zlacker

EFF’s concerns about the UN Cybercrime Convention

submitted by walter+(OP) on 2024-08-10 07:46:45 | 370 points 93 comments
[view article] [source] [go to bottom]

NOTE: showing posts with links only show all posts
◧◩◪
5. walter+jc1[view] [source] [discussion] 2024-08-10 22:07:00
>>acheon+AC
EFF tweet, https://x.com/eff/status/1821672613468569628

  Member States traded away existing human rights safeguards to reach a contrived consensus for a treaty that will endanger journalists, dissenters, human rights activists, and every day people around the world.
Related thread: >>41210110
7. bulatb+KK7[view] [source] 2024-08-13 18:02:35
>>walter+(OP)
This thread with all these comments (the ones up when I wrote this) was posted three days ago. Here's a post that referenced it then: >>41211151

Why is it back on the front page and posted "5 hours ago"? I'm not implying underhandedness or anything but I'd like to know why this happens. Anyone know?

These are the comments it got at the time:

>>41210091

>>41210379

>>41212594

>>41210086

>>41210905

◧◩◪◨
8. dannyo+8M7[view] [source] [discussion] 2024-08-13 18:11:38
>>tptace+sJ7
There has always been a fairly established group of NGOs with similar criticisms at the international level, including EFF (you're more likely to hear these critiques from EFF at HN because ... well, we're a pretty an EFF-adjacent community here.)

Unfortunately, the UN mostly works as a venue for governments negotiating with governments, with accredited NGOs having a position of being tolerated in those discussions, but with no real power. Outside of those tolerated NGOs, influence drops even further.

(When I was at EFF, we did try to get UN official accreditation, but China would consistently veto it. There are other digital rights groups that have been accepted though, and we worked very closely with those. The full list of NGOs are here: https://en.wikipedia.org/wiki/List_of_organizations_with_con... )

◧◩
13. alephn+LU7[view] [source] [discussion] 2024-08-13 18:57:04
>>comman+xT7
> Looks like, unsurprisingly, the resolution is more about mandating censorship than it is about curbing actual crime

That is a fairly bad take tbh.

I mentioned this in my previous comment about this treaty, and the primary driver is the fact that most countries (especially China, Russia, Singapore, South Korea, Saudi Arabia, UAE, Iran, India) are NOT parties of the Budapest Convention because of the Censorship or Surveillance portions.

Now that offensive security capabilities have proliferated, some amount of norms are required (which is what Article 12, 13 and 17 touch on), but the countries listed above will not budge on their censorship or surveillance stance.

This treaty is itself is a result of the Track 1.5 Dialogues around cyberwarfare happening between the 5 Eyes and China [1][2] after tensions became dangerously bad in the early 2020s.

If letting China continue their Great Firewall means we can formalize the rules of engagement for gray-zone operations using a third party (Appin/India, LockBit/Russia, ChamelGang/China or NK), so be it.

The UN treaty is superseded by American jurisdiction anyhow.

> future of a free internet

The internet was never truly free. Access was always arbitrated by telcos (and a major reason why the tech industry has been a major donor to the EFF) who themselves are strongly regulated by governments.

The difference is, the internet isn't only a Western project anymore, and consensus will need to be formed with other nations, unless we want to end up forming regionalized "internets"

[0] - https://news.ycombinator.com/item?id=41210110#41211961

[1] - https://www.chathamhouse.org/about-us/our-departments/intern...

[2] - https://www.idcpc.org.cn/english2023/bzhd/202406/t20240618_1...

◧◩
15. ziddoa+HW7[view] [source] [discussion] 2024-08-13 19:05:51
>>bulatb+KK7
Second chance pool

>>26998308

>HN's second-chance pool is a way to give links a second chance at the front page. Moderators and a small number of reviewers go through old submissions looking for articles that are in the spirit of the site—gratifying intellectual curiosity—and which seem like they might interest the community. These get put into a hopper from which software randomly picks one every so often and lobs it randomly onto the lower part of the front page. If it interests the community, it gets upvoted and discussed; if not, it falls off.

