Chat Control 1.0 lets Big Tech scan ALL your messages.

[anotheridiotontheweb@mastodon.social]

@Tutanota Thank goodness my country opposes to this madness, but I hope other countries will do the same.

[ix9@social.vivaldi.net]

@Tutanota I'm not a tech person: how can encrypted messages be scanned? Isn't that the whole pointof E2E encryption?

[aeva@mastodon.gamedev.place]

@Tutanota wtf again??????

[ulfr@hachyderm.io]

@ix9 If they somehow gain access to end users' devices, they can scan before sending / after reception. As long as one party of a conversation or group chat takes part with a compromised device, all contents decrypted by that device will leak. If they have a legal lever against vendors, new devices and updates to old ones will come pre-compromised f.ex. on the operating system level. Futute versions of iOS or Android will be forced to provide means for "lawful" interception. Which is in quotes because according to fundamental rights, there can be no such thing. @Tutanota

[nokturnal@mastodon.gamedev.place]

@Tutanota Although Poland seems to be on proper side of the fence this time (can't believe it), but I've sent mail to be more sure anyway that politicans will do proper thing like show up on voting. At least they can't tell that they didn't know.

[yon@sakurajima.moe]

@Tutanota Makes you wonder who is lobbying (sorry, that’s American for corruption) for these things…

[hellomiakoda@pdx.social]

@Tutanota Just an important note for anyone thinking "Lol, I'm on Linux" - Your messages get scanned the second you message anybody who's on whatever software does this scanning shit.

[epic_null@infosec.exchange]

@ix9 @Tutanota To explain it in a non-tech way:

Imagine you had a letter and a friend you want to send it to. I want to read your letter.

The envelope can only be opened by your friend.

This sounds safe, right?

Well, if I can install a camera on your shoulder (yes I consider it that invasive), I can read the letter either as you write it, or as your friend recieves it.

Chat control is the camera. The envelope is E2EE.

[steppl@mastodon.social]

@ix9

@Tutanota

They will not actually break encryption. The encryption is sort of the envelope in classic postal mail and will not be touched.

Your chat tool is like a paper and pencil. Right now you use normal paper. They will take care you can only use thosehwrite through paper (known from paper forms).

Once you hit 'send': the write through form gets split - the pages are
1. For your envelope, which is transported safely
2. For them - to see if you do evil

[ohir@social.vivaldi.net]

@ix9 @Tutanota Infrastructure is ready for the task, at least at Windows and Android. The e2e encryption is irrelevant, the message is accessed and assessed on the screen (or speakers) – the problem US tech companies had that what they do is illegal. They went to the politicians with some 0.00001% of value of this scam and um, get them convinced about a bright affluent future for all engaged parties.

[nic3@mastodon.social]

@Tutanota Come to Signal!!!
Right @AboutSignalNL !?

[dadinek@fosstodon.org]

@Tutanota interesting numbers. I would be interested in the false positive rate of those flags

[reiddragon@fedi.catto.garden]

@Tutanota why do they keep up thag bullshit... The world is on fire, the united states is a rogue wildcard threatening to dismantle NATO, there's a war at the eastern border, internal issues like wealth inequality are tearing the union and its member states appart, but instead of focusing on that they keep trying to push for this shit.

[gilraen79@mastodon.social]

@Azarilh @Tutanota pensavo fossimo automaticamente tra coloro che sostengono la proposta. Sono rimasta senza parole a vedere che invece no. Per una volta ️

[didek@101010.pl]

@Nic3 @Tutanota @AboutSignalNL

Signal won't be legal under such legislation.

[bzdev@fosstodon.org]

@Tutanota I can send messages over gmail that Google can't scan because gmail supports IMAP 4, and my mail client supports GPG encrypted email. Google can still see subject lines and email addresses, but not the contents of those messages. My open-source mail client is not provided by Google. The catch: I don't know people who normally use GPG.

[azarilh@mastodon.social]

@gilraen79 Incredibile ma vero.

[ix9@social.vivaldi.net]

@ulfr @Tutanota I get now; thanks.

[child_of_god@mastodon.social]

@anotheridiotontheweb @Tutanota There are countries opposing this? How many? And which ones? (I guess Ive been hearing a lot of the negative stuff lol)

[vurk@mastodon.social]

@Tutanota a reminder that considering mechanisms to circumvent this abominable law once it's implemented misses a critical issue:

Circumventing the scanning puts you on the wrong side of the law, making you fair game for prosecution. You are now in the same bucket as the terrorists and CSAM distributors.

This is a classic authoritarian catalyst: change the law so you can "legally" persecute your enemies.

These kinds of power grabs must be stopped before they are approved in the first place.