MoreRSS

site iconAlec MuffettModify

Alec is a technologist, writer & security consultant who has worked in host and network security for more than 30 years, with 25 of those in industry.
Please copy the RSS to your reader, or quickly subscribe to:

Inoreader Feedly Follow Feedbin Local Reader

Rss preview of Blog of Alec Muffett

Terror tsar: China’s AI bot is rewriting history

2026-11-09 23:13:43

“Writing for The Telegraph, he said: “If national security is concerned with protecting our Western democracy with its spirit of open enquiry and commitment to evidence and debate, then Qwen’s self-censorship and attack on the historical record and promotion of Chinese propaganda is a genuine threat.””

https://www.telegraph.co.uk/world-news/2026/11/08/terror-tsar-chinas-ai-bot-threatens-britain/

Archived at: https://archive.ph/kr0ux

Clade of “Human Emacs” developers want Free/OpenSource software to be small-batch, handmade, organic, untouched by LLMs

2026-11-09 20:30:33

To me it’s rather ironic that the people having this argument are largely working in the archetypal AI research language of the 1960s, 70s, and 80s:

indeed, i have decided that llms are, at every level, an affront to justice, from who makes and profits and pushes them, to how they are trained, to the resources used, to the way they are used, to what they do to people who use them, to what they do to the communities where their use is tolerated. everywhere, and in profound ways, i have looked and seen llms as a destructive force that only exist to empower the few at the incredible, immoral expense of the many.


Quoted in:

https://yhetil.org/emacs-devel/[email protected]

Via Royce:

Royce Williams

Since the GNU listserv is getting Slashdotted (probably in part due to people using LLMs to search / summarize it, ironically)

lists.gnu.org/archive/html/ema

(Please don’t use this thread to discuss the thing, I’m just trying to inform the thing. And to be clear on my own stance, I’m not just presenting this neutrally: I think there’s a forest for the trees problem here, to put it mildly — freedoms can’t be isolated the way he wants them to be)

Re: Human Emacs From: Eli Zaretskii Subject: Re: Human Emacs Date: Fri, 06 Nov 2026 17:03:40 +0200 > From: brian cully <bjc@spork.org> > Cc: jporterbugs@gmail.com, bugs@gnu.support, phil@hagelb.org, > emacs-devel@gnu.org > Date: Fri, 06 Nov 2026 08:55:29 -0500 > > Eli Zaretskii <eliz@gnu.org> writes: > > > No one explained what kind of hostility will happen, and people here, > > myself included, don't really understand what is alluded to. It > > almost seems like you've decided that LLMs have adverse effects in > > some of their popular uses, and therefore using LLM-generated code > > will somehow "infect" Emacs even though those problematic aspects of > > using LLMs are completely irrelevant for our case. I personally hope > > that this is not the reason, but in the absence of any other > > argumentation, what else is left? > > indeed, i have decided that llms are, at every level, an affront to > justice, from who makes and profits and pushes them, to how they are > trained, to the resources used, to the way they are used, to what they > do to people who use them, to what they do to the communities where > their use is tolerated. everywhere, and in profound ways, i have looked > and seen llms as a destructive force that only exist to empower the few > at the incredible, immoral expense of the many. So basically, you are saying that just because LLMs can and perhaps do harm elsewhere, we should not let them anywhere near Emacs, regardless of what they can or cannot do to Emacs and our community. > in my view, while there may be some benefits to llms in some > circumstances, their harms vastly outweigh those, and, if i want to live > in accord with my principles of justice, i am left with no choice but to > reject them at every opportunity and in every way. i cannot come to > another conclusion based on my sense of ethics. There's a lot of evil in this world, and we meet it all the time. In the Free Software movement, we only deal with evil that directly affects or threatens software freedoms. Fighting the rest should be left for other arenas. > > That's very different. Here, we are asked to reject a completely > > valid, free and correct code just because of its progeny. It's like > > saying that code from left-handed or red-haired people should not be > > accepted. > > my point is not the progeny, but that the gnu project often rejects > technically and legally valid contributions because of gnu > ideology. progeny can be factored into that. No, progeny _cannot_ be factored into that. It shouldn't be. It must not be. > as a hypothetical example: if i live in a territory that permits > slavery, and by law i am granted sole ownership of the products of that > forced labor, and then i use that to create contributions to gnu emacs, > complete with copyright assignment, and it is technically correct, and, > above all, you, the emacs maintainers are aware of how this was > produced, would it be ethical to accept those contributions? Our answer must be YES. Any other answer is a first step towards splitting our community along the many lines of political and ideological divides that have nothing to do with software freedoms. Right now we have contributors from all over the world, despite the differences in their regimes and political systems, differences in ideologies, and even in the very interpretation of the notion of "freedom". You are suggesting to subject the contributors to some examination of the principles they uphold, the ethics of their day-to-day activities, their views on matters of policies and important international events, etc. This will immediately fracture our community into many different enclaves. And that's exactly my point, and the main reason why I must reject the "Human Emacs" initiative, as it is presented to us. > it is my worry that the fsf and gnu's apparent narrow focus on legality > and technical correctness in the framing of llm contributions ignores > the much larger issues with supporting human freedom, and, as such, > becomes hypocritcal: free software is free in name only when it is used > for subjugation or created from subjugation. There's no hypocrisy here, only the realization and understanding that we cannot fix everything in this world, even if we tried, not via developing and distributing software. So we limit ourselves to solving a few of the problems, and leave the rest to other communities. (Of course, people who contribute to Emacs can well be members of those other communities as well.) > this example is hypothetical and not intended to display any real or > imagined link to how llms are created and operated. it is only intended > as a philosophical point on how a narrow focus on license legality and > technical correctness are, at times, inadequate in the pursuit of the > larger goal of liberty for all humanity. The Free Software movement doesn't pursue the goal of "liberty for all humanity". If you think it does, you are gravely mistaken. Our goals are different, and are well described elsewhere.
2026/11/08, 18:09 0 boosts 3 favorites

