"A temporary derogation from the ePrivacy Directive that allowed (but did not require) providers to scan private messages of unsuspected users for potential child sexual abuse material."
Does that imply it's currently not allowed?
EDIT: apparently not enforced at least:
"Chat Control 1.0 expires
The legal ground for voluntary, indiscriminate scanning ends. Google, Meta, Microsoft, and Snap state they will continue scanning private messages regardless. "
To everyone who wants to dismantle the EU: this is not the solution. Dismantling the EU is like burning down your own house just to get rid of flies. The UK left the EU and implemented its own version of chat control - Online Safety Act - without any transparency or real opposition. The right solution is the political fight. Europe is our home. We must keep it in good shape by getting rid of anything that makes it worse - like Chat Control.
As a EU citizen I’m at a loss for what to do about this. I feel that they’re going against any average citizen’s interest. What can we do to make them stop?
I don't understand. How does it affect encrypted messages? It seems like either you need:
1. allow MITM decryption by a privileged authority
2. require all devices doing E2EE have a non-user-modifiable piece of functionality to scan on-device
The second is the Apple style on-device CSAM scanner? I have to say that I do sometimes think about it while taking a photo of my baby playing in the bathtub - photos like my parents have of me which have been kind of nice to see later. It would be a pity if I had to have a separate analog camera just for baby photos because then I'd need to learn the whole developing film stuff.
Most everyone would love to see more work on stopping child sexual abuse.
But this is the ultimate "grant me dictatorial powers so I can do good" play.
Rather than narrow and specific - it's a broad based law that suddenly touches everyone even though offenders are a small percentage and should be able to be targeted more efficiently.
I have put up a list of all the MEPs who voted for the urgency procedure yesterday (in breach of EU rules) as well as their voting history on fundamental rights issues and who has been lobbying them:
its also just disastrous for signal to noise ratios. scanning everything means any sort of error rate is going to cause massive amounts of incorrect labelling. this means innocent things getting flagged and put into a system where people are treated like offenders when they arent until they can get an actual human with authority to review their circumstances (not guaranteed to happen at all btw), or some actual offenders get away with more bc they passed a scan
outlier cases aside, there is also just a large amount of processing power that will go into this, the service can only be worse off for it. Privacy is not just about being able to hide things, it is also about being in control of how you present to the world. not because that control is maniupulative but because we all exist within our own microcosms of uniqueness, using words slightly differently than each other, and having certain balances of intention and meaning with those we send messages to that cannot be fully presumed from a 3rd party. even in images.
Are they really saying "if you want to send private messages then go make your own network" ?
When it comes to online actions people ask for way more than reasonable. You dont get to be an invisible, impossible to track, unaccountable hacker man free to roam the internet on equal footing to the rest of the users.
The same governments pushing for this type of regulation are also the ones that fail to condemn high profile individuals involved in the crimes that these regulation are supposed to help fight. Makes you really wonder if it's about protecting the children.
Voluntary for whom? The service provider? Can I opt out of getting scanned?
> Does it touch encrypted messages? - No. End-to-end encrypted communications were never scanned but providers could deploy client-side scanning under this law.
So it circumvents e2e encryption?
---
How would these laws prevent me from just side loading my own open source client?
51 comments
[ 3.2 ms ] story [ 66.8 ms ] threadChat Control passed first round in EU Parliament
https://news.ycombinator.com/item?id=48819008
"A temporary derogation from the ePrivacy Directive that allowed (but did not require) providers to scan private messages of unsuspected users for potential child sexual abuse material."
Does that imply it's currently not allowed?
EDIT: apparently not enforced at least:
"Chat Control 1.0 expires
The legal ground for voluntary, indiscriminate scanning ends. Google, Meta, Microsoft, and Snap state they will continue scanning private messages regardless. "
1. allow MITM decryption by a privileged authority
2. require all devices doing E2EE have a non-user-modifiable piece of functionality to scan on-device
The second is the Apple style on-device CSAM scanner? I have to say that I do sometimes think about it while taking a photo of my baby playing in the bathtub - photos like my parents have of me which have been kind of nice to see later. It would be a pity if I had to have a separate analog camera just for baby photos because then I'd need to learn the whole developing film stuff.
But this is the ultimate "grant me dictatorial powers so I can do good" play.
Rather than narrow and specific - it's a broad based law that suddenly touches everyone even though offenders are a small percentage and should be able to be targeted more efficiently.
https://www.thatprivacyguy.com/blog/chat-control-the-415-who...
outlier cases aside, there is also just a large amount of processing power that will go into this, the service can only be worse off for it. Privacy is not just about being able to hide things, it is also about being in control of how you present to the world. not because that control is maniupulative but because we all exist within our own microcosms of uniqueness, using words slightly differently than each other, and having certain balances of intention and meaning with those we send messages to that cannot be fully presumed from a 3rd party. even in images.
Are they really saying "if you want to send private messages then go make your own network" ?
I think there is no way to fix this system from the inside - it is designed to be abused like that. We need an alternative system.
My answer: regulating something:)
Voluntary for whom? The service provider? Can I opt out of getting scanned?
> Does it touch encrypted messages? - No. End-to-end encrypted communications were never scanned but providers could deploy client-side scanning under this law.
So it circumvents e2e encryption?
---
How would these laws prevent me from just side loading my own open source client?