Slashdot Mirror
Iran Forces Messaging Apps To Move Data To Iranian Servers (techcrunch.com)
An anonymous reader writes: According a report from Reuters, the Iranian government wants to be able to track private and semi-private conversations on messaging apps, and has given companies behind popular messaging apps one year to move their data onto servers in Iran. As it stands, many social networks are already blocked in Iran, and now the government wants to control even more online communication platforms. Apps like WhatsApp and Telegram, which have become incredibly popular in Iran, allow users to communicate with no government control. With Telegram, users can contact hundreds of people by creating groups. Now, even though WhatsApp for example is required to move their data to Iranian servers, it's unlikely the government will be able to intercept messages from the app since it features end-to-end encryption. WhatsApp can't even read the content of communications -- only WhatsApp users can decrypt the messages in their conversations. Apple's iMessage also features an encrypted messaging protocol, and Telegram does too, but users need to start "secret conversations" with end-to-end encryption.
And at a push of a button, the government can shut it all down.
Never answer an anonymous letter. - Yogi Berra
LOL. This is Iran. If they can't get the data unencrypted, there will be no WhatsApp allowed in Iran.
When US companies refuse to follow EU directives and laws, people here complain that the US is forcing their laws and practices on the EU. If US companies refuse to comply with Iran's demand for surveillance and censorship, will you likewise claim that the US is forcing their laws and practices on Iran?
Um, what does this mean?? This headline doesn't make me want to read the article. This is really like something from Arstechnica written by an embearded hipster (ie. the wrighter has a very bushy beard, and ****thick****, black glasses). It makes perfect sense to this person.
The *companies behind popular messaging apps* should respond with free VPN and proxy services built into the app. But they need to extract all their personnel from the country first.
“He’s not deformed, he’s just drunk!”
Key exchange is still a weakness of public key systems used in E2E encrypted messaging services. The messaging servers act as public key "phone books" necessary to find the message recipient's key. We inherently trust the messaging service not to substitute government MITM keys that later forward the message to the intended recipient.
How much can we trust those "phone books" when the government has physical access to those machines?
The Iranian government will learn that only mindless conversations will be easy to intercept unencrypted. Maybe, even those will be encrypted by uses just to drive Big Brother a bit nuts. If the government shuts Internet messaging down, peer to peer networks will pop up. They can't stop technology completely.
Ya right. I will believe that when I can throw one of our dairy cows across the Mississippi River :cough:u: other :cough:s: countries :cough:a:
.
There's a way in. They know what it is. It's very probable they have your keys and of course, they will have your password for the service too. So ya, they can get into your data, and if you're in Iran, you have to know damn well the government is going to be all over every single bit that goes into or out of those servers. Same is more than likely true in some
This is an ages old debate between encryption and wiretaps... individuals want security, governments want the info.
Iran wants....it's good to want.
Then Iran will shut that down too, and if they're Iranian, they'll be killed.
No one is complaining ?? I think you've missed a few articles, and news stories. Lots of people and services are complaining, but as per normal, none of the Powers That Be (PTB) give a shit or are listening.
errr....umm...*whooosh* *whoosh* Is this thing on ?
The official reason is different than the summary states:
"Foreign messaging companies active in the country are required to transfer all data and activity linked to Iranian citizens into the country in order to ensure their continued activity,"
And honestly, that's a good lie if it even is one. Iran is not on the good side of the USA and knows that if their citizens and businesses rely on US services, those can be shut down at any time. Moving them into the country is, frankly speaking, something that I would have recommended to them as a consultant. If you cannot rely on your third party providers, move the services in-house. It's pretty basic.
That said, of course it also makes surveilance easier. But again, the question for Iran may not have been "do we want surveilance of our citizens?" but more akin to "do we want the NSA or our own secret service monitors our citizens?" to which the answer is obvious.
You see, if the infrastructure is within Iran, they gain the ability to block out NSA surveilance, even that built in to the Apps through backdoors, by shutting down the outgoing Internet connections. If things get ugly again, you would want to at least have that option.
It sickens me that this is painted as a "state government vs. freedom" issue when it is almost certainly more a question of two tyranical police states fighting for control.
Assorted stuff I do sometimes: Lemuria.org
Why, with our being about 40 years past Compuserve and Genie, are we still dependent on "servers" to allow our little hand held supercomputers to communicate? Just asking...
Just include this warning: "Warning! The government requires we give them your info to scan at their leisure to aid in their remining in power over you."
Unless the INSL (Iranian National Security Letter) includes the term it must be kept secret. Sucks to ne them.
Haha, they have no First, Fourth, and Fifth Amendment to prevent all this!
(-1: Post disagrees with my already-settled worldview) is not a valid mod option.