If you think client side scanning is not a massive spy apparatus, you don’t understand the technology. There is no such thing as purely on device CSAM detection. See Discord banning people for minecraft inventory pictures if you need an example how broken the automated part of the technology is. It’s just sending messagis to law enforcement to read with extra steps.
As for the first part, Chat Control is not mandating age verification. It’s identity verification. If a beraucrat decides lemmy.world is a risk, you will have to provide an ID to post here regardless of your age and the instance admin will have to use their limited abilities to store and protect them. Good luck with that shit. That is a spy apparatus. And it is unnecessary. The conversations are public. Instead of just letting the predators find a different place, create a better reporting system. Or hell, at least make it an actual age verification using Zero Knowledge proofs. But they don’t want to do that, they want our identities.
Same thing with CSAM, you don’t get born knowing the phone number of your local CSAM distributor. Law enforcement can monitor for people advertising. They can pose as interested people or distributors. There is no reason to break encryption over this. Nor is it even possible while open source exists.
If you think client side scanning is not a massive spy apparatus, you don’t understand the technology.
I think scanning of media is not a massive spy apparatus. Breaking e2ee and scanning of all communications would be. If they want to monitor journalists and protesters by only scanning media they are doing shit job at building their spy apparatus.
The conversations are public.
No they are not, most of social media (if not all) has some direct message mechanism.
Instead of just letting the predators find a different place, create a better reporting system.
Most kids don’t report those things. This is part of the problem and Chat Control does address that by mandating better reporting systems.
As for the first part, Chat Control is not mandating age verification.
It does:
“”" 3.Providers of interpersonal communications services that have identified, pursuant to the risk assessment conducted or updated in accordance with Article 3, a risk of use of their services for the purpose of the solicitation of children, shall take the necessary age verification and age assessment measures to reliably identify child users on their services, enabling them to take the mitigation measures. “”"
Chat Control only talks about identifying child users. I don’t see anything there that mandates storing of IDs. Can you point me to the relevant part of the legislation?
Same thing with CSAM, you don’t get born knowing the phone number of your local CSAM distributor. Law enforcement can monitor for people advertising. They can pose as interested people or distributors.
And I’m sure law enforcement already does that. As I said, privacy advocates think that’s enough and this problem should not be addressed by EU. EU think it should. Chat Control was not approved yet, there are discussions to find the right solution.
You are reading the text and not thinking what it looks like in reality.
I think scanning of media is not a massive spy apparatus. Breaking e2ee and scanning of all communications would be. If they want to monitor journalists and protesters by only scanning media they are doing shit job at building their spy apparatus.
What happens when the scan identifies an image as CSAM? If the answer is notify authorities with unencrypted chat, then it is a spy apparatus. The false positives are high enough that they will get to read countless innocent conversations and there are ways to intentionally induce false positives if you want specific conversations. And if it does not report, then what does it do?
No they are not, most of social media (if not all) has some direct message mechanism.
Those are rarely available to strangers by default and I have no issue in banning direct DMs to strangers.
Most kids don’t report those things. This is part of the problem and Chat Control does address that by mandating better reporting systems.
So there is one decent thing in this law, let’s pass all the privacy invasive stuff as well. /s I have no issue with better reporting, but the chat monitoring needs to go.
Chat Control only talks about identifying child users. I don’t see anything there that mandates storing of IDs. Can you point me to the relevant part of the legislation?
Sure, so how is a company supposed to implement it? Only to government issuing IDs can realistically provide Zero Knowledge proofs. If they don’t support this option, companies can’t really use it. And companies generally need to keep records that prove they are complying with the law, which is again impossible while preserving privacy unless the government helps.
And I’m sure law enforcement already does that.
Just google how underfunded to agencies responding to existing reports are. They are not doing anywhere near what they could.
Chat Control was not approved yet, there are discussions to find the right solution.
The reason it did not pass so far is because of privacy advocates spreading awareness of how fucking broken the law is and creating push back. The time to consult experts and improve the law was in the EU commission, before putting it to vote in the Parliament. Clearly they did not care to protect privacy until people pushed back. The commission and other supporters are still looking for ways to pass it without addressing the privacy issue. See recent emergency measure passed using vacations to bypass a proper vote.