30 years since “Smashing The Stack For Fun &amp; Profit” – buffer overflows were the “AI AGENTS WILL DOOM US ALL” threat of the mid-90s

2026-11-09 20:17:38

Mass panic and fearmongering are nothing new in information security:

Government Plans to force #AgeVerification on EBay &amp; Vinted are not due to “Grooming”, but instead…

2026-11-09 20:09:30

There’s much speculation re: the plans, and some quite sane commentary (e.g. below) but since Vinted and EBay both have strongly enforced 18+ age requirements, the risk of “grooming” is negligible.

I propose that instead there are five forces at work, in approximate order of :

  1. Age Verification Vendors wanting to grow their potential revenue bases, with the connivance of all of
    1. Treasury (who want taxes and obligatory KYC)
    2. Home Office (who want surveillance) and
    3. DCMS/DSIT/whatever (who want a British Tech Industry)
  2. Age Verification Activist-completists, who see this as a tickbox compliance “win” for their grand scheme
  3. Boomer & GenX “post-Mumsnet” activists who remember teenage boys flipping through 1970s/1980s mail-order catalogues, for lack of any other kind of porn

Some folk are saying “isn’t it strange that they want to age-verify Vinted but not (yet) Discord” — which is true, it is strange, but I suspect that they are attempting to keep their powder dry for the general war on Signal, WhatsApp, and Allied Chat Tools.

This seems very silly and not in the interests of young people www.bbc.co.uk/news/article… I mean, sure, theoretically it is possible to be groomed over Vinted but by the same token it would be possible to be groomed by routinely going into the same corner shop

— Rachel Coldicutt (@rachelcoldicutt.bsky.social) 2026-11-08T20:56:58.635Z

Le Grand Jackpotting: Activists demonstrate use of new French “Gigabyte Tax” to add €1000s to individual French website costs

2026-11-02 06:35:08

Mere hours after a French Socialist Party amendment instituted per-gigabyte taxes upon “platforms” for sending data to French users, French activists are demonstrating their ability to rack-up €10,000 daily costs in “taxes” to be paid by arbitrary French websites — including political parties


[All English translations via Google Translate or Twitter, by source]

Friday: The goal of the amendment was both straightforward and boldly naive: institute a tax upon free-to-use foreign platforms such as Facebook by co-opting ISPs to determine which “platforms” are serving data to French end-users, and attribute a “tax” of €0.055 (5.5 euro cents) per gigabyte of data transmitted by the platform.

https://www.assemblee-nationale.fr/dyn/17/amendements/3210A/AN/1358

”  Tax on digital data producers”

”  Art. 302 bis ZP . – A tax is established based on the flows of digital data emitted by content providers and paid by the latter.

”  Art. 302 bis ZQ . – Internet service providers and any company offering an internet access service to households and businesses shall implement, under the supervision of the Regulatory Authority for Electronic Communications, Postal Services and Press Distribution and the Directorate General of Public Finances, a procedure for the consolidated and anonymized collection of the quantities of data passing to their customers by identifying the sender of this data.

“The data collection is carried out according to technical procedures defined by decree. It includes the identity of the issuing company, its registration number with the Internet Assigned Numbers Authority, and the quantity of data transmitted during the period in question. No statement regarding the content of the data or its destination may be required. This data is transmitted quarterly to the Directorate General of Public Finances.”

See more information at the link above.

The amendment’s proponents continued that platforms such as Facebook are “free to use” and therefore there would be no costs passed on to the consumer:

Laurent Lhardit, the originator of the amendment, believes that this tax cannot be passed on to the consumer since Facebook is “free.”

