Alec Muffett's Avatar

Alec Muffett

@alecmuffett.bsky.social

everybody deserves good security. self-proclaimed expert. https://alecmuffett.com/about

4,610 Followers  |  922 Following  |  2,381 Posts  |  Joined: 04.06.2023  |  2.3569

Latest posts by alecmuffett.bsky.social on Bluesky

Preview
There are many reasons to criticise the OnlineSafetyAct but the bizarre Ofcom approach to AgeVerification demanding vast proliferation of personal information rather than obligatory acceptance of a validated credential, defies belief & exceeds all other failures ^ this

There are many reasons to criticise the OnlineSafetyAct but the bizarre Ofcom approach to AgeVerification demanding vast proliferation of personal information rather than obligatory acceptance of a validated[โ€ฆ]
https://alecmuffett.com/article/114220

11.08.2025 15:05 โ€” ๐Ÿ‘ 1    ๐Ÿ” 0    ๐Ÿ’ฌ 0    ๐Ÿ“Œ 0
Preview
โ€˜But Prof Livingstone noted that it was โ€œpossible that the companies are over-blocking to undermine the Actโ€โ€˜ โ€“ no, @livingstone_s, Reddit simply does not editorialise user content Sonia is quoted by the BBC: [โ€ฆ] an expert in childrenโ€™s digital rights at the London School of Economics โ€“ said that companies might โ€œget better over time at not blocking public iโ€ฆ

โ€˜But Prof Livingstone noted that it was โ€œpossible that the companies are over-blocking to undermine the Actโ€โ€˜ โ€“ no, @sonialivingstone.bsky.social, Reddit simply does not editorialise user content

alecmuffett.com/article/114003 by @alecmuffett.bsky.social

11.08.2025 11:00 โ€” ๐Ÿ‘ 0    ๐Ÿ” 1    ๐Ÿ’ฌ 0    ๐Ÿ“Œ 0
Preview
Signal boss: โ€˜disturbingโ€™ laws show the UK doesnโ€™t understand tech | Times Meredith Whittaker: Whittaker thinks these two pieces of legislation are โ€œdeeply incoherentโ€ with the UKโ€™s stated desire to become an โ€œAI championโ€. โ€œYou get real boosterism on that side, which I tโ€ฆ

Signal boss: โ€˜disturbingโ€™ laws show the UK doesnโ€™t understand tech | Times
https://alecmuffett.com/article/114241
#AgeVerification #MeredithWhittaker #OnlineSafety #OnlineSafetyAct #censorship #surveillance #vpn

11.08.2025 13:05 โ€” ๐Ÿ‘ 3    ๐Ÿ” 1    ๐Ÿ’ฌ 0    ๐Ÿ“Œ 0
Preview
Jimmy Wales on Newsnight: โ€œ[the online safety act] is a human rights violationโ€ Nice commentary, watch the whole thing if you can. Starts at 22:45/ish.

Jimmy Wales on Newsnight: โ€œ[the online safety act] is a human rights violationโ€
https://alecmuffett.com/article/114234
#AgeVerification #OnlineSafety #OnlineSafetyAct #censorship #surveillance #vpn

11.08.2025 11:05 โ€” ๐Ÿ‘ 5    ๐Ÿ” 3    ๐Ÿ’ฌ 0    ๐Ÿ“Œ 0
Preview
The UKโ€™s Online Safety Act is a licence for censorship โ€“ and the rest of the world is following suit | Taylor Lorenz | The Guardian In order to determine who is a child, all users, no matter who they are, will be forced to turn over vast troves of valuable biometric data and for ever link their offline identity to their online โ€ฆ

The UKโ€™s Online Safety Act is a licence for censorship โ€“ and the rest of the world is following suit | Taylor Lorenz | The Guardian
https://alecmuffett.com/article/114232
#AgeVerification #OnlineSafety #OnlineSafetyAct #TaylorLorenz #censorship #surveillance #vpn

11.08.2025 09:05 โ€” ๐Ÿ‘ 2    ๐Ÿ” 0    ๐Ÿ’ฌ 0    ๐Ÿ“Œ 0

Bristol Young Liberal Democrats making noises about a repeal of the Online Safety Act

11.08.2025 07:53 โ€” ๐Ÿ‘ 2    ๐Ÿ” 1    ๐Ÿ’ฌ 0    ๐Ÿ“Œ 0
Preview
Ofcom apparently donโ€™t understand โ€œfalse-positive ratesโ€ nor โ€œbase rateโ€ Take badly drafted and overlarded legislation and then summarise it badly, and you end up with a refined recipe for shadowbanning, blocking & censorship: Ourย childrenโ€™s codesย for user-to-user sโ€ฆ

