Swedish government wants a back door in signal for police and ‘Säpo’ (Swedish federation that checks for spies)

Let’s say that this becomes a law and Signal decides to withdraw from Sweden as they clearly state that they won’t implement a back door; would a citizen within the country still be able to use and access Signals services? Assuming that google play services probably would remove the Signal app within Sweden (which I also don’t use)

I just want the government to go f*ck themselves, y’know?

    • jet@hackertalks.com
      link
      fedilink
      English
      arrow-up
      0
      ·
      12 days ago

      No, probably not. They both speak the same protocol and talk to the same servers.

      Unless the block was a app store distribution restriction only

        • EngineerGaming@feddit.nl
          link
          fedilink
          arrow-up
          0
          ·
          11 days ago

          It would be very weird if it was - when a “ban” happens, at least here, they block the website. I doubt Sweden would fight even basic Wireguard/OpenVPN tho, so I don’t see it as a big problem. The bigger problem would be carriers denying registration confirmation SMS, which is yet another downside of the phone number requirement.

        • Sonalder@lemmy.ml
          link
          fedilink
          arrow-up
          0
          ·
          12 days ago

          Even if it’s not Molly could implement Tor or any sort of bridge to bypass these restrictions (such as Signal themselves)

          • EngineerGaming@feddit.nl
            link
            fedilink
            arrow-up
            0
            ·
            11 days ago

            Yes! Because unlike stock Signal (which, last time I tried, restricts you to their own proxy implementation), you can use whatever Socks proxy you want. Including Tor. Yeah, sure, you could use a VPN with Signal - but for people who want a persistent connection, having a VPN on 24/7 would be inconvenient. Such a frustrating part of the official app…

              • EngineerGaming@feddit.nl
                link
                fedilink
                arrow-up
                0
                ·
                11 days ago

                Yeah, I know that - I am myself in a situation where we need increasingly obfuscated evasion solutions. However, my issue is not in that it developed such a proxy - but rather, that it doesn’t give an option to use a different one. For example, I have my proxy set up - so why does Signal need its own separate proxy rather than using the one everything else already uses? Why can’t it use Tor without torifying the whole device’s traffic?

                Not to mention that dedicated solutions (XRay and such) are focused on censorship evasion while for Signal stealthy proxies are comparatively more of an afterthought. So there is a chance it wouldn’t be able to evolve fast enough to keep up with the censors.

                P.S. I think in Iran, there was also a bigger issue - the SMS codes for registration just didn’t arrive.

  • ShellMonkey@lemmy.socdojo.com
    link
    fedilink
    English
    arrow-up
    0
    ·
    12 days ago

    Wherever a service with encryption exists any government in the world thinks they need to be the special child with the access to the contents.

    E2E with privately generated and held keys, have you published your PGP public key yet?

    • khannie@lemmy.world
      link
      fedilink
      English
      arrow-up
      0
      ·
      edit-2
      11 days ago

      E2E with privately generated and held keys, have you published your PGP public key yet?

      Exactly. You can’t stop secure encryption.

      I remember in the very old days of the internet when only the US had strong encryption and thought it was some gotcha. They labeled it a weapon to prevent overseas export. Phil Zimmerman created PGP, lobbed the source into a book (protected under 1st amendment) then shipped it overseas.

      If strong encryption exists and people want to use it, you’re just not going to be able to stop them.

      • phase@lemmy.8th.world
        link
        fedilink
        arrow-up
        0
        ·
        11 days ago

        Reminds me of the story of immigrants who tatooed the algorithm on their back. It was illegal to send them back.

  • ryedaft@sh.itjust.works
    link
    fedilink
    English
    arrow-up
    0
    ·
    12 days ago

    Before any politician asks for a backdoor into an encrypted service they should be required to explain Project Rubicon

  • JoeKrogan@lemmy.world
    link
    fedilink
    arrow-up
    0
    ·
    12 days ago

    They will probably just show message to Swedish ip addresses and state that they cannt provide you with the binary as you are using a Swedish ip.

    Something very clear to say use a VPN 😉

  • りん〜@sopuli.xyz
    link
    fedilink
    English
    arrow-up
    0
    ·
    edit-2
    11 days ago

    How does this even make sense? The criminals would just move to another platform like SimpleX or use a VPN.

