As previously reported by SecurityLab, last week in the service to communicate FaceTime a vulnerability was discovered that allows you to view videos and listen to audio from the device of the interlocutor before he will answer the call. Apple has temporarily disabled the Group feature FaceTime over its platform and is currently working on a fix for the issue.
At the time, as human rights activists see the current situation, the violation of data privacy of users (Apple already filed several lawsuits in connection with possible data loss), for special services, such vulnerability would be a real gift.
According to the American Union of civil liberties (ACLU), the Centre of the UK government communications headquarters (GCHQ) has proposed to require a secure platform for communication to provide the security services the opportunity to create a third, invisible member. Offer CPS has received the name of Ghost Proposal.
The initiative, the authors of which are officials of the GCHQ, Iain levy (Ian Levy), and Crispin Robinson (Crispin Robinson), legitimizes the creation of so-called “interface untrusted user”. In short, in the case of joining sentences in force, the services will be required by law to provide intelligence agencies the ability to spy on users.
“Services is relatively easy can quietly add to a group chat or call a member from law enforcement. As a rule, the services control identification system and decide who and what device is involved in the conversation,” say the authors. This means that services will have to block notifications about adding another member to the chat.
According to the authors, Ghost Proposal, so intelligence agencies can intercept calls and messages to the protected services without having to touch the encryption. However, experts believe the ACLU proposal is difficult to implement, and threat.
“To design FOR properly and are difficult to develop it with intentional vulnerabilities, albeit limited, even more difficult. A mechanism for the deliberate creation of an untrusted interface will be an attractive target for hackers and other criminals. Then who will be responsible for its use for criminal purposes?”, — noted in the ACLU.
Read more •••