I am sure there are people that support the bill with good intentions but I have lost any fate in the EU to care for the privacy of its citizens.
I am sure there are people that support the bill with good intentions but I have lost any fate in the EU to care for the privacy of its citizens.
That’s ok, you can be outraged about it. I’m not. I don’t support Chat Control but I’m also not worried police is going to monitor my chats on Signal looking for messages criticizing the government or that I will be prosecuted for my comments on lemmy. I have better things to be outraged about. You’re just another person on the internet insisting I should be outraged about it but I simply don’t care.
If you think client side scanning is not a massive spy apparatus, you don’t understand the technology. There is no such thing as purely on device CSAM detection. See Discord banning people for minecraft inventory pictures if you need an example how broken the automated part of the technology is. It’s just sending messagis to law enforcement to read with extra steps.
As for the first part, Chat Control is not mandating age verification. It’s identity verification. If a beraucrat decides lemmy.world is a risk, you will have to provide an ID to post here regardless of your age and the instance admin will have to use their limited abilities to store and protect them. Good luck with that shit. That is a spy apparatus. And it is unnecessary. The conversations are public. Instead of just letting the predators find a different place, create a better reporting system. Or hell, at least make it an actual age verification using Zero Knowledge proofs. But they don’t want to do that, they want our identities.
Same thing with CSAM, you don’t get born knowing the phone number of your local CSAM distributor. Law enforcement can monitor for people advertising. They can pose as interested people or distributors. There is no reason to break encryption over this. Nor is it even possible while open source exists.
I think scanning of media is not a massive spy apparatus. Breaking e2ee and scanning of all communications would be. If they want to monitor journalists and protesters by only scanning media they are doing shit job at building their spy apparatus.
No they are not, most of social media (if not all) has some direct message mechanism.
Most kids don’t report those things. This is part of the problem and Chat Control does address that by mandating better reporting systems.
It does:
“”" 3.Providers of interpersonal communications services that have identified, pursuant to the risk assessment conducted or updated in accordance with Article 3, a risk of use of their services for the purpose of the solicitation of children, shall take the necessary age verification and age assessment measures to reliably identify child users on their services, enabling them to take the mitigation measures. “”"
Chat Control only talks about identifying child users. I don’t see anything there that mandates storing of IDs. Can you point me to the relevant part of the legislation?
And I’m sure law enforcement already does that. As I said, privacy advocates think that’s enough and this problem should not be addressed by EU. EU think it should. Chat Control was not approved yet, there are discussions to find the right solution.
You are reading the text and not thinking what it looks like in reality.
What happens when the scan identifies an image as CSAM? If the answer is notify authorities with unencrypted chat, then it is a spy apparatus. The false positives are high enough that they will get to read countless innocent conversations and there are ways to intentionally induce false positives if you want specific conversations. And if it does not report, then what does it do?
Those are rarely available to strangers by default and I have no issue in banning direct DMs to strangers.
So there is one decent thing in this law, let’s pass all the privacy invasive stuff as well. /s I have no issue with better reporting, but the chat monitoring needs to go.
Sure, so how is a company supposed to implement it? Only to government issuing IDs can realistically provide Zero Knowledge proofs. If they don’t support this option, companies can’t really use it. And companies generally need to keep records that prove they are complying with the law, which is again impossible while preserving privacy unless the government helps.
Just google how underfunded to agencies responding to existing reports are. They are not doing anywhere near what they could.
The reason it did not pass so far is because of privacy advocates spreading awareness of how fucking broken the law is and creating push back. The time to consult experts and improve the law was in the EU commission, before putting it to vote in the Parliament. Clearly they did not care to protect privacy until people pushed back. The commission and other supporters are still looking for ways to pass it without addressing the privacy issue. See recent emergency measure passed using vacations to bypass a proper vote.
I am sure there are people that support the bill with good intentions but I have lost any fate in the EU to care for the privacy of its citizens.
That’s ok, you can be outraged about it. I’m not. I don’t support Chat Control but I’m also not worried police is going to monitor my chats on Signal looking for messages criticizing the government or that I will be prosecuted for my comments on lemmy. I have better things to be outraged about. You’re just another person on the internet insisting I should be outraged about it but I simply don’t care.
Silence supports the oppressor.
As you can see I’m not silent about it.
deleted by creator