Slashdot Mirror
Iran Forces Messaging Apps To Move Data To Iranian Servers (techcrunch.com)
An anonymous reader writes: According a report from Reuters, the Iranian government wants to be able to track private and semi-private conversations on messaging apps, and has given companies behind popular messaging apps one year to move their data onto servers in Iran. As it stands, many social networks are already blocked in Iran, and now the government wants to control even more online communication platforms. Apps like WhatsApp and Telegram, which have become incredibly popular in Iran, allow users to communicate with no government control. With Telegram, users can contact hundreds of people by creating groups. Now, even though WhatsApp for example is required to move their data to Iranian servers, it's unlikely the government will be able to intercept messages from the app since it features end-to-end encryption. WhatsApp can't even read the content of communications -- only WhatsApp users can decrypt the messages in their conversations. Apple's iMessage also features an encrypted messaging protocol, and Telegram does too, but users need to start "secret conversations" with end-to-end encryption.
And at a push of a button, the government can shut it all down.
Never answer an anonymous letter. - Yogi Berra
LOL. This is Iran. If they can't get the data unencrypted, there will be no WhatsApp allowed in Iran.
When US companies refuse to follow EU directives and laws, people here complain that the US is forcing their laws and practices on the EU. If US companies refuse to comply with Iran's demand for surveillance and censorship, will you likewise claim that the US is forcing their laws and practices on Iran?
The *companies behind popular messaging apps* should respond with free VPN and proxy services built into the app. But they need to extract all their personnel from the country first.
“He’s not deformed, he’s just drunk!”
The Iranian government will learn that only mindless conversations will be easy to intercept unencrypted. Maybe, even those will be encrypted by uses just to drive Big Brother a bit nuts. If the government shuts Internet messaging down, peer to peer networks will pop up. They can't stop technology completely.
This is an ages old debate between encryption and wiretaps... individuals want security, governments want the info.
Very true... but is there anything on the horizon to deal with the weaknesses of key trust?
No one is complaining ?? I think you've missed a few articles, and news stories. Lots of people and services are complaining, but as per normal, none of the Powers That Be (PTB) give a shit or are listening.
errr....umm...*whooosh* *whoosh* Is this thing on ?
No I don't. I don't need to trust the Signal servers not doing that, I can check the source to see if they do. And I _do_ check the source (and make some minor changes in it like adding encrypted backup) before I compile my own version.
The official reason is different than the summary states:
"Foreign messaging companies active in the country are required to transfer all data and activity linked to Iranian citizens into the country in order to ensure their continued activity,"
And honestly, that's a good lie if it even is one. Iran is not on the good side of the USA and knows that if their citizens and businesses rely on US services, those can be shut down at any time. Moving them into the country is, frankly speaking, something that I would have recommended to them as a consultant. If you cannot rely on your third party providers, move the services in-house. It's pretty basic.
That said, of course it also makes surveilance easier. But again, the question for Iran may not have been "do we want surveilance of our citizens?" but more akin to "do we want the NSA or our own secret service monitors our citizens?" to which the answer is obvious.
You see, if the infrastructure is within Iran, they gain the ability to block out NSA surveilance, even that built in to the Apps through backdoors, by shutting down the outgoing Internet connections. If things get ugly again, you would want to at least have that option.
It sickens me that this is painted as a "state government vs. freedom" issue when it is almost certainly more a question of two tyranical police states fighting for control.
Assorted stuff I do sometimes: Lemuria.org
Why, with our being about 40 years past Compuserve and Genie, are we still dependent on "servers" to allow our little hand held supercomputers to communicate? Just asking...
Just include this warning: "Warning! The government requires we give them your info to scan at their leisure to aid in their remining in power over you."
Unless the INSL (Iranian National Security Letter) includes the term it must be kept secret. Sucks to ne them.
Haha, they have no First, Fourth, and Fifth Amendment to prevent all this!
(-1: Post disagrees with my already-settled worldview) is not a valid mod option.