diff --git a/da/index.html b/da/index.html index 77bc2b4..54e46c1 100644 --- a/da/index.html +++ b/da/index.html @@ -383,6 +383,9 @@ eu:
  • Europæisk ombudsmand: Det er dårlig administration at kommissionen ikke frigiver alle dokumenter om Thorn 🇬🇧
    • +
  • Slides fra Bornhack 2024 præsentation + 🇬🇧 +
    • diff --git a/en/index.html b/en/index.html index 964061f..792d863 100644 --- a/en/index.html +++ b/en/index.html @@ -393,6 +393,9 @@
  • European Ombudsman: The commission has conducted maladministration 🇬🇧
    • +
  • Slides from Bornhack 2024 presentation + 🇬🇧 +
    • diff --git a/slides/bornhack/2024/what-comes-next/img/apology.png b/slides/bornhack/2024/what-comes-next/img/apology.png new file mode 100644 index 0000000..4cccaef Binary files /dev/null and b/slides/bornhack/2024/what-comes-next/img/apology.png differ diff --git a/slides/bornhack/2024/what-comes-next/img/cat_collision.png b/slides/bornhack/2024/what-comes-next/img/cat_collision.png new file mode 100644 index 0000000..dde655f Binary files /dev/null and b/slides/bornhack/2024/what-comes-next/img/cat_collision.png differ diff --git a/slides/bornhack/2024/what-comes-next/img/ceiling_cat_private_messages.jpg b/slides/bornhack/2024/what-comes-next/img/ceiling_cat_private_messages.jpg new file mode 100644 index 0000000..a0c7528 Binary files /dev/null and b/slides/bornhack/2024/what-comes-next/img/ceiling_cat_private_messages.jpg differ diff --git a/slides/bornhack/2024/what-comes-next/img/commission.png b/slides/bornhack/2024/what-comes-next/img/commission.png new file mode 100644 index 0000000..2f0735c Binary files /dev/null and b/slides/bornhack/2024/what-comes-next/img/commission.png differ diff --git a/slides/bornhack/2024/what-comes-next/img/cookie_banner.svg b/slides/bornhack/2024/what-comes-next/img/cookie_banner.svg new file mode 100644 index 0000000..3d140d7 --- /dev/null +++ b/slides/bornhack/2024/what-comes-next/img/cookie_banner.svg @@ -0,0 +1,155 @@ + + + + + + + + + + + + + + We love your Data! + OK + I want even more scanning! + And so does the EU Commissionand Europol. You can only useall functionality of this site if youagree to have your images, videosand URLs scanned. + X + + diff --git a/slides/bornhack/2024/what-comes-next/img/council.png b/slides/bornhack/2024/what-comes-next/img/council.png new file mode 100644 index 0000000..0d0baa2 Binary files /dev/null and b/slides/bornhack/2024/what-comes-next/img/council.png differ diff --git a/slides/bornhack/2024/what-comes-next/img/countryballs_legal_basis.png b/slides/bornhack/2024/what-comes-next/img/countryballs_legal_basis.png new file mode 100644 index 0000000..485162b Binary files /dev/null and b/slides/bornhack/2024/what-comes-next/img/countryballs_legal_basis.png differ diff --git a/slides/bornhack/2024/what-comes-next/img/darknet-forum.svg b/slides/bornhack/2024/what-comes-next/img/darknet-forum.svg new file mode 100644 index 0000000..20cbc90 --- /dev/null +++ b/slides/bornhack/2024/what-comes-next/img/darknet-forum.svg @@ -0,0 +1,3 @@ + + +
    darknet
    clearnet
    user
    tor
    CSAM forum
    guides
    regular file hoster
    URLs and decryption keys
    encrypted CSAM
     \ No newline at end of file diff --git a/slides/bornhack/2024/what-comes-next/img/direkt_vor_unseren_augen.png b/slides/bornhack/2024/what-comes-next/img/direkt_vor_unseren_augen.png new file mode 100644 index 0000000..899d7f9 Binary files /dev/null and b/slides/bornhack/2024/what-comes-next/img/direkt_vor_unseren_augen.png differ diff --git a/slides/bornhack/2024/what-comes-next/img/dog_collision.png b/slides/bornhack/2024/what-comes-next/img/dog_collision.png new file mode 100644 index 0000000..1244416 Binary files /dev/null and b/slides/bornhack/2024/what-comes-next/img/dog_collision.png differ diff --git a/slides/bornhack/2024/what-comes-next/img/europarl_ordinarylegislativeprocedure_howitworks_en.pdf b/slides/bornhack/2024/what-comes-next/img/europarl_ordinarylegislativeprocedure_howitworks_en.pdf new file mode 100644 index 0000000..b1ced09 Binary files /dev/null and b/slides/bornhack/2024/what-comes-next/img/europarl_ordinarylegislativeprocedure_howitworks_en.pdf differ diff --git a/slides/bornhack/2024/what-comes-next/img/friends0.png b/slides/bornhack/2024/what-comes-next/img/friends0.png new file mode 100644 index 0000000..1806ffc Binary files /dev/null and b/slides/bornhack/2024/what-comes-next/img/friends0.png differ diff --git a/slides/bornhack/2024/what-comes-next/img/friends1.png b/slides/bornhack/2024/what-comes-next/img/friends1.png new file mode 100644 index 