A Surveillance Treaty in Disguise: Canada Signs UN Cybercrime Convention (michaelgeist.ca)
238 points by iamnothere 8 hours ago
Waterluvian 8 hours ago
It feels like there’s this weird layer to domestic and international politics where you do a lot of signalling to one audience while simultaneously winking at other audiences that you’re not actually serious. (I can never tell who is getting winked at…)
I feel like WYSIWYG politics is what most of us want, but probably doesn’t actually work. The Ned Stark character that is righteous and right and quickly meets the headman’s axe of the game theory and brinksmanship of everyone else.
Iolaum 7 hours ago
While I agree this is the case, I think this is a consequence of low education for the general public and low quality of the public discourse. If the quality of those two goes up, then WYSIWYG politics will emerge as a preferred choice.
I only wish I knew of possible ways for us to get there :(
jolmg 5 hours ago
>> I feel like WYSIWYG politics is what most of us want, but probably doesn’t actually work.
> then WYSIWYG politics will emerge as a preferred choice.
I think the problem that Waterluvian's is getting at is precisely that WYSIWYG politics is taken as the preferred choice without understanding the implications that make it not actually work. For example, continuing to accept anything that remotely passes as protect-the-children politics without understanding that the consequences are worse than the benefits, even for the children themselves.
> If the quality of those two goes up, then WYSIWYG politics will emerge as a preferred choice.
If the quality of those two goes up, hopefully people start employing second-order thinking and beyond and realize that WYSIWYG politics may not be what it seems to be at the surface level.
AnthonyMouse 3 hours ago
airstrike 7 hours ago
Unfortunately, both low education for the general public and low quality of the public discourse exist by design.
The only possible way to remedy this is to maximize your own ability to exert power, possibly by becoming massively rich, and then hope it doesn't corrupt you enough along the way such that you can still enact good in the end.
WarmWash 7 hours ago
Avicebron 7 hours ago
SV_BubbleTime 7 hours ago
>I only wish I knew of possible ways for us to get there :(
Entropy. Things will dissolve enough that eventually someone will make changes. It takes a long time though, this is likely a feature.
gustavus 7 hours ago
Ive noticed that when people say we need more education or we need to teach critical thinking or something like that often what they really mean is "It is obvious my position is the intelligent one and those who have a different position are ignorant and foolish and if they just knew more, or were smarter they'd obviously really then superiority of what I advocate for over whatever they believe now."
Which is just the saying as "I'm right you're wrong" without adding any value. Most politically contentious issues have at their root a difference of value or tradeoffs, and it is only by understanding that we can really have civil discourse and reduce the polarization. And to be clear if you believe that the difference in value is simply between evil and good, e.g. everyone who belongs to Party A loves puppies and wants to bring happiness and love where anyone who votes for candidate B wants to revive Rasputin and unleash the legions of hell. You are part of the problem. (And if you're immediate response to this is to point out how Bernie/Trunp/Tredau/Harambee actually does want to feed puppies to Morgoth you're part of the problem)
NeOchenHorosho 6 hours ago
sellmesoap an hour ago
benshidar 5 hours ago
Henchman21 5 hours ago
I think it’s more a consequence of the wealthy elites being one hundred percent comfortable with lying to get their way and not caring for the reaction from the rest of us. You know, sociopaths.
derefr 4 hours ago
I could imagine true WYSIWYG politics, but it would need a very different temporal organizational structure than current politics.
Currwntly, politicians each have a series of meetings over time with different parties (constituents, lobbyists, domain experts, coalition members) and then at some point one of them drafts and tables a law (that's probably already been informally planned for ages among those in the know) and others vote for it (where many of those votes have probably also been informally pre-arranged for ages.)
To get WYSIWYG, every bit of all of those meetings would need to occur in the open. And likely the only way to practically accomplish that, in a “nothing up my sleeve” manner (i.e. to guarantee that there were no meetings outside of the official ones), would be to have all those meetings occur contiguously as part of one long recorded session in one place, with everyone who wants “a seat at the table” needing to operate on that session’s schedule; and where the politicians involved (i.e. those everyone else is there to influence) have a political career that starts and ends with that single session.
