csam

Bilingual

Transcript bijdrage rondetafelgesprek Tweede Kamer Client Side Scanning 11 oktober - Bert Hubert's writings
2 months ago
- The speaker has 15 years of experience with CSAM investigations, including software for the Dutch police and industry-government discussions.
- The EU 'Chatcontrol' proposal would add a scanning system to all messaging apps, analyzing photos, videos, and conversations for illegal content and grooming.
- The system uses AI to detect suspected CSAM, but the Netherlands Forensic Institute admits it cannot reliably determine age from photos, unlike the EU's claims.
- Alerts are sent to an EU official, then to local authorities, leading to potential investigations; false positives could cause unjust harm to innocent people.
- Europol plans to retain data from false positives, raising privacy concerns.
- This marks an unprecedented mass surveillance of 500 million Europeans, with over 420 scientists stating the technology is not reliable.
- The speaker compares the proposal to Chinese surveillance and warns of user backlash against government-mandated scanning.
CSAM Regulation Update: Dutch Intelligence agency weighs in - Bert Hubert's writings
2 months ago
- The European Commission and EU member states have considered forcing messaging platforms to scan private messages for child sexual abuse material (CSAM), which would break end-to-end encryption.
- The proposal includes fuzzily scanning for known CSAM now and adding AI scanning for text messages in three years, but this is seen as highly ineffective and risky.
- Dutch intelligence agency AIVD warns that scanning applications on all mobile phones create a complex system with large security risks to digital resilience.
- Inserting a scanning layer expands the threat surface, as image parsing is hard to secure; hackers could exploit the CSAM filter to access phones.
- Platforms like Facebook/Meta would bear the cost of installing and maintaining the scanning infrastructure without financial incentive, potentially leading to poor security.
- Drafts of the CSAM regulation include an opt-out for intelligence services, indicating acknowledged privacy risks.
Apple Defeats Liability for Not Scanning iCloud for CSAM
2 months ago
- Apple abandoned its NeuralHash CSAM scanning and implemented end-to-end encryption for iCloud, causing confusion and legal pressure.
- The court dismissed the lawsuit under Section 230, ruling that claims against Apple treat it as a publisher since detecting CSAM requires reviewing content.
- The court rejected attempts to use exceptions from Doe v. Twitter, Lemmon v. Snap, and Roommates.com.
- Judge Wise expressed unease, noting that without a legal mandate, companies have no obligation to detect CSAM, but breaking end-to-end encryption would harm privacy for millions.
- The judge highlighted that victims of CSAM suffer ongoing harm, but current law prioritizes privacy, and called for lawmakers to impose clear requirements.
- The opinion downplayed encryption's role, but the author argues that forcing scanning would break encryption for all purposes, potentially enabling new abuses.

Transcript bijdrage rondetafelgesprek Tweede Kamer Client Side Scanning 11 oktober - Bert Hubert's writings

CSAM Regulation Update: Dutch Intelligence agency weighs in - Bert Hubert's writings

Apple Defeats Liability for Not Scanning iCloud for CSAM