Comment by tptacek
10 hours ago
Again: in every system there's always some kind of sleuthing you could do to attempt to identify a user. That's not the legal standard. The complaint against A/I is that they knowingly and deliberately assisted the PKK.
No. With dummy messages you are guaranteed that traffic analysis will not be possible.
Because you connect to the network, then start sending messages to everybody continuously, a message every second, or every ten seconds, or every 100 seconds, you will, every second, or every ten seconds, or 100 seconds, be able to send a message to whoever you want, and you will not be distinguished in any way from the other network participants, even if an adversary controls all nodes but that of the person you want to communicate with. Without dummy messages, traffic analysis will always be possible.
If they knowingly and deliberately assisted the PKK in a forbidden way, there would likely have been an Italian prosecution. Since this hasn't happened, it probably isn't true.
The illegality of the PKK in the Europe is also something quite complicated. The commission have declared it a terrorist organization, but here in Sweden such declaration have no judicial meaning and we define terrorism by whether the organization satisfies objective criteria defined in our law, which the courts determine from case to case (which in Sweden means that if you send money the PKK and prosecutor brings the case and argues that they're terrorist organization, and you argue badly, and he wins, then you might be convicted, but when another guy does the same thing, and argues well, he wins); and the situation in Belgium is similarly complicated, with a legal dispute about whether PKK was a terrorist organization, which PKK won, and thus the PKK was, in Belgium, declared by a court to not be a terrorist organization.
I don't have an opinion about the PKK. My broad take is: if Europe doesn't care, there's no reason for the US to be leading a sanctions effort. I'm confident like everybody else that this is largely pretextual.
All I care about is the claim that if they can do this to A/I they'll come for Signal next. That doesn't follow.