3 ms·

In that case then the definition of privacy needs to change because to me privacy is a binary state. Either I have it or I don't. Secondly, this piece of legis

In that case then the definition of privacy needs to change because to me privacy is a binary state. Either I have it or I don't. Secondly, this piece of legislation is not only a threat to the people of Europe, it is actually a gift to the autocracies of the world like China, Russia and Iran and more who as soon as it is implemented will deploy tremendous amounts of efforts to break into it. By going forward with this law, we are advertising to the world, hey we got a backdoor here, come and use it! Instead of making it harder for foreign powers to break into our system, we are creating multiple points of failures where the data could be intercepted.

Nursie 2y ago
> In that case then the definition of privacy needs to change because to me privacy is a binary state. Either I have it or I don't. That seems a little, well, binary. I don't have (nor want) a lot of privacy from my partner. I have a lot more from my boss, who clearly doesn't need to know about the pimple on my ass. He also doesn't need to know my car registration, which the government does, or parts of the government. You need to look at your threat model and understand what it is you want to protect and from whom. "Privacy" is a bit more complex than on/off. I agree, the backdoor is a poorly thought out idea, it's an authoritarian fantasy which (like many authoritarian fantasies) doesn't take into account the practicality of the idea or the second order consequences. That back door will indeed be a target, so the people of the EU have to worry about not only their own governments misusing the data but (as you say) other powers finding ways in as well. On the corporate side, the threat model is different - companies don't want the expense of doing security well and they have a profit motive of being able to sell data. This treasure trove could also be useful to foreign actors, or those (like Cambridge Analytica) who would use it for domestic political aims. EU citizens are relatively well protected from this type of threat at the moment, US citizens not so much. Should weakness in one mean you don't listen to anything out of the EU when it comes to privacy? Again I think that's too binary. The EU has some great ideas and laws about protecting us from the excesses of corporate data hoarding, those should be celebrated, just as we excoriate them on attempts to create a state panopticon.

Nursie 2y ago

> In that case then the definition of privacy needs to change because to me privacy is a binary state. Either I have it or I don't. That seems a little, well, binary. I don't have (nor want) a lot of privacy from my partner. I have a lot more from my boss, who clearly doesn't need to know about the pimple on my ass. He also doesn't need to know my car registration, which the government does, or parts of the government. You need to look at your threat model and understand what it is you want to protect and from whom. "Privacy" is a bit more complex than on/off. I agree, the backdoor is a poorly thought out idea, it's an authoritarian fantasy which (like many authoritarian fantasies) doesn't take into account the practicality of the idea or the second order consequences. That back door will indeed be a target, so the people of the EU have to worry about not only their own governments misusing the data but (as you say) other powers finding ways in as well. On the corporate side, the threat model is different - companies don't want the expense of doing security well and they have a profit motive of being able to sell data. This treasure trove could also be useful to foreign actors, or those (like Cambridge Analytica) who would use it for domestic political aims. EU citizens are relatively well protected from this type of threat at the moment, US citizens not so much. Should weakness in one mean you don't listen to anything out of the EU when it comes to privacy? Again I think that's too binary. The EU has some great ideas and laws about protecting us from the excesses of corporate data hoarding, those should be celebrated, just as we excoriate them on attempts to create a state panopticon.