    Whole article in English:

    The encrypted messaging app Signal is growing - now even the Swedish Armed Forces use it.

    But the government wants to force the company to introduce a technical backdoor for the police and Säpo.

    • “If this becomes a reality, we will leave Sweden,” says Signal’s CEO Meredith Whittaker, in an exclusive interview with SVT.

    If the government gets its way, the bill will be passed in the Riksdag as early as March next year.

    The bill states that companies such as Signal and Whatsapp will be forced to store all messages sent using the apps. Leaving Sweden

    Signal - which is run by a non-profit foundation - has now told SVT Nyheter that the company will leave Sweden if the bill becomes reality.

    • “In practice, this means that we are being asked to break the encryption that is the basis of our entire business. Asking us to store data would undermine our entire architecture and we would never do that. We would rather leave the Swedish market completely,” says Signal’s CEO Meredith Whittaker.

    She says the bill would require Signal to install so-called backdoors in its software.

    • “If you create a vulnerability based on Swedish wishes, it would create a path to undermine our entire network. Therefore, we would never introduce these backdoors.

    But don’t you have a responsibility as a supplier to support anti-crime efforts?

    • Our responsibility is to provide technology that upholds human rights in an era where those rights are being violated in more and more places. In today’s digital world, there are very few places where we can communicate privately or whistleblow. Armed forces critical

    Whittaker cites the 2024 attack by the Chinese state actor Salt Typhoon on several internet service providers in the US, where text messages and phone calls were leaked. She argues that a Swedish backdoor would open up for the same thing.

    • “There are no backdoors that only the good guys have access to.”

    The aim of the bill is to allow the Security Service and the police to request the message history of criminal suspects after the fact. Both authorities were positive in the consultation.

    • “The ability of law enforcement authorities to effectively access electronic communications is crucial,” said Minister of Justice Gunnar Strömmer (M) earlier at a press conference.

    But the Swedish Armed Forces are opposed and recently urged their personnel to start using Signal to reduce the risk of interception.

    In a letter to the government, the Swedish Armed Forces wrote that the bill could not be implemented “without introducing vulnerabilities and backdoors that could be exploited by third parties”.

    • Libb@jlai.lu
      link
      fedilink
      English
      arrow-up
      0
      ·
      edit-2
      11 days ago

      How does this even make sense? The criminals would just move to another platform like SimpleX or use a VPN.

      Next move (and not just from Sweden): make the use of a VPN (and any fully encrypted service) illegal for the average citizen—who needs a backdoor when the law makes it a crime to simply use full E2EE? Let those be used with trust by the army, the press, organizations and people like that just not by common people that should have no privacy at all.

      Politician incompetency and dishonesty will finish to ruin what little of Europe remains and what the word democracy was supposed to mean (which is not to consider your citizen like clueless children that can’t understand shit and that can’t be trusted).

      But in exchange of ruining that they will get some more power and/or money, so that’s fine I suppose.

  • Lazycog@sopuli.xyz
    link
    fedilink
    arrow-up
    0
    ·
    12 days ago

    You can still download the APK from their repository, install it, and use signals built in censoring-evasion setting as far as I know.

    They are even working on self updating app feature IIRC.

    This is why I donate to signal. I know there are decentralized alternatives but I can barely get my family and friends to use Signal.

    • M137@lemmy.world
      link
      fedilink
      arrow-up
      0
      ·
      11 days ago

      Really? I got my family to use it with a simple explanation of why, and why they shouldn’t use other things. None of them are very tech-literate. And also simply saying it’s where they can reach me.

      I feel like this is a you problem, you don’t explain it well to them and make them understand why they should use it.

      • Lazycog@sopuli.xyz
        link
        fedilink
        arrow-up
        0
        ·
        11 days ago

        I’m not going to say it’s not a me-problem, but disregarding the fact that if it was that simple it would be more widespread amongst people is making it seem as if we don’t try seriously and downplays the effort many like myself put in.

        I care about privacy and about my close ones (as many here do) and I explain the issue to them in a nice way so to not come across as a pushy salesman, and they readily admit that they don’t want to put the effort in (effort as in learning something new, upkeeping with multiple apps, etc).

