Federal Bill Could Override State-Level Encryption Bans (thestack.com) 140
An anonymous reader writes: A new bill has been proposed in Congress today by Representatives Ted Lieu (D-Calif.) and Blake Farenthold (R-Tex.) which looks to put a stop to any pending state-level legislation that could result in misguided encryption measures. The Ensuring National Constitutional Rights of Your Private Telecommunications Act of 2016 comes as a response to state-level encryption bills which have already been proposed in New York state and California. These near-identical proposals argued in favour of banning the sale of smartphones sold in the U.S. that feature strong encryption and cannot be accessed by the manufacturer. If these bills are passed, current smartphones, including iPhone and Android models, would need to be significantly redesigned for sale in these two states. Now Lieu and Farenthold are making moves to prevent the passing of the bills because of their potential impact on trade [PDF] and the competitiveness of American firms.
Congress is just mad someone is beating them (Score:3)
Re: (Score:3, Insightful)
No they aren't. The cell phone makers don't want to have to bear the expense of making a California or New York edition phone so they have lobbied their congress critters to that effect.
Re: (Score:3, Insightful)
This is what lobbying efforts in your favor feel like. Enjoy it while you can. It's rare.
Re: (Score:2)
This can easily turn against us with 1 amendment to the bill tagging on an extra requirement such as sharing of encryption keys with the feds.
Re: (Score:1)
This can easily turn against us with 1 amendment to the bill tagging on an extra requirement such as sharing of encryption keys with the feds.
Exactly, did we not learn anything with 'guided encryption' standards with RSA's not so random number generator? If they are so worried about 'da torrorists', perhaps the gubbermint should stop picking fights and arming them.
Re: (Score:2)
Re: (Score:1)
"If they are so worried about 'da torrorists', perhaps the gubbermint should stop picking fights and arming them."
Of maybe they should remember they are supposed to work for us, the citizens and uphold the Constitution. Maybe then Americans wouldn't consider the government the enemy...
Yes, but that is a complicated problem in the US that was solidified in 1864 when the District of Columbia became property of a corporation filed in the Queen of England's name and interest in wellbeing of the United States became non domestic. What is worse is they have played that game into a 20 trillion dollar debt based on playing the paper after running off with the gold and entertaining us all with puppets. The interesting part of that is England is in itself a proxy and well known for the commissio
Re: (Score:2)
Re: (Score:2)
I haven't found the actual bill yet so I don't know what it actually says but this seems to be the case.
The bill is literally linked in the summary. I'll link it again here: https://assets.documentcloud.o... [documentcloud.org]
It's a page and a half of actual content, even with the narrow columns and oversized font they use for whatever reason.
Re: (Score:2)
Re: (Score:1)
It is now HR 4528 [congress.gov]
Re: (Score:2)
This is what lobbying efforts in your favor feel like. Enjoy it while you can. It's rare.
Nonsense. The 1% always knows what's best for the rest of us, even if we don't. Why else would we keep electing representatives who are so deeply in the 1%'s pocket?
Oh. Wait...
Re: (Score:3)
The right to be secure in your person and papers is certainly Constitutionally protected.
Re: (Score:2)
Re: (Score:1)
more like this will morph into a required, country wide requirement for backdoor in every cell phone and a ban on end-to-end encryption.
because we all are terrorists.
Re: (Score:2)
Sorry, bigger budgets, and more potential to strip-search, grope and fine people. Of course they're going to go for it.
Re: (Score:2)
More likely Google and Apple (and Samsung, etc) dumped money into their congress critters to get this to avoid having to produce different phones/OSs for each state...
The government doesn't need nor should they have Backdoors and bans on encryption. Citizens have more rights than the government, and they need to learn that, even if it's the hard way
Re: (Score:1)
More likely Google and Apple (and Samsung, etc) dumped money into their congress critters to get this to avoid having to produce different phones/OSs for each state...
The government doesn't need nor should they have Backdoors and bans on encryption. Citizens have more rights than the government, and they need to learn that, even if it's the hard way
Actually, the Government has ZERO Rights. The Government has only POWERS. Citizens, OTOH, have both Rights AND Powers.
ALWAYS keep that in mind.
Re: (Score:2)
Why bother with all the cost and hassle of fighting off silly local state laws. Just supply the phone without the software and provide an international link to download and install the software like, hmm, I don't know perhaps a link to https://play.google.com/store [google.com]. All you have to do is ensure the store and it's infrastructure is not in that location. Quite simply it makes far more sense to deliver phones in that condition, absolute minimum of software in the package, so that it complies with that locatio
Illegal phone running (Score:5, Interesting)
I just love the idea that we are going to create a whole new "War on encryption" that might be even less winnable than the War on Drugs.
