Follow Slashdot blog updates by subscribing to our blog RSS feed

 



Forgot your password?
typodupeerror
×
Cellphones Privacy Security

France Passes New Bill Allowing Police To Remotely Activate Cameras On Citizens' Phones (gizmodo.com) 132

An anonymous reader quotes a report from Gizmodo: Amidst ongoing protests in France, the country has just passed a new bill that will allow police to remotely access suspects' cameras, microphones, and GPS on cell phones and other devices. As reported by Le Monde, the bill has been criticized by the French people as a "snoopers" charter that allows police unfettered access to the location of its citizens. Moreover, police can activate cameras and microphones to take video and audio recordings of suspects. The bill will reportedly only apply to suspects in crimes that are punishable by a minimum of five years in jail and Justice Minister Eric Dupond-Moretti claimed that the new provision would only affect a few dozen cases per year. During a debate over the bill yesterday, French politicians added an amendment that orders judge approval for any surveillance conducted under the scope of the bill and limits the duration of surveillance to six months, according to Le Monde.

"For organized crime, the police can have access to the sound and image of a device. This concerns any connected device: telephone, speaker microphone, computer camera, computer system of a car... all without the knowledge of the persons concerned," French advocacy group La Quadrature du Net said in a statement on Twitter last month, machine translated by Gizmodo. "In view of the growing place of digital tools in our lives, accepting the very principle that they are transformed into police auxiliaries without our being aware of it poses a serious problem in our societies."
In 2021, France passed a bill that would expand the French police force's ability to monitor civilians using drones -- all in an effort to protect officers from increasingly violent protestors, according to French President Emmanuel Macron.
This discussion has been archived. No new comments can be posted.

France Passes New Bill Allowing Police To Remotely Activate Cameras On Citizens' Phones

Comments Filter:
  • by b0s0z0ku ( 752509 ) on Thursday July 06, 2023 @07:06PM (#63663586)
    When black electrical tape is outlawed, only outlaws will have black electrical tape.
    • I was thinking more of a hole in the subject's trouser pockets and underwear!

    • In France, only outlaws have phones that can't be spied upon.

    • by ewibble ( 1655195 ) on Thursday July 06, 2023 @07:16PM (#63663622)

      What about the microphone and GPS.

      This what you get when governments do stuff for the citizens own good.

      Let me see the logic here: Police wrongly shoot person, people protest, police get more power. Now they can hunt you down more easily.

      • Whoosh!

        Anyway ... padded/soundproof/aluminized phone case? Or just a hard battery disconnect switch for when you want to carry the phone with you without it being "always on."

        • Re: (Score:3, Informative)

          by ewibble ( 1655195 )

          Whoosh what? I was not disagreeing with you, I knew you where being sarcastic, just saying we need more.

        • Anyway ... padded/soundproof/aluminized phone case? Or just a hard battery disconnect switch for when you want to carry the phone with you without it being "always on."

          Disable very fundamental functionality in your phone for the win!

          hard battery disconnect switch

          What are you smoking? Have you even seen the inside of a modern phone? How are you going to wire in a battery disconnect switch?

      • Police wrongly shoot person, people protest, police get more power.

        The Government first sent this project for discussion in the Parliament on May 13, long before the events you refer to.

        • I am sure it did, but you would have thought that police shooting people would have gave them pause to not increase their powers.

      • by torkus ( 1133985 ) on Thursday July 06, 2023 @08:20PM (#63663806)

        They can pass all the laws they wat, but does the means exist today to do this? Heck, even if you OWN a phone you can't remotely activate the camera/mic without specific software. gps tracking exists, but is currently locked to various management accounts.

        Google, Apple, samsung, etc. would need to write software to include this access ... i'm kind of curious if this brings about a showdown between the law (and France) and the device mfgs.

