5 stories
Brazil's electoral court ordered Meta to apply identical criteria to both campaigns, with a fine of R$500,000 a day. Watchdog groups filed new screenshots as evidence.
The thread split the exhibits into laughable ones and one that a commenter said was real.
The top HN threads: facts from the discussions, both sides, insider voices. Email, Telegram, or RSS.
Landau calls it an "incoherent cryptosystem": the server that wants to read your messages is the same server shipping the JavaScript that's supposed to stop it — and it can push different code to one IP at any moment. He extends the charge to Signal, WhatsApp and iMessage.
The pushback is credentialed on both sides. One security researcher says you can build Signal from source yourself, so it doesn't apply — then, in the same breath, points out iMessage isn't really end-to-end anyway because iCloud Backup is on by default.
Heise reports the Council revived an expired rule letting messaging providers voluntarily scan for known child-abuse imagery, pushed as new legislation on an urgent second-reading track right before recess — where blocking needs a near-impossible absolute majority.
A commenter untangles it: the far more dangerous Chat Control 2.0, with mandatory scanning that would weaken end-to-end encryption, is not what's being voted here — and protest has arguably pushed 2.0 off the table for good.
The EFF reads the KIDS Act (built around KOSA, H.R.7757) as age verification by indirection. Instead of mandating ID checks, it sets a 'know or should have known' negligence standard for under-13 and 13-16 users, pushing every covered service to verify all ages to avoid liability. The result, EFF argues, is a less private internet for adults too.
The most-cited voice was a founder who dislikes the bill yet explained its support: for non-tech-savvy homes the real choice today is no devices or kids raised by addictive feeds, because the industry refuses to give parents working tools.
An estimated 4,000-5,000 software engineers, out of about 25,000, now sit in a new 6,500-person org doing data labeling and RLHF. The autonomy-to-labeler whiplash is the part people on core infra and security teams can't stomach.
Add keystroke and mouse tracking with no opt-out, rolled out in late April, and a CISO who resigned the day after an AI support flow let attackers hijack Instagram accounts.
The flip: a former Meta engineer says the well-run orgs were all acquired — the homegrown ones were always the mess.