In other words, basically do the papal-election thing, or the sequestered-jury-trial thing: lock all the concerned parties (politicians + PAC leaders + lobbyists + etc) in a building together, and don’t let them out until they make a year’s worth of law. (But unlike either of those—record everything! Don’t allow any two people to be in the same room together without a camera.)
AnthonyMouse 3 hours ago
Only one of the things that makes what you're describing unworkable is that "concerned parties" include arbitrary members of the public. Anyone who can't afford to spend a year sequestered in a room can't so much as write a letter to their representative?
Another is that they would just agree on what to do before the official start of the process. Or learn to speak in code. Or pass notes to each other off camera etc.
The closest approximation that might actually do something would be to require the final version of any piece of legislation to be published a year before the final vote. Then the product of a backroom deal can't be enacted before anyone else has a chance to mount an opposition.
Another would be to make it easier to repeal things than to pass them. A lot of current corruption relies on the misfeature that we apply the same purposely-arduous process intended to inhibit bad things from passing as the requirement to un-pass existing bad things, so then if they can corrupt the entire process once they only have to maintain control of a single branch to prevent it from being rolled back.
shevy-java 4 hours ago
You are quite right. Some laws have a pre-determined break-point; others are to introduce legislation that is not as severe initially, but will become more severe lateron. Age sniffing is one such case. A few EU countries rushed forward; then they are pulled back by the EU commission. The next step will be restrictive measures for all EU countries - I am certain about that part.
PunchyHamster 5 hours ago
> I feel like WYSIWYG politics is what most of us want, but probably doesn’t actually work.
Well, it wouldn't work for politicians that pick decisions based on what end benfit they get. Would work fine for people. Would need actually honest media tho
MichaelZuo 7 hours ago
Isn’t it very ironic to post this under a pseudonym?
Which by definition contains some signalling that deviates from WYSIWYG.
squigz 6 hours ago
Is GP running for political office here on HN or something?
Otherwise I can't really see your point.
dgellow 6 hours ago
panarchy 7 hours ago
Canada is so lucky to have someone like Michael Geist. He's been reporting on and doing in depth investigations on privacy invasions for about 2 decades now.
emptybits 5 hours ago
Yes, and I'd include Cory Doctorow in the list of Canadians paying attention and writing about it.
Back to 2024: "Holy CRAP the UN Cybercrime Treaty is a nightmare"
https://doctorow.medium.com/https-pluralistic-net-2024-07-23...
fidotron 5 hours ago
It would be luckier if the government actually listened to him.
leonvoss 6 hours ago
>As of May 2026, the following 76 participants have signed the treaty: Algeria, Angola, Australia, Austria, Azerbaijan, Belarus, Belgium, Brazil, Brunei, Burkina Faso, Cambodia, Columbia, Chile, China, Costa Rica, Ivory Coast, Cuba, Czechia, North Korea, Democratic Republic of the Congo, Djibouti, Dominican Republic, Ecuador, Egypt, European Union, Fiji, France, Ghana, Greece, Guinea-Bissau, Iran, Ireland, Jamaica, Kazakhstan, Laos, Libya, Luxembourg, Malaysia, Maldives, Mali, Mauritius, Morocco, Mozambique, Namibia, Nauru, Nicaragua, Nigeria, Palau, Papua New Guinea, Peru, Philippines, Poland, Portugal, Qatar, Russia, Rwanda, Saudi Arabia, Slovakia, Slovenia, South Africa, Spain, Sri Lanka, Palestine, Sweden, Thailand, Tajikistan, Togo, Turkey, Uganda, United Kingdom, Tanzania, Uruguay, Uzbekistan, Venezuela, Vietnam, and Zimbabwe.
Some wonderful countries here: North Korea, Saudi Arabia, China. Thankfully the US hasn't signed it and probably won't because it thinks itself too above international law.
Interestingly, Qatar signed it with [the reservation](https://treaties.un.org/Pages/ViewDetails.aspx?src=TREATY&mt...) that
>The State of Qatar does not consider itself bound by the provisions of Articles (16), (15), and (14) of the Convention, as they contradict the provisions of Islamic Sharia, national legislation, and the social and cultural values of the State of Qatar.