Even for Facebook, it will be passed on to the advertisers, and thus to the customers of those advertisers who do not use Facebook.

This point in particular was raised by VideoLAN – the French project which provides the world with the popular VLC video player – who in some incandescent tweets took issue with supporting politicians, who themselves in turn attempted to trash VideoLAN’s position:

Critics of VideoLAN’s tweet — including the sponsoring politician — say that the tax will be “capped by a percentage of turnover” although it’s not clear (and the amendment itself does not say) precisely how that will impact open-source projects or any other “high-bandwidth low/zero-turnover” websites and services, or whether they will be taxed and then have to somehow claim the money back, and/or whether their existence will be chilled.

VideoLAN robustly defends itself:

You have no idea what you are talking about. What you said about Facebook and Insta and other social networks are not targeted because they are free, means you don’t understand the basics of economy. You don’t understand the difference between Revenue and Profit. Nor what is a non-profit. You don’t understand anything about digital economy and digital business models. You don’t understand anything about security and updates. You should be ashamed of yourself.

And impact on Steam is noted:

12€ in tax for downloading GTA VI. They live in a parallel world.

In more detail, Elodie Aishwarya Remoissenet analyses the “big picture” as follows:

Elodie Aishwarya Remoissenet @getbarkley

1/ Thank you, we have read the text in full. And it’s even worse than what @videolan said. Let’s do the math with your own figures.

2/ Your presentation: 200 billion GB per year to French subscribers, 10 billion euros in expected revenue. France has about 30 million connected households. That comes to 330 € per household per year. Two and a half times the old TV license fee.

3/ “The cap protects.” So choose: either the cap bites, and your 10 billion evaporates; or the 10 billion holds, and the cap protects no one. The two can’t both be true at the same time.

4/ “It won’t affect the consumer, @facebook is free.” When a sender pays, it passes it on. It’s written in your presentation: CDNs and transit providers “pass on or do not pass on the tax.” Pass it on to whom? To the host. Who passes it on to the startup. Who passes it on to the internet user.

5/ The sender is identified by its “registration number with the IANA.” The IANA doesn’t register companies: in Europe, network numbers are assigned by @ripencc. And a single CDN address serves thousands of sites, including VLC and any French startup. You can’t distinguish @netflix from the neighborhood association.

6/ Groups without an entity in France receive “a tax notice.” And if they don’t pay? Nothing. Those who will definitely pay are those with an entity in France: French hosts, French startups. Exactly the opposite of the stated objective.

7/ “Ecological virtue”: video is already compressed to the maximum, it’s the core of the business. The only compression left is to lower the quality. You’re not taxing waste, you’re taxing the definition of the image.

8/ And “at most 15% of revenue in France or 2% of total revenue”: which of the two? The text doesn’t say. A tax law that doesn’t know how to state its own cap.

9/ You write it yourself: video and gaming “structurally” have a lot of data per euro. You know it, and you still vote for a volume-based tax. Volume is usage. In the end, it’s the internet user who pays. Always.

Source: Amendment No. 1358, PLF 2027, text and summary presentation (Pappers Politique) #TaxeGigaoctet #PLF2027 #frenchtech #OpenSource

The above is a fairly complete analysis, although I have not yet seen mention of how VPNs and Tor Project Proxies would/will be billed – presumably they, too, would be entirely chilled as they would be a “source” of gigabytes without attribution / chargeback to a “source” platform for the actual content. This would support European “age verification” and “digital identity” initiatives intended to remove online anonymity.

Protest

On Sunday we started to see the first active protest: people searching the websites of the parties and politicians behind the amendment, iteratively downloading the largest files they can find, again and again:

Good evening @LaurentLhardit! After 214,683,917 downloads of your personal site (https://laurent-lhardit.fr), that’ll come to €10,237.20 to be paid. You can go to the nearest Public Treasury office. We can round it up to 20k; it’ll just take a few more hours.

It’s Sunday, I’m bored. So, I found a PDF on Marc Bloch on https://parti-socialiste.fr that’s 44MB. A little script that downloads it, deletes it, re-downloads it, and counts what that costs the PS. With every like, I repost the result.

In cybersecurity this kind of activity is called “jackpotting” (even in French) by analogy to artificially forcing a casino gambling machine to repeatedly pay out its jackpot prize until the machine is empty.

So on top of economic illiteracy and deception regarding costs to consumers, extensive technological self-harm and “chilling effect” impediments to digital sovereignty, in pursuit of “€10 billion per year” in additional taxes, the French government has just handed their famously direct citizens the ability to charge any French political party — or any other organisation — some 15% of their annual turnover, simply as the cost of having a website online.

Il n’y a pas assez de pop-corn au monde pour savourer ce spectacle.