Stories
Slash Boxes
Comments

SoylentNews is people

SoylentNews is powered by your submissions, so send in your scoop. Only 12 submissions in the queue.
posted by cmn32480 on Monday January 25 2016, @11:15AM   Printer-friendly
from the why-can't-they-ever-learn dept.

Following a recent attempt in New York to legislate backdoors or ban encrypted devices, a California lawmaker is trying to do the same. Only this time, the boogeyman is human trafficking:

A second state lawmaker has now introduced a bill that would prohibit the sale of smartphones with unbreakable encryption. Except this time, despite very similar language to a pending New York bill, the stated rationale is to fight human trafficking, rather than terrorism.

Specifically, California Assemblymember Jim Cooper's (D-Elk Grove) new bill, which was introduced Wednesday, would "require a smartphone that is manufactured on or after January 1, 2017, and sold in California, to be capable of being decrypted and unlocked by its manufacturer or its operating system provider."

If the bill passes both the Assembly and State Senate and is signed into law by Gov. Jerry Brown (D), it would affect modern iOS and Android devices, which enable full-disk encryption that neither Apple nor Google can access. AB 1681's language is nearly identical to another bill re-introduced in New York state earlier this month, but Cooper denied that it was based on any model legislation, saying simply that it was researched by his staff. He also noted that the sale of his own iPhone would be made illegal in California under this bill.

Cooper himself, a 30 year veteran with the Sacramento County Sheriff's Department, told Ars that allowing local law enforcement to access unencrypted phones through the warrant process was not the same thing as allowing the National Security Agency or the CIA free rein. He also noted that "99 percent" of Californians would never have their phones be implicated in a law enforcement operation, implying that they should not have to worry.

Engadget puts it best: "The bill would put every Californian's digital security at risk to prosecute a few pimps."

In other Crypto War news, NSA Director Admiral Mike Rogers recently said that "encryption is foundational to the future," staking an opposite position from that of FBI Director James Comey.


Original Submission

 
This discussion has been archived. No new comments can be posted.
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
  • (Score: 0) by Anonymous Coward on Monday January 25 2016, @12:21PM

    by Anonymous Coward on Monday January 25 2016, @12:21PM (#294304)

    It would be lovely if Apple were to say, OK, so iPhone cannot be sold in California and New York, because those states have stupid lawmakers.

  • (Score: 3, Interesting) by takyon on Monday January 25 2016, @12:26PM

    by takyon (881) <{takyon} {at} {soylentnews.org}> on Monday January 25 2016, @12:26PM (#294308) Journal

    Together they comprise over 18% of the U.S. population [wikipedia.org].

    These two states don't have a monopoly on stupid lawmakers. Other states will be watching these outcomes closely and introducing their own legislation.

    Apple is not a fan of your privacy. If privacy can help them market their encrypted phones, then privacy is good. If privacy is banned, so be it.

    --
    [SIG] 10/28/2017: Soylent Upgrade v14 [soylentnews.org]
    • (Score: 3, Interesting) by opinionated_science on Monday January 25 2016, @01:53PM

      by opinionated_science (4031) on Monday January 25 2016, @01:53PM (#294326)

      the UK introduced a "Tell us your password or you'll rot in jail" law. Here in the US, hasn't the SC already ruled, they cannot compel your password (5th amdt).

      I suspect that backdoors with a warrant will be the flag carrying to get past the 4th amendment.

      Fortunately, for us all, the PGP code was already ruled protected by the 1st amendment, so I suspect these laws will not last long.

      Am I too optimistic?

      • (Score: 3, Informative) by takyon on Monday January 25 2016, @02:02PM

        by takyon (881) <{takyon} {at} {soylentnews.org}> on Monday January 25 2016, @02:02PM (#294329) Journal

        The issue is not fully tested:

        http://www.uclalawreview.org/the-fifth-amendment-encryption-and-the-forgotten-state-interest/ [uclalawreview.org]

        http://arstechnica.com/tech-policy/2015/09/forcing-suspects-to-reveal-phone-passwords-is-unconstitutional-court-says/ [arstechnica.com]

        Without this capability, the authorities are trying to get suspects to cough up their passwords instead. The Supreme Court has never ruled on the constitutionality of the issue. There's been a smattering of varying court rulings nationwide on the topic. In 2012, a federal appeals court said that forcing a child-porn suspect to decrypt password-protected hard drives would amount to a Fifth Amendment violation.

