Live data from Hacker News

EU Parliamentary Research Service calls VPNs "a loophole that needs closing"

cyberinsider.com

361–370 of 467 posts

Re: EU Parliamentary Research Service calls VPNs "a loophole that needs closing"

#361

Earlier quoted context omitted.

Ok, my answer was sloppy. Here’s what I meant: 1. Context is “EU digital identity”. For a decade EU asked researcher how to have a way to verify age only, without extra data leaking. They have a working solution, and it’s the one rolling out to EU citizens. 2. This document talks about VPNs because they have been bought up recently as “how to skip age verification tools”. It is a legitimate concern. Every EU citizen…

That is the exact point. A "best intentions" approach to e.g. solve age verification through a "privacy respecting" mechanism leads to the government mandating that only physical devices with the built in security verification mechanisms, as allowed via government approved signatures, would be able to run these age verification apps (because otherwise you could cheat the mechanisms). This is a direct attack on genera…

I think fundamentally we disagree on 1 principle, that "better" is the enemy of "good". This leads to choosing which tradeoffs to accept. And we are on the same side, to be clear. I want privacy. I also see what you mention, I just frame it differently.

Android being locked down is the worst case scenario: private companies makes rules, an update is pushed, no platform for discourse. It's also the standard business practice when you let companies implement solutions to "privacy problems": put some privacy preserving lipstick on a fredeom restricting measure.... Specifically: we (google et al) need to verify apps so that we don't let them to do bad things to you, like stealing your data and ... sell it in the very same predatory data ecosystem that we have built and that we sustain for profit.

On the other hand, the EU sees that a law has been mocked on the internet since day zero (you must be of legal age to watch porn), in due time (30 years?) this has an impact on society, and shit needs to happen because yes, this is how laws work sometimes: they limit freedoms. They have learnt from GDPR that delegating the implementation of laws to businesses is bad: they defang it and/or twist it so that the concrete result fits business needs rather than the principles established by law (as per above example: gdpr, ads). So, the EU finds its own tech solution, puts down privacy as a core value, ships down a EU wallet and says "this is the reference implementation".

I like this! It's not "perfect", but i prefer this 1000 times over "let Google verify my age".

It seems to me that the EU has done an excellent job: now that society (including actors in bad faith) is saying "we need to protect the kids", we can say yeah ok, here is the good way to do it. They actually thought about this years ago.

Now THIS SPECIFIC document is .... ok!!! Because it is NOT to be read in isolation, but within the context (my framing) of EU actually giving me laws and tools protecting me. Over decades. And I have seen plenty of attempts at breaking those, and plenty of EU votes bouncing back those attemps.

Overall, there are 2 possibilities (aka tradeoffs on better vs good) when freedoms are attacked. One (yours, as a understand it) is to say "this (VPNs, e2e, ...) is outside of the Overton window, just bringing this up is unacceptable/fascist". You have good reason to defend this approach, and it's ALSO thanks to you and other activists (hope this does not mischaracterize you) denouncing and rallying around these issues, shouting "fascists", that we got them revoked.

The other one (mine? maybe?) is to craft a response that exposes the faults at play, naming and shaming business interests trying to hijack age verification to provide them with business advantages (example in this case: internet in Spain "stops working" when there's a La Liga game, etc, I'm sure you know what i'm talking about).

The willingness to rebuke these attacks in debates can be a slippery slope (opening the window). And yet, in present times politicians wear "being shouted 'fascist' at" as a badge of honour and they manage to translate that into votes. There is a correlation that I see between "good" (argumentative discussing to convince) and "better" ("this is just not going to happen and we should not even discuss this because we have no room for fascism here"). Both are valid, going back to the beginnning we disagree on which to employ in this specific case.

All the above is about "framing", meaning a meta-answer over discourse. Also, let me be clear that I am not seeing you, or activists in general, as "mob shouting" by conflating that with lack of critical thinking, or ability to expose that. I have recognized that your position has value, but let me be clear on that :D

Now to tech details.

