that only the ruling classes can afford them. This way all the plebs, as in everyone who is not a member of the ruling classes , won't be able to afford them to commit robberies.

Re: So, 0.2% eh ?

Anonymous Coward

It will also make a large reduction in traffic, saving carbon emissions, reducing pollution and avoiding the need to spend more taxpayers money on building new roads. What's not to like? !

Re: So, 0.2% eh ?

elsergiovolador

The plan to end roberries is more elaborate. The agenda "you'll own nothing and be happy" actually means that in the future, there will be no point to rob anyone, because nobody will own anything.

You still will be able to take something from someone, but that will automatically take credit from your digital wallet and some social credit points, and the victim will get same day replacement.

Re: So, 0.2% eh ?

simkin

Uh, huh. Sure they will. Right after the bureaucracy processes it. So never.

Lazy

Electronics'R'Us

The government and police really want to cripple EE2E because it means they can just trawl through everything which means they really don't have to do real police work.

Indeed, the current situation seems to [1]back that up .

So rather than use tried and true methods (aka gathering real evidence) they think this [2]wondrous AI [amazon.co.uk] will magically make their lives so much easier.

Then there is the control freakery angle (which seems to infect a lot of people but our government appears to be a super spreader).

It would be funny if it wasn't so serious.

[1] https://www.bbc.co.uk/news/uk-51221054

[2] https://www.amazon.co.uk/Myth-Artificial-Intelligence-Computers-Think/dp/0674983513

Re: Lazy

dafe

Without E2EE, everyone will be able to trawl through police records and change communications about ongoing investigations.

Surely that is what the police want.

Make the police & politicians an offer...

ShadowSystems

If E2EE is so bad & should be outlawed, then let us try an experiment by stripping *all* forms of E2EE from the politician/police communications for a month or two to see how it would affect their lives. If it does no harm then perhaps we'll consider extending it to a wider test group, but if as we suspect it causes serious harmful repercussions, then perhaps a serious rethink of the attempts to ban it should be made.

If they refuse such an experiment, use that fact (refusing to eat their own dog food) as all the reason you need to tell them to STFU & FOAD.

If THEY have nothing to hide

DevOpsTimothyC

We keep getting comments like "If you have nothing to hide then you have nothing to fear" from the powers that be.

Why then are MP's not using official (on the record) means to discuss everything. Yes I am talking about WhatApp and the like.

Currently along these lines, the Sue Grey. If the met felt there was nothing to investigate before then why should it delay or cause redactions in the report now. It seems a very bad attempt at either covering things up, or smoothing the curve so we get a string of small revelations which are survivable rather than all at once which would be more problematic.

Re: If THEY have nothing to hide

Arthur the cat

We keep getting comments like "If you have nothing to hide then you have nothing to fear" from the powers that be.

If anyone trots that out near me I reply by saying in that case you won't mind me putting streaming web cams in your bedroom and bathroom then, because you're an upright citizen with nothing to hide.

Re: If THEY have nothing to hide

dafe

I did that once. I was told "that's what privacy is for."

Those who say that they have nothing to hide believe that they have hidden everything already.

Think of the poor NSA/GCHQ

Clausewitz 4.0

How can they protect you if all they want is encrypted?

Illegal Brain-machine interface ( AI ) is just a human rights fiasco.

Re: Think of the poor NSA/GCHQ

dafe

You are confused about AI and BMI.

I wouldn't mind being able to connect to the internet with my mind. I would mind if that connection wasn't encrypted.

AI is just a different way of programming. Instead of writing a function that maps the input to the output, use a function that finds a heuristic from example input-output pairs.

BMIs may require AIs to work, but they are not the same thing or in the same category.

And neither endanger human rights, they may even help protect them. People might use technology for nefarious purposes, like drunk driving, but they would get drunk even without technology.

Criminals will continue to crime...

localzuk

The entire argument is flawed.

It is not overly complicated to create your own E2EE comms app. Criminal gangs will do this. The tools are already available online. So what exactly does banning it for the law abiding citizens of the country do to prevent crime?

Re: Criminals will continue to crime...

dafe

I'd go further.

Without E2EE, criminals will have access to all of the files that the police and MI have compiled on everyone.

Puppets

elsergiovolador

G7 governments are run by WEF puppets that are on various levels of Great Reset implementation. One of the pillars of the great new world is total control of the communication, so anything can be censored and any cells of dissent swiftly neutralised.

Anonymous Coward

I thought we had a right to privacy. To select the services we trust based on the privacy they provide.

what happens if we all decide to encrypt are own data, how will they stop us?

A new business will emerge like the old PGP approach. Oh wait thats what the bad guys do anyway, no requirement for service/app providers to do it.

Or are they to check every file transmitted, block any encrypted and send you a notice of prosecution for securing your own data.

Arthur the cat

Or are they to check every file transmitted, block any encrypted

That's not encrypted! I'm just sending my mate a file of the finest white noise known to man.

Anonymous Coward

The Online Safety Bill may end up unenforceable like the UK age verification law that was delayed over and over again until it was scraped because they just could not find a way to get it up and running. its also easy to see that the new bill could also collapse and not work at all.

"little reason to assume the UK is much different from its sister democracies"

Mike 137

Little reason indeed, although what they all share is that they're not really democracies at all. They're periodically re-elected bureaucratic dictatorships. As G. K. Chesterton pointed out (in, I think, 1909) we won't have real democracy until the populace sets the agenda that is to be voted on. At present, all we really have is to rely on our representatives (who have a potentially conflicting party loyalty) to vote on our behalf on issues we haven't chosen.

This argument about encryption is typical of the 'state' that emerges from the above mind set - the authorities expect to be trusted in relying on encryption to conceal their activities 'for the benefit of the public', but the populace is not to be trusted and must expose every communication to scrutiny.

Recently reported events at No. 10 would appear to cast some doubt on that principle.

C, n:
A programming language that is sort of like Pascal except more like
assembly except that it isn't very much like either one, or anything
else. It is either the best language available to the art today, or
it isn't.
-- Ray Simard