Instead of people running guns from less restrictive jurisdictions, we will now all be criminals importing phones because we want to buy phones win normal industry standard encryption.
Re:Illegal phone running (Score:5, Insightful)
This is far more than a war on encryption.
This is a war on your ability to have secrets from the government they're not allowed to access by going to a third party -- and that's before they even start claiming they don't need a warrant for this shit, which increasingly is exactly what the do.
How this isn't a violation of both 4th and 5th amendment rights is baffling, but apparently digital invalidated those.
If you have nothing to hide, you have nothing to fear, comrade.
Re: (Score:2)
Re: (Score:2)
There's absolutely no difference. In practice, an SSN is useless as a means of proving your identity anyway.
Re: (Score:3)
Re: (Score:2)
Re: (Score:3)
I'm not sure I agree with you. If you think about it, McCarthy was an authoritarian douchenozzle as bad as any caricature of a commie that could be come up with, and he was doing what he did in the name of fighting communism.
No, I think the best way to diff the cold war versus now is with this regex: s/communist/terrorist/g . The players who are doing this shit now would have been the ones doing that shit then if they were born a generation earlier.
History repeats itself over and over. Here's an example
Re:Illegal phone running (Score:5, Interesting)
This is a war on your ability to have secrets from the government they're not allowed to access by going to a third party
Its not "a third party" its "any party at all".
Other than the contents of one's own mind, we've never actually had that ability until recently.
The very best you could do was put your one time pad in a safe which they could open with a warrant and several hours with a drill.
Digital didn't take away your ability, it actually for the first time, gave us something new... places to put secrets that COULDN'T be easily broken into by law enforcement. This is new for them.
Of course the idiots out there are proposing nonsense like backdoors, or banning encryption etc which are never going to end well if they came to pass. But the adults in the room should be able to have a real conversation about it. Do we treat the contents of securely encrypted systems as an extension of the mind, and vastly increase the total amount of data that is effectively untouchable to law enforcement short of coercion/torture (which is itself illegal).
And on the flip side, what happens if they develop a method of pulling secrets directly from your mind that isn't invasive/destructive. Will that suddenly create a situation where they can get a warrant for the contents of your mind? The 5th amendment is a pragmatic one, you have the right not to testify because they can't make you talk short of torture... but what if they could simply read your mind remotely? And pluck your passwords out. Sci-fi / fantasy? Maybe. Maybe not.
Another possible future is the augmentation of the mind itself directly... imagine an SSD for the brain, *IN THE BRAIN*. What would the legal status of that be in terms of warrant access?
Re: (Score:2)
Doctrine about the 5th amendment is that the government is not allowed to force you to create evidence (by speaking or writing in answer to a question). It is not considered to protect already existing evidence (your diary in a lockbox). There's been a kerfuffle lately about whether requiring you to decrypt some already existing piece of data constitutes creating evidence or merely accessing existing evidence. However it is not inconceivable that an actually accurate mind reader could be considered "accessi
Current use != Original intent w/proof (Score:2)
I have to point out the obvious, which is that there has been nearly 2 centuries of people pumping money into propaganda to convince people that the Constitution and Bill of Rights means what they want to mean, not what was intended originally. That people continue believing increasing levels of bullshit is not a surprise, incremental change is how things always happen. Propaganda and Sociology are not "new" sciences by any stretch of the imagination, but also not something normal people get taught about.
Re: (Score:2)
Yes, but what is your actual point here?
The fact remains that if you are suspected of treason, due to circumstantial evidence, and a hair found at a known drop site -- and they use that to get a warrant to search your home, where they find your diary in a safe, listing your intelligence leaking, along with papers containing intelligence you were planning to leak.
The 4th and 5th amendments are not designed to protect you from prosecution in that scenario.
Law enforcement has been legitimately allowed to searc
Re: (Score:2)
Seriously, you can't see the difference between a Police officer finding evidence at a crime scene, and a Police officer reading your personal emails to find something? Are you really trying to claim that the founders were so goddamn naive they believed that people in power are, and would always be altruistic?
There is a world of difference between a random search, and a warrant being issued due to evidence related to a crime. If you don't see the difference and are not just a troll, I hope your masters pa
Re: (Score:2)
Seriously, you can't see the difference between a Police officer finding evidence at a crime scene, and a Police officer reading your personal emails to find something?