        It’s not that I don’t know why they don’t switch immidiately - I know why. It’s simply that they don’t. It’s okay not to switch as long as you know the risks and I’ve explained the risks and they seem to understand it, but it’s not enough to get everyone to switch.

        If life was that simple with everyone (I know some switch without hesitation) the world would be completely different.

        You can explain to a decent normal person the imminent doom we are facing with climate change and they may understand it very well, but they still wont give up on using their car and switch to public transport immidiately, because it is an inconvenience.

    • WalnutLum@lemmy.ml
      link
      fedilink
      arrow-up
      0
      ·
      11 days ago

      I highly recommend Obtainium to anyone who wants to keep their apps updated without needing a central report (save for the APKs that only publish on f-droid etc)

    • Wolfie@lemm.eeOP
      link
      fedilink
      English
      arrow-up
      0
      ·
      12 days ago

      I have gotten a few family members and friends to use signal as I stated to them that this is the only way to get ahold of me. Other than this, you won’t. And because of me, they decided to do so :P some haven’t, but its up to them to decide.

      • floofloof@lemmy.ca
        link
        fedilink
        English
        arrow-up
        0
        ·
        12 days ago

        Signal has done a very good job of making it easy to get started with the app. The alternatives (Matrix, Simplex, Briar etc.) are all more awkward.

      • khannie@lemmy.world
        link
        fedilink
        English
        arrow-up
        0
        ·
        11 days ago

        I have gotten a few family members and friends to use signal as I stated to them that this is the only way to get ahold of me.

        Same. It’s the default app for everyone I’m close to.

      • Miles O'Brien@startrek.website
        link
        fedilink
        English
        arrow-up
        0
        ·
        11 days ago

        At least you all can get your family to use it.

        I can’t even get my spouse to use it unless she thinks what we are talking about might be illegal where we are (it usually isn’t)

        I’ve tried convincing family to use it, but all that happens is I just never hear from them until I see them in person or they call me.

        They don’t even feel the need to back up their Amazon Kindle collection before they get cutoff from it… Thousands of dollars wasted if they ever lose access to the account.

      • Lazycog@sopuli.xyz
        link
        fedilink
        arrow-up
        0
        ·
        11 days ago

        Yup and months of premium instant 24/7 tech support to ensure the slightest thing doesn’t return them to default apps in the beginning !

    • pmk@lemmy.sdf.org
      link
      fedilink
      arrow-up
      0
      ·
      11 days ago

      The current government promised they would be “tough on crime” but have been largely unsuccessful in reducing gang related criminality. Now they are trying to find new tools to get to the leaders of those gangs. Sadly, they don’t understand technology.

  • 0x0@programming.dev
    link
    fedilink
    arrow-up
    0
    ·
    11 days ago

    Signal’s american and their infrastructure’s based on american Amazon, so there’s that…
    You could use a VPN i guess.

  • HappyFrog@lemmy.blahaj.zone
    link
    fedilink
    arrow-up
    0
    ·
    11 days ago

    As a sweed, I get really irritated at my country. We were also the ones who introduced chat control into the EU… I fear we’re turning into the USA…

  • x00z@lemmy.world
    link
    fedilink
    English
    arrow-up
    0
    ·
    11 days ago

    “Every house should break open a wall and build a door only to be used by the police whenever they want to. It will only be used for your protection ;)”

    • jamie_oliver@lemmy.world
      link
      fedilink
      arrow-up
      0
      ·
      11 days ago

      A rep for the Centerparti literally used this argument on the news today, they are very against it. It is just a proposal at the moment, even the military passovely criticized it as they use Signal for communication.

      Hopefully that’s enough for it not to pass but you never know. If it passes that’s a new low.

    • NotMyOldRedditName@lemmy.world
      link
      fedilink
      arrow-up
      0
      ·
      11 days ago

      With a universal key to every single door that is easily copyable and sharable, but not really possible to know if one bad cop decides to share it for $$$$

    • Wolfie@lemm.eeOP
      link
      fedilink
      English
      arrow-up
      0
      ·
      11 days ago

      Exactly. We have to think about the children…

      Its jot the parents responsibility to be apart of their kids lives and bring them up properly. That responsibility have been pushed onto the governments so that they can leverage it against peoples right to privacy