Facebook’s a mess, but it doesn’t mean backdoors are the answer

Facebook’s a mess, but it doesn’t mean backdoors are the answer 1

It’s been a tough year for Facebook. It has faced international scrutiny, from its role in elections to the potential regulation of its cryptocurrency Libra. However, perhaps the most contentious argument for the social media giant, that is sure to rage on into 2020, is one of its longest fought. How to protect the privacy of users on its messaging platforms, whilst navigating the demands of governments who want backdoor access. What should we most prize? Consumers’ privacy or national security?

Currently, the solution proposed by governments internationally is a backdoor to allow access into messaging platforms — one that in my opinion, is highly unsatisfactory. With a backdoor, there is potential for abuse by the government agency in question but perhaps more concerningly, that same backdoor can be found and exploited. On the other hand, my own experience with members of the Islamic State has shown that absolute privacy of communications can be dangerous in the wrong hands.

The solution doesn’t lie in an open door for anyone with the right tools to climb through. What we need in a trustless environment, is a pre-agreed, cryptographically secure, and verifiable way to access certain data sources, which helps to bring tech companies and governments together.

An emergency entrance with access granted through a consensus voting mechanism from a pre-agreed group will be the way forward.

Take it from me, end-to-end encryption can benefit the wrong people

Facebook has made its stance on the issue of data privacy pretty clear. With further encryption of its video and calling systems being tested in October 2019, not to mention its current very public lawsuit against the NSO Group, its dedication to end-to-end encryption is plain to see.

It’s a position I once took myself. In 2014, my firm developed the world’s first ‘quantum safe’ instant messaging system with the us having “zero knowledge” of the contents. It featured encryption so advanced that not even a mature quantum computer, let alone the technology available at the time, would be able to decipher the coding in order to gain access. We were elated.

It was a much-needed victory for privacy, in an age where it was widely agreed that the misuse and exploitation of user data was getting out of control. We took the decision to make the solution available to all through the Apple app store as an easy to download application. We never would have predicted that the solution would end up appearing on an Islamic State recommended technical tools list.

We had created a tool which protected a fundamental right to online privacy. But, in doing so, had enabled an abhorrent group the ability to benefit from unfettered, untraceable communications. This created a period of great debate for our team. To create government backdoors in what we had claimed was a fully-encrypted and privacy-protecting service was counter-intuitive. 

However, we simply couldn’t reconcile the idea that an organization such as Islamic State might be able to cause great harm using our technology. We felt we were left with no choice but to withdraw the messaging system altogether. Today, we only provide it to companies and governments for carefully selected and compliant use.

By splitting the keys, there is a cryptographic solution to the problem

In this scenario, it might be easy to argue that a government backdoor would have been appropriate. But we must remember that a backdoor for one, is a backdoor for all. Anyone can walk through it, whether that’s the government agency that was intended for, a hacker or even a malicious nation. Facebook, for all its flaws, is right to object to this on behalf of its users.

This is why I believe that governments should consider the creation of an emergency entrance, or side-door. Whatever you call it, these are metaphors for a process where pre-agreed access to data is enabled within a trustless environment.

In this scenario, the government agency, the social media provider, and a neutral third-party such as a court, would each safe-keep a fragment of the cryptographic key, which when used to reach a voting threshold, could allow sanctioned and pre-agreed access to messaging data. To remove any anxiety about the government keeping the data, the data and the key management could be hosted by the social media companies.

In a way, this idea known as ‘threshold cryptography’ would be similar to a Swiss bank safe deposit box, which can only be opened if both the bank and the customer are present. Except these cryptographic keys could not be replicated, and companies could even use blockchain to create an immutable record of how, when and why the data was accessed. 

It would significantly limit the ability of rogue actors to stroll through a backdoor uninvited. There would be no ‘golden key’ kept by a social media company, which would remove any insider threat to security and privacy, even if governments weren’t pushing for a way in. 

Facebook has a responsibility to find a solution to this ongoing debate. It can shout about respecting its users’ privacy from the rooftops, and in doing so defend its decision to continue with end-to-end encryption, but that argument only holds true when lives and liberty are not being endangered by the secrecy their messenger applications allow.

It is a government’s prerogative to keep its people safe, but if they think backdoors are the prize, I believe they are mistaken. In this scenario, the data is not even kept by the government. The social media companies should not complain either as the telco industry already has to comply with lawful intercept warrants.

There is common ground that can be found here in the form of key-splitting, and that’s been sadly absent from the privacy debate thus far.

Published January 2, 2020 — 10:00 UTC

About the author

E-Crypto News was developed to assist all cryptocurrency investors in developing profitable cryptocurrency portfolios through the provision of timely and much-needed information. Investments in cryptocurrency require a level of detail, sensitivity, and accuracy that isn’t required in any other market and as such, we’ve developed our databases to help fill in information gaps.

Related Posts

E-Crypto News Executive Interviews

Crypto Scams

Cryptosoft Trading Bot Review
June 27, 2022
The Largest Crypto Scams Of 2022 (So Far)
The Largest Crypto Scams Of 2022 (So Far)
June 14, 2022
How Do Scammers Entice Their Prey?
May 10, 2022
Beanstalk Farms Loses $80M In A Massive DeFi Governance Flash-Loan Hack
Beanstalk Farms Loses $80M In A Massive DeFi Governance Flash-Loan Hack
April 23, 2022
Joon Pak Head of Crypto at Prove talks to Us about Crypto Fraud And More
April 11, 2022

Automated trading with HaasBot Crypto Trading Bots

Blockchain/Cryptocurrency Questions and Answers

Is The Crypto Market Combating A Lehman Brothers Moment?
Is The Crypto Market Combating A Lehman Brothers Moment?
June 30, 2022
Roundtable Interview-What is the Effect of The Russia-Ukraine War on Cryptocurrency Prices?
March 4, 2022
How Does Bitcoin Casino Work + 2021 Beginner’s Guide
November 8, 2021
How to Buy and Sell Cryptocurrency
November 8, 2021
What Are Bitcoin Futures And How Will They Work In 2022?
November 4, 2021

CryptoCurrencyUSDChange 1hChange 24hChange 7d
Bitcoin18,912 0.19 % 6.40 % 5.36 %
Ethereum1,030.0 0.26 % 7.03 % 2.00 %
Tether0.9999 0.25 % 0.13 % 0.12 %
USD Coin1.001 0.21 % 0.08 % 0.09 %
BNB213.71 0.22 % 3.09 % 0.40 %
Binance USD1.003 0.07 % 0.06 % 0.13 %
XRP0.3256 1.48 % 1.73 % 0.88 %
Cardano0.4477 0.12 % 4.21 % 2.54 %
Solana32.64 1.61 % 4.02 % 4.63 %
Dogecoin0.06419 0.02 % 8.36 % 3.89 %

Bitcoin (BTC) $ 18,899.70
Ethereum (ETH) $ 1,029.49
Tether (USDT) $ 1.00
USD Coin (USDC) $ 1.00
BNB (BNB) $ 213.20
Binance USD (BUSD) $ 1.00
XRP (XRP) $ 0.324044
Cardano (ADA) $ 0.446652
Solana (SOL) $ 32.32
Dogecoin (DOGE) $ 0.06411