UK Proposes Making the Sale and Possession of Encrypted Phones Illegal (vice.com) 61
An anonymous reader quotes a report from Motherboard: A section of the UK government has proposed making the sale or possession of bespoke encrypted phones for crime a criminal offense in its own right. The measure is intended to help the country's law enforcement agencies tackle organized crime and those who facilitate it, but civil liberties experts tell Motherboard the proposal is overbroad and poorly defined, meaning it could sweep up other forms of secure communication used by the wider population if not adjusted. "At the moment the government proposal appears to be vague and overly broad. While it states that the provisions 'will not apply to commercially available mobile phones nor the encrypted messaging apps available on them' it is difficult to see how it will not result in targeting devices used on a daily [basis] by human rights defenders, protesters and pretty much all of us who want to keep our data secure," Ioannis Kouvakas, senior legal officer and assistant general counsel at UK-based activism organization Privacy International, told Motherboard in an email.
The proposal is included in a document published by the Home Office (PDF). In that document, the Home Office proposes two legislative measures that it says could be used to improve law enforcement's response to serious and organized crime, and is seeking input from law enforcement, businesses, lawyers, civil liberties NGOs, and the wider public. [...] The first measure looks to create new criminal offenses on the "making, modifying, supply, offering to supply and possession of articles for use in serious crime." The document points to several specific items: vehicle concealments used to hide illicit goods; digital templates for 3D-printing firearms; pill presses used in the drug trade; and "sophisticated encrypted communication devices used to facilitate organized crime." In other words, this change would criminalize owning an encrypted phone, selling one, or making one for use in crime, a crime in itself. [...]
With encrypted phones, the Home Office writes that both the encryption itself and modifications made to the phones are creating "considerable barriers" to law enforcement. Typically, phones from this industry use end-to-end encryption, meaning that messages are encrypted before leaving the device, rendering any interception by law enforcement ineffective. (Multiple agencies have instead found misconfigurations in how companies' encryption works, or hacked into firms, to circumvent this protection). Encrypted phone companies sometimes physically remove the microphone, camera, and GPS functionality from handsets too. Often distributors sell these phones for thousands of dollars for yearly subscriptions. Given that price, the Home Office says it is "harder to foresee a need for anyone to use them for legitimate, legal reasons." The Home Office adds that under one option for legislation, laws could still criminalize people who did not suspect the technology would be used for serious crime, simply because the technology is so "closely associated with serious crime." Potential signs could include someone paying for a phone "through means which disguise the identity of the payer," the document reads. Often distributors sell phones for Bitcoin or cash, according to multiple encrypted phone sellers that spoke to Motherboard. The document says "the provisions will not apply to commercially available mobile phones nor the encrypted messaging apps available on them." But the Home Office does not yet have a settled definition of what encompasses "sophisticated encrypted communication devices," leaving open the question of what exactly the UK would be prepared to charge a person for possessing or selling.
The proposal is included in a document published by the Home Office (PDF). In that document, the Home Office proposes two legislative measures that it says could be used to improve law enforcement's response to serious and organized crime, and is seeking input from law enforcement, businesses, lawyers, civil liberties NGOs, and the wider public. [...] The first measure looks to create new criminal offenses on the "making, modifying, supply, offering to supply and possession of articles for use in serious crime." The document points to several specific items: vehicle concealments used to hide illicit goods; digital templates for 3D-printing firearms; pill presses used in the drug trade; and "sophisticated encrypted communication devices used to facilitate organized crime." In other words, this change would criminalize owning an encrypted phone, selling one, or making one for use in crime, a crime in itself. [...]
With encrypted phones, the Home Office writes that both the encryption itself and modifications made to the phones are creating "considerable barriers" to law enforcement. Typically, phones from this industry use end-to-end encryption, meaning that messages are encrypted before leaving the device, rendering any interception by law enforcement ineffective. (Multiple agencies have instead found misconfigurations in how companies' encryption works, or hacked into firms, to circumvent this protection). Encrypted phone companies sometimes physically remove the microphone, camera, and GPS functionality from handsets too. Often distributors sell these phones for thousands of dollars for yearly subscriptions. Given that price, the Home Office says it is "harder to foresee a need for anyone to use them for legitimate, legal reasons." The Home Office adds that under one option for legislation, laws could still criminalize people who did not suspect the technology would be used for serious crime, simply because the technology is so "closely associated with serious crime." Potential signs could include someone paying for a phone "through means which disguise the identity of the payer," the document reads. Often distributors sell phones for Bitcoin or cash, according to multiple encrypted phone sellers that spoke to Motherboard. The document says "the provisions will not apply to commercially available mobile phones nor the encrypted messaging apps available on them." But the Home Office does not yet have a settled definition of what encompasses "sophisticated encrypted communication devices," leaving open the question of what exactly the UK would be prepared to charge a person for possessing or selling.
