Creating apps like Signal could be 'hostile activity' claims UK watchdog
123 comments
·December 18, 2025flowerthoughts
gbil
Curtains should also fall under the same category because they do make it more difficult for UK security and intelligence agencies to monitor suspect activities. Then of course you also have walls...
The argument is so fundamentally stupid that they should be embarrassed just putting it down in writing!
gnfargbl
Both you and the poster above you may be misunderstanding the point that Jonathan Hall KC appears to be making. If you take a look at what he actually writes [1], then it is pretty clear that he is presenting these hypothetical cases as examples of obvious over-reach.
This is a warning from the independent reviewer that the law is too potentially broad, not an argument to retain these powers.
[1] https://assets.publishing.service.gov.uk/media/69411a3eadb57..., pages 112 and 113
chii
> I see why governments think they are doing this to protect the people.
they're not doing this to protect people, they're doing this to ensure there cannot be rebellion against unpopular policies. Organization is harder if all communications is monitored.
But this is how gov't get to be kept in check - the risk of "rebellion". If this risk is removed, you get authoritarian states - see north korea.
9dev
I know its satisfying to think of the government as some singular nefarious entity, but the reality is far worse: There is no one in charge. It’s chaos all the way down.
poly2it
> Time to read up on which parties are sane and which aren't when it comes to technical infrastructure.
Check out the Pirate party's stance on integrity and internet:
andy_ppp
This is about the astonishing lack of ability in the political class in the UK. The security services are honestly wagging the dog and they think they can force some kind of key escrow eventually, but instead they’ll just destroy software development in the UK and possibly financial services.
It’s the same with the multi billion ID cards and digital ID which is almost impossible for a government as incompetent as this one to implement.
Bender
Governments always focus on the tools and not the people. Troubleshooting and resolving the root cause requires work. They do not get paid to work or care meaning they could sit on their hands and still get paid.
tejohnso
> they could sit on their hands and still get paid
Could? I know of government employees who literally cannot do their job, yet somehow they've been employed for over twenty years. When I say they can't do their job, I mean they have to ask coworkers how to do something that is and always has been a job requirement, and they have to "ask for help" every time. People are actually enabling massive amounts of waste and inefficiency.
Then there are those who don't even have work to do, and will take offense if you ask them to justify their continued employment. As though they are owed a position in the organization tomorrow just because they have a position in the company today.
mosura
> This has got to stop. If you want to stop criminals, then focus on their illegal activites, not the streets they walk on.
That would be against everything european governments stand for.
p0pularopinion
> That would be against everything european governments stand for.
I really struggle to understand why the hell this is always only applied to european governments? The idea to take 1984 as a book of requirements seems to extend *far* beyond europe.
dathinab
yes, and here is a fun fact, most of the push for mass surveillance comes from the European Council, the thing is that literally are "just" the locally elected leaders...
not some vague far away "the EU (personalized)" thing
which also mean you can locally enact pressure on them
furthermore the EU supreme court(s) might have more often hindered mass surveillance laws in member states then the council pushing for them...
and if we speak as of "now", not just the UK, but also the US and probably many other states have far more mass surveillance then the EU has "in general".
so year the whole "EU is at fault of everything" sentiment makes little sense. I guess in some cases it's an excuse for people having given up on politics. But given how often EU decisions are severely presented out of context I guess some degree of anti-EU propaganda is in there, too.
nisegami
There's societal memory of monarchies and kings that held a lot of power that still impacts things to this day, sometimes unconsciously and sometimes consciously.
dathinab
this is simply not true
it was the EU which had stopped many similar unhinged attempts from the UK when the UK was still a member
similar it had been the EU which had shut down various other surveillance nonsense of the EU
you are basically pretending the EU is a person with one uniform opinion and goals
but it's like the opposite of it, like in a lot of way
it's a union of states, each having a vastly different goals and culture and non of them having a "single uniform opinion" either but (in most cases) a more complex political field then the US (on a federal level)
Furthermore the most influential organ of the EU when it comes to making changes is literally a composition of the elected leaders of the member states. So for most big controversial decisions the driving and directing force isn't "the EU" but but the various elected leaders of the member states. For EU citizens blaming "the EU" instead of blaming your own elected leaders is common, but pretty counter productive, as it's basically pretending you have no power to change things.