◧◩
21. fngjdf+Oa8[view] [source] [discussion] 2024-08-13 20:25:00
>>comman+xT7
Does it actually mandate any censorship/data collection, or does it just mandate that collected data must be shared? I tried reading the actual PDF[0] but I don't really want to read the whole thing

[0] https://documents.un.org/doc/undoc/gen/v24/055/06/pdf/v24055...

22. fngjdf+2b8[view] [source] 2024-08-13 20:26:07
>>walter+(OP)
link to the draft: https://documents.un.org/doc/undoc/gen/v24/055/06/pdf/v24055...
◧◩◪◨
28. alephn+si8[view] [source] [discussion] 2024-08-13 21:08:37
>>fngjdf+4g8
> None of what you wrote here is an argument for mandating data collection

Data Collection was one of the primary reason why Russia, China, India, Singapore, and other nations did not become parties to the Budapest Convention (the precursor to this treaty) [0][1]

Most nations other than the US, Canada, EU, and Japan mandate collection and retention of metadata by ISPs and Online Services, and this was a major sticking point that lead to the inefficacy of the Budapest Convention.

> Those two articles are unrelated to your points here

I just gave links to the currently ongoing Track 1.5 dialogues to show the ongoing diplomacy work that has started over cybercrime in the early 2020s.

[0] - https://www.uscc.gov/sites/default/files/Research/China%20In...

[1] - https://ccdcoe.org/uploads/2018/10/InternationalCyberNorms_C...

◧◩◪◨⬒⬓⬔
40. dannyo+5D8[view] [source] [discussion] 2024-08-14 00:01:44
>>gjsman+4R7
So, just to clarify something here: unless they've radicalised a lot since I've left, EFF doesn't think that DRM should be outlawed. It thinks that governments shouldn't outlaw their citizens from talking about how to circumvent DRM, or criminalize the bypassing of DRM for lawful purposes. As I mentioned in my other comment, the anti-circumvention statutes of the DMCA were controversial enough to fail to pass in the US when they were introduced as part of the original 90s copyright reforms, and were only introduced in the US after they were successfully inserted into the WIPO Copyright Treaty. Those provisions have been pretty controversial ever since, and there have been multiple attempts by many groups and industries to limit the damage since then. (The Copyright Treaty itself can be interpreted to permit circumvention for purposes of fair use or other exceptions and limitations on copyright, and the limitations on individuals communicating about how to circumvent DRM may well be unconstitutional in the US -- the courts haven't really ruled on this.)

EFF and partner groups often contribute to government and international proposals (a hundred-or-so of them have been involved in the cybercrime treaty process for many years https://www.eff.org/deeplinks/2024/01/joint-statement-propos... and I believe got it to a fairly good place before a last-minute push by some states to introduce more surveillance into it.)

You don't really get to hear about the compromises, because you don't really need to kick up a fuss about something that has worked out okay -- and even if you do post about the positive fine print, nobody sends such exciting documents to the front page of Hacker News.

41. walter+7E8[view] [source] 2024-08-14 00:12:23
>>walter+(OP)
>>41237879

  When I was at EFF, we did try to get UN official accreditation, but China would consistently veto it.. I was EFF's international activist and later international director for a number of years.. more of the work than you'd imagine has a global side to it. This has been true since the days of [DMCA].. elements of which were rejected by the US Congress in the mid-Nineties, then policy-laundered through WIPO into the 1996 Copyright Treaty, which meant that it had to become law after the US Senate consented to it in 1999. (Treaties don't need the support of both houses in the US). EFF and other orgs at the time learned the lesson that regional and international agreements can often be an end-run around local democracy or norms -- and that local laws (from the DMCA to the GDPR) can have wider ramifications on a global network..

