![This photo taken on August 4, 2020 shows Prince, a member of the hacking group Red Hacker Alliance who refused to give his real name, using his computer at their office in Dongguan, China's southern Guangdong province. - From a small, dingy office tucked away in an industrial city in southern China, one of China's last "volunteer hacker" groups maintains a final outpost in its patriotic hacking war. (Photo by NICOLAS ASFOURI / AFP) / TO GO WITH China-hacking-security,FOCUS by Laurie Chen / The erroneous mention[s] appearing in the metadata of this photo by NICOLAS ASFOURI has been modified in AFP systems in the following, we removed the HOLD HOLD HOLD in the main caption. Please immediately remove the erroneous mention[s] from all your online services and delete it (them) from your servers. If you have been authorized by AFP to distribute it (them) to third parties, please ensure that the same actions are carried out by them. Failure to promptly comply with these instructions will entail liability on your part for any continued or post notification usage. Therefore we thank you very much for all your attention and prompt action. We are sorry for the inconvenience this notification may cause and remain at your disposal for any further information you may require. (Photo by NICOLAS ASFOURI/AFP via Getty Images)](https://media.cnn.com/api/v1/images/stellar/prod/210621154549-hackers-keyboard.jpg?q=x_0,y_131,h_1419,w_2523,c_crop/w_250)
Big Tech is raising concerns about a “ghost proposal” from UK spies that would allow them to eavesdrop on encrypted messages.
Advocacy groups, security experts and tech giants including Apple (AAPL), Google (GOOGL) and WhatsApp have signed an open letter to Britain’s Government Communications Headquarters (GCHQ) that says its spies should not be allowed to access private digital messages.
The letter is a response to a public proposal made last year by two high-ranking officials at GCHQ, the UK spy agency responsible for signals intelligence. Ian Levy, the agency’s technical director, and Crispin Robinson, its head of cryptanalysis, suggested in a November post on the national security blog Lawfare that service providers could “silently add a law enforcement participant” to encrypted group chats or calls.
The officials argued that the approach would avoid weakening encryption, which is a way to encode messages, and claimed that it would not be any more intrusive than older technologies used by spy agencies to snoop on telephone lines.
The question of whether tech companies should allow law enforcement agencies and other government actors to access encrypted communications sent via the internet has sparked a series of controversies in recent years. Apple, for example, declined to give the US Federal Bureau of Investigation access to an iPhone that had been used by a shooter who carried out a terrorist attack in San Bernardino, California, in 2015.
The letter sent to GCHQ this week was signed by seven tech companies, 23 civil society organizations and 17 experts in digital security and policy. It said that the “ghost proposal” put forward by the two spy agency officials would violate “import human rights principles.”
“This proposal to add a ‘ghost’ user into encrypted chats would require providers to suppress normal notifications to users, so that they would be unaware that a law enforcement participant had been added and could see the plain text of the encrypted conversation,” the letter stated.
When asked for comment on Thursday, the UK National Cyber Security Centre responded with a statement from Levy in which he said the proposal was always “intended as a starting point for discussion.”
“We welcome this response to our request for thoughts on exceptional access to data — for example to stop terrorists,” he said. “We will continue to engage with interested parties and look forward to having an open discussion to reach the best solutions possible.”
Apple, Google and Facebook (FB), which owns WhatsApp, did not immediately respond to requests for comment.