Of course I see the difference. And nobody disagrees with you that a random search is a problem. But nobody here (except you) is talking about random searches.
Those were made illegal for good reasons. Those should be illegal now and in the future too for the same good reasons. We all agree on that.
The issue here is the *warranted search*. Up until now, if the police got a warrant they COULD search your papers/diary etc. Now EVEN with a warrant they can't do that. And that is a "problem" of sorts.
Re: (Score:2)
It is not a problem with encrypted data. It is a good analogy with a safe or a diary written in some given code..
The police can get a warrant for the contents of your safe, but they can't force you to open it. They can hire a safe-cracker, but if they can't find one that can break in to your safe, you still don't have to give up the combination and the cops are out of luck.
Encrypted data is the same. They can't force you to give them the passphrase but they can hire someone to try and crack it. If no one ca
Re: (Score:2)
They can hire a safe-cracker, but if they can't find one that can break in to your safe, you still don't have to give up the combination and the cops are out of luck.
Quite. But how realistic is this? How many safes out there can the police not get cracked? Its a theoretical limitation with no real implication on actual law enforcement activity.
Contrast this with "everybody and their un-crackable cellphone".
If someone made a physical safe the cops couldn't break into, and people were buying them by the millions law enforcement would be in a similar tizzy about it. Except I doubt that can happen, nothing one can build can't be ground down again. And the cost of such a saf
Re: (Score:2)
But they aren't ok with being "out of luck" so often.
The Constitution and Bill of Rights doesn't exist to make life easier for cops. In fact, it was designed to do the exact opposite.
Working as intended.
The cops don't have to be okay with it. If they don't like it they can move to a police state where cops have all the power and the citizens have none.
That the cops can't break my encryption before the sun destroys earth is not a problem of any sort.
Yeah, most safes can be cracked. Others destroy the contents when cracked. Yes, most hand-written cyphers can ge
Re: (Score:2)
The closest analog to modern encryption is the pyrotechnic safe; attempting to drill it results in an explosion and a fire inside.
Where I can I buy one? Sure I've seen them in movies. Do they actually exist?
If they exist how reliable are they? No criminal is going to want his books and cash to burn out if the neighbors kid crashes a car into a tree on your yard. Or a small earth quake.
I literally can't find anything about them at all. The closest is that using themic lances against normal safes can burn the papers in them.
Perhaps some psycho might rig a bomb inside a regular safe, but that's probably enough to get you convicted just f
Re: (Score:2)
Doctrine about the 5th amendment is that the government is not allowed to force you to create evidence (by speaking or writing in answer to a question). It is not considered to protect already existing evidence (your diary in a lockbox).
[citation needed]
Not disagreeing, but would really like to read something halfway authoritative.
Re: (Score:2)
https://www.law.cornell.edu/an... [cornell.edu] indicates that the protection is against testimony. I assumed (but did not clearly indicate) that they already know you have a diary in a lockbox, and in fact where the lockbox is, at which point what they need is a warrant, not your testimony. If they don't know about it, then you telling them about it would be testimony.
That said, the phrasing I originally used was based on http://lawcomic.net/guide/?p=2... [lawcomic.net] and the discussion on previous pages, and could probably be expre
Re: (Score:1)
Doctrine about the 5th amendment is that the government is not allowed to force you to create evidence (by speaking or writing in answer to a question). It is not considered to protect already existing evidence (your diary in a lockbox). There's been a kerfuffle lately about whether requiring you to decrypt some already existing piece of data constitutes creating evidence or merely accessing existing evidence. However it is not inconceivable that an actually accurate mind reader could be considered "accessing existing evidence", just like reading your fingerprints, dna, or blood content.
The Supreme Court already outlawed passive IR scanning without a warrant, as using new tech to "see through walls" was not envisioned. So now there's a traditional concept of privacy barrier that new tech cannot cross, even if purely passive and from a public area.
What is really scary is what they might want to do with a warrant. In that case, I would submit the 5th Amendment prevents an involuntary brain scan, even with warrant.
Re: (Score:2)
As I recall, the key factor of that decision was that IR scanning was not widely available to the public, and the idea was that the cops shouldn't have too much more capability than normal people without going through due process. http://abcnews.go.com/US/story... [go.com]
Re: (Score:2)
Self-incrimination would be EVEN MORE prevalent in raw thoughts as opposed to vocalizing.
Retreiving your password via a non-invasive mind probe is no different in terms of its function as evidence than a DNA test.
It even avoids the issues with imagined crimes, and fantasy crimes, and misremembered events, vs real ones etc, because its a simple fact.
