EU Council to Vote on Chat Scanning Proposal on Thursday

Original Article ↗ Hacker News Discussion ↗

Circumvention and Self‑Hosting

  • Many note that technically literate users can evade scanning via self‑hosted XMPP/Matrix, custom encryption, or non‑compliant apps, but “the masses” likely won’t.
  • Some expect eventual OS‑level or client‑side scanning, making transport encryption or self‑hosting less relevant.
  • Linux and open distributions are seen as hard to fully control, especially for criminals and experts.

Scope, Exemptions, and Technical Mechanisms

  • Proposal is said to cover all commercial and ad‑funded services, with only non‑commercial, non‑ad‑funded services (e.g., much open source) out of scope.
  • There is confusion over what counts as “open source” and “non‑commercial” (Signal, Matrix, WhatsApp, self‑hosted family servers, small NAS use).
  • Some point out explicit inclusion of end‑to‑end encrypted messengers and hosting services, raising fears that even small, private hosting could be targeted.
  • OS‑based scanning, TPM/signed bootloaders, and mandatory client‑side AI detection are discussed as likely implementation paths.
  • Reported French carve‑out for police/security apps fuels concern about double standards.

Privacy, Security, and Abuse Risks

  • Strong worries about mass surveillance, prior restraint on speech, and creation of a vast database of intimate content (e.g., teen sexting, medical photos).
  • Examples cited of existing scanning leading to innocent users losing critical accounts despite being cleared by police.
  • Many argue weakening or bypassing encryption increases attack surface for hackers, corporations, and authoritarian misuse.

Effectiveness Against Crime

  • Widespread skepticism that serious criminals and child abusers will be caught: they can switch to “illegal tools” and custom setups.
  • Fear that the law mainly impacts ordinary users while sophisticated offenders adapt.
  • Others counter that any surveillance has some crime‑reduction effect and that dismissing all such measures without alternatives is irresponsible.

Democracy, EU Process, and Representation

  • Clarifications that this is a Council stance, not final EU law; Parliament is generally more hostile to scanning.
  • Some see the repeated push as evidence of systemic failure or “oligarchy”; others frame it as representative democracy working (controversial proposals debated and possibly blocked).
  • Many note the issue was barely present in electoral debates; citizens often uninformed or apathetic.

Activism and Responses

  • Multiple users share contact info for national permanent representations, template emails, and encourage writing or calling.
  • Some warn mass identical emails may backfire; personalized, thoughtful outreach or joining NGOs/parties is seen as more effective.
  • Non‑EU residents are encouraged to raise concerns due to global impact via shared apps and cross‑border communication.

Broader Reflections

  • Discussion links this proposal to a wider trend toward ubiquitous surveillance, lowered policing costs with AI, and potential “perfect state” repression.
  • Several contrast this with the EU’s pro‑privacy image (e.g., GDPR), calling the overall stance internally contradictory.