ExLisper

Based on decades of research. No feedback or change requests will be accepted.

An Israeli court has rejected an appeal to allow a five-year-old Palestinian boy with an aggressive form of cancer to enter Israel for life-saving treatment, citing a government policy that bars residents registered in Gaza from crossing the border, even when they no longer live there.

In a ruling issued on Sunday, the Jerusalem district court dismissed a petition seeking permission to transfer the child from Ramallah to Tel HaShomer hospital near Tel Aviv for a bone marrow transplant – a procedure unavailable in either Gaza or the occupied West Bank. The boy has been in the West Bank since 2022 where he was receiving medical care unavailable in the Gaza Strip. His doctors have determined that he urgently requires antibody immunotherapy.

Spain’s socialist-led coalition government has approved a decree it said would regularise 500,000 undocumented migrants and asylum seekers, rejecting the anti-migration policies and rhetoric prevalent across much of Europe.

Any White Ninja fans here? Definitely my favorite comic.

Here's the archive: https://whiteninjacomicsarchive.github.io/

I made a meme.

Plan would apply to countries not currently required to get visas to the US, including Britain and France

In a notice published on Tuesday, the US Customs and Border Protection agency (CBP) said it would also require any telephone numbers used by visitors over the same period, and any email addresses used in the last decade, as well as face, fingerprint, DNA and iris biometrics. It would also ask for the names, addresses, birthdates and birthplaces of family members, including children.

I got an email from Vercel urging to upgrade Next.js based project 3 days ago. POC was published 2 days ago. Today I've checked my logs and I could already see attack attempts.

I got an email from Vercel urging to upgrade Next.js based project 3 days ago. POC was published 2 days ago. Today I've checked my logs and I could already see attack attempts.

There's a lot of talk about the new Chat Control regulation here with many scary statements but few details so I decided to check what's actually in it. Best way to learn about at is to just read it:

https://data.consilium.europa.eu/doc/document/ST-15318-2025-INIT/en/pdf

It's long but not hard to understand. If you don't have the time here's a short summary for you.

First, two points:

1. There's no TLDR. It's a complex legislation and it can't be summarized in two sentences.
2. I will only say what's in the law. I don't care about how you think corporations will break it or conspiracy theories about what's really behind it. Feel free to post them but I will just ignore it.

So, to the point. The goal of the law is to prevent and combat child sexual abuse and it applies to hosting providers and publicly available communication services. At the core of the regulation is risk assessment. Each service will have to asses the risk that it will be used to distribute CSAM or to groom children. The risk is based on things like:

• are there known cases of the service being used for such things
• is there a mechanism to report CSAM by the users
• does it have parent control features
• do kids use it
• can you search for users and identify underage users
• can you send photos and videos using private chats

Once the risk assessment is done providers will have to address the identified risks. They can do this by implementing things like:

• moderation (having proper tools and staffing)
• letting users report child abuse
• letting users control what personal information visible to other users and how other users can contact them
• voluntarily doing things covered by Chat Control 1.0 (so client side message scanning)

If the provider identified that the service can be used for grooming it should implement age verification. The regulation says that age verification "shall be privacy preserving, respecting the principles relating to the processing of personal data, notably the principles of lawfulness, purpose limitation and data minimisation".

Regarding E2EE it clearly states that "the regulation shall not prohibit, make impossible, weaken, circumvent or otherwise undermine cybersecurity measures, in particular encryption, including end-to-end encryption".

So, does it allow all services to require an ID and store all your personal data? No. Can messengers break E2EE and scan all your messages? Also no.

What can happen is that some services will verify your age and store your date of birth. Anything beyond that will still be illegal and protected by GDPR. Providers can keep doing whatever they have been doing under Chat Control 1.0 (which applies since 2021) but E2EE is still protected.

Knowing all that let's think how it will apply to some example services. This is just my best guess but I think those are reasonable assumptions:

Signal: it does not let you search for other users, you don't share any personal information with anyone, strangers can't message you. There's very low risk that it will be used for grooming so it doesn't have to do any age verification. It allows you to share videos, has e2ee and I believe there were known cases of using to share CSAM. Based on that it COULD scan media client side as allowed by Chat Control 1.0 but it's voluntary. It will have to implement tools to report it.

Roblox: users of different ages interacting with each other, known cases of grooming on the platform: it should implement age verification.

Pornhub: low risk of grooming: no age verification. High risk of distributing CSAM: moderation and reporting.

Lemmy: my guess would be it's not used by many kids, instances don't have communities targeting children, it doesn't have tools that let you easily find kids on the platform: low risk of grooming and no age verification necessary. It can be used to publish CSAM and it has happened in the past: it should have proper moderation and reporting functionality and it can scan media and compare it against known CSAM hashes.

That's pretty much it. This is what Chat Control 2.0 is all about.

Hey,

I'm currently using Tracker Control (https://trackercontrol.org/) on Android and I really like it. It allows me to see what app are trying to call which trackers. If I have an issue with any app I can check its logs and unblock some trackers to fix it temporarily. The problem is that it's working as a VPN so I can't use any VPN with it. I see some VPN services offer features like "tracker blocking" but none I checked had features like TC. Anyone knows of a VPN that also has nice tracker monitoring/blocking feature?

Burger King in Spain decided to jump on the whole blind box craze popularized by Labubu and is now selling Mystery menus. Yes, you don't know what burger you are going to get. You can now gamble on food.

https://www.burgerking.es/en/mystery-king-by-brujillo-juan

Is it just me or is that a little bit fucked up? What are they going to invent next? Mystery bag of groceries? Random amount of gas when refueling?