Zurich, 6 mai 2025 – La consultation qui se termine aujourd’hui sur la révision
partielle de l’Ordonnance sur la surveillance de la correspondance par poste et
télécommunication (OSCPT) ainsi que de l’Ordonnance du DFJP (OD-SCPT) [1]
soulève d’importantes questions et suscite de vives inquiétudes. Les
modifications prévues menacent non seulement le droit fondamental à la vie
privée, mais aussi la sécurité du chiffrement. Les VPN et autres services de
communication chiffrés sont particulièrement visés – avec des conséquences
potentiellement désastreuses pour les citoyens et les entreprises.
UNE ATTEINTE À LA VIE PRIVÉE
La révision de l’OSCPT prévoit une extension des obligations de surveillance
pour les fournisseurs de services de télécommunication (FST) ainsi que pour les
services de communication dérivés (FSCD), y compris des obligations élargies
d’identification des utilisateurs et de conservation des données. Ces mesures
portent gravement atteinte à la vie privée des citoyens sans qu’une
justification claire à ce recul soit clairement exprimé. Le secret médical ou la
protection des sources journalistiques s’en trouvent directement affectés.
DES DONNÉES INUTILEMENT STOCKÉES OUVRENT LA PORTE AUX RISQUES D’ABUS
Chaque donnée conservée augmente mécaniquement le risque que celle-ci soit
utilisée ou consultée de manière abusive. Les métadonnées peuvent donner des
aperçus détaillés sur les relations entre individus, leur localisation et leurs
habitudes. La conservation obligatoire des métadonnées pendant six mois permet
non seulement une surveillance de masse, mais aussi potentiellement d’autres
accès illégitimes par des tiers, comme des pirates informatiques, des criminels
ou des employés simplement mal intentionnés. Si de telles données tombent entre
les mains de criminels, elles pourraient être utilisées pour le chantage, la
fraude téléphonique, le phishing, le vol d’identité et d’autres formes d’abus.
LA COMPROMISSION DU CHIFFREMENT EST LA MORT DU CHIFFREMENT
L’obligation proposée de supprimer le chiffrement compromet la sécurité de tous.
Les fournisseurs seraient contraints d’installer des backdoors ou d’utiliser
d’autres méthodes qui affaiblissent délibérément le chiffrement afin de pouvoir
permettre aux autorités d’accéder à ces données. Mais si ces failles existent,
elles existent pour tout le monde: leur installation permettrait aux pirates
informatiques, aux criminels ou entités étrangères d’avoir accès à toutes les
données circulant dans le pays. On ne peut pas chiffrer pour les uns, et pas
pour les autres.
Le gouvernement britannique a récemment tenté d’adopter une réglementations en
ce sens: la conséquence immédiate en a été qu’Apple a annoncé le retrait des
services chiffrés pour ses clients au Royaume-Uni.
Citation traduite de l’allemand: «Apple et de nombreux experts en sécurité
informatique soutiennent qu’une porte dérobée rend absurde tout chiffrement. Dès
qu’il existe un moyen de déchiffrer des données chiffrées, ce n’est qu’une
question de temps avant que des criminels ou des régimes autoritaires ne
l’exploitent. Le chiffrement de bout en bout signifie exactement cela : personne
d’autre que l’utilisateur lui-même – pas même Apple – ne peut accéder aux
données. Une porte dérobée constitue donc toujours une faille de sécurité
massive.» [2]
En Suisse, les services offrant des solutions respectueuses de la vie privée ont
traditionnellement une position forte. Les fournisseurs suisses comme Proton,
NymVPN, PVY.swiss ou Threema sont particulièrement touchés par la nouvelle
réglementation. Proton a déjà annoncé qu’il quitterait la Suisse s’il ne pouvait
plus y exercer ses activités correctement. [3]
RÉFÉRENCES
[1]
https://www.fedlex.admin.ch/fr/consultation-procedures/ended#https://fedlex.data.admin.ch/eli/dl/proj/2022/21/cons_1
[2]
https://www.gizmodo.de/apple-sagt-nein-zu-uk-backdoor-end-to-end-verschluesselung-faellt-weg-2000014910
[3]
https://www.watson.ch/digital/wirtschaft/517198902-proton-schweiz-chef-andy-yen-zum-ausbau-der-staatlichen-ueberwachung
The post La révision prévue de l’OSCPT menace les droits fondamentaux et
compromet le chiffrement appeared first on ISOC Switzerland Chapter.
Tag - Human Rights
Work on Tech-Dossier on Privacy
Since January 2025 ISOC-CH is working on privacy-focused Tech Dossiers (TD),
which relate to various projects which are technically supported by Next
Generation Internet (NGI) funding, provided by the EU Commission and the State
Secretariat for Education, Research and Innovation (SERI) of the Swiss
Confederation (cf. https://www.sbfi.admin.ch/sbfi/en/home/seri/seri.html). In
scope of this work, also the Artificial Intelligence (AI) topic was given
special attention as to show how to make a more sovereign use of its potentials
without neglecting the risks associated to the intensified practice in
datafication of everything (including the collection and use of Personal
Identifiable Information, PII) to make those systems generate (sometimes useful)
answers.
Teaching the Teachers on Privacy
As an audience, we choose to raise awareness among early stage secondary school
teachers in their last step of formation about the dangers of datafication,
which (soon) will have the job to teach their topic (e.g., German or
Mathematics) on secondary schools among Switzerland. As teaching is done more
and more interdisciplinary and with an increasing relation to digitization,
teachers are formed at University of Zurich (UZH) also in aspects of digital
educational tools used in teaching. From our perspective, it’s absolutely vital
that at least young teachers get themselves and critically tought in aspects of
digitization such that they can raise awareness among kids about it and we can
have a scalable effect on spreading critical knowledge on privacy implications
of digital systems, increasing thus media literacy in the general public and
give insights to alternatives which can be used.
