Since 2021, a temporary EU framework dubbed "Chat Control" has required major tech companies to scan private messages for child sexual abuse material, a regime extended this year while permanent rules remain contested. Firms such as Google, Microsoft, Snap and Meta run automated image and video detection on user traffic and, under U.S. law, forward suspected cases to the National Center for Missing & Exploited Children (NCMEC). LinkedIn alone reported processing 22 million images and more than 2 million videos from EU users in 2024, while Microsoft reported scanning 9.6 billion images and videos globally. NCMEC’s CyberTipline received some 21 million reports in 2025, and NCMEC confirms it uses Palantir’s Foundry software - donated and run within NCMEC’s environment - to catalogue, search and find connections across that huge dataset.
The investigation highlights opaque data flows, legal and accuracy problems: many EU lawmakers and experts were unaware that Palantir-tools are used to analyze tips originating from EU message scans; NCMEC is not on the EU list of approved U.S. data recipients and relies on alternative contractual transfers; retention policies are open-ended. Data security tests challenge EU claims of near-zero false positives - research found false matches far more frequently, raising risks that consensual or benign private images could be flagged. End-to-end encrypted services such as WhatsApp and Signal are exempt, but platforms like Instagram are not. Palantir rejects the "surveillance" label and says it provides analytics software for customers.
Summary generated by AI from the linked article. hn.today is not affiliated with Hacker News or Y Combinator.
Concerns are raised about Rust's corporate backing and the potential influence of major tech companies on its development. Critics argue that the culture of rewriting projects in Rust may benefit corporations at the expense of software reliability and safety. (oxetene.net)
Russia has targeted American businesses with drone and missile strikes in Ukraine. The attack specifically impacted companies like Coca-Cola and McDonald's. (cnn.com)
Starlink access in Ukraine was suddenly restricted by SpaceX, impacting military operations against Russia. The move coincides with U.S. pressure on Ukraine to cease drone attacks on Russian infrastructure. (newsweek.com)
Abdulrahman Alfozan, a Saudi national and venture partner at Raed Ventures, was arrested for secretly installing a recording device at OpenAI. He had booked a one-way ticket to Saudi Arabia with family before his arrest, and OpenAI confirmed he was fired and found no evidence of data theft. (cnbc.com)
During the Yandex outage, malicious bots did not shut down but instead shifted their activity. Data indicates that these bots remained active rather than going offline. (blog.cloudflare.com)
Microsoft Defender has added support for Linux desktop operating systems. This expansion allows Linux users to utilize Microsoft's security software for threat protection. (neowin.net)
Today's best Hacker News stories, summarized and screenshotted, one email a day.