all 98 comments

sorted by: hot top controversial new old
[–] 46 points 11 months ago (2 children)

EU officials are, incidentally, exempt from chat monitoring – which is quite convenient for someone like von der Leyen. Their communication is explicitly NOT to be monitored. The mere fact that those who drafted this law don't want it to apply to them tells you everything you need to know about it.

https://x.com/martinsonneborn/status/1995182586612609241

  • source
  • hideshow 2 child comments
  • [–] 13 points 11 months ago

    These pathetic morons think they'll be safe through this exemption. In reality these deliberate security holes will affect everyone. How will these morons be safe when every person they have contact with IRL is a walking microphone for every foreign intelligence agency?

  • source
  • parent
  • [–] 9 points 11 months ago

    So you're telling me the one person who's been making deals behind closed doors (illegal), and then 'accidentally' deleting all messages regarding said deals (also illegal) will be exempt from having all their communication scanned?

  • source
  • parent
  • [–] 44 points 11 months ago (6 children)

    people miss the most important problem with this. chat control is a fascist tool that can and will be used against us minorities. this is especially dangerous when more and more countries are starting to lean right.

    hitler would have had a field day with this kind of tech.

  • source
  • hideshow 6 child comments
  • [–] 4 points 11 months ago* (last edited 11 months ago) (2 children)

    Danes are fascist, they pushed it through.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 86 points 11 months ago (3 children)

    misleading headline, this isn't a list of countries in which the law will (if it passes) be different (it won't be, it's an EU law, so will be the same in all EU countries), it's a list of countries that currently support/oppose the law

  • source
  • hideshow 3 child comments
  • [–] 11 points 11 months ago (1 child)

    (it won't be, it's an EU law, so will be the same in all EU countries)

    This is not true btw. It's not a mandatory law, and if you read the news about this the last 3 weeks, you would know that.

    EU laws are not automatically mandatory. That's not how it works at all.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 38 points 11 months ago (2 children)

    Is there something we can do to effectively oppose that shit ?

  • source
  • hideshow 2 child comments
  • [+] 35 points 11 months ago (3 children)
  • [–] 128 points 11 months ago (5 children)

    Countries which support the implementation of Chat Control:

    Spain, Romania, Portugal, Malta Lithuania, Hungary, Ireland, France, Denmark, Croatia, Cyprus, and Bulgaria.

    Countries that are undecided:

    Belgium, Greece, Italy, Latvia, Slovakia, and Sweden.

    Countries which oppose Chat Control:

    Slovenia, the Netherlands, Poland, Luxembourg, Germany, Estonia, Finland, the Czech Republic, and Austria

  • source
  • hideshow 5 child comments
  • [–] 69 points 11 months ago* (3 children)
  • [–] 27 points 11 months ago (2 children)
  • [–] 17 points 11 months ago*

    Can someone help me understand the likely outcome in countries that implement chat control? Will those governments force Google and Apple to remove apps that do not comply (e.g. Signal) from their official app stores? Will those governments somehow detect users who find workarounds and go after them? I figure most people in those countries will shrug their shoulders and move on with their lives, but how will this impact citizens who do not wish to comply?

  • source
  • parent
  • [–] 28 points 11 months ago

    Everyone who originally proposed this or otherwise helped in drafting this should be thoroughly investigated under suspicion of foreign affiliation. Chat Control doesn't just start the EU's transformation into a surveillance state. It also weakens its digital defenses. No matter how you look at it, this is treason both towards the European people, as well as towards the individual countries and the Union as a whole.

  • source
  • [–] 54 points 11 months ago (4 children)

    And here I was thinking the EU was winning its fight against authoritarianism. Guess nowhere is safe, everyone's gotta push back no matter where you are. Fucking exhausting that they can't just leave us the fuck alone.

  • source
  • hideshow 4 child comments
  • [–] 8 points 11 months ago* (last edited 11 months ago) (1 child)

    We are embracing authoritarianism everywhere. Democracies are dying.

    Politicians are not ignorant of the risks; as the article mentions, they had several advisors, including scientists, who warned of the danger. If our leaders didn't know it, they wouldn't exclude themselves from the proposal.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 17 points 11 months ago

    Dear mods, watch what you remove from these chats, our freedoms are getting fucked, people should be allowed to be indignant.

    That being said i hope the legislators sit on cacti all day every day, those fucking assholes are exempt from this bullshit.

