Corrupt UK police analyst gets prison time for tipping off a friend that encrypted messaging app had been compromised
'Corrupt' cop jailed for tipping off pal to EncroChat op
According to the NCA, Mottram told Jonathan Kay, 39, the police were monitoring people's encrypted EncroChat conversations, and tipped him off that the cops had intel on him presumably from his use of the app.
She basically tipped off crooks who were selling weapons illegally according to the article.
While I think that cops shouldn't have a backdoor to an encrypted messaging system or access to any messages without a warrant, this woman is also a big piece of shit who deserves to be in jail.
I just read the article and I missed that somehow. I thought she tipped off her mate who was selling weed and said that they were focussing on arms deals for now but be careful.
Just want to remind everybody that when the Snowden Revelations came out, not only was the UK's NSA-equivalent (the GCHQ) more abusive and extensive in its civil society surveilance that the NSA, but whilst the US government actually walked back on some of the abuses, the UK government simply retroactivelly legalized it and probably issued a bunch of D-Notices (the UK's Press censorship scheme) to quiet it down (certainly the UK press went real quiet on it really fast).
Also the chief editor at the British newspaper that brough out the Snowden Revelations - The Guardian - was kicked out some months later and that newspaper has not mentioned that subject since.
The country is way more authoritarian than people outside of it think: just because the "upper" classes are generally trained to be posh and project a gentlemany image (that and being inducted into the "old boys network" are the main selling points of private schools in the UK, curiously called "public schools" over there even though they're £30k per year per pupil) doesn't mean they don't think everybody else are plebes that need to be kept in their place and share the "lower" classes' belief that foreigners are inferior.
I don't think that what she did was wrong. I think that the police hacking a person's device is wrong.
Is it "corrupt" or corrupt? Because there is a difference, and the deference shown in the article is part of the problem.
Absolutely agreed, and I swiped those quote marks on purpose. :)
The former. It is a quote and does not seem like corruption to me.
Edit: it's also quoted in the headline, but OP changed it.
If police in general could be trusted, they'd still need to fuck off.
How can end-to-end encryption be compromised though?
The investigation accelerated in early 2019 after receiving EU funding.[2] At the end of January 2020, a judge in Lille, France, authorized the infiltration of the EncroChat servers.[23] Intelligence and technical collaboration between the NCA, the National Gendarmerie and Dutch police culminated in gaining access to messages after the National Gendarmerie put a "technical tool" on EncroChat's servers in France.[20][22][1] The malware allowed them to read messages before they were sent and record lock screen passwords. Messages could be read by law enforcement beginning in April.[12] EncroChat estimated that around 50 percent of devices in Europe were affected in June 2020.[1][17]
OK thank you.
This is why we need to use a decentralized, end-to-end encrypted messaging service.
The gubment can not be trusted to keep their hands out of the cookie jar.
True E2EE? Only if you get the key. If they have a backdoor, then it's trivial.
There are ways:
Ultimatelly the one trully safe encryption mechanism is the One Time Pad, and that requires a key as long as the message (hence why seldom used) distributed in a safe way (for starters, never over a public network) and there's still the whole "compromised device" and "compromise application" risks (though implementing the One Time Pad protocol is stupidly simple)
The analyst told her friend that the police could access what was thought of as private. That was the crime. Being honest about what the police can do.
The police also say that having the ability to breach privacy is key to keeping people safe but there is no mention of when info secretly scraped from the unsuspecting prevented other unsuspecting people from morbid circumstances.
This whole event looks like the cops are big mad they will now be asked for accountability on another method of investigation. Imagine having to answer for your actions!
Do you suggest police analysts should be fully transparent all the time, as in "Hey bob, the cops know you are going to raid the bank tomorrow, better re-arrange"?
Yes. The police, like any government agency, needs to state both the scope of its work and provide metrics for how taxpayers can expect their money spent. This expenditure should include how it achieve its goals and what progress should look like. Then let the people judge the methods are consistent with public expectations of accountability.
Police have repeatedly shown an incapability to behave, respect, or function as a person who has to be responsible for their actions. They cannot be allowed to operate without oversight.
They should be open about how investigative tools work, and what the current privacy expectations are, yes. In the end they have to present their evidence in court, and that includes things like this.
Should they prevent a crime or watch it happen knowing they could have stopped it just to get an arrest? What will happen in cases of murder?