  EFF and partner groups often contribute to government and international proposals (a hundred-or-so of them have been involved in the cybercrime treaty process for many years [1] and I believe got it to a fairly good place before a last-minute push by some states to introduce more surveillance into it.)
[1] https://www.eff.org/deeplinks/2024/01/joint-statement-propos...

Earlier HN threads:

UN Cybercrime Convention To Overrule Bank Secrecy, 40 comments, >>41221403

UN cybercrime treaty unanimously approved, 50 comments, >>41210110

◧◩◪
42. walter+nF8[view] [source] [discussion] 2024-08-14 00:25:11
>>anders+Qe8
Talking points: >>41222487

Critique by 20 NGOs: https://www.eff.org/deeplinks/2024/01/joint-statement-propos...

Further analysis needed.

◧◩◪◨⬒⬓⬔⧯
43. walter+yJ8[view] [source] [discussion] 2024-08-14 01:06:39
>>dannyo+5D8
Thanks for the valuable history lesson!

> even if you do post about the positive fine print, nobody sends such exciting documents to the front page of Hacker News.

>>41241226

◧◩◪◨⬒⬓
44. bdw520+rN8[view] [source] [discussion] 2024-08-14 01:52:17
>>tptace+mp8
Based on the Wikipedia article[0], it seems clear that the Supreme Court can declare a treaty unconstitutional just as it can with a federal statute. The president also appears to have the power to unilaterally withdraw from treaties whenever he wishes and treaties don't take effect without an act of Congress implementing them. In other words, the treaty power is very weak under US law. In short, the US government cannot be bound by any treaty against the will of the people's elected representatives. The fears motivating support for the Bricker Amendment[1] during the Eisenhower administration seem to have been unfounded.

[0]: https://en.wikipedia.org/wiki/Treaty_Clause

[1]: https://en.wikipedia.org/wiki/Bricker_Amendment

◧◩
55. walter+3l9[view] [source] [discussion] 2024-08-14 08:29:07
>>bulatb+KK7
> I'd like to know why this happens

Reviewed by humans: https://news.ycombinator.com/pool

◧◩◪◨⬒⬓⬔⧯▣▦
79. cma+gca[view] [source] [discussion] 2024-08-14 15:26:28
>>tptace+XR9
Not talking about that aspect (supremacy of it vs constitution), but this and related stuff with treaties vs federal law:

> The enforceability of treaties was further limited in the 2008 Supreme Court decision in Medellín v. Texas, which held that even if a treaty may constitute an international commitment, it is not binding domestic law unless it has been implemented by an act of Congress or is itself explicitly "self-executing".[26] Law scholars called the ruling "an invisible constitutional change" that departed from both longtime historical practice and the plain language of the Supremacy Clause.[27]

https://en.wikipedia.org/wiki/Supremacy_Clause

◧◩◪◨
86. burkam+Ika[view] [source] [discussion] 2024-08-14 16:13:07
>>some_r+dfa
I don't know, but that isn't relevant to this conversation. Slavery was legal for the vast majority of history, but we still all agree today that freedom from slavery is a valid human right. "Due process" itself is a relatively new concept. All human rights were routinely violated for most of history, that's the whole point of enumerating them and discussing them. It's very new that any of these rights are even close to universally accepted.

I can tell you that government surveillance of private communication has at least been a widespread concern for thousands of years. See for example: https://classicalstudies.org/imperial-spies-and-intercepted-....

Many countries have centuries-old constitutional guarantees of the right to secrecy of correspondence: https://www.marottaonmoney.com/right-to-privacy-of-correspon....

◧◩◪◨⬒
90. some_r+qBa[view] [source] [discussion] 2024-08-14 17:54:19
>>armini+Ema
Yeah that was largely about export controls vs freedom of speech, I don't know of any actual court case involving the second amendment a la https://xkcd.com/504/
[go to top]