Ofcom apparently donโ€™t understand โ€œfalse-positive ratesโ€ nor โ€œbase rateโ€
https://alecmuffett.com/article/114231
#AgeVerification #OnlineSafety #OnlineSafetyAct #OverBlocking #ShadowBanning #censorship #surveillance #vpn

11.08.2025 07:05 โ€” ๐Ÿ‘ 3    ๐Ÿ” 1    ๐Ÿ’ฌ 1    ๐Ÿ“Œ 0
Preview
Bristol LibDems: โ€œFollowing the lead of @liberal_reform, we are submitting an emergency motion to the Young Liberals conference, aiming to make the **repeal** of the Online Safety Act official policyโ€ I am mildly concerned about the upstream thread and its framing, but at least this could turn into the first serious pushback against the OSA: Hadrianโ€™s Firewall will be breached. We will notโ€ฆ

Bristol LibDems: โ€œFollowing the lead of @liberal_reform, we are submitting an emergency motion to the Young Liberals conference, aiming to make the **repeal** of the Online Safety Act official policyโ€
https://alecmuffett.com/article/114298

10.08.2025 19:05 โ€” ๐Ÿ‘ 6    ๐Ÿ” 0    ๐Ÿ’ฌ 0    ๐Ÿ“Œ 1

Someone creates an idea which is only marginally more illiberal than age verification.

10.08.2025 11:52 โ€” ๐Ÿ‘ 5    ๐Ÿ” 0    ๐Ÿ’ฌ 0    ๐Ÿ“Œ 0

Thankfully this information will not be used for unintended purposes.

08.08.2025 19:09 โ€” ๐Ÿ‘ 18    ๐Ÿ” 9    ๐Ÿ’ฌ 2    ๐Ÿ“Œ 0
Preview
Ofcom conveniently listing all of the porn websites which do not adhere to age verification requirements If this is your sort of thing: On 30 July 2025, under this expanded enforcement programme, we have opened an investigation into AVS Group Ltd in relation to the adult sites [URLsโ€ฆ]

Ofcom conveniently listing all of the porn websites which do not adhere to age verification requirements
https://alecmuffett.com/article/114227
#AgeVerification #OnlineSafety #OnlineSafetyAct #StreisandEffect #censorship #ofcom #surveillance #vpn

08.08.2025 19:05 โ€” ๐Ÿ‘ 22    ๐Ÿ” 12    ๐Ÿ’ฌ 1    ๐Ÿ“Œ 1

I for one welcome this form of open government for highlighting the contradictions inherent in what they are attempting to achieve

08.08.2025 20:04 โ€” ๐Ÿ‘ 1    ๐Ÿ” 0    ๐Ÿ’ฌ 0    ๐Ÿ“Œ 0
Preview
Ofcom conveniently listing all of the porn websites which do not adhere to age verification requirements If this is your sort of thing: On 30 July 2025, under this expanded enforcement programme, we have opened an investigation into AVS Group Ltd in relation to the adult sites [URLsโ€ฆ]

Ofcom conveniently listing all of the porn websites which do not adhere to age verification requirements
https://alecmuffett.com/article/114227
#AgeVerification #OnlineSafety #OnlineSafetyAct #StreisandEffect #censorship #ofcom #surveillance #vpn

08.08.2025 19:05 โ€” ๐Ÿ‘ 22    ๐Ÿ” 12    ๐Ÿ’ฌ 1    ๐Ÿ“Œ 1
Preview
Marc Andreessen complains to Downing Street about Online Safety Act and UK tech minister Meanwhile, privacy campaigners argue the legislation has opened a space for unscrupulous companies purporting to provide age assurance services to gather and misuse reams of personal data.โ€œCreatingโ€ฆ

Marc Andreessen complains to Downing Street about Online Safety Act and UK tech minister
https://alecmuffett.com/article/114225
#AgeVerification #OnlineSafety #OnlineSafetyAct #censorship #surveillance #vpn

08.08.2025 17:05 โ€” ๐Ÿ‘ 3    ๐Ÿ” 0    ๐Ÿ’ฌ 0    ๐Ÿ“Œ 0

Bwhahahahahhahahahha

08.08.2025 12:17 โ€” ๐Ÿ‘ 4    ๐Ÿ” 0    ๐Ÿ’ฌ 0    ๐Ÿ“Œ 0
Preview
Encryption Made for Police and Military Radios May Be Easily Cracked | WIRED Sounds like one of the manufacturers had a batch of DES chips lying around: at least one implementation of the end-to-end encryption solution endorsed by ETSI has a similar issue that makes it equaโ€ฆ

Encryption Made for Police and Military Radios May Be Easily Cracked | WIRED
https://alecmuffett.com/article/114223
#EndToEndEncryption #etsi #tetra

08.08.2025 07:05 โ€” ๐Ÿ‘ 2    ๐Ÿ” 0    ๐Ÿ’ฌ 0    ๐Ÿ“Œ 0

Not to mention all of the Russian bugs he might leave behind

08.08.2025 05:35 โ€” ๐Ÿ‘ 0    ๐Ÿ” 0    ๐Ÿ’ฌ 0    ๐Ÿ“Œ 0

There are many reasons to criticise the #OnlineSafetyAct but the bizarre #Ofcom approach to #AgeVerification demanding vast proliferation of personal information rather than obligatory acceptance of a validated credential, defies belief and exceeds all other failures.