These provisions [being](https://www.unodc.org/unodc/en/cybercrime/convention/text/co...) Article 14: Offences related to online child sexual abuse or child sexual exploitation material, Article 15: Solicitation or grooming for the purpose of committing a sexual offence against a child, Article 16: Non-consensual dissemination of intimate images.
I am trying to figure out what this means, as I am aware the Prophet married a 9 year old, but Google assures me the minimum age of marriage in Qatar is 16 with parental approval, and it's rare, and I thought Islam required no images of really anything at all, much less females of any age who are to be in burqas when in public.
bethekidyouwant 4 hours ago
Canada signs most UN stuff
alephnerd 8 hours ago
So has Australia, the EU, and the UK [0].
That said, being a signatory has limited impact as long as it isn't ratified.
[0] - https://treaties.un.org/pages/ViewDetails.aspx?src=TREATY&mt...
bawolff 6 hours ago
Yeah, but normally when you sign something its because you intend to ratify it in short order.
alephnerd 6 hours ago
Not true. Plenty of UN treaties have been signed but stalled on ratification.
bawolff 4 hours ago
ignoramous 8 hours ago
> the EU, and the UK
The EU has their own cybercrime treaty: https://commission.europa.eu/law/cross-border-cases/judicial...
But you'll never hear a peep from "no logs at all costs" VPN companies based in the EU.
dgellow 6 hours ago
> But you'll never hear a peep from "no logs at all costs" VPN companies based in the EU
It’s actually a fairly common topic discussed by privacy advocates, including VPN companies
inigyou 4 hours ago
403 error.
Now that's concerning. Europe doesn't want me to know what the law is in the place where I am.
alephnerd 7 hours ago
E-Evidence sharing is just a subset of the broader UN Cybercrime treaty which has been signed.
sunshine-o 7 hours ago
About "cybercrime" in general my feeling is there is a status quo between the criminals and countries. Something like we do not take down your economy and you do not go after us.
I know for a fact that even the most powerful organizations are powerless to have some relatively unsophisticated group caught and put behind bar.
The idea we would need conventions to start acting is a joke.
gib444 5 hours ago
Distantly related: similar to the local councils here in the UK that don't go after the obvious and prolific drug-front barbers and takeaways, because they pay business rates (local business tax) and probably employee taxes too for just enough staff for it to be believable.
failbuffer 8 hours ago
When are we going to see substantive legislation advancing digital rights instead of chipping away at them?
For the US, we need a new bill of rights, a bill of digital rights that constitutionally protects right of repair, right to root our own devices, right to be free from dragnet surveillance, right to general purpose computing, and the right to access speech without government-mandated age or identity checks.
With all the libertarian millionaires and billionaires swirling around silicon valley and the venture capital space, why can't we make that happen?
Cider9986 8 hours ago
Thomas Massie introduced the best privacy bill I have seen. I know nothing about political strategy but i would think a democrat would have been a better cosponsor. Will it even get voted on if the house speaker doesn't want it?
https://www.surveillanceaccountability.com/
>Warrant required Government must go before a judge to access your metadata, location, or financial records — just like searching your home.
>No Data Shopping Agencies can no longer simply purchase data from brokers to bypass the warrant process.
>Face recognition banned Warrantless facial recognition and AI biometric surveillance in public spaces is prohibited.
>You Can Sue Private right of action means if the government violates your rights, you have legal recourse.
https://www.congress.gov/bill/119th-congress/house-bill/8470...
WarmWash 6 hours ago
It's dumb that private buyers can buy data profiles but the government can not. It leaves a million loop-holes for government to backdoor a suspects data.
It's also going to piss off almost all of society if their data cannot be monetized, because pretty much all notable services will go from free to paid overnight.
Perhaps something like a mandatory "Do not track" option for all data supported services, where you can "buyout" your data (at market rate) to prevent it from being sold.
inigyou 4 hours ago
Cider9986 6 hours ago
SV_BubbleTime 7 hours ago
>i would think a democrat would have been a better cosponsor
Why? Where is any equivalent measures coming from the US left?
It is because that’s how people identify as Democrats want them to behave? There seems to be a rift there.
iamnothere 7 hours ago
wbl 7 hours ago
irishcoffee 6 hours ago
brandon272 7 hours ago
The effort to erode privacy is so much greater than the effort to preserve it. Governments around the world are like a dog with a bone when it comes to increasing surveillance.
