The UK Government is now demanding "end-to-end encryption must be switch-offable" - which is not tenable.
Platforms can't feasibly maintain "dual-stack" implementations for kids-vs-non-kids, and it's telling to compare this to the general reaction /against/ "Instagram for Kids".
The fact that they don't want platforms to provide separate apps which are designed to be kid-safe, YET they /do/ want general-purpose platforms to provide "kid-safety" backdoors, demonstrates a lack of joined-up thinking… or that there are ACTUALLY different goals than stated.
This is the UK Government literally pursuing an obligation for platforms to snoop-upon, filter, block, and generally insert themselves into private message content.
If you are not already using an end-to-end encrypted messenger, you should start immediately.
Incidentally - in case you missed it - platforms like SMS that lack end-to-end encryption, are starting to have advertising spliced *into* messages by the carrier platforms. This kind of tampering is yet another reason that you want end-to-end encryption.
I don't understand this very well, but it's a document describing new, surprise surcharges to phonecalls inbound to the UK - with the charges applied by source CallerID - which may impact/add costs to keeping in touch with relatives abroad.
This is NOT "EU Roaming":
Bullets:
- Surcharge pricing will be effective on all wholesale tariffs from 1st July 2021
- use the Network CLI to determine if a surcharge is applicable
- CallerID that are missing/malformed/invalid/unreadable will be surcharged at the maximum rate!
It is intuitively & obviously easier, safer, & less error-prone to build a cut-down separate Instagram-like application for kids, so that developers don't have to add all sorts of complex checks & validation on "mixed" accesses by adults & kids.
- much reduced up-front data collection
- no advertising at all, not even implemented
- opportunity for stricter content monitoring
- liberate "instagram for adults" to become more private and more secure.
We should build playgrounds, not turn the Internet into one.
I mean, this all sounds like a service dedicated to checking your own shit, right? Unless like me you are entirely shameless, that might be an issue for some:
Oh, wait, what?
"We only conduct a Social Media Check once the person to be checked (subject) has provided consent."
So who is the "your" in "Check your social media", then?
Because encryption is under a threat from government forces, and they are doing everything they can to besmirch the reputation of both encryption in general, and anyone who is attempting to deploy it.
This fake news policy story is very useful to them
« yes, there is stuff in that article that's overblown or polemical, but perhaps we should stop, reflect & reboot "cyber" because maybe we're doing it too mindlessly / mechanically »
…and you'll get unintentionally hilarious hot takes like this.
I blogged something about this in 2002, commenting on a page elsewhere that was making a good point, and fortunately all of these are still available: alecmuffett.com/article/113
Nikolai Bezroukov: "the key problem with hardening is to know where to stop…the key principle is "not too much zeal". Unfortunately corporate security departments often discard this vital principle and use hardening for justification of their existence."
Find a small coding issue that you can be very angry about; pick on an imperfect user-experience bug or missed opportunity & frame it as intentionally being in breach of a vague aspect of some critical legislation. Launch a crusade.
Adherence to your Rules™ is more important than outcome; petty concerns like "international jurisdiction" pale in comparison to "foreigners should obey the intent of our laws rather than cutting us off"
The purpose of the Internet is not for people to communicate. The purpose of the internet is to be a framework which can be regulated by you. Ideally in dramatic courtroom showdowns.