Rendered at 23:48:38 GMT+0000 (Coordinated Universal Time) with Cloudflare Workers.
iamnothere 1 days ago [-]
I’m more concerned about OpenBSD. Given how centralized the project governance is, and its base in Canada, I can imagine the government attempting to (for example) force the project to serve backdoored images or updates to targeted people. A backdoor or bugdoor in the source would probably be spotted by someone, and I’m not even sure the bill allows a broad tool like that, but that’s not the only way to compromise software users.
Fortunately the mirrors are distributed, so maybe that reduces the risk.
walrus01 15 hours ago [-]
Theo has been historically rather uninterested in taking a position on Canadian political issues such as this or engaging as an authoritative voice and source of information with the domestic media and politicians. For instance there is very little if any overlap between Theo and the Munk School's Citizen Lab or associated projects. Or anything that you could broadly classify as an effort parallel to the Citizen Lab. I am not quite sure why this is.
iamnothere 13 hours ago [-]
It’s strange because he was very vocal about US political issues during the early GWOT years. I would guess some kind of Canadian patriotism, but he’s originally from South Africa, so that seems less likely. Perhaps it’s just an abundance of caution about upsetting his (and the project’s) current home.
FWIW a lot of Canadians seem to avoid discussing Canadian politics publicly, though.
12 hours ago [-]
wolvoleo 19 hours ago [-]
Knowing openbsd and Theo de Raadt I'm sure he will never ever comply with an order like that.
halJordan 10 hours ago [-]
That's the neat thing about laws. You just put them in prison until the replacement does comply.
wolvoleo 7 hours ago [-]
Like the other reply, I would expect them to just move the project to a different country then instead.
Honestly, the OS that prides itself on "Only two remote holes in the default install, in a heck of a long time!" is not going to introduce a remote hole on purpose, that'll be one cold day in heck.
This is really the least thing to worry about.
iamnothere 10 hours ago [-]
Except that doesn’t work with international software projects. Someone in another country takes over with consent of the community. It’s disruptive but not fatal if there’s sufficient interest in the project.
LorenDB 1 days ago [-]
Problem is, where do you take a company like this if you want peace of mind that the new host country won't immediately try to pass a similar law?
zawaideh 1 days ago [-]
Use a VPN from country that is hostile to the one you are living in. This way your own country won’t spy on you.
People tend to worry about other countries, but it is usually within the country they live in that they have to worry about their rights being infringed.
mikestorrent 19 hours ago [-]
Step 1 is making back doors mandatory. Step 2 is banning anything they can't decrypt.
I don't know if the second part has been discussed yet, but it's only possible with the former in place, so it makes sense to just ram that in first.
Most people don't care about this at all because they cannot fathom what it actually means. It takes the government actually turning on you to understand at a visceral level and by then it's too late. It seems there have still not been enough historical examples of this to truly burn it into memory.
halJordan 10 hours ago [-]
Case in point the Max app in Russia & telegram
mitxela 1 days ago [-]
Or use a VPN from some punk who ignores the law. The future belongs to those who say "they can't arrest us all"
Except in the USA where they will, in fact, arrest everyone.
basilikum 24 hours ago [-]
aka your local FBI agent. See ANOM or any of the other honey pots that glowed from kilometers away.
And even if they are not backdoored at first, once the state knocks on the developers door with the great offer that their kid will grow up with a father who is not in jail people's principles might change quickly.
browningstreet 1 days ago [-]
I've been working through my options per digital freedom, human dignity, and non-double-taxation as a US citizen. It's a depressingly short list.
recursive 1 days ago [-]
The real use case for satellite-borne data centers.
armadyl 1 days ago [-]
I fail to see how a satellite data center would fix this unless the company was entirely off planet
recursive 1 days ago [-]
Hell, the whole company could be located on that satellite if it transacts in crypto-currency.
bluGill 1 days ago [-]
Despite the hype, crypto is traceable. It is harder than other currencies and one transaction is probably untraceable. However if you are running a business you are going to get repeated payments from customers and repeatedly pay your employees and suppliers, which in turn creates enough data that they can track you down.
blakeashleyjr 1 days ago [-]
Mullvad accepts Monero (XMR), the most private and untraceable coin available today. Your point is correct for all others though.
cucumber3732842 1 days ago [-]
Mullvad will accept envelopes of cash. They go far and above any other company when it comes to helping their customers maintain anonymity.
bluGill 23 hours ago [-]
In the US, transactions over $10,000 need to be reported regardless. I don't know laws in Europe, but I would expect they have something similar. Which is to say, you can accept envelopes of cash only for relatively small amounts of money before you are going to get in trouble yourself. The government doesn't like tax fraud, and without the ability to trace things, they can prove tax fraud just because if there was no tax fraud, you wouldn't have a certain amount of money.
HWR_14 21 hours ago [-]
You don't have to report all transactions over $10,000 in cash. Your bank, where you will probably want to keep the money, will report all transaction over $10,000.
bluGill 13 hours ago [-]
courts will see right through any attempt of someone like offering cash for crypto deals claiming they're not a bank. They maybe haven't yet but they will when it becomes important to them.
