5 ms·
Client side scanning is going to be required, it doesn’t matter if you’re on a VPN if your device is self-reporting.
by Dig1t 2y ago
Client side scanning is going to be required, it doesn’t matter if you’re on a VPN if your device is self-reporting.
- gpvos 2y agoHow would my device be (self-)reporting?
- Dig1t 2y ago>End-to-end encrypted services such as Whatsapp or Signal would have to implement the automated searches “prior to transmission” of a message (so-called client-side scanning, Article 10a). So app developers would be required to add code that will scan every message you send for "sensitive" content (which can be defined however the politicians like and be changed any time), and the app will report your message to the government. https://www.patrick-breyer.de/en/majority-for-chat-control-possible-users-who-refuse-scanning-to-be-prevented-from-sharing-photos-and-links/ https://www.patrick-breyer.de/en/majority-for-chat-control-p...
- gpvos 2y agoOkay, so not the device but the Signal app, as I already understood.
- worldsayshi 2y agoAll legal apps have to be self reporting I guess... So whenever you send anything to example.com you also send it to government-snooping-service.org?domain=example.com. And if you refuse to adjust your app you will get fined I guess. Will curl have to self report every request? Lol... Every client? Like will axios need to self report?
- pas 2y agoProviders, not individual apps. For actual details in the draft see page 45 and 46 ... https://cdn.netzpolitik.org/wp-upload/2024/05/2024-05-28_Council_Presidency_LEWP_CSAR_Compromise-texts_9093.pdf https://cdn.netzpolitik.org/wp-upload/2024/05/2024-05-28_Cou... ... "... measures shall be ... targeted and proportionate in relation to that risk, taking into account, in particular, the seriousness of the risk as well as the provider’s financial and technological capabilities and the number of users; ..."
- pantalaimon 2y ago> So whenever you send anything to example.com you also send it to government-snooping-service.org?domain=example.com. No, it's client side scanning - you have a database with bad material / a neural network trained to detect such material. Only when it detects a positive match, it will contact the government server.
- pas 2y agoBased on this proposal the strategy is - providers spend money on having a counter-abuse team - providers and authorities cooperate to identify risks - providers implement proportional controls based on the risks so if Meta/Signal/etc comes up with something they implement it users can continue to run their own private stuff. it seems this has almost nothing do with the organized sex crime stuff, it's about catching those lone pervs who realized they can send dick picks to minors all day. see page 45 and 46 https://cdn.netzpolitik.org/wp-upload/2024/05/2024-05-28_Council_Presidency_LEWP_CSAR_Compromise-texts_9093.pdf https://cdn.netzpolitik.org/wp-upload/2024/05/2024-05-28_Cou... "... measures shall be ... targeted and proportionate in relation to that risk, taking into account, in particular, the seriousness of the risk as well as the provider’s financial and technological capabilities and the number of users; ..."