        In the united states, they already tried to force apple to give police back door access - they refused (it didn't exist - private key encryption) and it was ruled they couldn't be compelled to create one. Now, if they DID push through something like this ... people would be a LOT less inclined to use that device. Or, on the reverse, much more inclined to use a device that allows installing software that can prevent/control/override remote control. i.e. Android +/- some of the boot security etc. that's offered especially by samsung.

        The day someone can get remote access to the camera/mic on my device without my knowledge (and not a hacker/virus that's my own fault) is the day I stop using that device forever. Even on my work phone I refuse to allow location services for any work-related app. I get weekly reminders to turn it on and ignore them weekly. They expect me to be reachable in emergency pretty much 24/7...and if they insist on location tracking i'll insist on compensation for those on-call hours.

        • The day someone can get remote access to the camera/mic on my device without my knowledge (and not a hacker/virus that's my own fault) is the day I stop using that device forever.

          I believe you and I am the same, but I don't think that will be common most people will continue on. But life will become harder and harder to do without a phone, probably won't even be able to do a bank transaction without 2 factor authentication on your phone. Then how will you buy food?

        • by denzacar ( 181829 ) on Friday July 07, 2023 @12:39AM (#63664362) Journal

          You are perfectly trackable simply by mobile tower triangulation, even without a sim-card.

          As for surveillance, police doesn't need "Google, Apple, samsung, etc." to write anything.
          They can setup fake services, networks, carriers... whatever is needed for your phone or computer to connect to and download and install "the update" all on its own.
          Or, even simpler, have you arrested for "disorderly conduct" and dump whatever they want onto your phone while it is in evidence - then later simply construct a parallel explanation [wikipedia.org] regarding how the surveillance software got there.

          The point is not whether the police have the tech to "hack into" people's phones. That's just a question of them hiring people who do.
          It's that they can do so LEGALLY and use any information gathered that way perfectly LEGALLY in any kind of investigation and later in court.

          • by zmooc ( 33175 )

            The first approach you describe would be next to impossible to do without either
            - compromising the CA certificates on your phone (and thus already having access to your phone, e.g. through malware or through the vendor),
            - obtaining control over at least one such a CA (which likely won't suffice thanks to RFC 6844) or
            - obtaining the private keys of the services they'd want to impersonate.
            - compromising the software repository or other vendor services your phone uses

            That would be a gargantuan effort and doing

            • by Pieroxy ( 222434 )

              Or pass a law requiring phone vendors to include such a backdoor for the police. I don't see that going through silently or smoothly though, but I may be very wrong here.

              • by zmooc ( 33175 )

                I believe I already mentioned that option ;)

                compromising the software repository or other vendor services your phone uses

                • by Pieroxy ( 222434 )

                  Compromising includes a level of secrecy and avoiding detection. When it's written into law, it's out in the open I guess...

            • That would be a gargantuan effort and doing so at a large scale would be extremely difficult.

              Luckily for the French police, it will only affect "dozens of cases a year".
              So all is well.

              As I said below, techies often try to outsmart a bullet.
              The law covers any "electronic device" used for snooping and spying on the owner. Method or difficulty of implementation is irrelevant.
              Legality of action is what matters as this covers anything that is definable as an "electronic device".
              Car, computer or electric toothbrush. It is legal to use it to spy and snoop on people.

          • Re: (Score:3, Insightful)

            by AmiMoJo ( 196126 )

            Updates are signed with Google's private key on Android, and I'm sure on iOS too. The whole point of using certificates and signing is to prevent people setting up fake websites and networks that your device blindly downloads from.

            The most likely way they will access your device is via an app you already have. Find an exploit in that, and use the permissions you already gave it. Best not to give chat apps permissions like camera and microphone. Take a photo using the camera app and then import it into the c

            • You are committing a classic techie fallacy - trying to outsmart a bullet.

              Method is as irrelevant as the hand with which a police officer might hold a truncheon while beating in your skull.
              The issue is the legality of action.

