Policy

discord-faces-backlash-over-age-checks-after-data-breach-exposed-70,000-ids

Discord faces backlash over age checks after data breach exposed 70,000 IDs


Discord to block adult content unless users verify ages with selfies or IDs.

Discord is facing backlash after announcing that all users will soon be required to verify ages to access adult content by sharing video selfies or uploading government IDs.

According to Discord, it’s relying on AI technology that verifies age on the user’s device, either by evaluating a user’s facial structure or by comparing a selfie to a government ID. Although government IDs will be checked off-device, the selfie data will never leave the user’s device, Discord emphasized. Both forms of data will be promptly deleted after the user’s age is estimated.

In a blog, Discord confirmed that “a phased global rollout” would begin in “early March,” at which point all users globally would be defaulted to “teen-appropriate” experiences.

To unblur sensitive media or access age-restricted channels, the majority of users will likely have to undergo Discord’s age estimation process. Most users will only need to verify their ages once, Discord said, but some users “may be asked to use multiple methods, if more information is needed to assign an age group,” the blog said.

On social media, alarmed Discord users protested the move, doubting whether Discord could be trusted with their most sensitive information after Discord age verification data was recently breached. In October, hackers stole government IDs of 70,000 Discord users from a third-party service that Discord previously trusted to verify ages in the United Kingdom and Australia.

At that time, Discord told users that the hackers were hoping to use the stolen data to “extort a financial ransom from Discord.” In October, Ars Senior Security Editor Dan Goodin joined others warning that “the best advice for people who have submitted IDs to Discord or any other service is to assume they have been or soon will be stolen by hackers and put up for sale or used in extortion scams.”

For bad actors, Discord will likely only become a bigger target as more sensitive information is collected worldwide, users now fear.

It’s no surprise then that hundreds of Discord users on Reddit slammed the decision to expand age verification globally shortly after The Verge broke the news. On a PC gaming subreddit discussing alternative apps for gamers, one user wrote, “Hell, Discord has already had one ID breach, why the fuck would anyone verify on it after that?”

“This is how Discord dies,” another user declared. “Seriously, uploading any kind of government ID to a 3rd party company is just asking for identity theft on a global scale.”

Many users seem just as sketched out about sharing face scans. On the Discord app subreddit, some users vowed to never submit selfies or IDs, fearing that breaches may be inevitable and suspecting Discord of downplaying privacy risks while allowing data harvesting.

Who can access Discord age-check data?

Discord’s system is supposed to make sure that only users have access to their age-check data, which Discord said would never leave their phones.

The company is hoping to convince users that it has tightened security after the breach by partnering with k-ID, an increasingly popular age-check service provider that’s also used by social platforms from Meta and Snap.

However, self-described Discord users on Reddit aren’t so sure, with some going the extra step of picking apart k-ID’s privacy policy to understand exactly how age is verified without data ever leaving the device.

“The wording is pretty unclear and inconsistent even if you dig down to the k-ID privacy policy,” one Redditor speculated. “Seems that ID scans are uploaded to k-ID servers, they delete them, but they also mention using ‘trusted 3rd parties’ for verification, who may or may not delete it.” That user seemingly gave up on finding reassurances in either company’s privacy policies, noting that “everywhere along the chain it reads like ‘we don’t collect your data, we forward it to someone else… .’”

Discord did not immediately respond to Ars’ requests to comment directly on how age checks work without data leaving the device.

To better understand user concerns, Ars reviewed the privacy policies, noting that k-ID said its “facial age estimation” tool is provided by a Swiss company called Privately.

“We don’t actually see any faces that are processed via this solution,” k-ID’s policy said.

That part does seem vague, since Privately isn’t explicitly included in the “we” in that statement. Similarly, further down, the policy more clearly states that “neither k-ID nor its service providers collect any biometric information from users when they interact with the solution. k-ID only receives and stores the outcome of the age check process.” In that section, “service providers” seems to refer to partners like Discord, which integrate k-ID’s age checks, rather than third parties like Privately that actually conduct the age check.

Asked for comment, a k-ID spokesperson told Ars that “the Facial Age Estimation technology runs entirely on the user’s device in real time when they are performing the verification. That means there is no video or image transmitted, and the estimation happens locally. The only data to leave the device is a pass/fail of the age threshold which is what Discord receives (and some performance metrics that contain no personal data).”

K-ID’s spokesperson told Ars that no third parties store personal data shared during age checks.

“k-ID, does not receive personal data from Discord when performing age-assurance,” k-ID’s spokesperson said. “This is an intentional design choice grounded in data protection and data minimisation principles. There is no storage of personal data by k-ID or any third parties, regardless of the age assurance method used.”

Turning to Privately’s website, that offers a little more information on how on-device age estimation works, while providing likely more reassurances that data won’t leave devices.

Privately’s services were designed to minimize data collection and prioritize anonymity to comply with the European Union’s General Data Protection Regulation, Privately noted. “No user biometric or personal data is captured or transmitted,” Privately’s website said, while bragging that “our secret sauce is our ability to run very performant models on the user device or user browser to implement a privacy-centric solution.”

The company’s privacy policy offers slightly more detail, noting that the company avoids relying on the cloud while running AI models on local devices.

“Our technology is built using on-device edge-AI that facilitates data minimization so as to maximise user privacy and data protection,” the privacy policy said. “The machine learning based technology that we use (for age estimation and safeguarding) processes user’s data on their own devices, thereby avoiding the need for us or for our partners to export user’s personal data onto any form of cloud services.”

