Hacker News new | ask | show | jobs
by enterthematrix 1048 days ago
This headline is clickbait. The issue is banks not preserving records, something that the rules are ABUNDANTLY clear on.
5 comments

The full headline is "...to evade regulators’ reach", which is much clearer.
I had a problem with including the full headline because only so many characters could be used in the title of the post.
You could have used

"Banks fined millions evading regulation with Signal & WhatsApp"

News headlines have rules they use to make for shorter sentences.

They'd probably write

"Banks fined millions, delete records, use E2E apps"

Here's a link to the actual press release: https://www.sec.gov/news/press-release/2023-149

It makes no mention of evading regulation. This fine is for a failure to retain written communications. Which is impossible to do for some of these communications channels.

Not retaining written comms is evading regulations - "retain written comms" is one, and using Signal/WhatsApp is evading it.

Nobody working in banking is unaware of the written comms rules. Nobody using Signal or WhatsApp in that context is unaware they can't retain written comms. Can you prove intent? Probably not. Is it clear as daylight why this happened? Uh, yes.

And so the SEC hits them where it hurts at least a little bit, in the wallet.

Also, if you pay attention to the banking space... this is pretty much the usual cast of characters. There's absolutely no surprise.

Keep on carrying water for the NSA. We can live in a total surveilace world just by triggering you with "banks are bad."

People use iMessage/Signal/WhatsApp for myriad reasons: some good, some bad. There's no evidence in this case that any of what was said was in furtherance of a crime. The crime they've been fined for is that people--just people--were talking in totally normal communications channels, and their employer has failed to scrape one end of their E2E communications and save it to show to the SEC whenever it asks.

Signal and WhatsApp messages are trivial to retain - my company Hadrius does exactly this.
Intent is harder to prove.
What do you think we should assume about your communications on encrypted channels? This entire thing is yet another federal effort to criminalize encrypted communications, and it even works on the HN crowd. All they have to say is "big banks bad" and people here go from freedom fighters to government pawns.
Banks fined millions for using chat apps to evade regulators
That makes sense. The title character limit seems to be a cause of frequent confusion.
It does and the limit makes it come off as clickbait-y which I don't like.
Personally, I sympathize. Rewriting headlines here (when necessary) can be tough; it isn't a given that the optimal one will reveal itself.
The real issue is that there are just fines, which sound like a lot of money but it’s a small cost of doing illegal or shady business for banks.
one that can be pushed on to customers, too.

can't push jail on customers...

The title is not clickbait. WhatApp is known for being encrypted. Context provides the reasons why....this issue is not new.
... and the records couldn't be preserved if the employees are using Signal and WhatsApp?
Correct. Neither Signal nor WhatsApp is integrated into any corporate messaging system, so the communication flowing through those apps, is neither archived nor discoverable.
How does that differ from a simple SMS message - afaik SMS isn't integrated in any corporate messaging system either...
Four levels of government and an ISP having an easily searched and/or subpoenae'd copy of the message...?

What forum is this?

RCS are end to end encrypted.
Actually forgot this made it anywhere!

Any idea on the % adoption rate? Couldn't easily find it.

not sure why you are being downvoted. in many cases sms is not approved for client communications for exactly this reason
SMS is integrated in to the corporate messaging system on work mobile phones at banks (+ all calls recorded).
Yes, they are. Well beyond banks - it's a SOX compliance question for any publicly traded company.
The headline isn't clickbait enough. Banks are using encrypted messaging to avoid leaving evidence.
For many institutions SMS and iMessage are not approved platforms for records retention, it doesn't really have anything to do with being E2E
It's still not clickbait. It's an honest headline, and a good one because it draws in the reader as is the point of a headline. Headlines are not supposed to replace the article which seems to be the real problem this thread has. The headline would still not be clickbait if they were fined for using sms and the article said "fined for using sms."