DaemonForums  

Go Back   DaemonForums > DaemonForums.org > News

News News regarding BSD and related.

Reply
 
Thread Tools Display Modes
  #1   (View Single Post)  
Old 9th March 2016
J65nko J65nko is offline
Administrator
 
Join Date: May 2008
Location: Budel - the Netherlands
Posts: 4,128
Default French parliament votes to penalise smartphone makers over encryption

From http://www.theguardian.com/technolog...ver-encryption

Quote:
French parliamentary deputies, defying government wishes, have voted in favour of penalising smartphone makers which fail to cooperate in terrorism inquiries, entering a controversy that has pitted the FBI against Apple in the United States.

The move came in the form of an amendment to a penal reform bill that was receiving its first reading in parliament.

The wider bill foresees the end in May of the state of emergency that has been in place in France since deadly jihadist attacks in Paris last November.

Given the government’s reluctance to take on the big phone companies in this way, it remains to be seen whether the thrust of the amendment can survive the lengthy parliamentary process that remains before the bill becomes law.

The controversial amendment, drafted by the rightwing opposition, stipulates that a private company which refuses to hand over encrypted data to an investigating authority would face up to five years in jail and a €350,000 (£270,000) fine.
__________________
You don't need to be a genius to debug a pf.conf firewall ruleset, you just need the guts to run tcpdump
Reply With Quote
  #2   (View Single Post)  
Old 9th March 2016
jggimi's Avatar
jggimi jggimi is offline
More noise than signal
 
Join Date: May 2008
Location: USA
Posts: 7,977
Default

The amendment is either written ludicrously, or the article is written ludicrously. Take your pick.

Hand over encrypted data? That's easy. "Here's your big box of of ones and zeros. We recommend sorting them into two separate piles of numbers. The ones can go on the table next to the floor lamp, and perhaps the zeros can be placed over there on that table by the coffee maker. Have fun!"

I assume the journalist or the amendment intended to imply "the plaintext of any encrypted data" which is, of course, an impossible requirement if the particular encryption technology involved keeps encryption keys out of the hands of the vendor.
Reply With Quote
  #3   (View Single Post)  
Old 10th March 2016
J65nko J65nko is offline
Administrator
 
Join Date: May 2008
Location: Budel - the Netherlands
Posts: 4,128
Default

I spent some time searching for 'décrypter' and 'cryptage' on http://www.lemonde.fr but was unable to find an article discussing this issue.

Maybe one of our French members can point us to an article that shows whether unencrypted or encrypted data have to be handed over.

BTW Le Monde, one of the major French newspapers uses 'yandex.ru', not 'google' for searching their website ....
__________________
You don't need to be a genius to debug a pf.conf firewall ruleset, you just need the guts to run tcpdump
Reply With Quote
  #4   (View Single Post)  
Old 10th March 2016
jjstorm jjstorm is offline
Package Pilot
 
Join Date: Nov 2014
Location: Buenos Aires, AR
Posts: 144
Default

Nothing short of ridiculous. I doubt this will make it through the French congress, since many (in the congress) have already stated, they are against back doors, which this bill would obviously require.

Last edited by jjstorm; 10th March 2016 at 03:26 PM.
Reply With Quote
  #5   (View Single Post)  
Old 10th March 2016
jggimi's Avatar
jggimi jggimi is offline
More noise than signal
 
Join Date: May 2008
Location: USA
Posts: 7,977
Default

Here's the amendment: http://www.assemblee-nationale.fr/14...3515/AN/90.asp

I don't speak or read French. Google Translate tells me that there is a penalty of 2 years imprisonment and € 15K fine for an indivual who "is refusing to communicate" with investigators regarding "data protected by means of encryption which he is the manufacturer."

There are two interpretations:
  1. A "manufacturer" is a technology vendor who has any access to customer data.

    This compels a vendor to give investigators that big box full of customers' zeros and ones. Which means they must now retain data indefinitely.
  2. A "manufacturer" is a person or company that encrypts data.

    This compels plaintext or keys, assuming either are available. Unless "communicate" means cooperating with investigators. That cooperation could be as simple as, "Sorry, I don't recall that specific conversation," or "Sorry, session keys change every hour or every 2 gigabits transferred, whichever comes first. We can't decrypt that old traffic."
Reply With Quote
  #6   (View Single Post)  
Old 10th March 2016
IdOp's Avatar
IdOp IdOp is offline
Too dumb for a smartphone
 
Join Date: May 2008
Location: twisting on the daemon's fork(2)
Posts: 1,027
Default

Why don't they just make it illegal to study/teach/do mathematics.
Reply With Quote
  #7   (View Single Post)  
Old 10th March 2016
e1-531g e1-531g is offline
ISO Quartermaster
 
Join Date: Mar 2014
Posts: 628
Default

Quote:
Originally Posted by IdOp View Post
Why don't they just make it illegal to study/teach/do mathematics.
+1
Reply With Quote
  #8   (View Single Post)  
Old 10th March 2016
LeFrettchen's Avatar
LeFrettchen LeFrettchen is offline
Marveled user
 
Join Date: Aug 2012
Location: France
Posts: 408
Default

Quote:
Originally Posted by jggimi View Post
There are two interpretations:
  1. A "manufacturer" is a technology vendor who has any access to customer data.
  2. A "manufacturer" is a person or company that encrypts data.
Don't worry, it's equally ambiguous in French.

Quote:
Originally Posted by IdOp View Post
Why don't they just make it illegal to study/teach/do mathematics.
Come on, please, don't say that so loud, they could hear you...
__________________
ThinkPad W500 P8700 6GB HD3650 - faultry
ThinkStation P700 2x2620v3 32GB 1050ti 3xSSD 1xHDD
Reply With Quote
  #9   (View Single Post)  
Old 10th March 2016
Oko's Avatar
Oko Oko is offline
Rc.conf Instructor
 
Join Date: May 2008
Location: Kosovo, Serbia
Posts: 1,102
Default

Quote:
Originally Posted by IdOp View Post
Why don't they just make it illegal to study/teach/do mathematics.
With current funding levels for pure mathematics in U.S.A. and horrific job market I would not be surprised that that more people like me will have to do "big data science" and pretend that I have nothing to do with mathematics
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
French government considers law that would outlaw strong encryption J65nko News 6 14th January 2016 03:27 PM
A new OpenBSD Book in french wesley Book reviews 5 5th December 2015 07:13 PM
Europe’s parliament “poised to call for a break-up of Google” J65nko News 0 22nd November 2014 01:04 AM
Security: Encryption: Disk Encryption eurovive Other BSD and UNIX/UNIX-like 17 6th March 2010 04:09 AM
Horizontal scrollbar prompts EU gripe from 6 browser makers J65nko News 0 5th March 2010 06:12 PM


All times are GMT. The time now is 10:43 AM.


Powered by vBulletin® Version 3.8.4
Copyright ©2000 - 2024, Jelsoft Enterprises Ltd.
Content copyright © 2007-2010, the authors
Daemon image copyright ©1988, Marshall Kirk McKusick