0000000..6d844c6 Binary files /dev/null and b/slides/bornhack/2024/what-comes-next/img/friends1.png differ diff --git a/slides/bornhack/2024/what-comes-next/img/friends2.png b/slides/bornhack/2024/what-comes-next/img/friends2.png new file mode 100644 index 0000000..3a77f71 Binary files /dev/null and b/slides/bornhack/2024/what-comes-next/img/friends2.png differ diff --git a/slides/bornhack/2024/what-comes-next/img/friends3.png b/slides/bornhack/2024/what-comes-next/img/friends3.png new file mode 100644 index 0000000..3a0b033 Binary files /dev/null and b/slides/bornhack/2024/what-comes-next/img/friends3.png differ diff --git a/slides/bornhack/2024/what-comes-next/img/gwbush_internets.jpg b/slides/bornhack/2024/what-comes-next/img/gwbush_internets.jpg new file mode 100644 index 0000000..36a2f34 Binary files /dev/null and b/slides/bornhack/2024/what-comes-next/img/gwbush_internets.jpg differ diff --git a/slides/bornhack/2024/what-comes-next/img/institutions.png b/slides/bornhack/2024/what-comes-next/img/institutions.png new file mode 100644 index 0000000..1e89a8c Binary files /dev/null and b/slides/bornhack/2024/what-comes-next/img/institutions.png differ diff --git a/slides/bornhack/2024/what-comes-next/img/kutcher_vdl_videoconf.jpg b/slides/bornhack/2024/what-comes-next/img/kutcher_vdl_videoconf.jpg new file mode 100644 index 0000000..7184df8 Binary files /dev/null and b/slides/bornhack/2024/what-comes-next/img/kutcher_vdl_videoconf.jpg differ diff --git a/slides/bornhack/2024/what-comes-next/img/parliament.png b/slides/bornhack/2024/what-comes-next/img/parliament.png new file mode 100644 index 0000000..489f3cb Binary files /dev/null and b/slides/bornhack/2024/what-comes-next/img/parliament.png differ diff --git a/slides/bornhack/2024/what-comes-next/img/platforms_free_from_evil.jpg b/slides/bornhack/2024/what-comes-next/img/platforms_free_from_evil.jpg new file mode 100644 index 0000000..f9d89d2 Binary files /dev/null and b/slides/bornhack/2024/what-comes-next/img/platforms_free_from_evil.jpg differ diff --git a/slides/bornhack/2024/what-comes-next/img/safer_how_it_works.png b/slides/bornhack/2024/what-comes-next/img/safer_how_it_works.png new file mode 100644 index 0000000..1c215ba Binary files /dev/null and b/slides/bornhack/2024/what-comes-next/img/safer_how_it_works.png differ diff --git a/slides/bornhack/2024/what-comes-next/img/surprised_pikatchu_blurry.jpg b/slides/bornhack/2024/what-comes-next/img/surprised_pikatchu_blurry.jpg new file mode 100644 index 0000000..ba47a1b Binary files /dev/null and b/slides/bornhack/2024/what-comes-next/img/surprised_pikatchu_blurry.jpg differ diff --git a/slides/bornhack/2024/what-comes-next/img/the-iceberg.svg b/slides/bornhack/2024/what-comes-next/img/the-iceberg.svg new file mode 100644 index 0000000..e7063e9 --- /dev/null +++ b/slides/bornhack/2024/what-comes-next/img/the-iceberg.svg @@ -0,0 +1,1005 @@ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +DarknetCSAMForumsPrivate CSAMGoup Chat(with chatcontrolcircumvention)TelemedicinesessionGroup Chat(e.g. school class)Hashtags tomark legalchild picturesof interest onsocial mediaBeach NudePicturesAbuse streams(typically formoney)File HostingencryptednotencryptedSextortionDirect Chatfor GroomingDirect Chat forConsensualSextingNudeSelfieAutomaticCloudBackup(fake) nudes ofclass matesTeacher wantsto help diff --git a/slides/bornhack/2024/what-comes-next/img/the-iceberg.svg.bak b/slides/bornhack/2024/what-comes-next/img/the-iceberg.svg.bak new file mode 100644 index 0000000..527d5e4 --- /dev/null +++ b/slides/bornhack/2024/what-comes-next/img/the-iceberg.svg.bak @@ -0,0 +1,944 @@ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +DarknetCSAMForumsPrivate CSAMGoup ChatTelemedicinesessionGroup Chat(e.g. school class)Hashtags tomark legalchild picturesof interest onsocial mediaBeach NudePicturesAbuse streams(typically formoney)File HostingencryptednotencryptedSextortionDirect Chatfor GroomingDirect Chat forConsensualSextingNudeSelfieAutomaticCloudBackup diff --git a/slides/bornhack/2024/what-comes-next/img/ylva_axe_eprivacy.png b/slides/bornhack/2024/what-comes-next/img/ylva_axe_eprivacy.png new file mode 100644 index 0000000..42f0a37 Binary files /dev/null and b/slides/bornhack/2024/what-comes-next/img/ylva_axe_eprivacy.png differ diff --git a/slides/bornhack/2024/what-comes-next/talk.html b/slides/bornhack/2024/what-comes-next/talk.html index 7798afb..36708bc 100644 --- a/slides/bornhack/2024/what-comes-next/talk.html +++ b/slides/bornhack/2024/what-comes-next/talk.html @@ -1,6 +1,326 @@ - -Here be slides - -