If the password they read out of your mind unlocks your phone, then they are into your phone. And the evidence there is no different from any other evidence. If such a technology existed, I suspect it would be allowable, at least for the limited use
Re: (Score:1)
I would argue it is time to take up arms against a government with mind reading tech. That is too much power, even for a democratically elected government.
Re: (Score:2)
I would argue it is time to take up arms against a government with mind reading tech.
And then what? Burn the existing tech, ban research into it, and hope foreign country X doesn't secretly have it?
I agree there is some pretty messed up stuff that could (would) happen in such a world, but I figure mass-proliferation of the tech to everyone would be the only possible stable outcome of such a development.
Re: (Score:2)
My guess is in the days before the WW2, they would have had difficulty in breaking ciphers too.
They didn't usually need to break them if they could get a warrant to search the space you kept the key.
THAT is what has changed. Up until now, sure they might not be able to simply "break" the encryption easily simply when presented with encrypted materials, but law enforcement could always get the keys with a warrant if they knew where you kept them.
Remember this is *law enforcement* not international espionage. Law enforcement historically had the means to break any criminal's use of 'encryption', becaus
Re: (Score:2)
Outlawing encryption may mean average citizens won't have it, but it'll be the beginning of an enormous arms race between govts and citizens. The War on Encryption, yes, will make the War on Drugs seem easy in comparison.
One factor at work is that justices obviously aren't going to bother to learn about anything that wasn't around when they started law school, so it's going to take quite a few years to fix that.
Re: (Score:2)
It is actually more (and older) than that. It is a war over who owns the device. This is a continuance of the war over who controls the operating system of the devices. Even in the current state, they can ship me the device in whatever state THEY want it in (they being either the gub'ment or the carrier or the device manufacturer) but the shit is still mine. Stop trying to control what I put on my own fucking devices. This is absolutely the wrong battle that is being fought. Separate the damn code from hard
Overturn States' Rights? (Score:4, Insightful)
So, when will a California resident be able to purchase a non CARB compliant motor vehicle?
Re: (Score:3)
it's economic pull
Enjoy teaching your kids out of Texas Board of Education approved textbooks.
Re: (Score:2)
Re: (Score:2)
Re: (Score:3)
I will however point out that the CARB regulations have done a lot to improve and maintain the air quality over the years. The air in LA would look like what they have in Beijing now if it wasn't for those regulations. That said I do have issues with the CARB regulations myself, I have a 35 year old car that I could upgrade its fuel and intake system to something more efficient and cleaner but none of the new
Re: (Score:3)
I think he is saying the car is exempted, but he is not allowed to modify it, even if his modifications would make it less polluting.
Re: (Score:2)
Correction (Score:2)
Re: (Score:2)
My car was 29 and due for what would have been its last smog test when the Govenator screwed it all up. They also closed the loophole where you could take the car out of state for the mods, if the car was originally manufactured for CA then it MUST have all the smog equipment installed and functioning that it w
Re: (Score:3)
Unlike the right to be secure in your effects, there is no constitutional right to buy a car with any particular characteristic, including a high level of emissions. Therefore the Feds have an important say in the encryption debate, but in car emissions, much less so.
Since the answer about CARB compliance isn't found in the bill of rights, it is just up to legislators to decide how they want to run their states. And from a practical standpoint, one can argue that non-CARB compliant cars cause bigger prob
Re: (Score:3)
You seem confused. The US Constitution doesn't grant rights (although it does list some specific ones, just for good measure), it grants powers to government. Where a power is not specifically given, it is left with the states or the people. The right to free speech exists because the government is given no power to regulate speech, not because it's listed in the Bill of Rights. That's only there to reinforce that fact.
The f
Re: (Score:2)
"Exactly what power allows the Feds to regulate encryption, per se, more than car emissions? "
The 2nd and 4th Amendments, each in combination with the 14th Amendment.
Re: (Score:2)
Re: (Score:2)
"the Feds have an important say in the encryption debate, but in car emissions, much less so." Huh? Exactly what power allows the Feds to regulate encryption, per se, more than car emissions?
That whole privacy thing. You know, Constitutionally protected right, and all?
Re: (Score:2)
You'll need to provide some logic to support that claim.
Re: (Score:3)
Since the answer about CARB compliance isn't found in the bill of rights,
Better than the Bill of Rights, it's in the Constitution itself. Article IV, Section 2: "The Citizens of each State shall be entitled to all Privileges and Immunities of Citizens in the several States."