The drug dealers and terrorists will comply (Score:5, Funny)
Why risk a fine?
Re: The drug dealers and terrorists will comply (Score:2)
Let's Outlaw Any Speech When A Cop Aint Around. (Score:4)
Seems appropriate.
Re: (Score:2)
Free speech is an unstable substance, there's always someone looking to disintegrate it for others so to create more power for himself, from overzealous government officials to hyper patriotic types like John McCain to the "woke" in the latest wave of attacks on it, all under the guise of serving a higher good.
Forgot the key phrase "for crime" (Score:1)
As with all issues, I think it's helpful to represent the issu
Re:Forgot the key phrase "for crime" (Score:4, Insightful)
The problem that I see regarding your argument is that just a few lines below, it reads the following: "The Home Office adds that under one option for legislation, laws could still criminalize people who did not suspect the technology would be used for serious crime, simply because the technology is so "closely associated with serious crime."
Re: (Score:2)
You're being incredibly naive. The obvious goal here is to make mere usage of such a device evidence of intent to commit crime. As in, "only a criminal would need this" or "the only use for this is crime" or "the vast majority of users of such devices are criminals".
Re: (Score:2)
I believe the issue here is that they haven't yet come up with a legal definition that's sufficiently precise so as not to unwittingly include the innocent. In other words, it has the risk of becomi
Re: (Score:2)
Re: (Score:2)
It made me think of the crime of "going equipped to commit the offence of..." rather than "committing the offence of..."
If I were to be found in possession of such a phone then I'd need to provide a good excuse as to why I needed it. Similarly, if I were picked up in the early hours of the morning equipped with a mask, a crowbar and an empty sack marked "swag" I'd have some explaining to do.
Re: (Score:2)
Re: (Score:2)
As in, "only a criminal would need this" or "the only use for this is crime" or "the vast majority of users of such devices are criminals".
Which part of that isn't true?
Re: (Score:2)
All three parts are untrue.
Non-criminals have valid uses for encrypted phones and encrypted comms.
There are valid non-criminal uses for encrypted phones and encrypted comms.
The vast majority of users of encrypted phones and comms are not criminals.
Re: (Score:2)
Non-criminals use Whatsapp. It's encrypted.
The vast majority of users of encrypted phones and comms are not criminals.
You haven't actually given an example of a legitimate use.
Re: Forgot the key phrase "for crime" (Score:2)
I answered your "which part" question with exactly as much research data as you supplied.
Re: (Score:2)
Also: Whatsapp is owned by Facebook, and:
> although WhatsApp does utilize end-to-end encryption by default on all messaging, it still collects metadata, including location data, contacts, identifying data (such as user ID), and purchases.
https://www.howtogeek.com/7229... [howtogeek.com]
I won't be using Whatsapp at any point in this timeline.
Re: (Score:2)
You haven't actually given an example of a legitimate use.
If you use any modern phone made within the last decade, you yourself are an example. (Google implemented Full Disk Encryption by default in Android 5.0 [android.com], replaced it with File based Encryption in Android 7.0 [android.com], Apple has had it since iPhone 4. [appleinsider.com]) I assume your activities are examples of a legitimate use, correct?
Want another? Online banking and purchases are impossible without encryption. (That is of course, unless you want just anyone to have full access to your bank account and all of the funds in it.)
Re:Forgot the key phrase "for crime" (Score:5, Interesting)
Selling to criminals? Illegal
Great idea: Plus, make it illegal to sell cars to criminals, also fuel (or electricity) and batteries. Have you proven you're not a criminal, today?
This is how "social credit" laws start.
When 'tough on' criminals doesn't work, invoke the authoritarian habit of blaming the person doing a legitimate job: Just like the police, "know your customer" laws can only do so much.