              The law allows snooping through "laptops, cars and other connected objects as well as phones".
              I.e. If it is an "electronic device", be it a phone, car, fridge, TV or computer - police can perfectly legally use it to spy on you.
              How they get the access to your hardware (or hardware belong

              • by AmiMoJo ( 196126 )

                The way we keep governments in check is to make it impractical.

                I'm sure French intelligence has some secret zero day exploits, but they aren't going to share them with the police.

                You demonstrably can't stop these kinds of laws, but you can frustrate them by securing everything. It's why default secure and encrypted is so important.

                • While I realize we are talking about France, isn't the UK actively trying to ban E2E? If they pull it off, how many more countries will follow? Quite a few I'm sure.

          • Re: (Score:2, Insightful)

            by thegarbz ( 1787294 )

            They can setup fake services, networks, carriers... whatever is needed for your phone or computer to connect to and download and install "the update" all on its own.

            No your network cannot install anything on your phone without your express permission, and even then they can't do it without a SIM card present.

            The only thing that the police can do is triangulate you based on your IMSI, but even then they'd need to know your IMSI having identified it by other means in the past (typically through your phone number if your SIM is present).

            It's technology, not magic.

          • What you're describing is a whole world more expensive to do than "remotely activate the camera on XYZ phone, please".

            They _could_ do all kinds to you - but they don't because you're not interesting enough to justify the spend. You're still not interesting enough, even if you've quite clearly committed a crime which would see you in jail for at least 5 years. If (under the French system, not the 3rd world kangaroo courts of the US) you were likely guilty of enough crimes for 100+ years on jail, then you _ar

        • Welcome to spyware on apps, especially from companies like Cisco which have been discovered installing back doors in their most expensive and secured systems.

        • "Heck, even if you OWN a phone you can't remotely activate the camera/mic without specific software"
          https://www.reuters.com/technology/exclusive-iphone-flaw-exploited-by-second-israeli-spy-firm-sources-2022-02-03/

          REIGN's âoePremium Collectionâ capabilities included the "real time call recordings", "camera activation - front and back" and "microphone activation", one brochure said."

        • They can pass all the laws they wat, but does the means exist today to do this?

          Yes. It is already built into your phone. You do not have access to it, but the manufacturers, and therefore the government, have access.

      • What about the microphone and GPS.

        In unrelated news, five startups announce plugins to keep all phone radios off until the user actively does something which requires them.

    • Sure, black electrical tape works. But the question remains... what mechanism to they intend to use to remotely activate (and presumably monitor) a random citizen's camera?

      • what mechanism to they intend to use

        Presumably with whatever hacking toolbox they have access to. The law just say they are allowed to do (which I understand as: to attempt).

      • Sure, black electrical tape works. But the question remains... what mechanism to they intend to use to remotely activate (and presumably monitor) a random citizen's camera?

        It's a secret SMS. They send it to your 'phone, it activates the spying.

    • Black electrician tape? What if I don't know any black electricians to get tape?

    • I was thinking that hopefully this will trigger a wave of phones with a physical switch to disconnect the camera and mic. Iâ(TM)m 100% sure small dumb phones that are primarily aimed at being burner phones for drug dealers will do that, hopefully higher end ones will too - or the manufacturers will just pull out of the market.

  • by Opportunist ( 166417 ) on Thursday July 06, 2023 @07:06PM (#63663594)

    An app that stops this from happening. Charge 5 Euros for it and you'll see a flood of downloads from France.

  • Protesting Tip (Score:5, Insightful)

    by crunchy_one ( 1047426 ) on Thursday July 06, 2023 @07:21PM (#63663636)
    Do not bring your phone to a protest. Not just in France, but just about everywhere else in the world too, government agencies sweep up cellphone traffic at protests. Just having your phone on allows you to be located at an event by the tower pings it makes. Stingray devices are cheap and easily available, and are owned and used by many police departments and other agencies, legislation to the contrary be damned.
    • Maybe so, but that tip will pretty much put an end to protesting by those under a certain age. So the government wins either way.