    slides are still work in progress

    - - +
    +

    Chat Control - What comes next?

    +
    +
    +

    What is chatcontrol?

    +
      +
    • EU law to protect children against sexual abuse in the context of the internet
      • +
    • Sounds good? Well, actually...
      • +
    +
    +
    +

    Let me use a meme ...

    +

    +
    +
    +

    Let me use a meme ...

    +

    +
    +
    +

    Let me use a meme ...

    +

    +
    +
    +

    Let me use a meme ...

    +

    +
    +
    +

    That doesn't make any sense?

    +

    We need to go back in time to explain this

    +
    +
    +

    The internet: Where people post cat pictures and bad stuff

    +

    auto

    +
    +
    +

    Service providers: Keep a clean house

    +

    auto

    +
    +
    +

    CSAM = Child sexual abuse material

    +
      +
    • Terminology: "child pornography" sounds too harmless according to some
      • +
    • A "child" is any person under the age 18
      • +
    • Scope: Digital display of sexual acts and organs that include minors
      • +
    +
    +
    +

    Not only publicly shared contents

    +

    +
    +
    +

    auto

    +
    +
    +

    auto

    +
    +
    +

    Chatcontrol 1.0 is born

    + +

    Art. 5(1): Confidentiality of Communications
    +Art. 6: Confidentiality of traffic data

    +
    +
    +

    Chatcontrol 2.0

    +
      +
    • Will supercede the temporary chatcontrol 1.0
      • +
    • New: Services must scan when given a detection order
      • +
    • Attack on encryption: Communication/original data must be scanned.
      • +
    • Fundamental technical and legal problems: +
        +
      • Scanning contents not possible without breaking or circumventing encryption
        • +
      • Untargeted surveillance not compatible with EU law
        • +
      • Lots of experts from different areas say this is a bad idea
        • +
      +
      • +
    +
    +
    +

    Chatcontrol: A logical fallacy

    +
      +
    • CSAM on the internet is a real problem
      • +
    • This does not imply that surveillance is the solution
      • +
    • It implies that we need to think about meaningful solutions
      • +
    +
    +
    +

    Meaningful solutions require an understanding of the problem

    +
      +
    • Child sexual abuse is a very difficult topic to talk about
      • +
    • Limited public knowledge
      • +
    • Legal minefield
      • +
    • Very emotional topic (think of the children!)
      • +
    • Do politicians understand the reality of the problem?
      • +
    +
    +
    +