The next step is "only a criminal needs this": Example, only a criminal needs an assault rifle with a 30-round magazine. Of course, your US-ian "tough on crime" principles agree, don't they?
Re: (Score:2)
Re:Forgot the key phrase "for crime" (Score:4, Interesting)
That fine until the desire to have privacy is considered at "crime". The UK is already cracking down on people who say the wrong things online so the illegal activity like mocking the government that coming for you phone could be the "crime" that give license for the police to go after you. No good can come of this.
Re: (Score:1)
Re: (Score:2)
Yep. It's called "going equipped".
https://www.google.com/search?... [google.com]
Re: (Score:2)
Crap, so there goes my excuse for carrying a rape tool "only for peeing".
Re: (Score:2)
The headline is misleading. Selling to criminals? Illegal. Having or selling?...not illegal by default. As with all issues, I think it's helpful to represent the issue accurately and debate it as such...not mislead folks.
The headline actually doesn't go far enough.
"It can be difficult to show that the suppliers of sophisticated encrypted communication devices which are used in serious crime have the required state of mind to enable law enforcement agencies to prosecute them"
"Similarly, when individuals are found in possession of such a device, it may not be possible to prove their knowledge or intent to the thresholds required to convict them"
"The justification for criminalising such people, who lack actual suspicion, is
tha
Re: (Score:2)
According to the summary, the offense is having the tool "for crime": "A section of the UK government has proposed making the sale or possession of bespoke encrypted phones for crime a criminal offense in its own right." The headline is misleading. Selling to criminals? Illegal. Having or selling?...not illegal by default. I can see how this is concerning to libertarians who don't trust the gov...but the headline leaves out a key phrase. As with all issues, I think it's helpful to represent the issue accurately and debate it as such...not mislead folks.
If I was posting my own direct comment instead of responding to yours, the subject might be "Forgot the key phrase 'vague and overly broad'". In my experience most such legislation is like that on purpose. I'm opening myself up to the "malice vs incompetence" trope here, but I'll counter that by saying that when legislators ARE induced to tighten the scope and make legislation more specific they're usually kicking and screaming about it all the way.
People who craft legislation like to leave as much wiggle r
Oh really.. (Score:2)
" In other words, this change would criminalize owning an encrypted phone, selling one, or making one for use in crime, a crime in itself."
Step 1: Sell a phone that's unencrypted.
Step 2: give the user the option to encrypt the phone in the settings panel.
Step 3: ??
Step 4: Profit!
Now, no unencrypted phone has been sold.
"Making one for use in crime" would be tough to meaningfully prosecute, since that'd basically make it illegal to sell phones at all. Even if it's unencrypted, it'd be difficult to pick which
Re: (Score:2)
In other words, this change would criminalize owning an encrypted phone, selling one, or making one for use in crime, a crime in itself.
"Making one for use in crime" would be tough to meaningfully prosecute, since that'd basically make it illegal to sell phones at all.
The initial line of TFS says, "making the sale or possession of bespoke encrypted phones for crime a criminal offense". Which means "custom" encrypted phones and later says, "the provisions 'will not apply to commercially available mobile phones nor the encrypted messaging apps available on them'" so this whole freakout seems a bit over blown. Seriously, how many of you/us have custom-made cell phones?
Re: (Score:2)
So we're already most of the way down the path of "you shall not be allowed to repair YOUR OWN property" and about to embark on the path of "you will not be allowed to make stuff".
Sounds a lot like "you will own nothing and be happy" is getting a lot of traction out there and YES, we should be worried!
Re: (Score:2)
I get your point, though I imagine there's already a LOT of stuff people aren't allowed to make/diy in the UK and US ...
Re: (Score:2)
You make it sound as if the legal system is black and white. What is a commercially available phone? One that I buy? Is it a phone that is sold or does the vendor need to be registered? How many phones need to be sold by a supplier to be a "commercially available phone"? Is the phone "bespoke" if I install a custom OS? What if I install a custom OS for my grandma who then shoplifts?
Seriously, how many of you/us have custom-made cell phones?
All phones are customized. You add a background and widgets. I added encryption. You downloaded Facebook, I installed signal.