Furthermore in the EU you have an additional parliament which (in general) needs to ratify laws and two high courts which can (and in context of mass surveillance repeatedly have) shut down misguided "laws", including in many cases local attempts at mass surveillance laws.
So while some parts of the EU have consistently pushed for mass surveillance in recent years other parts also have consistently moved against it.
In general while the EU needs a lot more transparency and some more democratic processes in some aspects a lot (not all) of the "stories told to make the EU look dump/bad" have a lot of important context stripped from that (like e.g. that a lot of the current push for surveillance comes from the locally elected leaders not the EU parliament or some other abstract "the EU" thing, it's your own countries leader/lead party(1) which does or at least tolerates that shit).
blitzar
> blaming "the EU" instead of blaming your own elected leaders
The elected leaders like to blame the EU (or for those without an EU - any external body or even the mythical deep state) for everything adverse. The reality is these "failures" they blame on someone else are generally in alignment with their own policies goals and objectives.
null
immibis
Is that why they rejected Chat Control 1.0?
findyoucef
They're supposedly against genocide but that hasn't stopped them from shamelessly supporting one.
hirako2000
And messages like these should be monitored. Who knows, we may need to lock all your bank accounts for "suspicious activity".
miroljub
I don't understand why you got heavily downvoted.
Yes, there are governments that are worse than European, but the decline of European government is the fastest.
You may be surprised that the UK is the world leader in the number of people arrested because of internet posts. And that Germany, which is still way behind the UK, has more people arrested for the same reason than Russia, China, North Korea, Iran, Belarus, Saudi Arabia, and a few others combined.
And many people still believe that those countries are beacons of democracy while the others are backward dictatorships.
mosura
Indeed: https://metro.co.uk/2025/12/17/man-jailed-burning-migrant-ho...
“An X user who posted two anti-immigration tweets been handed a 18-month jail sentence.”
Edit to point out 1. That is a quote and 2. The UK considers this Ok though https://www.bbc.com/news/articles/cjeykklwn7vo
pjmlp
What European Government?
Kbelicius
> I don't understand why you got heavily downvoted.
Because his post contributes nothing to the discussion.
> Yes, there are governments that are worse than European, but the decline of European government is the fastest.
What makes it the fastest?
> You may be surprised that the UK is the world leader in the number of people arrested because of internet posts. And that Germany, which is still way behind the UK, has more people arrested for the same reason than Russia, China, North Korea, Iran, Belarus, Saudi Arabia, and a few others combined.
Don't know about you but I'd rather be arrested for posting something in EU then be disappeared in any of the countries that you mentioned.
> And many people still believe that those countries are beacons of democracy while the others are backward dictatorships.
That is because Germany and UK are beacons of democracy when compared to the countries that you listed.
gitremote
The decline of the US government is the faster than "Europe", because it's been declining rapidly in a few months. The US government currently has a monthly quota for ICE arrests. ICE agents racially profile people and ignore non-white people telling them they are US citizens because they assume they are lying. Non-white US citizens need to have papers on them that prove their status (US citizen), or else might be disappeared. The US government now bans immigrants from a list of dark skin countries but fast-tracks White South Africans for immigration. It politically persecutes their political opponents and ignores the rule of law. It is preparing for war with Venezuela, which would conveniently tie up US resources as Russia positions itself for entering Europe.
The UK is rapidly declining as a close second, but calling it "European" (especially when UK citizens see themselves as non-European) is just a lazy generalization.
sjzhakaijzg
No one is getting 20 years for tweet content in the UK like they are in Saudi Arabia. No grandmother is being arrested for holding up a blank sign like in Russia. I can go on just with the reported stuff from memory for an hour wrt Iran, North Korea and China. I don't even know how many books it would take to read to learn of all the examples worse that aren't.