    • OR, turn the damn thing off a long way away from the protests

    • A phone is useful to have at a protest (record happenings, coordinate with others, inform your family about your status, use the lights) so people will continue bringing them.

    • by dargaud ( 518470 )
      Approximate (non-GPS) location of phones is known at all times, it's built into the communication protocol. But how do they activate the cameras remotely ? Wouldn't the phone need to be severely hacked first ? It's not something you can mass-perform on all the phones in an area...
    • They're too useful for coordinating among the protesters, for calling emergency services, and for recording police abuse. There are many commercial Faraday cages available, easily tested., for carrying your phone safely.

    • (At the next anti-cell protest) "Uh, anybody here know how to do this, 'cause I was in charge of shitposting before..."

    • You should get a burner phone. Cellphones are pretty cheap now. Dispose of it when you are done.
  • by test321 ( 8891681 ) on Thursday July 06, 2023 @07:21PM (#63663638)

    A point of view absent from TFS is that this is the modern equivalent of special police setting up microphones at suspects' houses, which has been available to the police for a very long time for serious crime with similar safeguards (approval by a judge).

    • by marcle ( 1575627 )

      Yes, but this doesn't require a case by case warrant. And anyway, just because it's been done in the past doesn't make it right. Warrantless surveillance is fascism.

      • Re:A point of view (Score:5, Informative)

        by test321 ( 8891681 ) on Thursday July 06, 2023 @07:41PM (#63663704)

        I read in the approved document that it needs a case by case warrant, or you play on word on what a warrant is. Here the document: https://www.assemblee-national... [assemblee-nationale.fr] (click "Discussion ..."; then "Texte résultant ..."), see paragraph 85. It needs to be requested by the judge in charge of supervising the investigation (Procureur or Juge d'Instruction) and it needs to be validated by another judge specialized in supervising citizen freedom (Juge des libertés).

    • by flink ( 18449 )

      A point of view absent from TFS is that this is the modern equivalent of special police setting up microphones at suspects' houses, which has been available to the police for a very long time for serious crime with similar safeguards (approval by a judge).

      If you want a more accurate analogy then the special police would have had to have ordered cameras pre-installed in every room in every house so they just had to turn them on. And then made the citizens pay for it to boot.

      Scale, cost, and ease of execution matters. There are lots of things that we consider basic rights that have historically safeguarded not by law but by physics. It was simply impossible or financially ruinous for the government to be everywhere at once in past times. Now that we've invente

      • then the special police would have had to have ordered cameras pre-installed in every room

        Your analogy would work if they asked Google/Apple/etc. to manually add a backdoor into every existing phone. They're not adding vulnerabilities, just plan to exploit existing ones. I think a better analogy is "police allowed to use lockpick and peek through entrance doors".

        • Not a better analogy because they could effectively spy on everyone at any time without being detected. With the advancement of AI how long before they are recording and filming everything through whatever means, back door or hack and using that footage you if you have been "bad".

          The police should be reporting any vulnerabilities to google/apple/etc and getting them to fix it not using it to their advantage. It would be like the police noticing your lock was broken and instead of telling you, saying maybe I

      • They set up the phone taps at the switching offices, much as the NSA did with AT&T at the infamous room 641a where they tapped the fiber optic backbone of AT&T.

    • A point of view absent from TFS is that this is the modern equivalent of special police setting up microphones at suspects' houses

      No it's not. This is the equivalent of the police using *your* microphone against you, and the technical facility to do so means the police have always had access to that microphone.

      There's a world of difference between having to covertly setup something in someone's house, and having the legal authority to simply use something that person owns. This is unprecedented.

  • Nobody trusts the French, especially not the French. You really have to watch these fuckers.

  • I wonder how are they intending to implement this. Somewhere I read about using unpatched vulnerabilities, but then it's just a game of cat and mouse, as I guess Apple/Android would be very proactive in patching this security holes. And those security holes probably depend on being able to install some software like Pegasus or so, then you need to have your phone... borrowed.... by the police for them to be able to install such software on the phone, before they need that...

