ioc.exchange is one of the many independent Mastodon servers you can use to participate in the fediverse.
INDICATORS OF COMPROMISE (IOC) InfoSec Community within the Fediverse. Newbies, experts, gurus - Everyone is Welcome! Instance is supposed to be fast and secure.

Administered by:

Server stats:

1.3K
active users

@matthew_d_green This does beg the question if there is any equivalent in US law to technical capability notices? Or maybe the UK and China are outliers? ¯\_(ツ)_/¯

@gruff @matthew_d_green the US has "national security letters" and the Pateiot Act, has used them to, for instance, install fibre beam splitters in telephone exchanges in secret. Pre-Snowden : en.m.wikipedia.org/wiki/Room_6

en.m.wikipedia.orgRoom 641A - Wikipedia

@matthew_d_green To ask a very basic question: What is the meaning of a "U.K. user" in the case of a mobile device interacting with a cloud service? Is it someone with a U.K. billing address, or someone with a U.K. phone number, or someone currently within the boarders of the U.K. at any given moment, or something different?

On a more general note, the existence of this law seems like a good further argument not to trust any #E2EE implementation whose client software is not open source, ideally with 3rd party audits and reproducible builds. And with the way the App Store works, can one ever know exactly what one is getting?

@matthew_d_green Thank you, great article. Do you think governments will attempt to get access to on device scanning now that Apple has recently built the ‘Enhanced Visual Search’ feature?

@ridogi @matthew_d_green and Google is doing "blur your nudes" in device too. One legal instrument later and it'll send them off device.
For the sake of the children, of course.