Because encryption is under a threat from government forces, and they are doing everything they can to besmirch the reputation of both encryption in general, and anyone who is attempting to deploy it.
This fake news policy story is very useful to them
The literal boss of WhatsApp is trying to explain this, but I worry that nobody is listening any more because its more … emotionally satisfying to them to beat up Facebook and Mark Zuckerberg than to consider what some of his employees might be trying to bring to the table:
I mean, this all sounds like a service dedicated to checking your own shit, right? Unless like me you are entirely shameless, that might be an issue for some:
Oh, wait, what?
"We only conduct a Social Media Check once the person to be checked (subject) has provided consent."
So who is the "your" in "Check your social media", then?
« yes, there is stuff in that article that's overblown or polemical, but perhaps we should stop, reflect & reboot "cyber" because maybe we're doing it too mindlessly / mechanically »
…and you'll get unintentionally hilarious hot takes like this.
I blogged something about this in 2002, commenting on a page elsewhere that was making a good point, and fortunately all of these are still available: alecmuffett.com/article/113
Nikolai Bezroukov: "the key problem with hardening is to know where to stop…the key principle is "not too much zeal". Unfortunately corporate security departments often discard this vital principle and use hardening for justification of their existence."
Find a small coding issue that you can be very angry about; pick on an imperfect user-experience bug or missed opportunity & frame it as intentionally being in breach of a vague aspect of some critical legislation. Launch a crusade.
Adherence to your Rules™ is more important than outcome; petty concerns like "international jurisdiction" pale in comparison to "foreigners should obey the intent of our laws rather than cutting us off"
The purpose of the Internet is not for people to communicate. The purpose of the internet is to be a framework which can be regulated by you. Ideally in dramatic courtroom showdowns.
The most egregious example of password-bansturbation that I know of, comes from the French data protection regulator @CNIL; take a look at this nightmare and imagine helping someone less capable navigate it:
@OpenRightsGroup@jimkillock@Forbes@bazzacollins@Facebook@FBoversight Observation number three: unless the user has explicitly opted into something which deletes chats after {1 minute, 1 hour, 1 day} etc, it would be rude to erase stuff - "where have my baby photos gone they were in that chat with my sister!?!", etc
I'm sorry to say "quelle surprise?" - precisely the same happened to the Facebook reporting mechanisms which (again) many people on (Twitter) demanded. :-/
Back in the 90's I worked for Company X, for whom Company Y was a key supplier.
X built a firewall with auto-block of src IPs upon attack (compare fail2ban)
BadGuyZ broke into Y & attacked X from Y's infra; the firewall blocked ALL X-Y comms & impacted N million dollars of biz.
"But we put these filters in for good reasons! Nobody could have foreseen this outcome!", etc… alas, no - censorship, blocking, & control systems ALWAYS have a nasty tendency to blow back in the faces of those who call for them.