If I can purchase, possess and operate a non CARB compliant vehicle in any one state, California cannot prevent me from doing so there. As that applies to phones, I could just hop over to Nevada or New Jersey), purchase a phone with uncrippled encryption and bring it home.
Re: (Score:1)
Re:Overturn States' Rights? (Score:4, Funny)
Re: (Score:1)
They can buy it when it no longer spews poison into the air that we all have to breathe. I don't believe encryption has that problem.
Re: (Score:3)
So, when will a California resident be able to purchase a non CARB compliant motor vehicle?
Hopefully, approximately the same time it becomes OK for me to crap on your lawn. Your encrypted messages to your wife don't harm me or the state. Your high-pollution vehicles make it harder for me to breathe.
States Rights! (Score:1)
But States' Rights!
Screamed the Libertarians. Oh wait, they like this, never mind.
Re: (Score:2)
States don't have "Rights" they have "powers".
I don't like anything that comes out of Washington DC. You can be sure that the content of the bill serves the best interests of the corporations, even if there are some unintended consequences which end up benefiting the average person.
Name of the Bill (Score:2)
The bill is 2 or 3 sentences, you can READ it (Score:2)
This bill is written like a state bill - you can read it. It's only a few sentences. This isn't 1,000+ pages "we have to read it to find out what's in it" Obamacare.
"have to PASS it to find out what's in it" (Score:2)
Obviously I meant to write "have to PASS it to find out what's in it". Apparently I have trouble saying something so Pelostupid even when I'm trying to.
Re: (Score:2)
Your concern is duly noted, citizen. But fear not. By the time it gets out of committee and actually makes it to the floor of either house, it will have at least 1,000 pages of amendments tacked onto it. Thank you for bringing this to our attention.
Sincerely,
Your Congresscritter
E.N.C.R.Y.P.T. (Score:1)
Ensuring
National
Constitutional
Rights of
Your
Private
Telecommunications
Do they have staffers who work on this sort of naming stuff?
Re: (Score:2)
You'd think we settled this in the 90's (Score:5, Informative)
Encryption source code is First-Amendment-protected speech [wikipedia.org].
(See the Criminal Investigation section)
Don't these legislators (or anyone on their staffs) know anything about what they're attempting to restrict?
Re: (Score:2)
You seem to think they care about such things.
I remain convinced that law-makers, or law-enforcement are particularly concerned with Constitutionality these days.
Powers that started as "yarg, terrorists" are now for basic law enforcement, and increasingly the push to say you have no such rights is what we're seeing.
Governments are increasingly deciding any hindrance to law enforcement, including such pesky things as the law and your rights, are unacceptable.
And people are saying "well, as long as you're kee
Nothing is settled in the US legal system (Score:2)
Encryption source code is First-Amendment-protected speech [wikipedia.org].
There are all kinds of holes in your argument, unfortunately. The Supreme Court could hear a new case testing this and completely invalidate the previous ruling or issue a new ruling that partially invalidates it under certain circumstances. It could be legally ruled that while the source code itself has 1st amendment protection, the actual using of the code does not. And if you don't think that's possible, you definitely don't pay a lot of attention to the US legal system where literally anything can ha
Maybe this IS about the tech companies after all (Score:2)
Maybe the tech companies are even more central to this than it looks. Obviously, they would be behind a federal bill to protect themselves from having to fork products, even if it wasn't the right thing to do.
But there's just TONS of stories about how poor law enforcement is constantly unable to break into phones. There's no stories about this on PCs, even though that's where huge amount of the data are, and have been for many years.
The difference? PC and its competitors have always been open platforms.
Re: (Score:2)
Shoes are used a lot in crimes, too. Perhaps these states would feel it necessary to put radio transmitters in all shoes sold within their jurisdiction, you know, because TERRORISTS and PEDOPHILES!
Re: (Score:2)
Re: (Score:2)
Stupid is as stupid does (Score:2)
Problem already solved (Score:2)
Just ship the China version of cellphones to the US. Problem solved.
Short-sighted (Score:2)
NOTE TO MODERATORS (Score:1)
Moderators, please note that many of the comments in this thread are a troll replying to himself to make it appear like a conversation. It's one jackass who posts this type of spam on a regular basis, replying to himself as AC. And, of course, he never says anything of substance, just one line nonsense.
Here's one example: http://it.slashdot.org/comments.pl?sid=8657315&cid=51359929 [slashdot.org] (posting about how Republicans want people to die)
Another example: http://tech.slashdot.org/comments.pl?sid=8685139&cid= [slashdot.org]