Privacy

4788 readers

449 users here now

Icon base by Lorc under CC BY 3.0 with modifications to add a gradient

founded 3 years ago

MODERATORS

Ategon@programming.dev

danielintempesta@programming.dev

256

Chat Control 1.0 HAS PASSED (mastodon.social)

submitted 3 days ago* (last edited 3 days ago) by unglueclass23@programming.dev to c/privacy@programming.dev

48 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[–] CorrectAlias@piefed.blahaj.zone 47 points 3 days ago* (last edited 3 days ago) (4 children)

In case you don't know what 1.0 does:

What is it?

A temporary derogation from the ePrivacy Directive that allowed (but did not require) providers to scan private messages of unsuspected users for potential child sexual abuse material.

Is scanning mandatory?

No — voluntary. In practice used mainly by unencrypted US services such as Gmail, Facebook/Instagram Messenger, Skype, Snapchat, iCloud Mail, and Xbox.

Does it touch encrypted messages?

No. End-to-end encrypted communications were never scanned but providers could deploy client-side scanning under this law.

Status today

Back in force. After expiring on 4 April 2026, it was reinstated on 9 July 2026 when Parliament failed to reach the absolute majority of 361 MEPs needed to reject the Council's fast-tracked "new" law. Only 314 MEPs voted to reject it, so suspicionless mass scanning is permitted to continue until 2028.

https://fightchatcontrol.eu/chat-control-overview

[–] abc@suppo.fi 11 points 2 days ago (1 children)

Also important to note I think is that Chat Control 1.0 was enacted in July 2021. It was meant to be a temporary stop-gap solution until CSAR aka Chat Control 2.0 would be negotiated as a more permanent solution. 1.0 already got extended in 2024 to April 2026 when CSAR wasn't progressing.

So they just reinstated the temporary solution.

[–] Mikina@programming.dev 7 points 2 days ago

This is important. Basically, nothing changes. The parties that wanted to (Meta, Google, Microsoft) have already been doing it for the last 5 years.

I'm not defending it, I've been screaming about it every time 2.0 was discussed, especially with people who I know refuse to move away from M$ and Meta, but apparently they don't care that much.

I just hope they will settle on 1.0 passing and fuck off with it being mandatory, so I have at least some place to chat and keep my data.

[–] Axolotl_cpp@feddit.it 8 points 2 days ago* (last edited 2 days ago) (1 children)

AKA: it does in fact impact E2EE because it allow a thirdy party to read the messages in plain text which E2EE does not like

[–] ExLisper@lemmy.curiana.net -4 points 2 days ago (2 children)

What third party? It says "providers". So WhatsApp can scan messages you send in WhatsApp. Who's the third party here?

BTW no provider is doing this.

[–] Axolotl_cpp@feddit.it 7 points 2 days ago (1 children)

The thirdy part IS whatsapp, thirdy party here is meant from the POV of a conversation, i never invited whatsapp in my convo duh

[–] ExLisper@lemmy.curiana.net -1 points 2 days ago

You didn't install WhatsApp, add contacts to it and type you messages in it and it's still scanning them? Crazy shit.

[–] Galapagon@sh.itjust.works 4 points 2 days ago (1 children)

No provider is doing this. WINK WINK

[–] ExLisper@lemmy.curiana.net 0 points 2 days ago

Which ones are?

[–] AnUnusualRelic@lemmy.world 6 points 2 days ago

Finally, somebody is thinking about the children!

🙄

[–] tuxiqae@lemmy.dbzer0.com 5 points 2 days ago* (last edited 1 day ago)

It's so outdated that it's talking specifically about Skype even though it hasn't been a thing for a couple of years now