{"id":22331,"date":"2023-06-28T06:30:21","date_gmt":"2023-06-28T14:30:21","guid":{"rendered":"http:\/\/www.palada.net\/index.php\/2023\/06\/28\/news-16061\/"},"modified":"2023-06-28T06:30:21","modified_gmt":"2023-06-28T14:30:21","slug":"news-16061","status":"publish","type":"post","link":"https:\/\/www.palada.net\/index.php\/2023\/06\/28\/news-16061\/","title":{"rendered":"Apple warns that UK&#039;s Online Safety Bill puts people at &#039;greater risk&#039;"},"content":{"rendered":"<p><img decoding=\"async\" src=\"https:\/\/images.techhive.com\/images\/article\/2017\/01\/digital_data_surveillance_eye_thinkstock_507072286_with_windows_logo-100706097-small.jpg\"\/><\/p>\n<p>Apple has raised its voice against a UK law that will dramatically undermine secure commerce and trust online, warning it could put UK citizens at risk.<\/p>\n<p>And Apple is not alone. More than 80 civil society organizations, academics, and experts from 23 nations have warned against the UK government\u2019s decision, which would turn the UK into the first democracy to require routine surveillance of people\u2019s private chats.<\/p>\n<p>The current UK government\u2019s <a href=\"https:\/\/bills.parliament.uk\/bills\/3137\" rel=\"nofollow noopener\" target=\"_blank\">Online Safety Bill<\/a> includes the power to force encrypted messaging tools such as WhatsApp, Signal, and iMessage to scan messages.<\/p>\n<p>The pretext given is that this is to watch for child sexual abuse material (CSAM), but the impact of the approach described is to dramatically weaken the end-to-end encryption that&#8217;s foundational to the internet, from banking to healthcare and beyond.<\/p>\n<p>Organizations point to the chilling impact the law will have on investigative journalists researching powerful entities, including work <a href=\"https:\/\/www.occrp.org\/en\/investigations\/i-confess-to-all-the-crimes-a-russian-soldier-admits-to-executing-a-civilian-and-denounces-his-commanders\" rel=\"noopener nofollow\" target=\"_blank\">monitoring Russia\u2019s atrocities in Ukraine<\/a>. They warn this privacy is vital to journalists, lawyers, doctors, human rights defenders, and activists.<\/p>\n<p>In a statement, Apple said:<\/p>\n<p>&#8220;End-to-end encryption is a critical capability that protects the privacy of journalists, human rights activists, and diplomats. It also helps everyday citizens defend themselves from surveillance, identity theft, fraud, and data breaches.<\/p>\n<p>&#8220;The Online Safety Bill poses a serious threat to this protection and could put UK citizens at greater risk. Apple urges the government to amend the bill to protect strong end-to-end encryption for the benefit of all.&#8221;<\/p>\n<p>While the UK government claims it\u2019s possible to surveil people while maintaining privacy, experts know this is not so. Even Apple, which <a href=\"https:\/\/www.computerworld.com\/article\/3660491\/europe-puts-apples-csam-plans-back-in-the-spotlight.html\">attempted to introduce<\/a> its own <a href=\"https:\/\/www.computerworld.com\/article\/3628454\/apples-plan-to-scan-us-iphones-raises-privacy-red-flags.html\">CSAM scanning tech in iMessage<\/a>, found that a technical solution that enables surveillance while also guaranteeing privacy <a href=\"https:\/\/www.applemust.com\/security-researchers-say-apples-csam-tech-is-easy-to-fool\/\" rel=\"noopener nofollow\" target=\"_blank\">does not exist<\/a>.<\/p>\n<p>It subsequently rolled back its plan.<\/p>\n<p>Experience shows that once any kind of system-level back door is put in place, tools to exploit it will also appear.<\/p>\n<p>Attempts to exploit security vulnerabilities have become a multi-billion dollar business involving nations states. With the prevailing international security environment <a href=\"https:\/\/www.computerworld.com\/article\/3665050\/italian-spyware-firm-is-hacking-into-ios-and-android-devices-google-says.html\">rendered more dangerous<\/a> by the likes of high-level &#8220;<a href=\"https:\/\/www.computerworld.com\/article\/3665052\/the-surveillance-as-a-service-industry-needs-to-be-brought-to-heel.html\">surveillance as a service\u2019&#8221;<\/a> firms such as <a href=\"https:\/\/www.computerworld.com\/article\/3625871\/iphone-spyware-its-a-dirty-job-but-nsos-gonna-do-it.html\">NSO Group<\/a>, the proposed law will weaken the UK\u2019s digital infrastructure at the worst possible time.<\/p>\n<p>There\u2019s little doubt that if such technologies are normalized, they will be <a href=\"https:\/\/cdt.org\/wp-content\/uploads\/2021\/08\/CDT-Coalition-ltr-to-Apple-19-August-2021.pdf\" rel=\"noopener nofollow\" target=\"_blank\">abused by repressive or authoritarian governments<\/a> everywhere.<\/p>\n<p>Far from making people safer, that will make the global internet less secure.<\/p>\n<p>\u201cIt is not possible to scan in a way that only gets the \u2018bad guys\u2019 and leaves everyone else untouched. This law would adversely affect not only the 40 million users in the UK, but the two billion people around the world who rely on secure messaging services,\u201d experts from the <a href=\"https:\/\/www.openrightsgroup.org\/press-releases\/online-safety-bill-protect-encrypted-messaging\/\" rel=\"nofollow noopener\" target=\"_blank\">Open Rights Group<\/a> (ORG) warn in an open letter.<\/p>\n<p>The UK government incorrectly argues that client-side scanning will not compromise privacy, but the weight of evidence refutes that claim.