The Chat Control panic thread, and the commenter who says the encryption-breaking version already lost
The EU Council fast-tracked a revived chat-scanning rule and the thread filled with "Europe is no longer a democracy." Then someone drew the line the doom missed: this is the voluntary 1.0, not the one that breaks Signal.
Heise reports the Council revived an expired rule letting messaging providers voluntarily scan for known child-abuse imagery, pushed as new legislation on an urgent second-reading track right before recess — where blocking needs a near-impossible absolute majority.
A commenter untangles it: the far more dangerous Chat Control 2.0, with mandatory scanning that would weaken end-to-end encryption, is not what's being voted here — and protest has arguably pushed 2.0 off the table for good.
What the Council actually revived
Heise reports that the EU Council voted to reinstate an expired temporary regulation — nicknamed Chat Control 1.0 — that lets messaging providers voluntarily scan private communications for known child-abuse imagery and grooming, using hash-matching and AI. The controversy is procedural, not just substantive: instead of cleanly extending the lapsed rule, the Council introduced near-identical text as a new proposal and pushed it to Parliament as an urgent second-reading item right before summer recess. At that stage, blocking it needs an absolute majority — which the reporting calls almost insurmountable at that timing. Scanned data must be deleted within 12 months absent concrete suspicion.
The thread opened in full alarm. The correction that reorganized it is worth reading carefully, because it's the difference between two very different laws.
The line the doomscroll missed
"this refers to "Chat Control 1.0", allowing facebook and other messaging providers to scan chats … the far more dangerous Chat Control 2.0 that would weaken end-to-end-encrypted messengers like Signal is not being discussed here … it looks like 2.0 is off the table for good because protest against it has proven effective." — a commenter correcting the 1.0/2.0 conflation
Another walked through why "there's no way to stop this" is usually wrong at the EU level, from the mechanics of how the bloc legislates:
"there are, roughly … 4 ways to make legislation at the EU level … Parliament denied the law. Twice. Member states vetoed the legislation at least 3 times" — a commenter detailing EU legislative procedure
The proponents' case did get stated, not strawmanned — the enforcement argument is that scanning on platforms like Facebook is how many offenders get caught, and letting the permit lapse dropped those detection numbers.
Why the distinction is the whole story
Collapsing 1.0 and 2.0 into one apocalypse isn't just sloppy — it burns the credibility you need for the fight that matters. Voluntary provider-side scanning of unencrypted platform content is a real privacy debate with a real counter-argument. Mandatory client-side scanning that cracks end-to-end encryption is the thing worth panicking over — and by the thread's own reading, that's the one the panic has, so far, actually defeated.
Get breakdowns like this every day
The top Hacker News stories, unpacked — by email, Telegram, or RSS.
The "open" repairable printer that isn't open source and has no working prototype yet
A DRM-free, refillable, repairable inkjet lands to applause and "Richard, they did it, you can rest now." The top comment explains why open inkjet printers have never existed in forty years — and it's still just a pre-order page.