    Reading literature

    + +
      +
    • Written by a journalist who reports on crimes in darknets
      • +
    • Describes circumstances for child abuse offline and online
      • +
    • Explains how predators think and operate
      • +
    +
    +
    +

    CSAM can be spread under many different circumstances

    +

    +
    +
    +

    Trying to get a full picture

    +
      +
    • Criminal pedophiles are a real problem that needs to be addressed
      • +
    • About half of the suspects investigated by the police are minors according to German criminal statistics
      • +
    • Laws need to take into consideration the side effects they have
      • +
    +

    https://netzpolitik.org/2024/sexualdelikte-zum-nachteil-von-minderjaehrigen-was-die-gestiegenen-fallzahlen-bedeuten/

    +
    +
    +

    Darknet CSAM forums

    +

    +
    +
    +

    Achilles heel of CSAM forums: Storage

    +
      +
    • Visual content is expensive: Space and bandwith
      • +
    • Donations are risky, because they leave a trail. Very tight budget.
      • +
    • The journalist reported all URLs to the file hosters. Very quickly taken offline!
      • +
    • URL takedowns contributed significantly to downfall of the CSAM forum.
      • +
    +
    +
    +

    Why CSAM darknet forums are probably popular

    +
      +
    • Anyone can join (as opposed to closed chat groups)
      • +
    • More people can contribute content
      • +
    • Content can be downloaded on demand, all local data is volatile
      • +
    • Police is not issuing URL takedown requests
      • +
    • People can move to another forum if one is taken down and repost URLs
      • +
    +
    +
    +

    What about end-to-end encryption in private chats?

    +

    Criminal pedophiles who chat with other criminal pedophiles ...

    +
      +
    • know they are hated by everyone else
      • +
    • apply additional layers of encryption
      • +
    • prevent the software or network from reporting any hits
      • +
    +

    Chatcontrol will be very ineffective here

    +
    +
    +

    Back to the legislative process ...

    +
    +
    +

    The 3 important EU institutions

    +

    auto

    +
    +
    +

    The Commission's Chatcontrol 2.0. Proposal

    +
      +
    • Mandatory detection in places on the internet with significant risk of CSA(M)
      • +
    • Automatic reporting of hits to EU center (part of Europol)
      • +
    • Encrypted communication must also be scanned
      • +
    +
    +
    +

    Negotiations in the (previous) EU parliament

    +
      +
    • Lots of heated discussions
      • +
    • Things that got removed: Untargeted surveillance, client-side scanning, mandatory age verification for communication services, blocking content (delete instead), age restrictions for messenger apps
      • +
    +
    +
    +

    Negotiations in the EU Council

    +
      +
    • Failure to reach an agreement in the last 2 years
      • +
    • Proposal from Commission mostly unchanged
      • +
    • Hungary has presidency until end of year
      • +
    +
    +
    +

    Foul compromise: Upload moderation

    +
      +
    • It's not legal to do mass scanning
      • +
    • Get permission from people to have their messages scanned
      • +
    +

    +

    👉️ URL scanning implies text scanning

    +
    +
    +

    Next step: The Trilogue

    +
      +
    • Council finds compromise 👉️ Council, Parliament and Commission need to find an overarching compromise
      • +
    • Trilogue not visible to the public
      • +
    • Afterwards: Additional readings in parliament and council and potential adoption if there is enough agreement
      • +
    +
    +
    +

    The public and chatcontrol

    +
    +
    +
      +
    • Much public criticism from digital right groups and the pirate party
      • +
    • Several letters from world-leading cryptographers explaining that this is a terrible idea
      • +
    • Statement from the german Kinderschutzbund that they don't think that chatcontrol helps children
      • +
    • EDRi: Is this the most criticised draft EU law of all time?
      • +
    +
    +
    +

    Ashton Kutcher

    + +
      +
    • American TV Star
      • +
    • Founded "NGO" Thorn. A software company to fight human trafficking and other abuse
      • +
    • Has easy access to Commission
      • +
    +
    +
    +

    auto

    +
    +
    +

    Hashes as indicators

    +
      +
    • Chatcontrol proposal: "the EU Centre will create, maintain and operate databases of indicators of online child sexual abuse that providers will be required to use to comply with the detection obligations."
      • +
    • Hashes ("Indicators") are inherently tied to a (possibly proprietary) algorithm
      • +
    • If scanning becomes mandatory, there are only very few software companies that can provide scanning software
      • +
    +
    +
    +