<\/p>\n<p>\u201cThe idea that you can do surveillance while respecting privacy is just magical thinking,&#8221; said Ross Anderson, professor of security engineering at Cambridge University and Edinburgh University.<\/p>\n<p>Anderson points out that not one of five prototypes of the proposed surveillance tech created by the UK Home Office came close to meeting \u201creasonable requirements for efficacy and privacy.\u201d<\/p>\n<p><span style=\"font-size: 15px;\">\u201cThis revives the magical thinking of the Blair government during the first Crypto War, in the late 1990s and early 2000s, which limited the strength of commercial cryptography,&#8221; he said.\u00a0<\/span>&#8220;That has had devastating effects on security, leading to buildings that are easy to burgle, cars that are easy to steal, and government communications that are easy for our enemies to intercept.\u201d<\/p>\n<p>The truth, rather than the fantasy narrative peddled by a fading UK government, is that it is not possible to have privacy for law-abiding citizens and none for criminals. Either everyone has privacy, or no one does.<\/p>\n<p>Privacy, as well as <a href=\"https:\/\/www.applemust.com\/apple-calls-accessibility-a-human-right-everyone-deserves-a-chance\/\" rel=\"noopener nofollow\" target=\"_blank\">being a human right<\/a>, is also fundamental across almost every aspect of digital commerce. The proposed law will cause great damage to the UK\u2019s position in the digital economy. \u201cCompanies that respect the privacy of people using their services will be forced to leave the UK, moving away capital, resources and services,\u201d warns ORG.<\/p>\n<p>Signal and WhatsApp say they will quit the UK if these proposals are put in place.<\/p>\n<p>In April, WhatsApp, Signal and Element and others, warned the proposal, \u201cposes an unprecedented threat to the privacy, safety and security of every UK citizen and the people with whom they communicate around the world, while emboldening hostile governments who may seek to draft copy-cat laws\u201d.<\/p>\n<p>As it stands, the UK proposals seem designed to make the entire global online economy less secure while imposing yet more damage on the <a href=\"https:\/\/www.thisismoney.co.uk\/money\/markets\/article-12226387\/UK-business-growth-slows-consumer-spending-faltering.html\" rel=\"noopener nofollow\" target=\"_blank\">faltering UK economy<\/a>. In fact, the dangers are so visible that I&#8217;d argue the damage they cause is intentional.<\/p>\n<p><em>Please follow me on\u00a0<a href=\"https:\/\/social.vivaldi.net\/@jonnyevans\" rel=\"nofollow noopener\" target=\"_blank\">Mastodon<\/a>, or join me in the\u00a0<a href=\"https:\/\/mewe.com\/join\/appleholics_bar_and_grill\" rel=\"nofollow noopener\" target=\"_blank\">AppleHolic\u2019s bar &amp; grill<\/a>\u00a0and\u00a0<\/em><a href=\"https:\/\/mewe.com\/join\/apple_discussions\" rel=\"nofollow noopener\" target=\"_blank\"><em style=\"font-weight: inherit;\">Apple<\/em>\u00a0<em style=\"font-weight: inherit;\">Discussions<\/em><\/a><em>\u00a0groups on MeWe.<\/em><\/p>\n<p><a href=\"https:\/\/www.computerworld.com\/article\/3700859\/apple-warns-that-uks-online-safety-bill-puts-people-at-greater-risk.html#tk.rss_security\" target=\"bwo\" >http:\/\/www.computerworld.com\/category\/security\/index.rss<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p><img decoding=\"async\" src=\"https:\/\/images.techhive.com\/images\/article\/2017\/01\/digital_data_surveillance_eye_thinkstock_507072286_with_windows_logo-100706097-small.jpg\"\/><\/p>\n<article>\n<section class=\"page\">\n<p>Apple has raised its voice against a UK law that will dramatically undermine secure commerce and trust online, warning it could put UK citizens at risk.<\/p>\n<p>And Apple is not alone. More than 80 civil society organizations, academics, and experts from 23 nations have warned against the UK government\u2019s decision, which would turn the UK into the first democracy to require routine surveillance of people\u2019s private chats.<\/p>\n<p>The current UK government\u2019s <a href=\"https:\/\/bills.parliament.uk\/bills\/3137\" rel=\"nofollow noopener\" target=\"_blank\">Online Safety Bill<\/a> includes the power to force encrypted messaging tools such as WhatsApp, Signal, and iMessage to scan messages.<\/p>\n<p class=\"jumpTag\"><a href=\"\/article\/3700859\/apple-warns-that-uks-online-safety-bill-puts-people-at-greater-risk.html#jump\">To read this article in full, please click here<\/a><\/p>\n<\/section>\n<\/article>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"colormag_page_container_layout":"default_layout","colormag_page_sidebar_layout":"default_layout","footnotes":""},"categories":[11062,10643],"tags":[2211,10480,10554,5897,714,24580],"class_list":["post-22331","post","type-post","status-publish","format-standard","hentry","category-computerworld","category-independent","tag-apple","tag-ios","tag-mobile","tag-privacy","tag-security","tag-small-and-medium-business"],"_links":{"self":[{"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/22331","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/comments?post=22331"}],"version-history":[{"count":0,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/22331\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/media?parent=22331"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/categories?post=22331"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/tags?post=22331"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}