Bravo, UK (Score:5, Insightful)
Re: (Score:2)
Re: (Score:1)
If I were to be conspiracy minded... (Score:1)
Re: (Score:2)
Re: (Score:2)
All data stored or transmitted over Apple or Google infrastructure are subject to LEGAL ACCESS by authorized law enforcement.
Doesn't matter if it's encrypted (by Apple or Google). The terms of service spell it out clearly. Ok, not too clearly, but if you can stomach some thousands of words of legal mumbo jumbo, you will find that ALL your service providers (so that includes T-Mobile, or whatever phone companies in your countries) have CLAIMED the right to inspection
Eff that (Score:2)
When did we give up the right to have PRIVATE conversations?
Re: (Score:3)
When you gave up the right to have guns.
Re: (Score:2)
The "right to have guns" is a peculiarly American thing (plus Mexico and Guatemala). Non-catholics had the right in the UK from 1689 (and a lot of your 2nd amendment issues date back to that bit of flawed legislation), but that "right" has gradually been curtailed.
UK got privacy laws in 1998 in the Human Rights Act. Laws banning guns of one sort or another started hitting the statute books in 1903. We (I'm now Canadian-resident but came from the UK) can still own licensed and properly stored firearms of ce
Re: (Score:2)
Nothing would give me greater joy than watching those people who do military cosplay try and run two blocks. They’d last minutes in a real revolution.
Re: (Score:2)
Everywhere you have the right to own and use guns for the practice of shooting as an Olympic discipline. (Though you might be required to store the rifle or pistol at the stand.)
Re: (Score:2)
It depends what you call private. You never had the positive right to have conversations that cannot be listened to by the police. Conversations at home are private, but a judicial warrant can have your house bugged. Conversations with your lawyer are private, but under exceptional circumstances described in law, they still could be recorded. Same for the other professionals bound to professional secrecy (religious ministers, health professionals).
You can evade being listened to by choosing appropriate loca
Re: (Score:2)
Re: (Score:2)
If you outlaw encrypted phones, only outlaws will have them.
Yes that is the point. Now you can arrest people without them having committed an actual crime. As dumb as this specific piece of legislation is there is a significant amount of legislation that follows similar trends, e.g. gun ownership. This however is unique in it's broad stupidity.
overbroad (Score:2)
Finally (Score:2)
No more stupid https. Is (default) storage encryption also a no-no?
*sigh* (Score:2)
Is there are a law somewhere that says mankind MUST be ruled by the biggest morons they can find? Because that seems to be the case...
Re: (Score:2)
Yes, that law says the rulers are representative for the people they lead. If leaders are morons, this means their community is made mostly of morons.
These imbecilic authoritarians have form (Score:5, Insightful)
This is a Government who have tried to ban protest twice, who are scrapping British rights and are derogating from the European Convention of Human Rights. They are also banning encryption.
They have trashed the economy, made the NHS collapse and have made Britain a laughing stock around the world.
Much better to sell fake encrypted phones. (Score:2)
https://www.pcmag.com/news/fbi... [pcmag.com]
Is XOR sophisticated encryption? (Score:2)
"It can be difficult to show that the suppliers of sophisticated encrypted communication devices which are used in serious crime have the required state of mind to enable law enforcement agencies to prosecute them under current legislation, as they will often not be engaging directly in the serious crime themselves."
"Similarly, when individuals are found in possession of such a device, it may not be possible to prove their knowledge or intent to the thresholds required to convict them, despite the difficult
sting (Score:2)
wait (Score:2)
A section of the UK government has proposed making the sale or possession of bespoke encrypted phones for crime a criminal offense
The phones are already encrypted. iOS, Android, they both ship with encryption by default now. So is that to be made illegal?
the provisions 'will not apply to commercially available mobile phones nor the encrypted messaging apps available on them'
Uh, what? If I sell something, I'm making it commercially available. So it will apply to nothing?
The UK is deliberately making itself irrelevant to the world. This is a nice change from its prior behaviors, but quite inexplicable.
Wait, what? (Score:2)
the UK government has proposed making the sale or possession of bespoke encrypted phones for crime a criminal offense in its own right
So... if it's encrypted, and they can't get into it, how are they going to prove it was used for crime?
This seems like the same level of stupidity as arresting someone in the US... just for resisting arrest. With no initiating cause for an arrest to resist.