Locking down network is impossible as long as decentralization is possible. You ban VPNs? People start using TOR. They don't know and care, but in order to watch porn or sports, now they have better privacy protection across many other dimensions. To gain usage, interfaces becomes simpler. VPNs went from being a business tool to being a consumer tool precisely because companies started enforcing arbitrary rules. In order to get there you need to be easy to use, which makes their usage explodes, etc. Constraints, scarcity, or urgent needs drive innovation, so i don not see autoritative pushes vs tech-for-freedom as a zero sum game (probably an even better description of why we disagree?). Since businesses belong to the fabric of society, sometimes business rules goes into laws. And sometimes whatever a government thinks is ok goes down there, principles be damned. And yes occasionaly you get the guy that needs to go to jail, Prometheus-style. Clearly, Zimmermann. Arguably, Snowden. Provocatively, Kim DotCom. So yes, banning VPNs is bad, but isn't it true that we have this problem because everyone can just flip on a VPN at any given moment? Is this not a manifestation of a right that we have "acquired", in some sense?

In this context the EU has done, and is still doing the "good" thing: the EU wallet has not been assigned a budget and shipped over for development to Accenture or Oracle or any other private business. It has been given to open source researchers, and it leverages lessons learnt while building decentralized solutions. While "everyone" was busy scamming users with ICOs, the EU has taken an interest on Zero Knowledge Proofs. And EU bureaucrats have talked to nerds to understand if there is a way to have age verification and preserve privacy and make all the things that me (and you want). Because, EU has been a global pioneer in elevating data protection to constitutional/human-rights status. Data protection worldwide, in the past decades, rests on me and you worrying and "fighting between each others", but mostly on the EU listening to us and being a global pioneer in elevating data privacy to constitutional/human-rights status, via Article 8.

To flip you statement: the outcome of this is not the worst case of a single measure - the outcome in many cases will be the combination of measures taken by most forward looking governments across the globe that each protect certain freedoms.

sorry for the wall of text, i hope it was worth your time

Re: EU Parliamentary Research Service calls VPNs "a loophole that needs closing"

#362
post #141

Earlier quoted context omitted.

But you are asking logical questions. You are thinking and talking too much for a World citizen in 2026. "Reasoning" is a reserved word for chatbots now, so we humans are not allowed to do that anymore. We can only obey like a bot and pretend all the lies they tell are the truth. BTW I live in Turkiye where the government banned ALL the adult websites around 2008. Even as an adult you can't access them. This year the…

[flagged]

Nice thing is we can render names in English however we want too!

Re: EU Parliamentary Research Service calls VPNs "a loophole that needs closing"

#363
post #109

In case people no longer remember, when China started to require websites to register for a license before be allowed to operate, it was for "protecting the children" too. This simple policy then goes on to silence most individual publisher(/self-media) and consolidated the industry into the hands of the few, with no opportunity left for smaller entrepreneurs. This is arguably much worse than allowing children to wat…

Do you have a single link or other piece of evidence to substantiate this? I’ve never seen, nor can I find in a search, any evidence the ICP license scheme in place for that past 26 years in China has ever related to children in any meaningful sense. It has the ring of BS. Why would an authoritarian government in a country with no free press or free elections feel any need to justify a speech regulation with a fig le…

An authoritarian government needs excuses too. China even claims to be a democratic country. North Korea even has the word Democratic in its name. "Protecting children" is a common excuse China uses. https://en.wikipedia.org/wiki/Very_erotic_very_violent is a famous example of them trying to justify internet censorship under the name of "protecting children".

Re: EU Parliamentary Research Service calls VPNs "a loophole that needs closing"

#364
post #109

In case people no longer remember, when China started to require websites to register for a license before be allowed to operate, it was for "protecting the children" too. This simple policy then goes on to silence most individual publisher(/self-media) and consolidated the industry into the hands of the few, with no opportunity left for smaller entrepreneurs. This is arguably much worse than allowing children to wat…

Prove to me that people deserve to be free and not micromanaged on a day to day basis.