07.08.2025 13:48 โ€” ๐Ÿ‘ 10    ๐Ÿ” 6    ๐Ÿ’ฌ 0    ๐Ÿ“Œ 0
Preview
โ€œIโ€™m confused that the government advises never to give out your personal information, then introduces a law that means we have to send photos of our passports & driving licenses to anyone who asksโ€ r/autismUK subreddit: My gut is screaming that there is something bigger at play and thereโ€™s a hidden agender, and I donโ€™t like feeling like this. I worry for people, like my daughter, โ€ฆ

โ€œIโ€™m confused that the government advises never to give out your personal information, then introduces a law that means we have to send photos of our passports & driving licenses to anyone who asksโ€
https://alecmuffett.com/article/114206

07.08.2025 13:05 โ€” ๐Ÿ‘ 20    ๐Ÿ” 6    ๐Ÿ’ฌ 0    ๐Ÿ“Œ 1

"yes but American hegemony"

07.08.2025 17:01 โ€” ๐Ÿ‘ 0    ๐Ÿ” 0    ๐Ÿ’ฌ 0    ๐Ÿ“Œ 0
Preview
A โ€œpolitical blackmailโ€ โ€“ the EU Parliament is pressing for new mandatory scanning of your private chats | TechRadar As reported by digital rights group Netzpolitik, during the meeting held on July 11, the Parliament threatened to block an extension of the current voluntary scanning interim regulation โ€“ a temporaโ€ฆ

A โ€œpolitical blackmailโ€ โ€“ the EU Parliament is pressing for new mandatory scanning of your private chats | TechRadar
https://alecmuffett.com/article/114221
#ChatControl #ClientSideScanning #EndToEndEncryption #censorship #privacy #security #surveillance

07.08.2025 15:05 โ€” ๐Ÿ‘ 0    ๐Ÿ” 0    ๐Ÿ’ฌ 0    ๐Ÿ“Œ 2

There are many reasons to criticise the #OnlineSafetyAct but the bizarre #Ofcom approach to #AgeVerification demanding vast proliferation of personal information rather than obligatory acceptance of a validated credential, defies belief and exceeds all other failures.

07.08.2025 13:48 โ€” ๐Ÿ‘ 10    ๐Ÿ” 6    ๐Ÿ’ฌ 0    ๐Ÿ“Œ 0
Preview
โ€œIโ€™m confused that the government advises never to give out your personal information, then introduces a law that means we have to send photos of our passports & driving licenses to anyone who asksโ€ r/autismUK subreddit: My gut is screaming that there is something bigger at play and thereโ€™s a hidden agender, and I donโ€™t like feeling like this. I worry for people, like my daughter, โ€ฆ

โ€œIโ€™m confused that the government advises never to give out your personal information, then introduces a law that means we have to send photos of our passports & driving licenses to anyone who asksโ€
https://alecmuffett.com/article/114206

07.08.2025 13:05 โ€” ๐Ÿ‘ 20    ๐Ÿ” 6    ๐Ÿ’ฌ 0    ๐Ÿ“Œ 1
Preview
Repeal the Online Safety Act | Petitions | 500,775 signatures at Wednesday 2315h Visit the post for more.

Repeal the Online Safety Act | Petitions | 500,775 signatures at Wednesday 2315h
https://alecmuffett.com/article/114202
#AgeVerification #OnlineSafety #OnlineSafetyAct #censorship #surveillance #vpn

07.08.2025 11:05 โ€” ๐Ÿ‘ 3    ๐Ÿ” 1    ๐Ÿ’ฌ 0    ๐Ÿ“Œ 1

I think Wendy attempted three times to make a point and the others kept on talking over each other and I'm also pretty sure there was a fairly horrendous belch or similar noise. It sounded like an evening down the pub with a bunch of tech activists who have mostly had a pint or three.

07.08.2025 10:17 โ€” ๐Ÿ‘ 1    ๐Ÿ” 0    ๐Ÿ’ฌ 1    ๐Ÿ“Œ 0

If you are in the UK and you do Cybersecurity or Infosec, protest the #OnlineSafetyAct implementation by calling yourself a "self-proclaimed expert" โ€” before the government does it for you.