Look I think there are problems with the UK's policy here, but this comment is either disingenuous or naive.
TheOtherHobbes
The UK is not part of the EU, and its security services are barely affiliated with it. That all ended with Brexit.
It's absolutely hopeless at protecting citizens from foreign threats.
95% of the arrests aren't actually arrests. The police send you a polite letter, you write a polite response, and at least 90% of the time the case is dropped.
Compare with various authoritarian dictatorships where if the police turn up at your door you're unlikely to survive.
And - unlike the US - no one is hauling random British brown people off the streets and sending them to prison camps.
The UK does have a far-right party desperate to end judicial oversight and remove legal protections from torture, etc, by ending support for the ECHR.
There's currently a huge online campaign, funded in part with foreign money and supported by most of the British press (foreign billionaire owned...), to make their far-right dictatorship seem like a political inevitability.
It isn't. But they're trying really really hard to pretend otherwise.
Putin is also really, really pissed at the EU for taking Russian money and using it for defence and reparations.
But - you know - if you start a war because you're a grandiose psychopath, that's what happens.
mihaaly
I wonder if architects should be prosecuted first making non-transparent building structures making the observation of people very very hard for those puny security and intelligence agencies! Architects, you bastards! You aid and abet criminals!
Don't get me started on locksmiths, oh the horror!
simianparrot
They can’t even prosecute grooming gangs, the pretence it’s about “the children” rings completely hollow.
The UK is a failing nation run by pedophile apologist imbeciles. This is just desperate flailing to hold onto power by any means.
nirui
> Developers of apps that use end-to-end encryption to protect private communications could be considered hostile actors in the UK.
So say if my UK friend connected directly to my PC with SSH/RDP, both uses end-to-end encrypted link, to chat with me using `wall`, `write` or Windows Task Manager, then all of sudden this is a hostile and Mr Big Ben will just launch laser at me to burn me to death. Wow, this is just messed up.
Someone should check the cognitive of those lawmakers, because these guys are clearly not good at their jobs. If such they failed to understand such simple concept, how can they understand much much more complex construct such as society?
lordfarquad
The authorities here (UK resident) are already pushing hard for as much authoritarianism as they can get. They are also increasing prison capacity and the two tier system is a genuine thing with public services collapsing.
Police militarization, drones, army unit investigating private civilians, digital powers widening... I am more scared of the government than I am of local paramilitary forces at this point.
It may be enough to swing my vote towards Irish unity given the topic will be forced within my life time.
stuaxo
The two tier bit is Palastine action people being in prison for up to two years before getting tried, being on hunger strike without much reporting in the press.
random9749832
Irish unity will never happen. Not even sure where that came from.
People can make random accounts named after Shrek making weird claims that immediately gets upvoted. The mass astroturfing of the internet has made it shit.
CommanderData
Removal of Jury service for certain crimes says it all, seeing this happen in the wake of Palestine Action is considerably disturbing, if I were a conspiracy nut I'd argue these things are being done to please Israel.
richsouth
Developers of apps that use end-to-end encryption to protect private communications could be considered hostile actors in the UK. <-- HTTPS does this. What about secure sites like baking sites that encrypt end-to-end? Old farts making laws about things they know nothing about.
SirHumphrey
>>> Old farts making laws about things they know nothing about.
We should probably stop saying and believing that. This is basically the UK government making a deal to the developers they cannot refuse: cooperate (install backdoors) or get prosecuted. The French tried to do something similar not so long ago.
A decade ago politicians genuinely didn’t know much about the internet so most of the laws were terribly ill informed good ideas. The new sweep of internet legislation like chat control, age verification and banning of vpns are much more dangerous because those pushing know exactly what they are doing.
arccy
baking sites, the most secure source of cookies
CommanderData
Why worry about E2E encryption, in theory just need a cert issued from a vast array of CAs or intermediates. Which I wouldn't be suprised they possess the ability through some type of secret warrant, heck even private keys.
neilalexander
> Old farts making laws about things they know nothing about.
