Conversation

Notices

1. Kevin Beaumont (gossithedog@cyberplace.social)'s status on Wednesday, 23-Aug-2023 18:58:25 JST Kevin Beaumont

   The UK government are planning to follow China and require security vulnerabilities be reported centrally and then remain unpatched to allow Five Eyes access. https://www.justsecurity.org/87615/changes-to-uk-surveillance-regime-may-violate-international-law/

   • Aral Balkan (aral@mastodon.ar.al)'s status on Wednesday, 23-Aug-2023 18:58:23 JST Aral Balkan

     in reply to

     @GossiTheDog Alt text:

     ‘While the proposal does not specify what technical changes
     would require notification, these may include changes in the
     architecture of software that would interfere with the U.K.’s
     current surveillance powers. As a result, an operator of a
     messaging service wishing to introduce an advanced security
     feature would now have to first let the Home Office know in
     advance.

     1/2

   • Aral Balkan (aral@mastodon.ar.al)'s status on Wednesday, 23-Aug-2023 18:59:29 JST Aral Balkan

     in reply to

     @GossiTheDog (cont.) Highlighted text:

     Device manufacturers would likely also have to notify
     the government before making available important security,
     updates that fix known vulnerabilities and keep devices secure.
     Accordingly, the Secretary of State, upon receiving such an
     advance notice, could now request operators to, for instance,
     abstain from patching security gaps to allow the government to
     maintain access for surveillance purposes.