    They will take my data out of my cold dead hands. It was a matter of time, sure, but I was actually holding on to hope for this one. I am pissed, dismayed even.

    Session, signal, simplex are your friends. If those give up the ghost and bend the knee then we are going back to irc and aliases. Fucking shit!

  • source
  • [+] 13 points 11 months ago (1 child)
  • [–] 11 points 11 months ago

    If this came to Canada, my sister and I will be using Briar.

  • source
  • [–] 11 points 11 months ago (2 children)

    Wow, this is bad. I thought this was over when Germany chose not to support it. Apparently not!

  • source
  • hideshow 2 child comments
  • [–] 25 points 11 months ago (1 child)

    The one good thing of brexit: UK isn't beholden to this.

    The bad thing is that their own laws aren't much better. And of course all the other brexit bad stuff

  • source
  • hideshow 1 child comment
  • [–] 8 points 11 months ago (1 child)

    Now let's hope Parliament will still vote against it.

  • source
  • hideshow 1 child comment
  • [–] 14 points 11 months ago (11 children)

    It's kind of unclear what "voluntary" means. Is it voluntary for countries to enforce? Is it voluntary for companies to scan chats?

  • source
  • hideshow 11 child comments
  • [–] 8 points 11 months ago (2 children)
  • [–] 6 points 11 months ago (1 child)

    In that case, is there any change? Companies could already do that if they wanted. Many of them already did.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 1 point 11 months ago* (last edited 11 months ago)

    It seems the reason companies are currently allowed to do this in the EU is because there was in 2020 a temporary derogation from certain provisions of the e-Privacy Directive.

    But it was temporary, so it will expire in April 2026. With this new law the intention is to make that "voluntary detection" a permanent thing they allow service providers to do, as a norm. The providers still have the choice to not do it, so I don't think this affects services like signal, as far as I understand.

  • source
  • parent
  • [–] 5 points 11 months ago (7 children)

    The later. However, they could still be fines for not doing what is needed to reduce "the risks of the of the chat app", whatever the fuck that can mean when talking about illegal.content

  • source
  • parent
  • hideshow 7 child comments
  • [–] 1 point 11 months ago* (last edited 11 months ago) (5 children)

    Where is this explained? the article might be wrong then, because it does state the opposite:

    scanning is now “voluntary” for individual EU states to decide upon

    It makes it sound like it's each state/country the one deciding, and that the reason "companies can still be pressured to scan chats to avoid heavy fines or being blocked in the EU" was because of those countries forcing them.

    Who's the one deciding what is needed to reduce “the risks of the of the chat app”? if it's each country the ones deciding this, then it's each country who can opt to enforce chat scanning.. so to me that means the former, not the latter.

    In fact, isn't the latter already a thing? ...I believe companies can already scan chats voluntarily, as long as they include this in their terms, and many do. A clear example is AI chats.

  • source
  • parent
  • hideshow 5 child comments
  • [–] 1 point 11 months ago (4 children)

    I recommend reading the dutch debate : https://www.tweedekamer.nl/kamerstukken/plenaire_verslagen/detail/2025-2026/17

    And yes, the latter is currently a thing (but in a weaker form) but will no longer be allowed in april 2026, which is why this law is getting pushed so hard. Currently chats can be asked by police/interpol/... But they need good reasons, and the results can be varying because chat platforms like signal do not keep chat messages/stuff.
    The new law forces them to have systems in place to catch or have data for law inforcements. It just allows for 'any system to get the needed info', it no longer says chat scanning is needed directly, but is rather indirectly which is as stupid and bad as before.

  • source
  • parent
  • hideshow 4 child comments
  • [–] 2 points 11 months ago* (last edited 11 months ago) (3 children)

    Thanks for the link, and the clarification (I didn't know about april 2026).. although it's still confusing, to be honest. In your link they seem to allude to this just being a way to maintain a voluntary detection that is "already part of the current practice"...

    If that were the case, then at which point "the new law forces [chat providers] to have systems in place to catch or have data for law inforcements"? will services like signal, simplex, etc. really be forced to monitor the contents of the chats?

    I don't find in the link discussion about situations in which providers will be forced to do chat detection. My understanding from reading that transcript is that there's no forced requirement on the providers to do this, or am I misunderstanding?

    Just for reference, below is the relevant section translated (emphasis mine).