An apathetic and ill informed public doesn’t help matters.
WarmWash 6 hours ago
I think it's because there hasn't been a widespread reckoning moment for the privacy apathetic yet.
For the average person, 20 years of data profiles and tracking has given them tons of services that they have never paid a penny for. Something totally non-existent 30 years ago when you needed to pay money for everything.
So to them, they are getting free services, and the worst that has come of it is seeing the same Dawn ad four times a day.
tokioyoyo 18 minutes ago
Frankly? Never. And the root cause is because majority of people have access to the internet now. The small voice of people who care about some stuff is completely overshadowed by billions of people scrolling through YT Shorts / Reels / TT.
nostrademons 7 hours ago
The libertarian technologist space specifically prefers technological solutions because they don't depend upon fallible and corruptible humans implementing the laws. This is the ideological wing that gave us the PC, encryption, the Gnu project, free software, the Internet, P2P filesharing, Bittorrent, social media, Bitcoin, Ethereum, Tor, Freenet, Mullvad and other VPNs, Monero, etc.
When it comes to laws, libertarianism faces an internal contradiction. A libertarian believes that they shouldn't be able to control other people; therefore, if a company wants to make an unrepairable unrootable surveillance device and the population consents to using it, the libertarian believes that it is not their right to interfere. The only thing they can do is create a better repairable rootable device, which is how we got GCC, Linux, Ubuntu, Firefox, Graphene, etc.
iamnothere 7 hours ago
Some left libertarian positions support collective action to dismantle hierarchical power systems. It’s just difficult (impossible?) to maintain this sort of group orientation at scale; it inevitably devolves into factional power seeking/domination politics.
nostrademons 6 hours ago
inigyou 7 hours ago
And yet the company can afford to spend an extra $0.10 per sale on marketing, which quickly drives the free option to the fringes because marketing drives almost all purchasing decisions.
nostrademons 6 hours ago
declan_roberts 5 hours ago
We don't need a "new" bill of rights. If they don't respect the first one why do you think they'll respect the next one?
There's a different remedy for the current situation.
Teever 7 hours ago
As a Canadian user of HN it's really frustrating to see a rare post about a Canadian subject be immediately dominated by a thread about American politics.
Twenty words into your post and you've pivoted to the US.
What mechanism or discussion can we have to encourage the users to show some restraint on this?
firefax 7 hours ago
Do you have any thoughts on the bill?
One thing we can do is try to upvote the citizens of the country being discussed.
Or calls to action -- who does someone who's Canadian call to complain about this? (Their MP I presume?)
I'd also be curious, given you have a multiparty system and not our peculiar two party one, why you struggle so hard to get candidates from NDP elected who would probably not push such terrible legislation?
1over137 6 hours ago
Teever 7 hours ago
jagged-chisel 8 hours ago
> … why can't we make that happen?
Greed. More money to provide the tools of oppression via government contracts.
mcsniff 8 hours ago
Because libertarians generally want fewer laws, not more.
dexterdog 7 hours ago
And there are far too few of them elected to have any real impact.
jambalaya8 7 hours ago
that doesn't mean they don't want some of the 'right laws'. otherwise they would be anarchists and communists not libertarians.
PunchyHamster 5 hours ago
When people working for corporate interest will stop being voted in. Good luck
firefax 7 hours ago
>With all the libertarian millionaires and billionaires swirling around silicon valley and the venture capital space, why can't we make that happen?
Maybe because they're full of shit? (Sorry to swear, but I'm struggling for a better way to phrase this.)
I ran into a lot of open source projects that needed donations that would be considered tiny in any other nonprofit space, but despite all their talk about cipherpunk stuff, they don't seem to put their money where their mouth is.
The "lolbertarians", as I like to call them, seem to want a world where the state has a monopoly on violence and a monopoly on data -- and if you get on their radar, they're just being neutral. (Forgive me if I roll my eyes so hard my retinas nearly detach.)
