China's top messaging app WeChat banned from Hong Kong government computers
- Reference: 1729746697
- News link: https://www.theregister.co.uk/2024/10/24/hong_kong_wechat_ban/
- Source link:
On Tuesday, secretary for Innovation, Technology and Industry Sun Dong [1]discussed the matter [VIDEO] during an appearance on public broadcasting service Radio Television Hong Kong (RTHK).
Yesterday, Hong Kong's Digital Policy Office posted news of the rule change.
[2]
"Although various government departments have deployed multiple cyber security defense measures, the use of end-to-end encryption technology in services such as personal webmail, public cloud storage and instant messaging may circumvent such measures and make it impossible for system administrators to effectively detect potentially malicious links or attachments transmitted by the relevant services," [3]it explained .
[4]
[5]
The Policy Office added that since the government doesn't control these platforms, tracing transmitted information is challenging. Their technical features hinder efforts to detect and respond to malicious activities, increasing the risk of information leaks.
Local media [6]reported that minister Sun said inspiration for the regulations came from similar actions taken by the US and mainland China, plus serious data security incidents over the last year.
[7]
The restrictions go into effect at the end of October. Exceptions to the ban are available in some instances, with approval from department heads.
[8]EU tries to pin down China on definition of 'important data'
[9]China makes it even harder for data to leave its shores
[10]Google gives in to Hong Kong, blocks fake national anthem on YouTube
[11]Hong Kong becomes major hub for shipping banned tech to Iran, Russia
Hong Kong is technically a part of China – even if under a "one country, two systems" framework. The Middle Kingdom usually differentiates between products made in the West and homegrown ones like Tencent's WeChat. It views the latter as more secure, partly because of [12]a requirement to store data domestically.
Beijing likes to nourish homegrown tech while keeping its developers [13]under its thumb . But this time, China – or at least its Special Administrative Region – sees Tencent’s service as a security threat.
Hong Kong's legislature is projected to table a new cyber security law by the end of the year, which is expected to cover critical infrastructure computer systems. ®
Get our [14]Tech Resources
[1] https://www.youtube.com/watch?v=o1MWBtWq3GE
[2] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2ZxoayR54Ytz0ztFCF7VWKwAAAAU&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[3] https://www.facebook.com/digitalpolicyhk/posts/pfbid037rCvLnyCaxcv89x4HmmHv6DcZWWjEG3iib3GkSRQoH1ArY2xyy657YVuXghuwBHMl
[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44ZxoayR54Ytz0ztFCF7VWKwAAAAU&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[5] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33ZxoayR54Ytz0ztFCF7VWKwAAAAU&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[6] https://hongkongfp.com/2024/10/23/restrictions-on-hong-kong-civil-servants-access-to-whatsapp-wechat-on-work-computers-to-take-effect-this-month/
[7] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44ZxoayR54Ytz0ztFCF7VWKwAAAAU&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[8] https://www.theregister.com/2024/08/29/eu_china_data_talks/
[9] https://www.theregister.com/2023/02/27/china_data_regulatory_intervention/
[10] https://www.theregister.com/2024/05/16/google_blocks_hongkong_anthem/
[11] https://www.theregister.com/2024/07/23/hong_kong_tech_sanctions_evasion/
[12] https://www.theregister.com/2023/02/27/china_data_regulatory_intervention/
[13] https://www.theregister.com/2023/07/12/china_attacks_the_fake_news/
[14] https://whitepapers.theregister.com/
There are some things which simply shouldn't be used in/by government...
You mean like Windows 10/11 ?
The only communication channel to the outside should either be secure messaging servers hosted by the government, or email with a bunch of DLP policies.
Those two things alone are enough of a compliance nightmare already, the idea that up until this point they had access to an uncontrolled end-to-end encrypted messaging service on their devices is stressing me out.
Wechat is a lot more than just their WhatsApp equivalent though, it is also their Paypal equivalent, their Apple/Google Pay equivalent, and a lot of other things.
Its astonishing the amount of use of back-channels like WhatsApp groups by UK politicians. Its either gross stupidity or willful neglect of duty. Either should be enough to get them taken round behind the sheds and "re-educated".
In the commercial world we are constantly warned that this sort of behaviour is against policy but in the commercial world the risk of sanctions is real for both for the individual and the firm. Approved communications channels are there for one reason and one reason only, so that the contents can be archived for future reference. Going outside of that says either you don't get it or you don't want to get it.
IT specialists?
Remember the Scottish minister who took his Parliamentary iPad on holiday, the one with government and constituency business on it (or at least accessible via it)? Who then let his kids use it as a hotspot to watch streaming football matches and racked up a bill of tens of thousands in roaming charges? Who was extremely economical with the truth when the charges were highlighted by the media and was protected by the party elders for months until, even to them, his position became untenable?
Apart from all the political and personal failures to act with integrity, what sort of IT organisation sends out official devices that allow that sort of use?
hmm
Given that even school teachers have to take oath/ swear allegiance to the city, NSL, Winnie etc. I think including WeChat is either a move just to show fairness or those involved in the change of the guidelines are still doing their best to 'embarrass' the government, very small things but the commies are extremely sensitive if something hits the international news. I hope is the latter :)
Re: hmm
or it's a bone to pretend that HK has any sort of independence as it's such a minor thing to have control over - Look we don't allow this Chinese thing, meanwhile crackdown on any democracy...
Do cell phones count as computers here?
"Hong Kong’s government has updated infosec guidelines to restrict the use of Chinese messaging app WeChat, ..., on computers it operates." Does that include cellphones?
Crossover challenge
Like all governments, there seems to be an issue understanding what is a business requirement and what is a personal desire. i.e. I want to use all my personal shite at work.
Do government officials need all this at your fingertips technology?
Most governments and their subordinate agencies don't do anything quickly, so why the need to instant messaging tooling coming out of your ears?
There are some things which simply shouldn't be used in/by government, no matter who develops/hosts/controls the service.
Social media of any sort, Viber/WhatsApp/etc., anything which isn't related directly to government work and/or provided/installed by the government's IT specialists, shouldn't be used.