HWR_14 3 hours ago [-]
It's using cash to pay for a service. It's not related to crypto or banking service at all.
nom 22 hours ago [-]
i bet that payment option is used very rarely... its brilliant marketing that costs them almost nothing
people really like to mention the cash envelope, whoever came up with it is a genius
fwn 14 hours ago [-]
For most people, it is far easier to pay with cash than with Monero.
And yes, whoever invented cash was a genius. It's an amazing technology that, in some ways, is far ahead of almost all digital payment systems.
OTOH, I did the cash envelope thing only once, out of curiosity. It was fun but now, for convenience, I just buy regular vouchers online.
cucumber3732842 13 hours ago [-]
You mailing cash to Mullvad is a bog standard business transaction. They pay their taxes on it and call it good. There is no tax fraud here.
mitxela 1 days ago [-]
Fully legal for any company to do this btw. They just don't want to. Even in the EU, taking XMR payments is legal, or buying things with XMR, or holding XMR - it's only illegal to list on exchanges.
1 days ago [-]
dymk 1 days ago [-]
Where do the people live…
recursive 1 days ago [-]
This wouldn't work for companies that require humans for now.
Onavo 1 days ago [-]
Not possible. If all jurisdictions relinquish their claim over the satellite then it's open to being shot down.
The proliferation of space access goes both ways. LEO isn't exactly difficult to reach (many college teams can do it). GEO might work but then you need relays and any relay satellite are essentially tacitly complicit.
Satellite (and most aerospace related technologies) are glass cannons. They aren't defensible like a bunker or a tank.
rkagerer 1 days ago [-]
What if you had lots and lots and lots of them? Maybe even enough to cause debris problems if they were attacked. With relays into countries that don't overreach their privacy laws.
j16sdiz 23 hours ago [-]
if you can identify some country that is safe to relay to, why not just put it there?
Not as stupid or far-fetched as it sounds, only now you have to trust a company not a state. There are several companies I would trust with this, but there would be no state I would trust. Some good SciFi which explores this concept (including mine)
ninjagoo 23 hours ago [-]
> The real use case for satellite-borne data centers.
Because of physics and the difficulties of rejecting heat in space, data centers in space aren't going to be a real thing until compute becomes more energy efficient by at least 50x-100x as compared to the present.
protocolture 1 days ago [-]
Satellites are very reliant on ground ops. Its much like crypto. You think all your stuff is in space, but the FBI agent has a wrench and will just break your kneecaps until you let him in. But also the FBI agent will pull your operating permit for the country your ground stations are in and take you offline.
MrDrMcCoy 1 days ago [-]
Iceland.
armadyl 1 days ago [-]
Switzerland? Although they’re attempting to close in on this there too.
petcat 1 days ago [-]
Didn't proton end up moving to Germany because of bad Swiss privacy laws?
camkego 1 days ago [-]
How has no one mentioned the Sealand micro nation off the UK?
rlpb 1 days ago [-]
It's not relevant. The moment criminality (in the view of other nations with these kinds of laws) hosts itself there, they'll find themselves hauled in front of the UK courts, and find that their "micro nation" isn't recognised and that the UK both claims jurisdiction over them and is able to enforce it.
protocolture 1 days ago [-]
The gang gets used as target practice for a Tomahawk missile.
stephen_g 22 hours ago [-]
Sealand is a structure within Britain's territorial waters (since they were expanded in 1987)... From what legal analysis I've seen, a structure just wouldn't ever be considered as a 'nation' in any sense, and if anything happened there that the UK was really concerned about they would remove the occupants anyway... So unless they had a navy that could go up against the UK's...
They'd need satellite internet anyway to get connectivity that didn't go through the UK so not going to be great latency.
mitxela 1 days ago [-]
It's isomorphic to a pirate ship. Just put your nation on a pirate ship, it's the same legal situation but more mobile.
Note that pirate means no laws apply to you including the ones that would protect you from things like murder.
1 days ago [-]
mig39 1 days ago [-]
How does Mullvad do it? They also have Canadian servers.
teamspirit 24 hours ago [-]
I’m more curious about Tailscale. How would this law, or these types of laws, affect them?
snapplebobapple 24 hours ago [-]
If I was them I would move my head office to the usa anyway, it's the right choice for most Canadian companies, and pretty much all software companies. it's insane how different the capital markets are for growing businesses in the two countries. I basically stopped Canadian private investing a decade ago because of how stupid it was here.
brailsafe 22 hours ago [-]
Didn't know Tailscale was Canadian, happy to hear it. Them and Signal are big ones. Signal just because the same bill would threaten their ability to operate in the country.
clemailacct1 11 hours ago [-]
Signal is American.
ignoramous 23 hours ago [-]
[if they had to comply with the bill as written] Tailscale told The Globe and Mail that it would have to "pursue corporate structures" to distance its international operations from Canada.
Didn't this bill get amended to clarify that no encryption back doors are required?