Cider9986 25 minutes ago
>The "lolbertarians", as I like to call them, seem to want a world where the state has a monopoly on violence and a monopoly on data
Sounds like you're describing authoritarians.
mindslight 6 hours ago
> With all the libertarian millionaires and billionaires swirling around silicon valley
As a libertarian myself - these people are fake libertarians, actually better described as crypto-authoritarians. So called "right" libertarianism is fertile ground for this, as it's based on an axiomatic/reductionist framing of rights wherein when someone violates a precondition, their rights then become irrelevant. The philosophy is supremely attractive to authoritarians who go down its rabbit hole - finding a whole bunch of reasons to reject appeals to other people's rights while convincing themselves they are advocating freedom.
Whereas in reality, the "freedom" they believe in is merely the freedom for themselves to oppress others - witness how these billionaires have chiefly made their money with centralized proprietary web apps/services based around removing choice away from users (at the edge) in favor of "take it or leave it" top-down monolithic offerings, slowly made worse over time (ie enshittification) to extract value after sticky network effects have been achieved.
There are of course exceptions - some use their wealth to attempt to pivot to making libre software. And I'm sure there are many more who become disillusioned with the "freedom" they thought they were making, and merely check out. But as the general rule this is why you don't see much actual support for freedom from the rich Surveillance Valley types.
watwut 7 hours ago
> With all the libertarian millionaires and billionaires swirling around silicon valley
Those are pro-surveillance, pro-repair-prevention, pro-fascism.
Libertarianism is about your freedom to restrict others, if you are rich and powerful.
Cider9986 7 hours ago
Whereas traditional Democrats and Republicans are all protecting privacy?
Thomas Massie is a wealthy libertarian and introduced a bill to protect privacy.
zetsurin 5 hours ago
watwut 5 hours ago
HPsquared 7 hours ago
Freedom to put whatever you want in the EULA.
olyjohn 7 hours ago
Because they're not libertarians. They're greedy narcissists who what to do whatever they want to anybody and just say that it's libertarian.
andrewstuart 7 hours ago
Wrong. The government cares.
b112 6 hours ago
The only way to have age verification on an international level, is to have treaties allowing for the sharing of information about citizens, digitally, in that context.
And this is that level of cooperation. And it has all the hallmarks of what comes next, identity verification. And this, is what this is for.
In order to prosecute anyone, you need to validate who did the crime. And that requires knowing who that person is. Not hearsay, not postulated, but validated "who this is". So you need to lock down anonymous access to the internet, in order to ensure you can easily and always prosecute such crimes.
And one of the issues right now, is that if someone in the UK does "bad thing" in Canada via the internet? It's doubly hard to track. So creating frameworks which will (on the backend) require some form of identity verification to work effectively, well... that tracks from where I sit and have seen in the last 2 years.
Frankly, from a government's perspective, this is no different than all the changes with KYC, for example 50 years ago the Government of Canada knew pretty much nothing about its citizenry. Certainly, it had no clue about bank account balances, transactions, investment holdings, a person's wealth and more. Now it knows enormous amounts of data, perhaps an arbitrary example is that your RRSP and TFSA(like American 501k) information, balances, and more are now yearly sent to the GoC. I believe also all information on trades made are, too, even in non-registered accounts. This absolutely wasn't the case, not to this degree, even a decade or two ago.
Some of these obligations are via ratified international treaties. The degree of surveillance, fiscally, is astonishing now. Americans know of this of course, after 9/11 they gave their government enormous data, and keep giving it, eg credit card transactions.
I remember when I was young, my parents arguing about having to get SIN cards (social insurance number). While it as introduced in the 60s, something happened which made it more of a requirement. Its only purpose at the time was for Revenue Canada to track info. Everyone argued about it, discussed it, was upset! It was the first time people needed "a number" to open certain bank accounts.
Yet we come from that, to this in really one generation's lifetime.
One of the problems is that, there is a massive, immense, enormous problem here right now, in terms of bots/foreign actors/asshats spreading immense disinformation for profit or state actor based goals. And with LLMs, it's going to get so much worse. People on HN at least are capable of some filtering, but the average Joe just sees video and 100% believes it is factual and true.
I wish I could see another path to locking out the asshattery, whilst keeping the internet anonymous. But I don't really. And unless a grass roots movement comes around, to ensure that every crime on the internet has a very high degree of success for prosecution? Then we'll be getting an identity managed internet.
