New - UK data watchdog warns Met Police over shadow IT data breach computerweekly.com/news/3666… via @computerweekly

New - AI tool used in asylum case reviews failing accuracy tests computerweekly.com/news/3666… via @computerweekly

computerweekly.com/news/3666… more important journalism by @Williamrt . Our case challenges the fact that even when state is found guilty of spying on journalists it’s the reporter who has to pay own costs while PSNI and MI5 waste millions of taxpayers money defending the indefensible

NEW - Journalists subject to unlawful surveillance seek legal costs after ‘unreasonable conduct’ by PSNI computerweekly.com/news/3666… via @computerweekly

New - AI model developers have ‘no justification’ for failing to comply with privacy law computerweekly.com/news/3666… via @computerweekly

Big new lawsuit by @USATODAY and our network properties against OpenAI, including these exhibits of models returning giant chunks of content from stories (written by humans like @Vanessa_Swales in @journalsentinel) storage.courtlistener.com/re…

New - UK Supreme Court to decide whether to block ‘trivial’ data protection claims computerweekly.com/news/3666… via @computerweekly

New - Guide - Supply chain cyber resilience: from paper promises to operational reality computerweekly.com/opinion/S… via @computerweekly

Everyone Hates Elon guerilla ad campaign in London over “pervert glasses”. #PrivacyMatters huckmag.com/article/activist…

New- UK and Europe at risk from Chinese tech, says security think tank computerweekly.com/news/3666… via @computerweekly

New- UK data regulator restructures amid allegations of ‘toxic’ workplace culture computerweekly.com/news/3666… via @computerweekly

Technical analysis to explain why the UK government is using the word "comprehensive". TL;DR: "Comprehensive" means identity verification for everyone so children can be banned. When adults are banned they can’t return. Identity verification is designed to kill online anonymity. When accounts are tied to real people, behaviour can be tracked, scored, predicted, and permanently restricted. Apply that across social media, games, messaging and app stores and you’ve built population-scale surveillance under the banner of child safety. Privacy is destroyed. Parents lose control. The government gains the power to exclude identified people from civic online spaces. Here’s my breakdown of Culture Secretary Lisa Nandy’s speech along with my technical analysis: 🇬🇧 "We will be the first in the world to introduce a comprehensive social media ban for children". 💡 Everyone knows the UK is not the first to introduce a social media ban for children. So what does she mean? 💡 For that statement to become true, the government would need to mandate something that hasn't yet been said out loud in Australia. A "comprehensive" social media ban means everyone has to verify their identity. 💡 She’s effectively saying "We will be the first in the world to introduce identity verification for everyone". There’s no other technical or legal explanation. 🇬🇧 "where abusive content is not just removed, but removed forever". 💡 The only way to achieve that is to ban repeat offenders permanently. That requires knowing who wrote or shared the content. Technically, that means linking people’s identities to what they post and share. Once an account is tied to a real identity, creating a new account with a different email address no longer works. If you’re banned, you’re excluded for good. 🇬🇧 "Women’s rights are human rights, and human rights are non-negotiable". 💡 I agree. But the government wants to use that as a trojan horse to take away everyone’s right to privacy, including women who wish to remain anonymous. Privacy is a human right, which by their own admission is non-negotiable. They want to decide when human rights are accessible. 🇬🇧 "But, friends, shouldn’t we be ashamed that decades of violent indifference has come to this? Having to remove our children from social media altogether because we cannot protect them from harm". 💡 Any parent who believes their child is unsafe on social media can restrict social media using the parental controls built into today’s smartphones. 🇬🇧 "Because our online spaces live in the palm of our hands and the cables that run under our feet. They’re a civic space, like any town hall or high street". 💡 The UK government arrests around 30 people every day over communications offences involving things posted online. If the government gains the ability to permanently exclude identified people from online services, people will censor themselves. (In Australia, Ireland and the US, they use "robust" age assurance to mean identity verification because no government wants to say what they really mean.) 💡 Please know this. Culture Secretary Lisa Nandy and the rest of the government and their advisors, are not technically savvy enough to understand basic technical aspects of this subject. I advised the British government and its main child-safety advisers during the first Parliamentary Inquiry into Online Child Protection in 2012. That process led to opt-out filtering across UK telecom networks and ISPs. They’ve been looking for ways to force identity verification for years. I know because I challenged them about it directly during formal in-person meetings and private briefings in London. My BBC Newsnight interview at the time showed me demonstrating how poor parental controls were. Unfortunately, we didn’t discuss what I thought of the government’s approach to default-on pornography filters, which meant adults had to actively remove restrictions to access blocked content. 💡 Smartphones today give parents the technical controls governments claim they need legislation to provide. Parents can block apps, block websites, restrict content, approve downloads, control purchases, and set time limits and curfews for their own children. They’re a hundred times better than they were in 2012. 💡 That removes the child safety justification for banning social media. 💡 A digital identity system kills online anonymity. Removing anonymity is a core technical requirement for governments to gain digital surveillance because once identity is linked to activity, behaviour can be monitored, analysed, predicted, and controlled. If the UK government rolls this out across social media, games, messaging, app stores and other online services, it creates the technical foundation for population-scale surveillance and control. Countless schools and many parents already use mobile based parental controls. Banning social media for everyone’s children takes rights away from guardians and parents. If I was on Newsnight today, I wouldn’t demonstrate weak parental controls like I did in 2012. I’d demonstrate how good they are now and ask why the government feels the need to ban social media instead of educating parents about the controls they already have. --- I’ll publish my full technical analysis of Chat Control today. Writing this here to hold myself accountable. I’ll summarise it here, but Substack gives me the space to break down the entire system properly. Plain English. No jargon. Free.

Italian zero-day maker Dataflow Security generated €63 million in revenue in three years, and the company also has strong ties with former Israeli intelligence veterans, according to an investigation by @RositaRijtano. irpimedia.irpi.eu/en-inside-…

Fantastic news. Glad to see the Ministry of Justice has finally seen sense and agreed to this important licensing agreement, as I called for back in February. ​Protecting open justice and enabling journalistic use of court data sets a vital precedent. Well done to @courtsdesk on securing this important agreement.

New - Investigative journalist seeks damages from police over unlawful phone surveillance computerweekly.com/news/3666… via @computerweekly

New - French local authorities to replace WhatsApp with ‘sovereign’ encrypted messaging computerweekly.com/news/3666… via @computerweekly

Yesterday, the High Court ruled that the Solicitors Regulation Authority does not have the power to see material subject to legal professional privilege. As a result, law firms that drive abusive litigation like SLAPPs - or indeed other misdemeanours - at the behest of their clients cannot be scrutinised or sanctioned. That is wrong. lawgazette.co.uk/news/huge-b…

New - UK national centre will fight Russian disinformation, says UK prime minister Andy Burnham computerweekly.com/news/3666… via @computerweekly

New - EU states failing to exchange information on cross-border cyber security attacks computerweekly.com/news/3666… via @computerweekly

New- Home Office challenged on ‘farcical’ secrecy over Apple ‘backdoor’ order computerweekly.com/news/3666… via @computerweekly IC