Re: EU Parliamentary Research Service calls VPNs "a loophole that needs closing"

#365
post #266

Earlier quoted context omitted.

Sure, if you ignore the other part of my comment where I said parents should be responsible for the upbringing of their own children.

I disagree with that part. Parents cannot be responsible for what other children can do. If all the children use social media, good luck preventing your kid from participating. "It's okay, just be completely disconnected from everything they share between each other, it's not important to socialise, you can make friends when you are old". The problem with social media is that it's not okay for one kid to be disconnec…

Again, you’re talking about things in a Boolean state.

Our kids have access to social media, but we also know what they have access to because we check their phones periodically.

This is a far better approach than an “all or nothing” approach because we are giving the kids the freedom to learn how to use these tools maturely. But without removing any safety nets for if/when our kids (or any other kids in their social circles) fail to use such tools responsibly.

That’s called “parenting”.

Censoring access to tools, either via government regulations or over zealous parenting, doesn’t teach children anything. Whereas allowing kids to learn to use the tools but being around to support and help them grow when mistakes are made, is precisely what responsible parents should be doing.

And that’s the same approach you should take with learning anything as a child. You give them guidance and allow them to make mistakes but be there to support them. Kids don’t learn to ride a bike from telling them “bikes are dangerous” then suddenly when they’re 16 handing them a bike and telling them to ride it to colleague. So why are you treating social media like that?

Re: EU Parliamentary Research Service calls VPNs "a loophole that needs closing"

#367
post #146

Earlier quoted context omitted.

It's because it's not about the opinion of voters, but about existing political powers that want to retain their power. No matter what you (as population) say it will get implemented. If you don't, then they will put sanctions on Poland, withdraw financial partnerships, etc. Like with migrants, they are going to be sent there, even if Polish people vote against. No matter if you are in favor or against, raising the t…

I think you are confusing democracy with anarchy. There is tons of free speech in Europe, and it is the most democratic of all countries that are alternative. UK is still very democratic country. The generation of politicians from zero rate era had gotten carried away on certain topics (defence, immigration) and now we have to deal with this. they also have undermined public trust by acting the way they did in covid,…

[dead]

Re: EU Parliamentary Research Service calls VPNs "a loophole that needs closing"

#368

If any EU government people are reading this, I'd like to send you a short message: Please stop thinking about the kids on the internet. But here's a brief list of things you must work on with higher urgency: - taxing more large corporations, - taxing more ultra-rich people, - funding EU-made (open source) tech and infrastructure, - let parents spend more time with their kids so they can actually protect their offspr…

I am sure that the problem of current EU is not lack of excesive taxation.

Re: EU Parliamentary Research Service calls VPNs "a loophole that needs closing"

#369
post #109

In case people no longer remember, when China started to require websites to register for a license before be allowed to operate, it was for "protecting the children" too. This simple policy then goes on to silence most individual publisher(/self-media) and consolidated the industry into the hands of the few, with no opportunity left for smaller entrepreneurs. This is arguably much worse than allowing children to wat…

I have an extreme slippery slope idea. If they want to protect children, shouldn't they sterilize everyone? Every child born, regardless of wealth will inevitably suffer injury, illness, and psychological setbacks. Therefore, the best way to protect them would be not allowing people to have children. By the way, not having children is also more eco-friendly, because an infinite series simply converges. I wonder if I’…

They should just mandate 1 spouse should stay at home (working remotely or not working) or you must hire a full-time nanny. I'm only half joking. If your kid has enough unsupervised time to be watching porn on a regular basis, wtf is going on?

Re: EU Parliamentary Research Service calls VPNs "a loophole that needs closing"

#370

The internet is not the nice place it used to be with personal blogs. When we get younger employees they almost cannot work because of their phone addictions. There is billions of research going into making children addicted through the window of their phone screen to watch apps, and now with AI this is getting even more dangerous. It's not only children, also many elderly people are targeted. They are very lonely an…

If you would be proposing a ban of VPNs to shield people from social medias, you would be missing the forest for the trees.
Post reply on HN