I'm sure a lot of people will say "We can force companies to filter!", well, can you? For every forum out there? For torrents? For everything? And even if you think the "big boys" can be the main filter points, well, do you want a private company to decide what you post or not? And they'll need some way to ensure people don't just create a new account when banned! So they'll want ID too, if they're legislated to filter.
And if they're legislated to filter, can you fight decisions in court? Do you have the presumption on innocence? Do you have the right to face your accusers? A jury of your peers? With Google, Facebook, anyone these days, you get banned and it's nigh impossible to even find out why.
While there are exceptions, our governments are required to have criminal courts, and things prosecuted there.
I really don't want private, fiscally motivated companies to be the gatekeepers, if gatekeepers there must be.
Ah well. This is all a very unpleasant path.
hacker_homie 5 hours ago
I wish this was setup like a certificate authority so only the government is able to unmask an individual, but it's going to be pictures of government ID.
I don't think the government themselves are prepared for the amount of identity theft that is going to follow mass collection of government documents.
tavavex 2 hours ago
"We wish it could have a better solution, but you all just couldn't behave" is often the argument in these debates. You seem to be dissatisfied with it, but tacitly accept it as the only way. Let me put a finger on why I will never agree with it:
1. The current situation isn't that apocalyptic.
2. The alternative is so much more horrifying.
The first is a weaker argument because there is always a bottomless bag for the opponents to reach into and grab counterexamples. But none of these things are new. It's been 30 years since the average person could freely communicate with anyone in the world over the internet. 20 or so since the maturing of online scams. Probably at least 15 since nation-level actors started using the internet for propaganda purposes. The elephant in the room is AI, but I feel like AI use has diminishing returns, much like in any other fields. It offers a quick boost, but it's not infinitely scalable. The internet can't be completely taken over by scams and garbage in a way where everyone just keeps consuming it and goes crazy in their own ways. It's almost an ecosystem - pour too much garbage in, and you'll see people retreating into private communities and self-enforce trust, no universal carding necessary. Right now it's just tech people doing this on a large scale, but at a certain point of misinformation and incomprehensibility, treating the internet as untrustworthy by default would just become a mainstream view. It would likely fracture into massive social networks with strong identity verification and small communities that enforce trust in their own ways. As much as I don't like most private businesses, but your suggestion that they could take upon the role of the verifier is more palatable to me because that still leaves air in the room for small, private communities, and because businesses don't have perfect communication with each other or the government, preventing the universal tracking of everything.
The second argument is the real one. Technology would enable governments to track absolutely everything about everyone if we let them. Now this is a space where AI actually provides a novel use case - if before you had to have suspicion about a specific person and have someone look into them, AI will enable them to inspect everything and then form suspicion or document undesirable behaviors by default. It will be like having a personal private investigator that sees everything you do, being on the lookout for anything unusual 24/7. Online identity verification is nothing like having a SIN or a driver's license, because those two are used in specific contexts and don't enable tracking-by-default. The internet is used for ALL communications, so automated tracking of it is tracking of everything we do and say. Instead of showing your driver's license to the officer one time in a defined spot, the officer would come to you because your driver's license is etched into your skin for all to see at all times, and they're concerned about your recent movements that were automatically recorded and processed by a billion cameras. It would be a world without secrets, a world of perfect knowledge and ruthless enforcement. I don't want to live in it. I'm fine with the current world, thank you.
mistrial9 6 hours ago
this is insightful.. From a behavioral psychology point of view, there is an assumption among many law and order adherents that "we just need more control-info-courts-punishment" and we will have this done. However, history has shown enormous missteps and in fact tragic actions of harm, from the very people that claim to be the ones that are Doing The Right Thing.
Does an entire society have to make the same choices of autonomy and record keeping that are common among members of the uniformed services? Mostly in the West, the answer was "No" but, here we go again.
inigyou 4 hours ago
> However, history has shown enormous missteps and in fact tragic actions of harm, from the very people that claim to be the ones that are Doing The Right Thing.
The other side would make this exact same point about vaccine proponents. How can we differentiate one argument from the other?
b112 4 hours ago
shevy-java 5 hours ago
Democracies want data from their slaves, I mean, ... citizens.