Who's going to stop them?
ykonstant
Young poops?
McDyver
It makes a lot of sense. Whoever wants to continue developing "these apps" will do it privately, and sell the service to those who want to keep doing things in hiding. Well done, watchdog!
So again, it just harms the general public, while making it harder to catch criminals.
kitd
It's simpler than that. OSS strong encryption tools are available than anyone can run on the command line to encrypt their messages, which can then just go as attachments via email, whatsapp, etc. No new developers required. And as you say, the general public have to suffer with weak encryption while those who really want to encrypt do so regardless.
immibis
It makes it easier to catch criminals, since anyone who has the app is a criminal. I believe they already treat GrapheneOS this way.
bilekas
"The arrests will continue until privacy is removed"
RcouF1uZ4gsC
Actually it opens them up to being phished by the government. There have been several high profile cases where because of searching for custom communication services, groups ended up being vulnerable.
squigz
How many cases have there been of groups successfully finding and use private communication services?
logicchains
>How many cases have there been of groups successfully finding and use private communication services?
Probably a lot, given how booming the illegal drug market is. Obviously you don't hear about the successful ones, you only hear about the incompetent ones that get caught.
amelius
Soon in the UK: "That photo you took looks too noisy. You could be hiding data in it!"
bilekas
This was my first exact thought.. "That payload that went over the wire looks like gibberish, send in the SWAT team".
These arguments are so ridiculous. Privacy is now a weapon of terror apparently.
pera
Meanwhile MI6 offers an onion service for secure communications:
mi6govukbfxe5pzxqw3otzd2t4nhi7v6x4dljwba3jmsczozcolx2vqd.onion
blitzar
Please provide us with:
As many personal details as possible
amelius
Yeah so that they can MITM it.
pfortuny
"Claims" in the title is misleading. He (It/They, I guess it is an organism, not a single person) is _warning_ about that, same as this page always does. So, it is not an infamous claim, it is a warning to all affected parties (i.e. also the government).
dlahoda
anybody can buy esim on street(ask llm how to do so) for cash or crypto. anybody can randomly talk on random webrtc domain or use random delta chat email to text.
if somebody really has high income(and high risk) illegal scheme he will not use sigal for very bad things.
more, llm can exactly do things outlined above.
so chat control is for small(small income) crime and control of ordinary citizens behave well. in this sence it will serve its purpose.
so what is purpose going for signal developers? why not they try to do same with webrtc standard and browsers?
jonapro
Not unlike in Canada right now. The bill is stage 2 but proceeding. https://www.globalencryption.org/2025/09/open-letter-bill-c-...
iamnothere
This needs more attention due to the potential impact on OpenBSD and OpenSSH (both Canadian).
vintermann
Interesting how the term "watchdog" has been appropriated to mean an organization keeping watch not on the powerful, but on everyone else.
A4ET8a8uTh0_v2
^^;
If there was ever a signal ( edit: happy accident ) that it should be done, it is that the government agency thinks it is a bad idea.
> He warns that developers of apps like Signal and WhatsApp could technically fall within the legal definition of "hostile activity" simply because their technology "make[s] it more difficult for UK security and intelligence agencies to monitor communications.
Sounds like Let's Encrypt would also fall under that.
This has got to stop. If you want to stop criminals, then focus on their illegal activites, not the streets they walk on. I walk on them too. And don't use CP as a catch-all argument to insert backdoors.
Their big problem here is that previously, it was hard to find people with the same opinion as you. If you couldn't find someone in the same village who wanted to start a rebellion, it probably wouldn't happen. Today, someone can post a Telegram group message and make thousands of people rally to a town square. I see the dangers, and I see why governments think they are doing this to protect the people. No one wants civil war. That is still not a strong enough reason to call road construction a hostile activity.
I'm back in Sweden after 12 years abroad. Time to read up on which parties are sane and which aren't when it comes to technical infrastructure.