Context:
Chat Control 2.0: EU governments set to approve the end of private messaging and secure encryption
"By making a minor concession EU governments hope to find a majority next week to approve the controversial 'chat control' bill. According to the proposed child sexual abuse regulation (CSAR), providers of messengers, e-mail and chat services would be forced to automatically search all private messages and photos for suspicious content and report it to the EU. To find a majority for this unprecedented mass surveillance, the EU Council Presidency proposed Tuesday that the scanners would initially search for previously classified CSAM only, and even less reliable technology to classify unknown imagery or conversations would be reserved to a later stage. The proposed „deal“ will be discussed by ambassadors tomorrow and could be adopted by ministers next week."
I sure hope the courts toss that thing. It would be the single worst violation of peoples privacy since the internet became a thing. It's incredible that lobbyists and police unions have this much impact on policy creation.
Poor Axel Voss showed everyone how much of a media company whore he is just to get his biggest lifetime achievement taken down by the EU court because those filters could result in censorship (something that literally everybody told the supporters would happen)
The courts very likely will strike something like this down, but the people responsible know this. Court dealings can take years and during this time our privacy gets violated and some kind of profit is made.
And even when this law is declared illegal the existing data will likely be kept, only new collection is stopped (happened in Germany)
This seems to be a general theme. Those arguing loudest for better privacy are really saying "only we should be allowed to invade your privacy". See: Google, Apple, the EU
because (I firmly believe that) it won't get passed. The Commission doesn't have a majority yet, and it will be laughed out of the EUP. EVEN IF the EUP votes to pass it, the ECJ ought to step in, because the UNCHR and the European Data Protection Supervisor have already said that it goes against the (human(!)) right of privacy. There is no shot that this will get implemented by 27 member states.
Criminals aren't going to be using services that comply anyways. They'll have their own underground ones. This is just a violation of regular citizens rights.
Obviously. The point is that it's the kind of thing that will make me reject the very society I'm living in, and I would change it wholly to avoid this.
If the source was my own government, for the first time in my life, I'd be considering moving to a new country.
One could think you're proposing this as an alternate solution. It's not. And Brexit is the biggest proof.
That said implementing backdoors is so backwards it's creative in the worst way. You basically prepare the tools for a rogue government, rogue government employee, or a knowledgeable malicious actor to grab secure information from the silver plater. It's the dumbest shit.
With a little knowledge, it's not very hard to make your own messaging app and share it with those you know. And there's plenty projects online that give you what you need without having to write the code yourself. Alternatively, there's just plenty dark web and under the radar apps already that won't bend to this ruling.
What it is, though, is very inconvenient and annoying to do so.
But if you're an actual criminal, then there is this solution here that can never be subject to this ruling.
So what this clearly means is that the EU will violate the privacy of all the everyday people that don't handle that inconvenience, pushing the serious criminals to dark channels.
Friendly reminder it's never about consumer rights. It's about who is in control of the data.
A question you can all ask yourself. Despite the warts in both who would you rather control your data (you have no choice here. Someone is controlling your data and it is not you)
A. Google, Amazon, Microsoft, etc.
B. Government
You'll get strong answers either way. Personally I'd rather the government strictly from an accountability perspective but that also warrants governments not electing shitheads which unfortunately the world is leaning towards with these populist right wing politicians gaining favour.
A, by a goddamn long shot. If google mistakenly thinks I've advocated for a crime against a massive corporation, they'll remove my account and ban me from their services. If the government mistakenly thinks I've advocated for a crime against a massive corporation, they'll arrest me and ruin my life. Microsoft doesn't give a shit if you acquired the 1s and 0s that comprise a popular TV show without paying for them. The government will fine you more than the average person will make in their entire life.
It also depends on where you live. Facebook doesn't care if you're gay or trans, if anything that's valuable monetizable data about you. Iran will straight up fucking kill you.
It can be you. It doesn't have to be Big Corps or Government. It can be federated instances, it can be self-ownership of data, it can be E2E encrypted.
This one is completely about the people who pretend to "care about the children" but coincidentally also sell the software that does the proposed CSAM scanning. It's a money making-scheme for them. Shit like this makes me lose the last bit of hope I have for democracy (really hard to not put this into quotes by this point ... +__+).
Well they can go fuck themselves. Even if they pass it and messenger or whatsapp start (as in they totally dont already) scanning your chats and snitching I wonder how they are going to force other messaging services to comply.
I'd imagine if, say Signal, refuses to comply and gets banned from the EU, one could always use a VPN. I think that nothing short of either a full global ban or implementing a version of The Great Wall of China would allow these ridiculous laws to be enforced. Even then, there will always be ways around it for those willing to go the extra mile.
Here's what this bill does for children: reduces pedos from sharing images of them yay!
Here's also what it does for Children: un-encrypts their chats so pedos know what they are doing, where they are, who they are with, what they like, their vulnerabilities and much much more.
Trading safety for a viewing crackdown. Congratulations
We need to collect the list of names of every politican and such who has advocated for this. These humans are dangerous to society, and we need to be on the lookout regarding what are they doing next. We also need to raise awareness about them so that given the chance, they can be removed from positions of power.
Fairly fucking sure this is a nothingburger like Art. 13-17 was, and will not break E2EE messengers.
The reason:
Encryption plays an essential role in securing communications. The international human rights law test of legality, necessity and proportionality should be applied to any measures that would affect encryption. Both the UN Commissioner for Human Rights[1]and the European Data Protection Supervisor[2]have concluded that the EU’s proposal for a regulation on child sexual abuse material fails this test[3].
A recent article published by Wired[4]described a European Council survey of Member States’ views on regulating encryption. In its response to the survey, Spain stated that there should be legislation prohibiting EU-based service providers from implementing end-to-end encryption.
Requiring platforms and device manufacturers to build back doors to facilitate law enforcement access would make everyone more susceptible to malicious hacking from criminals and foreign adversaries alike[5]. Measures allowing public authorities to access the content of communications affect the essence of the right to privacy.
1.Which encryption experts did the Commission consult when preparing its proposal for a regulation on child sexual abuse material?
2.Will the Commission revise its position on encryption in view of the opinions of human rights associations and experts?
3.Given the abuse of Pegasus, how will the Commission ensure that the fundamental right to privacy is protected if a Member State, such as Spain, decides to ban encryption?
Submitted: 24.5.2023
[1] UN High Commissioner for Human Rights, ‘The right to privacy in the digital age’, A/HRC/51/17, 4 August 2022, para. 28, https://www.ohchr.org/en/documents/thematic-reports/ahrc5117-right-privacy-digital-age.
[2] https://edps.europa.eu/press-publications/press-news/press-releases/2022/combat-child-sexual-abuse-online-presents-serious-risks-fundamental-rights_en.
[3] https://home.crin.org/readlistenwatch/stories/privacy-and-protection.
[4] https://www.wired.com/story/europe-break-encryption-leaked-document-csa-law/.
[5] https://cdt.org/area-of-focus/government-surveillance/encryption-and-government-hacking/.