    In what form does voluntary detection by providers take place, she asks. The exception to the e-Privacy Directive makes it possible for services to detect online sexual images and grooming on their services. The choice to do this lies with the providers of services themselves. They need to inform users in a clear, explicit and understandable way about the fact that they are doing this. This can be done, for example, through the general terms and conditions that must be accepted by the user. This is the current practice. Many platforms are already doing this and investing in improving detection techniques. For voluntary detection, think of Apple Child Safety — which is built into every iPhone by default — Instagram Teen Accounts and the protection settings for minors built into Snapchat and other large platforms. We want services to take responsibility for ourselves. That is an important starting point. According to the current proposal, this possibility would be made permanent.

    My impression from reading the dutch, is that they are opposing this because of the lack of "periodic review" power that the EU would have if they make this voluntary detection a permanent thing. So they aren't worried about services like signal/simplex which wouldn't do detection anyway, but about the services that might opt to actually do detection but might do so without proper care for privacy/security.. or that will use detection for purposes that don't warrant it. At least that's what I understand from the below statement:

    Nevertheless, the government sees an important risk in permanently making this voluntary detection. By permanently making the voluntary detection, the periodic review of the balance between the purpose of the detection and privacy and security considerations disappears. That is a concern for the cabinet. As a result, we as the Netherlands cannot fully support the proposal.

  • source
  • parent
  • hideshow 3 child comments
  • [–] 2 points 11 months ago* (last edited 11 months ago) (2 children)

    Id need to look for it again, but i remember reading she was saying that the current proposal is vague in what it sees as required to prevent what she calls risks. I remember them asking her multiple times if she was against a law to prevent csa and the sharing there off, in which she replied multiple times that she was not, but that the law was too vague about what it constitutes as necessary to prevent it. Did i dream it? ><

    Edit: found it!

    Mevrouw Kathmann (GroenLinks-PvdA):
    Het is niet per se alleen zo dat de huidige praktijk wordt voortgezet. Er zitten bijvoorbeeld ook zinnen in het voorstel die aangeven dat álle risico's moeten worden weggenomen. Het is ongelofelijk vaag, een heel grijs gebied, wat dat betekent. Dat is één. Dat is echt een heel groot risico. Daarnaast noemde de heer Van Houwelingen net al het punt van de leeftijdsverificatie. We hebben niet goed met elkaar kunnen bespreken wat daar nou precies in voorligt en hoe wij daar verder mee om moeten gaan. Dit zijn twee dingen die ik er nu zo uitpik.
    
  • source
  • parent
  • hideshow 2 child comments
  • [–] 2 points 11 months ago* (last edited 11 months ago) (1 child)

    Ah, I see. Sorry, the text was too long and I'm not dutch so it was hard to spot that for me too.

    But I interpret that part differently. I think them saying that there's an ambiguous section about risks does not necessarily mean that the ambiguity is in the responsibility of those who choose to not implement the detection.. it could be the opposite: risks related to the detection mechanism, when a service has chosen to add it.

    I think we would need to actually see the text of the proposal to see where is that vague expression used that she's referring to.

  • source
  • parent
  • hideshow 1 child comment
  • load more comments (1 reply)
  • [–] 7 points 11 months ago (4 children)

    OK I'm getting a flip phone

  • source
  • hideshow 4 child comments
  • [–] 10 points 11 months ago (3 children)

    I thought making calls and sending SMS was one of the least secure things you could do regarding communication? That secure and encrypted communication with messaging apps was the only way.

    Now we have nothing. 😐

  • source
  • parent
  • hideshow 3 child comments
  • [–] -1 points 11 months ago* (2 children)

    At least if you just do phone calls the attack surface is reduced... They can scan your calls maybe, but not your entire chat history with all of your contacts and give it to an AI which could profile you based on that + you are not scanned on everything else you do on your phone / locked into proprietary ecosystems.

    The ideal would just be using a Linux platform and using something like xmpp, but who are you gonna convince to use it? People use what they are used to use, if it's not popular messaging apps is phone calls.. And now it seems a more private alternative..

  • source
  • parent
  • hideshow 2 child comments
  • [–] 9 points 11 months ago* (7 children)

    For years the plan was to make this scanning mandatory. In early November 2025, however, the Danish government amended the text: scanning is now “voluntary” for individual EU states to decide upon. That small word change was enough for the 27 EU countries to agree on November 26.

    If chat control would have been made mandatory, you can bet (and i'd be willing to bet a lot of money on it) that you're going to have AfD in germany and FPÖ in austria (since they're already pretty anti-EU) making a lot of noise about how evil the EU is for infringing on people's privacy. (And they would be right about this, as much as i don't like to agree with them.) This would give them more votes, than they already have.

