Telegram Will Not Allow Scanning of Private Chats — Pavel Durov Strongly Criticizes EU Over Chat Control Initiative
Pavel Durov, founder of the messaging platform Telegram, has delivered a sharp rebuke to the European Union over renewed efforts to advance the Chat Control initiative. The proposal, which has resurfaced in EU legislative discussions, could authorize or require online services to scan private messages, emails, and photographs in order to detect prohibited content.
Durov reacted forcefully to the development, stating that methods previously associated with banana republics are now being employed within the EU to push through surveillance legislation. He made it unequivocally clear that Telegram will not scan users’ personal messages, irrespective of any regulatory maneuvers attempted by European authorities.
The founder reiterated the platform’s longstanding position: private correspondence must not be converted into material for mass automated monitoring. This stance directly challenges the direction of the proposed Chat Control regulation currently under debate.
Background on the Legislative Initiative
The European Parliament has returned the bill linked to the Chat Control initiative for further consideration. Earlier drafts explored the possibility of allowing online platforms to voluntarily scan user-generated content, including text messages and media files, with the stated goal of identifying illegal material.
Opponents of the measure contend that the legislation would establish a de facto system of mass surveillance of private communications, despite being presented under the banner of public safety. Proponents, however, maintain that such scanning capabilities are essential for combating illegal content and safeguarding users online.
In this ongoing debate, Telegram has aligned itself firmly with privacy advocates. Durov’s statements signal that the service intends to resist any attempts to transform encrypted personal chats into accessible data streams for regulatory oversight, even as the EU continues to tighten requirements for technology platforms.
Related articles
Dynamic Sites on Yandex Cloud Storage Enable Communication Under White-List Restrictions
A developer facing mobile internet white lists explored ways to exchange encrypted messages without relying on blocked infrastructure. Initial attempts with a national messenger bot failed due to poor API documentation and account hijacking. The team then modeled the problem as three neighboring plots where Alice and Bob route messages through Eve while a slow postman handles delivery. Yandex Disk was tested as a message store accessible via direct GET and POST requests, though it required accounts and suffered from 15-25 second latency. The final approach used Yandex Cloud object storage, whose domains remained whitelisted, allowing HTML files to load and function even when only government services and select platforms were reachable.
Rawline Aggregates VK, MAX, DNS and Other Tunnels into One Multi-Platform VPN Client
Rawline is a new multi-platform client that combines various VPN protocols and non-standard transports into a single application for Android, Windows, Linux and macOS. The project is built on Throne using sing-box and Xray network cores and supports both conventional protocols and unusual transports such as VK and MAX calls, WebRTC, DNS and S3. Users can import profiles via links or QR codes, test latency, chain connections and apply per-app or per-domain routing rules. The developer paid special attention to security issues, removing unnecessary local proxy endpoints, protecting internal connections with random passwords and adding traffic ownership verification that is enabled by default on Android 10 and newer. Additional fixes were implemented after discovering that some transport bridges could be hijacked by external applications sending the first UDP packet. Source code and builds are available on GitHub.
Russia Freezes Entire Hosting Networks to Block VPN Traffic, Investigation Finds
An independent test of 435 endpoints across 154 hosting providers revealed that Russian internet providers are throttling connections to entire autonomous systems rather than individual IP addresses. Networks belonging to Hetzner, OVH, DigitalOcean, M247 and HostPapa are frozen after roughly 25 TCP packets, causing downloads to stall at around 16 KB while UDP-based WireGuard tunnels remain unaffected. The blocking is applied uniformly by multiple Russian operators including Beeline, MTS and home broadband providers, indicating a centrally distributed rule from Roskomnadzor via the TSPU filtering system. Smaller providers that rent IP space from the affected autonomous systems are also impacted, regardless of their own brand or location. Cloudflare-hosted resources currently pass the test, but the list of blocked networks has remained stable since mid-2025. The researcher published an open-source script that allows anyone to reproduce the measurements in under a minute.
macOS Builds Undocumented Personal Knowledge Graph Since Version 13, Inferring Family Ties via On-Device ML
Since macOS 13 in 2022, two daemons named knowledgeconstructiond and intelligenceplatformd have been constructing a comprehensive personal knowledge graph on every Mac. The system aggregates data from Contacts, Calendar, Photos, Messages, Mail, Family Sharing, Health emergency contacts, Screen Time, and behavioral signals to map users, their relationships, locations, and activities. Results are stored in ~/Library/IntelligencePlatform as SQLite databases, including graph.db containing 181 entity classes and 278 predicates. Two CoreML models, EntityTagging_Family.mlmodelc and EntityTagging_FamilyAndFriends.mlmodelc, use 144 behavioral and photographic features to classify family and friend relationships with daily updates in entityTagging.db. An embedded LLM and embedding models further label unnamed faces and infer relationships from message text when Apple Intelligence is enabled. The graph remains queryable locally and is designed to feed personalized AI features while operating entirely on-device under Full Disk Access protections.