Signal answers the UK's scanning push with one line: surveillance is not safety
The UK wants scanning software on every phone in three months to protect children. Signal's reply, published as a PDF the morning after, is a single thesis: a snitch in every device is not safety, it is the risk.
The UK is moving to mandate on-device content scanning and age verification, framed as child protection. Signal answered overnight with a blunt statement: client-side scanning breaks the encryption it sits on top of, and a scanner that 'phones home' is mass surveillance no matter what it claims to look for.
The thread mostly cheers, but a Signal-built-this skeptic pushes back: on-device checks are no more surveillance than Signal's own private contact discovery, and the slippery-slope cuts both ways.
A PDF dropped the morning after the UK's scanning push
The UK is again pushing legislation to put content-scanning technology directly on people's devices and to mandate age verification across online platforms, all under the banner of stopping child sexual abuse material. Signal's response, published as a PDF titled *Surveillance Is Not Safety*, landed almost immediately and climbed to 469 points on HN within hours of being posted in the thread.
Signal's argument: client-side scanning breaks the thing it sits on
Signal's thesis is that surveillance and safety are not a trade-off you can tune — they are opposites. The technical core is client-side scanning: software that inspects your messages on your own device before they are encrypted. Signal argues this fundamentally defeats end-to-end encryption, because a channel that reports on its own contents to a third party is no longer private, regardless of whether the stated target is CSAM. Age verification draws the same objection from the other end: to prove your age you must hand over biometric data, ID, or a face scan, so the 'protective' measure itself becomes a new pool of sensitive data to leak or abuse. Signal's stated position is to refuse implementation rather than weaken its architecture — the same line it has held against earlier EU 'chat control' efforts.
The thread's sharpest counter-pitch: make the danger visceral
Much of the discussion agreed with Signal but argued the statement preaches to the choir. The most-engaged reply asked Signal to fight emotion with emotion:
"They make an emotional pitch:your children are in danger, surveillance is the solution. The counter must show the dangers in visceral, emotionally relevant way … by the accusation of an opaque, unaccountable system, you will be labelled a pedophile, and your kids taken away." — a long-tenured commenter with near-top karma weight
Another spelled out the cascade the law sets in motion:
"1. You need a camera on your computer to allow a third party to verify your age before viewing adult content … Unless you age verify, the law demands your computer must be powerful enough to run an AI, or … send your private photos to a third party, to detect and prohibit nudity." — a commenter walking through the implementation chain
A commenter posting from London noted the deeper irony for technologists: the same industry that built secure boot, remote attestation, and DRM to move control from users to corporations handed governments the exact mechanism they now want to use.
"Did they think … that politicians couldn't transfer that control to themselves by political means?" — a commenter writing from London
The dissent: Signal already does on-device computation
Not everyone bought the framing. The strongest reversal called the statement technically incoherent coming from Signal specifically:
"On-device checks are no more "surveillance" than Signal's private contact discovery is, and the same slippery slope argument applies there … the exact same kind of "surveillance" is already applied by every single phone, because that's how the Photos app … searches for cat pictures based on the text "cat"." — a skeptic who pointed to Signal's own secure-compute features
A separate commenter made a sharper, narrower point that some still believe targeted age verification is technically separable from mass surveillance — that facial-age estimation need not reveal who you are or what site you visited — while conceding the UK's actual proposal is the wrong way to do it. The line worth keeping from that exchange: no matter how noble the cause, if you make the case with half-truths, you lose the people who'd otherwise agree with you.
The bet Signal is making
Several high-karma voices read the three-month timeline as self-defeating. One recalled the Clipper Chip, the 1990s key-escrow proposal that was dead within three years, and noted that rewriting 'every OS on the planet' in three months is not remotely plausible. That is the quiet wager underneath Signal's loud statement: the law is more likely to collapse under its own technical impossibility than to be argued down. Signal's job, on this reading, is to make sure that when it does collapse, the principle — that a scanner in your pocket is the threat, not the shield — is already on the record.
Get breakdowns like this every day
The top Hacker News stories, unpacked — by email, Telegram, or RSS.
Cancer in under-50s is rising in at least 10 types — and no one cause fits
People born in the 1990s face roughly four times the early-onset colorectal cancer risk of those born in the 1960s — and the same upward slope shows up in successive birth cohorts across every country studied. Nature's feature lined up four suspects and couldn't crown one.