3 ms·

There's basically three approaches a company that implements E2EE can take: 1. Anything-goes. Accept that customers will use it for evil and for good, and just

There's basically three approaches a company that implements E2EE can take: 1. Anything-goes. Accept that customers will use it for evil and for good, and justify allowing the former by the latter. 2. Lie to customers. Eg: include a backdoor for law-enforcement. 3. On-device detection of illegal or dangerous content (as Apple is apparently doing) Regardless of whether approach #1 has merit, I don't see any large company staying with it long term because it's a PR nightmare. No big company wants to have an endless stream of stomach-turning stories in the news. It's easy to predict headlines like "Breaking! World's Largest Human Trafficking Ring Conducts Slave Auctions on Apple Messages. Tim Cook Silent!"

whoknowswhat11 5y ago
There's actually another approach - no E2EE. Period. Do folks really think AWS keys in china are not under control of govt? Do folks really think MMS and other messaging in things like tiktok between chinese users is not accessible by govt? Zoom? Normal phone calls? Folks understand that apple data centers will be run by state-owned Guizhou-Cloud Big Data Industry (GCBD). That Apple has had to agree to keep the encryption keys locally to those data centers under control of GCBD employees? Why would apple have to change how it does encryption for chinese users and make sure keys are locally available.
ajsnigrutin 5y ago
I can call someone using a phone, tell him "bring two pair of blue trousers and one shirt, and don't forget the bullets for the trousers", and noone will ever blame the phone company for me arranging some illegal deal/stuff. I can sell drugs in the McDonalds parking lot, and noone will blame McDonalds for it. I can take a cab to future crime scene, and noone blames the taxi... or a bus.. or a plane. I can use many of the ISPs to educate myself how to get rid of a body or make a bomb or whatever, and noone blames Verizon. I can buy a polariod to make illegal photos, or canon or nikon or whatever, and noone blames them. I can operate an illegal business from a hotel room, and noone blames the hotel. I can even send an encrypted printed out message, and noone blames the post office. I can pimp out prostitutes on ikea beds, and noone blames ikea. This is just another case of governments wanting to snoop on their people, and companies letting them,.... and for good PR they just pack it around child abuse and terrorism.

whoknowswhat11 5y ago

There's actually another approach - no E2EE. Period. Do folks really think AWS keys in china are not under control of govt? Do folks really think MMS and other messaging in things like tiktok between chinese users is not accessible by govt? Zoom? Normal phone calls? Folks understand that apple data centers will be run by state-owned Guizhou-Cloud Big Data Industry (GCBD). That Apple has had to agree to keep the encryption keys locally to those data centers under control of GCBD employees? Why would apple have to change how it does encryption for chinese users and make sure keys are locally available.

ajsnigrutin 5y ago

I can call someone using a phone, tell him "bring two pair of blue trousers and one shirt, and don't forget the bullets for the trousers", and noone will ever blame the phone company for me arranging some illegal deal/stuff. I can sell drugs in the McDonalds parking lot, and noone will blame McDonalds for it. I can take a cab to future crime scene, and noone blames the taxi... or a bus.. or a plane. I can use many of the ISPs to educate myself how to get rid of a body or make a bomb or whatever, and noone blames Verizon. I can buy a polariod to make illegal photos, or canon or nikon or whatever, and noone blames them. I can operate an illegal business from a hotel room, and noone blames the hotel. I can even send an encrypted printed out message, and noone blames the post office. I can pimp out prostitutes on ikea beds, and noone blames ikea. This is just another case of governments wanting to snoop on their people, and companies letting them,.... and for good PR they just pack it around child abuse and terrorism.