        In the latest case, the SEC is investigating two former Capital One data analysts who allegedly used insider information associated with their jobs to trade stocks—in this case, a $150,000 investment allegedly turned into $2.8 million. Regulators suspect the mobile devices are holding evidence of insider trading and demanded that the two turn over their passcodes.

        The defendants balked at supplying their passcodes, saying the Fifth Amendment protected them. The judge agreed and said that the government was going on a fishing expedition

        --
        [SIG] 10/28/2017: Soylent Upgrade v14 [soylentnews.org]
        • (Score: 5, Interesting) by Runaway1956 on Monday January 25 2016, @02:38PM

          by Runaway1956 (2926) Subscriber Badge on Monday January 25 2016, @02:38PM (#294340) Journal

          First link, sixth paragraph. That dude is twisting logic beyond recognition. A password cannot be considered either a key, or a combination? It most certainly is a combination, in that it resides in your head, and nowhere else. Forcing it out of your head requires torture, or some equally compelling coercion. A physical key, on the other hand, only require physical access - that is, if you're arrested, the cops can search you, and take the keys. An encryption key, on the other hand, can only be found inside of your head, unless you have committed it to paper, in which case, you're screwed. More likely, that encryption key has been saved to a flash drive, in which case, if it is on your person, you're screwed again. If it is well hidden, then maybe you're screwed, and maybe you are not.

          The whole rationale around the state's ability to access an encrypted volume is entirely beside the point. Balancing the state's "needs" with the individual's RIGHTS is a meaningless exercise. The entirety of the Constitution of the United States is concerned with limiting the power of government, not empowering government.

          But, let's consider that "balancing" nonsense for a moment. The state can lock it's secrets away in musty old buildings, encrypted, on servers behind locks, and guarded by armed guards. The private citizen? Probably can't afford the armed guards, may or may not have a decent lock and key, but he can most certainly afford good encryption. Balance? Well, if the state pays for the citizen to buy the very best locks and vaults and armed guards, then we might have "balance".

          Let us remember, that just like police interactions, every single interaction of a prosecuter, detective, or investigator with a private citizen is an ANTAGONISTIC interactin. Cops don't waste their time stopping you to wish you a happy birthday, or some other such nonsense. When any of those aforementioned people barges into your life, they intend to imprison you, if possible. There is no "balance" between citizen and state. Be paranoid - they are out to get you. And, the constitution limits their power to get you.

          He goes on to blather about the "doctrine" of the fifth amendment, stating that the 5th only applies when three conditions are met. More bullshit. Bottom line is, government can only get information out of your head by means of coercion. Government is forbidden to coerce testimony from you, end of story. If government is so very desparate to gain whatever information is hidden away in your encrypted volume, they can offer IMMUNITY from prosecution. Or - they might instead do some actual investigative work. Imagine - police actually solved crimes long before there were computers. Perhaps police weren't as reliable as we might wish, but they did solve crimes with old fashioned detective work.

          Balance. Tell the state's prosecutors to take a hike. Unless they live in Dick Cheneystan, torture and other forms of coercion are not permitted.

          --
          I said what I said. - Sophie Cunningham
          • (Score: 2) by takyon on Monday January 25 2016, @02:48PM

            by takyon (881) <{takyon} {at} {soylentnews.org}> on Monday January 25 2016, @02:48PM (#294343) Journal

            The Supreme Court doesn't always do what is "right". It is divided politically and by interpretation of the law and Constitution. I would not be surprised if 1st, 4th, and 5th amendment protections for encryption are struck down by the Court. It will (could) be like "oh, it's not really speech, law enforcement has a warrant, and you're not being forced to incriminate yourself." And then another freedom will be dead.

            If Crypto War II is lost, many people will continue to use encryption in various ways. You'll just have to evaluate whether it is worth it to resist law enforcement if you should be so unlucky to cross paths with them.

            --
            [SIG] 10/28/2017: Soylent Upgrade v14 [soylentnews.org]
  • (Score: 2) by Entropy on Monday January 25 2016, @03:53PM

    by Entropy (4228) on Monday January 25 2016, @03:53PM (#294394)

    Same with car engines, to avoid stupid CA emissions that screws up everything else.