- Discord allegedly used to lure teenager boy to Florida trailer housing sex slave Tuesday 7:36 PM
- Millie Bobby Brown has the wrong take on ‘You’ Tuesday 6:42 PM
- Why is Tony Stark missing from the ‘Spider-Man: Far From Home’ trailer? Tuesday 6:00 PM
- The creepy texts this woman received are eerily similar to Netflix’s ‘You’ Tuesday 4:20 PM
- Roku defends decision to host InfoWars amid online backlash (updated) Tuesday 4:04 PM
- Pump yourself up for ‘Game of Thrones’ season 8 with this masterfully edited hype video Tuesday 2:35 PM
- NBC asked reporters not to call Steve King’s comments ‘racist’ Tuesday 2:21 PM
- Disney files copyright claim on YouTuber’s Darth Vader film—and the creator is devastated Tuesday 2:18 PM
- The ’10 Year Challenge’ isn’t as fun for trans people Tuesday 1:25 PM
- New Nike shoes can be controlled from your smartphone Tuesday 1:06 PM
- Cardi B. jumps on 10-year challenge with high school performance of Lady Gaga song Tuesday 12:28 PM
- Parents, teachers cry foul over Verizon fee hike for popular education app Tuesday 11:57 AM
- Conservative men are kicking and screaming about Gillette’s new toxic masculinity ad Tuesday 11:23 AM
- Mysterio is hot now in the ‘Spider-Man: Far From Home’ trailer Tuesday 10:53 AM
- Netflix hikes prices on all subscription plans Tuesday 10:48 AM
EFF vows to tie up encryption ‘backdoor’ legislation in court ‘for years’
The battle over backdoors has just begun.
After a long wait, a draft of a Senate bill effectively mandating backdoors in encryption in the United States leaked to the public late Thursday night.
The bill, co-authored by Sens. Richard Burr (R-N.C.) and Dianne Feinstein (D-Calif.), directs companies to provide “information or data” to the government “in an intelligible format” when a court orders them to do so. If a company cannot do it—because of encryption—they must offer technical assistance to obtain the data.
Encryption has been at the center of a political storm for several years now, one that’s flared in intensity in the last year as American tech companies like Apple, Facebook, and Google continue to push for mainstream adoption of encryption.
“The first thing that’s going to happen is that any backdoor legislation is going to be tied up in the courts for years.”
In the event the Burr bill passes Congress and is signed into law, the legal challenges will be considerable.
“The first thing that’s going to happen is that any backdoor legislation is going to be tied up in the courts for years,” Nate Cardozo, staff attorney at the Electronic Frontier Foundation, told the Daily Dot. “The EFF is going to lead that effort. So nothing will happen at the beginning.”
A wide consensus of technologists agree that backdoors into encryption—even if they are originally meant specifically for one agency or purpose—create a larger vulnerability that weakens cybersecurity overall.
Burr holds the opposing stance, arguing that legally mandated backdoors do nothing to weaken encryption.
“There is nothing in the draft language of the bill that calls for weaker encryption,” Burr told the Daily Dot in a previous email interview. “I support encryption. I believe it is a priority to keep Americans’ information safe and I also believe that private entities are also subject to U.S. law. When a judge issues an order, we are all required to follow the law.”
While the encryption debate continues to rage in the U.S., other countries have taken steps to settle it. The Dutch government, for example, issued a strong statement against weakening encryption for the purposes of law enforcement.
Simon Crosby, the chief technology officer of the security firm Bromium, told the Daily Dot why he thinks the Dutch model ought to be held up highly around the world.
“The Dutch government’s decision is laudable in light of the fact that back-doored, or weakened encryption has been repeatedly shown to render both organizations and individuals vulnerable to surveillance–whether by government or malicious actors,” Crosby said. “Ultimately, if we make strong encryption illegal then only criminals will have access to strong encryption–which is precisely the opposite of the desired outcome. The encryption genie is out of the bottle, and there’s no putting it back.”
Burr and Feinstein say they are still working on finalizing the language of the legislation. “However, the underlying goal is simple,” the two senators said in a joint statement. “When there’s a court order to render technical assistance to law enforcement or provide decrypted information, that court order is carried out. No individual or company is above the law. ”
Patrick Howell O'Neill is a notable cybersecurity reporter whose work has focused on the dark net, national security, and law enforcement. A former senior writer at the Daily Dot, O'Neill joined CyberScoop in October 2016. I am a cybersecurity journalist at CyberScoop. I cover the security industry, national security and law enforcement.