This is a pretty big deal: a new bill in Congress would let US courts order VPNs and DNS resolvers to block websites.
VPNs are explicitly named in a US site-blocking bill for the first time.
It’s being sold as an anti-piracy measure but once the legal machinery for blocking websites exists, the obvious question is where it goes from there.
And we’ve already seen how badly this can go. Spain’s anti-piracy blocking has swept up legitimate sites along with the targets...
Australia's "eSafety" Commissioner wrote a rule requiring services to scan private messages. Then she decided it covered social media too, because DMs exist.
The Federal Court told her no when X challenged the invasive rule.
Five groups that campaigned for Britain's Online Safety Act are now pushing age verification and digital ID bills in 21 US states and Congress.
Four of them are British.
One of them is the trade association for the companies that sell the age checks.
Every law like this ends the same way. It doesn't work, so it gets bigger.
The Online Safety Act keeps failing upward. Each thing it can't do becomes a reason to give it more to do.
When people route around a bad law, you can take that as feedback or you can take it as a gap in enforcement. Britain has picked.
Nothing about the Online Safety Act has gone to plan, and not one person responsible has treated that as information.
Google is trying to normalize biometrics one recovery option at a time.
They now want a short video of your face turning side to side, stored on their servers, so you can get back into your account. Encrypted at rest, they say. They still hold the key.
Passkeys and hardware keys already solve this without ever seeing your face. Google added the face scan anyway. That’s how the weird becomes normal.