    Commission does not adhere to good administrative standards

    +
      +
    • Austria complained to EU ombudsman that not all meeting documents with Thorn were published
      • +
    • Commission argues that "disclosure would undermine the comercial interests of the organisations concerned"
      • +
    • Ombudman's Assessment: The law would very likely affect citizen's day-to-day life by limiting their right to privacy and that is why public discourse about these documents is meaningful.
      • +
    +

    12.7.2024: https://www.ombudsman.europa.eu/en/decision/en/189484

    +
    +
    +

    Ashton Kutcher resigns from Thorn

    +

    +

    Writing a letter of support for a rapist didn't end well

    +
    +
    +

    A new EU commission?

    +
      +
    • Current Commission will stay in office until around the end of the year
      • +
    • Ursula von der Leyen🇩🇪 got reelected yesterday and will rule for another 5 years
      • +
    • Ylva Johansson🇸🇪 will very likely be replaced by Jessika Roswall🇸🇪
      • +
    +
    +
    +

    What to do now?

    +
      +
    • Keep talking about it. We need more media coverage!
      • +
    • Support organisations that fight for digital rights.
      • +
    • Suggest meaningful child protection on the internet
      • +
    +
    +
    +

    Meaningful child protection on the internet

    +
      +
    • Anonymity is a virtue on the internet, especially for children.
      • +
    • Education for teachers, parents & children about (online) abuse
      • +
    • Sexual abuse is usually a question of power assymetry.
      +Empowerment of potential victims helps prevention!
      • +
    • Make it less taboo to talk about the risk of child abuse
      • +
    • The police should delete content!
      • +
    • Minors need to learn that sharing other's nudes, is neither funny nor okay
      • +
    +
    +
    +

    Meaningful use of AI for child protection

    +
      +
    • Detect when the user wants to upload nudes and inform the user why this might be a bad idea (client-side)
      • +
    • Detect grooming/sextortion and inform the user (client-side)
      • +
    • Do NOT automatically send data to the authorities.
      +-> Let user actively report or block instead
      • +
    • Make your voice sound older with an AI
      • +
    +
    +
    +

    Questions?

    +
    +
    +

    Apple tried to develop similar hashing software but gave up

    +

    https://thishashcollisionisnotporn.com/

    +

    hash of real CSAM: 59a34eabe31910abfb06f308

    +

    Hash collisions are impossible to avoid, because we try to project an infinite space into a finite one.

    +
    +
    +

    Upcoming dates

    +
      +
    • 10-11 October 2024: Planned presentation of Council Presidency progress report and discussion of EU interior ministers on mandatory chat control (chat control 2.0)
      • +
    • 12-13 December 2024: EU interior ministers scheduled to adopt mandatory chat control (chat control 2.0) position
      • +
    • tbc: Envisaged trilogue negotiations on the final text of the Chatcontrol 2.0 legislation between Commission, Parliament and Council, as well as adoption of the result
      • +
    +

    Info from https://www.patrick-breyer.de/en/posts/chat-control/#timeline

    +
    +

    TODO: Author is experienced in reporting on the darknet +Much abuse has an offline element +and potentially no online element +What information is the commission using to make decisions? +Some abusers care about power and not pedophelia

    Red: Illegal intent +Black: Legal intent +Yellow: Legal pedophilic intent +Below the surface: Not affected by chatcontrol

    technologically neutral. Not requirements to scan a certain way but the scanning must be effective. +Official name: Laying down rules to prevent and combat child sexual abuse

    https://www.patrick-breyer.de/en/historic-agreement-on-child-sexual-abuse-proposal-csar-european-parliament-wants-to-remove-chat-control-and-safeguard-secure-encryption/

    current comparison of negotiation states: +https://www.patrick-breyer.de/en/posts/chat-control/#currentproposal +A lot of positions of the council are the same as the commission

    Still legally questionable if it is a true approval +- Scanning URLs implies scanning text meant to be encrypted +- Deleting known CSAM-URLs would be a better idea

    https://netzpolitik.org/2022/chatkontrolle-wie-ein-hollywoodstar-fuer-mehr-ueberwachung-wirbt/

    - "That 70s show" co-star Danny Masterson on trial for rape +- After writing a character letter in support to him, there was a huge public outcry +- Kutcher published an apology video that was very poorly received +- Kutcher resigned from Thorn

    \ No newline at end of file