Concrete Teacher Audience at University of Zurich
To start this task, we teamed up with Tessa Consoli, Academic Associate to the
Chair of Prof. Dr. Dominik Petko on Teaching and Educational Technology at UZH
in the Institute of Education (IfE; cf.
https://www.ife.uzh.ch/en/research/petko/staff/consolitessa.html), researching
on aspects of the influence and use of digitzation in the secondary school
system. Since Spring Semester 2025 she runs a course on Transerversal Learning
including a strong focus on digitization topics in schools (cf. course
description:
https://studentservices.uzh.ch/uzh/anonym/vvz/?sap-language=DE&sap-ui-language=DE#/details/2024/004/SM/51260439).
With her work, the IfE is assessing which digital educational tools are being
used in the secondary school system across Switzerland, running surveys (cf.
corresponding research work: https://www.ife.uzh.ch/en/research/petko.html).
First Efforts with a Presentation and Reactions
As the course lecturer Tessa sees and shares the interest to shed light not only
on chances, but also on the risks of the ongoing pervasive (mass) datafication —
including the loss of digital sovereignty in the public school system —, we were
invited to give a public intervention in her course on 18.3.2025 (cf. in PDF:
slides), not only showing the problematic global situation of mass datafication
through, e.g., means of Mass Surveillance as shown since — at the very latest —
the Snowden revelations since June 2013, but also how to engage in self-defense
by using technological tools for a more decentralized and private Internet,
using means of media literacy and tools which are also supported by the NGI
funding framework (like, e.g., Mastodon, Tor or Jitsi).
The intervention at UZH proved to be very useful as the teachers present weren’t
generally aware of the scope of the (non-consensual) datafication going on,
which happens to be used, e.g., in AI systems as training material, imposing
privacy risks of data leakage and loss of control through automatic
decision-making with people don’t understand why certain (e.g., insurance)
prices for them rise or they don’t get a credit. Awareness at which points data
gets collected by own actions was also not very sharp: most people weren’t aware
that “simple” news sites massively collect behavioral data and share it with
hundreds of “partners” — a problem which can be reduced by using certain Add-Ons
or Browser Bundles (especially for smart phones) to share less data by technical
means.
The post NGI0: Teach the Teachers on Dangers of (Mass) Datafication appeared
first on ISOC Switzerland Chapter.
On May 15th, ISOC Switzerland Chapter hosted the Public Policy Sessions 2024
including a diverse set of introductory talks and a very interesting panel on
the topic of disinformation online, organized by Bernie Hoeneisen, co-founder of
ISOC-CH. You can watch the recorded live stream here:
https://livestream.com/internetsociety/isoc-ch-public-policy2024 First, Markus
Kummer (ISOC-CH Chapter Advisory Council Representative) introduced...
The post Public Policy Sessions 2024 (summary) appeared first on ISOC
Switzerland Chapter.
On Friday, March 24th, 2023, the ISOC-CH General Assembly decided to join the
explicit disassociation from the position paper "Joint Statement zur
Plattformregulierung" issued and co-signed by Digitale Gesellschaft (Digiges) a
few months ago.
The post ISOC-CH to support disassociation from DigiGes Platform statement
appeared first on ISOC Switzerland Chapter.
On Friday, March 24th, 2023, the ISOC-CH General Assembly decided to join the
explicit disassociation from the position paper "Joint Statement zur
Plattformregulierung" issued and co-signed by Digitale Gesellschaft (Digiges) a
few months ago.
The post ISOC-CH to support disassociation from DigiGes Platform statement
appeared first on ISOC Switzerland Chapter.
The parliamentary initiative Pult violates the Swiss Federal Constitution,
including freedom of expression and information as well as freedom of the media.
Therefore ISOC-CH, pEp Foundation and Pirate Party recommend rejection of the
parliamentary initiative Pult.
The post ISOC-CH, pEp Foundation and Pirate Party recommend rejection of the
parliamentary initiative Pult appeared first on ISOC Switzerland Chapter.
John Spencer, a former US Army Major, is the Chair of Urban Warfare Studies at
the Madison Policy Forum. When Russian troops invaded Ukraine and started to get
bogged into a gruelling siege at Mariupol, he decided to help the best way he
could: by getting his urban warfare manual translated to Ukrainian and hope...
The post Can Russian Wikipedia go offline? appeared first on ISOC Switzerland
Chapter.
On June 5th and 6th, Mission Publiques invited stakeholders worldwide to discuss
the future of Internet governance and to seek answers to How to shape the future
of digital cooperation? Who should decide how to leverage the opportunities
brought by the use of digital technologies and mitigate the risks they involve?
A couple of board...
The post ISOC Switzerland Chapter takes part in “We the Internet” Global
Citizens’ and Stakeholders’ Dialogue appeared first on ISOC Switzerland Chapter.
Building on the first two events of the Values of Internet Technologies (VIT)
series, this third workshop will explore Human Rights and how they relate to the
digital sphere. We will delve into the impact of Internet protocol design on
Human Rights and look at the protocols existing today. Finally we will discuss
the potential of...
The post Human Rights and present / future ICT ‒ Why and how are they related?
appeared first on ISOC Switzerland Chapter.