    It's not like the classic wire
  • ...to their history, which has created so many clever and humane devices, such as the guillotine. You can really see why the French get snarky with their leaders. You can't really see why they can't get good leaders but, Drumph and Bozo Johnson say that this is a universal problem.

    • by Shugart ( 598491 )
      Interestingly enough, the guillotine was invented because it was considered more humane than the execution methods before it. Hanging, decapitation with a sword, Burning for arson, breaking wheel for murder, boiling for counterfeiting, dismemberment for treason. I think the guillotine is more humane than those.
      • I think the guillotine is more humane than those.

        It is. It's also more humane than letting a bunch of fascists run the country, and subsequently run off with all the money.

  • So when are they going to burn the fucking government to the ground?

  • by Shugart ( 598491 ) on Thursday July 06, 2023 @08:29PM (#63663842)
    France called out the army for the retirement age riots. They haven't for these riots which seems actually worse. Anyone know why? I know they are different situations still it's curious.
  • Suspects (Score:5, Insightful)

    by joe_frisch ( 1366229 ) on Thursday July 06, 2023 @09:08PM (#63663926)
    "The bill will reportedly only apply to suspects in crimes that are punishable by a minimum of five years in jail. "

    I expect we will discover that there are lot of "suspects". When you get right down to it you can suspect everyone of having committed a major crime.
    • by Scutter ( 18425 )

      It only affects a few dozen per year, so naturally it makes perfect sense to put the whole country's privacy at risk. You know, for those few dozen cases.

    • The law doesnâ(TM)t mean they are actually _capable_ of turning my phone camera on. And capable of moving it from my pocket into my hands. And capable of hiding the little light that shows the camera is turned on. And capable of extracting images from my phone.
      • To get it into your hands, they could simply call you. the cameria activation light is indeed optional. For some androids, look at these features:

                  https://www.youtube.com/watch?... [youtube.com]

        Among the other popular apps on many phones, most users wouldn't even notice the burden on their batteries or their data charges.

    • "... the new provision would only affect a few dozen cases per year."

      I expect that if anyone would actually like to know if or how it's being abused, it's quite easy.

      Audit the living shit out of their usage claim, like you should.

  • by shubus ( 1382007 ) on Thursday July 06, 2023 @09:35PM (#63663996)
    Hard to imagine a law more ripe for abuse. Just for criminals? Nah! We all know from experience that it will be EVERYONE.
  • Morgan Freeman will help this one time, but consider this his resignation.
  • I mean, technically, how do they intend to actually access the devices' microphones and cameras. I can tell you right now Apple's going to tell the French government to pound sand on this. So what are they going to do, use exploits?
  • The left wing authoritarian playbook is this: Import millions of hostiles. Insist that they don't have to assimilate because that's "racist". 2nd and 3rd gen immigrants are still hostile to host nation. They commit crime out of proportion to their population. They riot when one of their criminals is shot dead. Governments purposefully let riots continue and hold back use of force. Government leaders punish the whole population, enacting authoritarian measures to monitor and control. This is how the l
  • Are the French police proposing to take control of people's phones during protests, presumably to gather evidence to be used against them while they are exercising their democratic rights? Bear in mind that the police in various countries, including France, often use highly provocative strategies against protesters & have been known to plant agent provocateurs among peaceful protests. They can effectively criminalise any protest they like & go after anyone who attended. Getting access to protesters'
  • That which can be abused, will be abused.

  • Also 'Smart' TVs with voice remote do the same thing, as do all voice assistant things.
  • We really need to fight to pass laws banning the use of closed source firmware, like the GSM radio. All phones and PCs are infested with dark spyware devices and the sheeple just accept it.

  • Duct. Tape.

  • And if you do not have a phone that could spy on you, like in the Tarnac affair [wikipedia.org] you are also suspect!

As you will see, I told them, in no uncertain terms, to see Figure one. -- Dave "First Strike" Pare

Working...