Chat Control 1.0 and 2.0 Explained

Original Article ↗ Hacker News Discussion ↗

Status and Scope of Chat Control 1.0 vs 2.0

  • Chat Control 1.0: temporary derogation from the ePrivacy Directive allowing voluntary scanning of private messages for CSAM; expired April 2026 but a narrow EU Parliament vote has just reinstated it.
  • Major platforms (Google, Meta, Microsoft, Snap) said they would keep scanning even after expiry.
  • Several commenters stress 1.0 (voluntary, limited) should not be conflated with 2.0, which is broader and includes things like age verification for app stores.
  • Another related vote is still upcoming; users are urged to contact their MEPs.

Technical Impact on Encryption

  • Two main mechanisms discussed:
    • Client-side scanning before encryption (Apple-style CSAM scanning, WhatsApp on-device filters).
    • “Group chat +1” design where the state effectively becomes an extra E2EE participant.
  • Many expect mainstream platforms to quietly drop or weaken E2EE rather than implement robust, user-respecting scanning.
  • Workarounds (open-source clients, sideloading, air-gapped devices, web apps) are possible but may become harder or more suspicious over time.

Effectiveness and False Positives

  • Strong skepticism that blanket scanning measurably reduces child abuse; serious offenders will move to other channels.
  • Base-rate fallacy: even a 99.9% accurate scanner on a mostly-innocent population yields mostly false positives.
  • Existing cloud scanning has already harmed innocent parents (e.g., medical photos of children flagged).
  • Critics argue this drains investigative resources, ruins reputations, and still doesn’t address offline abuse.

Civil Liberties and Surveillance Concerns

  • Widely viewed as a “Trojan horse” for mass surveillance and control, with child protection as political cover.
  • Repeated comparison of government vs corporate data collection:
    • One side: governments are far more dangerous (coercion, prison, violence); corporate tracking is “just ads.”
    • Other side: corporate data inevitably flows to governments and other buyers, so both are structurally linked threats.
  • Fear that once client-side scanning exists, it can be repurposed for other content (speech, dissent, political targets).

EU Politics, Legitimacy, and Power Dynamics

  • Deep criticism of EU structures: unelected Commission, Council “laundering” unpopular national policies, Parliament lacking legislative initiative.
  • Split views on the EU itself:
    • Some see it as corrupt, US-influenced, beyond reform, and tending toward authoritarianism.
    • Others argue dismantling it would be catastrophic; EU is likened to shared “city” infrastructure that enabled peace and cooperation.
  • Debate over who backs Chat Control:
    • Pattern described as establishment vs alternatives more than pure left vs right.
    • Centrist, conservative, and mainstream social-democratic parties often support; Pirates, Greens’ radical wing, far-left and many far-right parties often oppose.

“Think of the Children” and Alternatives

  • Many argue policy is driven by moral panic: “even if it saves one child” used to justify disproportionate measures.
  • Commenters highlight neglected conventional work:
    • Better sentencing, policing, school cooperation, undercover work on public platforms, serious pursuit of high-profile offenders.
  • Some say technology is the wrong layer to fix child abuse, akin to regulating pry-bar manufacturers to stop burglary.

What Individuals Can Do

  • Recommended actions:
    • Use sites like fightchatcontrol.eu to email MEPs and track votes.
    • Vote for parties explicitly opposing Chat Control.
    • Migrate to open-source, genuinely E2EE tools (Signal, etc.); note that Signal has stated it would leave the EU rather than comply.
    • Consider more privacy-preserving OSes and platforms, while acknowledging usability and legal frictions.