EmbarrassedHelp 1 days ago [-]
It was amended to make them less likely, but even the Liberals are saying that it can still be used to target encryption.
And the legislation still requires mandatory data retention and interception capabilities for all VPNs, encrypted messaging services, and every other online service.
tensor 1 days ago [-]
That's not quite correct. It requires the collection of available metadata only. It does not require that encrypted messages be decrypted, unless the provider holds the keys rather than the user. Still, it's not a great bill.
And I guess VPNs are not end to end encrypted. The provider would still be able to access your data if they want to unlike something like Tor. So, it will be the death of privacy focussed VPNs. But presumably things like Signal and Apple's disk encryption will be fine as only the user holds the keys.
voxic11 19 hours ago [-]
Signal does a lot to ensure they don't actually know much of what is traditionally considered metadata (like their sealed sender scheme which prevents them from knowing who messages were sent by). Do you know if this bill would require them to roll back those protections?
protocolture 1 days ago [-]
If its modelled after the Australian Access and Assistance bill, which it probably is, they will just compel the app to provide the capability to gather the data before/after its encrypted/decrypted, and stream it to some kind of logging device the feds install in your rack.
1 days ago [-]
frmrtntn 11 hours ago [-]
Funny how all the Carney glazers seem to be MIA in this thread.
elmer2 1 days ago [-]
Why don't people ever realize that the more Liberal a government is, the more control they will demand from our lives.
SupLockDef 7 hours ago [-]
Thinking that one or the other "side" isn't looking for control is quite refreshing to see.
So much hope in those youth innocence...
1 days ago [-]
1 days ago [-]
protocolture 1 days ago [-]
Define "Liberal".
I know conservatives love some kinds of control, and centrist/leftist parties love other kinds of control. Swinging from one to the other gets you both, not neither.
ThrowawayTestr 22 hours ago [-]
The Liberal Party of Canada
mitxela 1 days ago [-]
Liberal is basically equivalent to Centrist.
blooalien 1 days ago [-]
"Liberal" is anything that "Conservatives" don't like, and vice-versa. To each, the other is "The Devil Incarnate". They're just the two sides of the same extremist political cultist coin.
Edit: Yeah, I guess I shoulda expected the downvotes on this one. Too many folks I guess just ain't old enough to remember when both ends of the political spectrum presented themselves as a bit more sane than they do these days.
nxm 1 days ago [-]
They sell "give us more power, we'll protect you" well
Fortunately the mirrors are distributed, so maybe that reduces the risk.
FWIW a lot of Canadians seem to avoid discussing Canadian politics publicly, though.
Honestly, the OS that prides itself on "Only two remote holes in the default install, in a heck of a long time!" is not going to introduce a remote hole on purpose, that'll be one cold day in heck.
This is really the least thing to worry about.
People tend to worry about other countries, but it is usually within the country they live in that they have to worry about their rights being infringed.
I don't know if the second part has been discussed yet, but it's only possible with the former in place, so it makes sense to just ram that in first.
Most people don't care about this at all because they cannot fathom what it actually means. It takes the government actually turning on you to understand at a visceral level and by then it's too late. It seems there have still not been enough historical examples of this to truly burn it into memory.
Except in the USA where they will, in fact, arrest everyone.
And even if they are not backdoored at first, once the state knocks on the developers door with the great offer that their kid will grow up with a father who is not in jail people's principles might change quickly.
people really like to mention the cash envelope, whoever came up with it is a genius
And yes, whoever invented cash was a genius. It's an amazing technology that, in some ways, is far ahead of almost all digital payment systems.
OTOH, I did the cash envelope thing only once, out of curiosity. It was fun but now, for convenience, I just buy regular vouchers online.
The proliferation of space access goes both ways. LEO isn't exactly difficult to reach (many college teams can do it). GEO might work but then you need relays and any relay satellite are essentially tacitly complicit.
Satellite (and most aerospace related technologies) are glass cannons. They aren't defensible like a bunker or a tank.
Too late
https://en.wikipedia.org/wiki/Kessler_syndrome
Because of physics and the difficulties of rejecting heat in space, data centers in space aren't going to be a real thing until compute becomes more energy efficient by at least 50x-100x as compared to the present.
They'd need satellite internet anyway to get connectivity that didn't go through the UK so not going to be great latency.
Note that pirate means no laws apply to you including the ones that would protect you from things like murder.
And the legislation still requires mandatory data retention and interception capabilities for all VPNs, encrypted messaging services, and every other online service.
And I guess VPNs are not end to end encrypted. The provider would still be able to access your data if they want to unlike something like Tor. So, it will be the death of privacy focussed VPNs. But presumably things like Signal and Apple's disk encryption will be fine as only the user holds the keys.
So much hope in those youth innocence...
I know conservatives love some kinds of control, and centrist/leftist parties love other kinds of control. Swinging from one to the other gets you both, not neither.
Edit: Yeah, I guess I shoulda expected the downvotes on this one. Too many folks I guess just ain't old enough to remember when both ends of the political spectrum presented themselves as a bit more sane than they do these days.