    Making it voluntary is a clever trick of the EU to not make yourself extremely unpopular among the population. Well done, i'd say.

  • source
  • hideshow 7 child comments
  • [–] 14 points 11 months ago (3 children)

    If they work anything like the far right in the U.S., they’ll raise hell about it til they get elected then implement it themselves.

  • source
  • parent
  • hideshow 3 child comments
  • [–] 1 point 11 months ago* (last edited 11 months ago)

    It seems the article is misinterpreting things. It's not that it's "voluntary for individual EU states".. but rather "voluntary" for service providers. The service providers don't have to implement this chat detection if they don't want to.

    The thing is that if they don't pass something like this, then by April 2026 a bunch of current services that are already doing CP detection would be breaking the law, since the temporary derogation of the e-Privacy Directive will expire. But I don't think this affects services like signal/simplex who voluntarily choose to not try to detect it.

  • source
  • parent
  • [–] 1 point 11 months ago

    Every single person that voted in favour must be held on corruption charges. No running free.

  • source
  • [+] 1 point 11 months ago* (2 children)
  • [–] 1 point 11 months ago (2 children)

    Welp guys, looks like I'm moving to [insert country without that sh*t] (TBD). Or atleast my router is.

  • source
  • hideshow 2 child comments
  • [–] 1 point 11 months ago* (last edited 11 months ago)

    The thing is.. that even if there are countries publicly rejecting this, once the infrastructure is in place and a backdoor exists due to it being enforced by some other country, how can you be sure it's not being used / exploited?

    Even in the (hypothetical) case that the government is not using it (regardless of what they might say to the public), I wouldn't trust that this backdoor would be so secure that nobody else than a government could make use of it.

  • source
  • parent
  • [–] -4 points 11 months ago (19 children)
  • [–] 13 points 11 months ago (7 children)

    And when they pull out of Europe because they won't comply?

  • source
  • parent
  • hideshow 7 child comments
  • [–] 1 point 11 months ago (4 children)
  • [–] 5 points 11 months ago* (last edited 11 months ago)

    I dont see fdroid blocking the app. I think signal is in the guardian project repos. Anyway a repo can just be hosted in switzerland or on tor or something. I would be more worried about govenments blocking access to the signal servers.

    All this theatre in the name of protecting kids, Yet the pedo formally known as prince andrew is still walking free.

  • source
  • parent
  • [–] 4 points 11 months ago (2 children)

    won't help when their servers block access from EU

  • source
  • parent
  • hideshow 2 child comments
  • load more comments (-1 replies)
  • [–] 8 points 11 months ago (8 children)

    Xmpp, IRC, Matrix, all great decentralized alternatives, but good luck convincing people in contacting you on Xmpp...

    This problem is a problem because it's a social tendency, not because we don't have alternatives.. Very sadly...

  • source
  • parent
  • hideshow 8 child comments
  • [–] 1 point 10 months ago

    This is definitely the biggest barrier. I'm not sure what the proper solution is. Probably needs government backing.

    Ive convinced a decent chunk of my friends to message me on Signal by simply being unresponsive on WhatsApp lol. It's much harder to get people to use Matrix instead of Discord though...

  • source
  • parent
  • [–] 1 point 11 months ago (6 children)

    XMPP is great but my wife hates it.

  • source
  • parent
  • hideshow 6 child comments
  • [–] 1 point 11 months ago* (5 children)

    Hi Sorry can i ask what Is XMPP?

    Btw as a secure messgaing app i use simplex, mabye i Will look into matrix

  • source
  • parent
  • hideshow 5 child comments
  • [–] 3 points 11 months ago (4 children)

    It’s an open, decentralized protocol used for real-time messaging, so you can find many apps using this protocol, on android there is conversations which is very light and modern, just choose a pseudo and chat, no other registration, it is a paid app on the app store but free on fdroid. I also used simplex before but it didn't work well enough, the video calls were laggy.

  • source
  • parent
  • hideshow 4 child comments
  • [–] 2 points 11 months ago (2 children)

    What client do you suggest? I know It depends on the situation, but overall generally what would you suggest?

  • source
  • parent
  • hideshow 2 child comments
  • [+] -5 points 11 months ago (2 children)
  • 31 comments in c/privacy@programming.dev view that post