EU Council quietly moves to legalize mass chat scanning before Tuesday talks

Internal documents from the Council of Ministers leaked shortly before Tuesday's likely decisive trilogue negotiations on the EU regulation to combat child sexual abuse. They show that member states want to lock in comprehensive surveillance of private communications through a new mechanism called search plans. heise online reported the leak on 29 September. The plan would let national judicial or independent administrative authorities hand chat and email providers temporary blanket authorizations to scan message content.

That is the news peg. The vote is Tuesday. The text is not final.

The Council's argument, as described by heise, is that a permanent law must not fall short of existing scanning practices, under which companies such as Facebook and Google already voluntarily search for abuse material. In effect, the search plans would cement the current temporary chat control 1.0 regime into something resembling a standing legal basis, without the word permanent appearing anywhere in the mechanism. Former MEP Patrick Breyer told heise the search plans being considered would mean continued scanning of millions of innocent users across parts of a service, with no suspicion attached to any of them. He called it a relabeling of mass surveillance, and compared the approach to child protection with mopping a floor while the tap keeps running.

The Council's own Legal Service already warned against the course early on, according to the leaked documents. Its opinion holds that scanning an entire service, or parts of it, is highly likely to violate EU law because the European Court of Justice could classify it as general and indiscriminate surveillance. Breyer accused member states of knowingly accepting a foreseeable failure before the Luxembourg judges. If the regulation were overturned after years of political debate, he argued, investigators would be left with nothing. Children and victims deserve legally sound measures rather than what he called security theater.

A plan B that keeps the loophole open

The leaked papers also describe a fallback strategy. If no agreement is reached at the negotiating table on scanning private chats, the Irish Council Presidency has a plan B: private chats would be excluded from the regulation entirely. That outcome would leave the temporary chat control 1.0 system in place as a permanent loophole for voluntary mass scans, since nothing in the regulation would replace it. Breyer has called on the European Parliament to reject any permanent regulation as long as the transitional arrangement is not replaced.

Numbers in the dossier cut against the scanning logic. Around 75 percent of reported chats are legally irrelevant, according to heise. In Germany, a large share of investigations into child pornography target adolescents themselves, for example over consensual sexting. That flood of false alarms consumes the investigative resources of the authorities it is meant to help.

Parliament's own position, by contrast, centers on targeted investigations and prevention. Its mandate includes security standards such as stricter privacy settings to block unsolicited contact, plus targeted orders for surveillance of private communications issued only under judicial review and only where there is specific suspicion against specific individuals or groups. A new EU center would proactively search publicly accessible content for known abuse material. The gap between that and the Council's search plans is the substance of Tuesday's negotiation.

Memory pressure reshapes Apple

Separately from the Brussels fight, the memory chip shortage is now driving personnel decisions at Apple. New CEO John Ternus is reportedly planning small-scale layoffs within large teams and canceling projects to make the company leaner, according to a Bloomberg report cited by Yahoo Finance on Wednesday. Ternus took over from Tim Cook, whose final earnings call flagged the component problem in unusually blunt terms.

"On the pricing front, we reluctantly raised prices, I would say," Cook said on that call. "We did it because we're in what I would characterize as a 100-year flood on the memory pricing, with exponential increases in memory prices."

The cost pressure runs in two directions, according to a post on X by tech commentator Rohan Paul cited in the Yahoo Finance piece: a memory shortage raising component costs, and services revenue falling quarter over quarter in June for the first time since 2022. Apple issued cautious revenue guidance for the current quarter in late July, largely because it could not source enough memory chips to meet demand. Margins were under significant pressure in the most recent quarter compared with the preceding one, due to higher memory prices. According to Bloomberg, Apple wants to avoid further significant price hikes in 2027 should the shortage continue.

The shortage itself is an AI infrastructure story. Demand for high-bandwidth memory and advanced DRAM used in AI servers continues to outpace supply. Companies including SK Hynix, Samsung Electronics and Micron have largely sold out their premium AI memory capacity through much of 2026 as customers such as Nvidia, Microsoft, Amazon and Meta race to build AI infrastructure. That has given suppliers greater pricing power after several years of weak conditions, and experts expect memory supply to remain constrained into 2027. Layoffs under Ternus would offset only part of the pricing pressure Apple has absorbed.

Routing, radio and the harness

On the engineering side, three posts published on 29 September point in the same direction: the interesting work is moving into the layer between the model and the world. Unblocked described an adaptive router that keeps LLM traffic on the cheapest inference provider that is fast and healthy, and moves it when that changes, without an engineer involved. The company says Baseten, Fireworks and CoreWeave all serve GLM 5.2 at different prices and speeds. Its earlier round-robin setup sent 51 percent of tasks to Fireworks and 49 percent to Baseten, even though Fireworks' prices were 25 percent higher and Baseten was faster. The router scores cost and speed per task rather than per model call, because a task usually makes four to six calls and the task is what the customer pays for and waits for. A circuit breaker had been counting HTTP 429 rate-limit responses as outright failures, pulling a provider from the whole fleet after five in a minute.

Espressif's ESP32 microcontrollers have an undocumented feature that lets firmware bypass the fixed-function Wi-Fi and Bluetooth modems and capture raw IQ baseband samples directly from the internal modem ADC signal chain, according to ESPARGOS, which published the finding and a browser-based demo. No extra hardware is required, and the project says the ESP32-C61 can capture signals up to 2.7 GHz, which includes LTE band 7 and 5G NR band n7 around 2.6 GHz. The 5 GHz band is available only on the ESP32-C5. The team says it reverse engineered the adctrig function in Espressif's librftest library with the help of LLMs, and assumes Espressif engineers left the IQ sampling path in place for modem testing and debugging.

And on agent control, Phil Windley published an OpenClaw demo that puts a human in the loop for consequential actions using Cedar and a Yubikey. The policy enforcement point, not the agent, decides when a human must approve, and the same component supplies the evidence that a human did. When the agent calls a simulated send_email tool, Cedar returns a deny because no human has approved the message; the PEP interprets that deny as "not yet" and parks the request until someone taps a Yubikey. If nobody approves within three minutes by default, the PEP returns a hard deny and does not wait again. Windley's argument is that a prompt instruction is guidance, not a control, and that authorization belongs in the harness rather than the prompt.

The Brussels trilogue remains the highest-stakes item on the calendar. The Council's search plans would create a permanent legal basis for scanning under a temporary-sounding name, and the Council's own lawyers doubt it survives court review. Tuesday's negotiation, and whichever fallback follows it, will determine whether the bloc's interim scanning regime becomes the floor or the ceiling of what providers are asked to do.