07.08.2025 07:55 โ€” ๐Ÿ‘ 3    ๐Ÿ” 5    ๐Ÿ’ฌ 0    ๐Ÿ“Œ 0
Preview
David Aaronovich on media coverage of the Online Safety Act: โ€œwhen are you going to have someone on to tell you what the downsides are?โ€ This is what happens when you let public policy be driven and architected by aggrieved parents, child charities and techlash advocates:

David Aaronovich on media coverage of the Online Safety Act: โ€œwhen are you going to have someone on to tell you what the downsides are?โ€
https://alecmuffett.com/article/114173
#AgeVerification #OnlineSafety #OnlineSafetyAct #censorship #surveillance #vpn

07.08.2025 09:05 โ€” ๐Ÿ‘ 2    ๐Ÿ” 2    ๐Ÿ’ฌ 0    ๐Ÿ“Œ 0

If you are in the UK and you do Cybersecurity or Infosec, protest the #OnlineSafetyAct implementation by calling yourself a "self-proclaimed expert" โ€” before the government does it for you.

07.08.2025 07:55 โ€” ๐Ÿ‘ 3    ๐Ÿ” 5    ๐Ÿ’ฌ 0    ๐Ÿ“Œ 0
Preview
โ€œAge verification: whatโ€™s the harm?โ€ | Girl on the Net explains A very good, frank, post from GotN, who has a largely NSFW website but addresses a very broad set of issues in this explainer:

โ€œAge verification: whatโ€™s the harm?โ€ | Girl on the Net explains
https://alecmuffett.com/article/114168
#AgeVerification #OnlineSafety #OnlineSafetyAct #censorship #surveillance #vpn

07.08.2025 07:05 โ€” ๐Ÿ‘ 4    ๐Ÿ” 3    ๐Ÿ’ฌ 0    ๐Ÿ“Œ 0
From an Ofcom guidance: 

Business disruption measures
9.4
9.5
9.6
Business disruption measures are orders made by a court on an application from Ofcom.
They apply to third parties which are able to disrupt the provision of the regulated service and thereby reduce the risk of harm to UK citizens and consumers. The third party need not be an Ofcom regulated entity and may not have had any previous dealings with Ofcom.
The Act provides for four types of business disruption measure:
a) a service restriction order;
b) an interim service restriction order;
c) an access restriction order; and
d) an interim access restriction order.
A service restriction order is an order applying to one or more providers of 'ancillary services' to a non-compliant regulated service. An ancillary service is a service that facilitates the provision of the regulated service (or part of it) (for example, payment processing services) or one that displays or promotes content in relation to the regulated service (for example an ad server). 110 The criteria with which a court must be satisfied to grant an application for an order are set out in section 144(3) and (4) of the Act and include that the court must be satisfied that the service provider has failed and is continuing to fail with an enforceable requirement or with a Technology Notice under section 121(1) of the Act. 111 A service restriction order requires the ancillary service against which an order is obtained to take steps aimed at disrupting the relevant regulated service in the UK...

From an Ofcom guidance: Business disruption measures 9.4 9.5 9.6 Business disruption measures are orders made by a court on an application from Ofcom. They apply to third parties which are able to disrupt the provision of the regulated service and thereby reduce the risk of harm to UK citizens and consumers. The third party need not be an Ofcom regulated entity and may not have had any previous dealings with Ofcom. The Act provides for four types of business disruption measure: a) a service restriction order; b) an interim service restriction order; c) an access restriction order; and d) an interim access restriction order. A service restriction order is an order applying to one or more providers of 'ancillary services' to a non-compliant regulated service. An ancillary service is a service that facilitates the provision of the regulated service (or part of it) (for example, payment processing services) or one that displays or promotes content in relation to the regulated service (for example an ad server). 110 The criteria with which a court must be satisfied to grant an application for an order are set out in section 144(3) and (4) of the Act and include that the court must be satisfied that the service provider has failed and is continuing to fail with an enforceable requirement or with a Technology Notice under section 121(1) of the Act. 111 A service restriction order requires the ancillary service against which an order is obtained to take steps aimed at disrupting the relevant regulated service in the UK...

Ofcom says that if you refuse to censor yourself under the Online Safety Act, it will force payment processors and ISPs to stop doing business with you.

When the government can't shut you up, the banks and credit cards will.

Absolutely terrifying.

www.ofcom.org.uk/siteassets/r...

05.08.2025 23:06 โ€” ๐Ÿ‘ 1020    ๐Ÿ” 570    ๐Ÿ’ฌ 21    ๐Ÿ“Œ 57

@alecmuffett is following 20 prominent accounts