Additionally, the policy said, “our technology solutions are built to operate mostly on user devices and to avoid sending any of the user’s personal data to any form of cloud service. For this we use specially adapted machine learning models that can be either deployed or downloaded on the user’s device. This avoids the need to transmit and retain user data outside the user device in order to provide the service.”

Finally, Privately explained that it also employs a “double blind” implementation to avoid knowing the origin of age estimation requests. That supposedly ensures that Privately only knows the result of age checks and cannot connect the result to a user on a specific platform.

Discord expects to lose users

Some Discord users may never be asked to verify their ages, even if they try to access age-restricted content. Savannah Badalich, Discord’s global head of product policy, told The Verge that Discord “is also rolling out an age inference model that analyzes metadata, like the types of games a user plays, their activity on Discord, and behavioral signals like signs of working hours or the amount of time they spend on Discord.”

“If we have a high confidence that they are an adult, they will not have to go through the other age verification flows,” Badalich said.

Badalich confirmed that Discord is bracing for some users to leave Discord over the update but suggested that “we’ll find other ways to bring users back.”

On Reddit, Discord users complained that age verification is easy to bypass, forcing adults to share sensitive information without keeping kids away from harmful content. In Australia, where Discord’s policy first rolled out, some kids claimed that Discord never even tried to estimate their ages, while others found it easy to trick k-ID by using AI videos or altering their appearances to look older. A teen girl relied on fake eyelashes to do the trick, while one 13-year-old boy was estimated to be over 30 years old after scrunching his face to seem more wrinkled.

Badalich told The Verge that Discord doesn’t expect the tools to work perfectly but acts quickly to block workarounds, like teens using Death Stranding‘s photo mode to skirt age gates. However, questions remain about the accuracy of Discord’s age estimation model in assessing minors’ ages, in particular.

It may be noteworthy that Privately only claims that its technology is “proven to be accurate to within 1.3 years, for 18-20-year-old faces, regardless of a customer’s gender or ethnicity.” But experts told Ars last year that flawed age-verification technology still frequently struggles to distinguish minors from adults, especially when differentiating between a 17- and 18-year-old, for example.

Perhaps notably, Discord’s prior scandal occurred after hackers stole government IDs that users shared as part of the appeal process in order to fix an incorrect age estimation. Appeals could remain the most vulnerable part of this process, The Verge’s report indicated. Badalich confirmed that a third-party vendor would be reviewing appeals, with the only reassurance for users seemingly that IDs shared during appeals “are deleted quicklyin most cases, immediately after age confirmation.”

On Reddit, Discord fans awaiting big changes remain upset. A disgruntled Discord user suggested that “corporations like Facebook and Discord, will implement easily passable, cheapest possible, bare minimum under the law verification, to cover their ass from a lawsuit,” while forcing users to trust that their age-check data is secure.

Another user joked that she’d be more willing to trust that selfies never leave a user’s device if Discord were “willing to pay millions to every user” whose “scan does leave a device.”

This story was updated on February 9 to clarify that government IDs are checked off-device.

Photo of Ashley Belanger

Ashley is a senior policy reporter for Ars Technica, dedicated to tracking social impacts of emerging policies and new technologies. She is a Chicago-based journalist with 20 years of experience.

Discord faces backlash over age checks after data breach exposed 70,000 IDs Read More »

under-trump,-epa’s-enforcement-of-environmental-laws-collapses,-report-finds

Under Trump, EPA’s enforcement of environmental laws collapses, report finds


The Environmental Protection Agency has drastically pulled back on holding polluters accountable.

Enforcement against polluters in the United States plunged in the first year of President Donald Trump’s second term, a far bigger drop than in the same period of his first term, according to a new report from a watchdog group.

By analyzing a range of federal court and administrative data, the nonprofit Environmental Integrity Project found that civil lawsuits filed by the US Department of Justice in cases referred by the Environmental Protection Agency dropped to just 16 in the first 12 months after Trump’s inauguration on Jan. 20, 2025. That is 76 percent less than in the first year of the Biden administration.

Trump’s first administration filed 86 such cases in its first year, which was in turn a drop from the Obama administration’s 127 four years earlier.

“Our nation’s landmark environmental laws are meaningless when EPA does not enforce the rules,” Jen Duggan, executive director of the Environmental Integrity Project, said in a statement.

The findings echo two recent analyses from the nonprofits Public Employees for Environmental Responsibility and Earthjustice, which both documented dwindling environmental enforcement under Trump.

From day one of Trump’s second term, the administration has pursued an aggressive deregulatory agenda, scaling back regulations and health safeguards across the federal government that protect water, air and other parts of the environment. This push to streamline industry activities has been particularly favorable for fossil fuel companies. Trump declared an “energy emergency” immediately after his inauguration.

At the EPA, Administrator Lee Zeldin launched in March what the administration called the “biggest deregulatory action in U.S. history”: 31 separate efforts to roll back restrictions on air and water pollution; to hand over more authority to states, some of which have a long history of supporting lax enforcement; and to relinquish EPA’s mandate to act on climate change under the Clean Air Act.

The new report suggests the agency is also relaxing enforcement of existing law. Neither the White House nor the EPA responded to a request for comment.

A “compliance first” approach

Part of the decline in lawsuits against polluters could be due to the lack of staff to carry them out, experts say. According to an analysis from E&E News, at least a third of lawyers in the Justice Department’s environment division have left in the past year. Meanwhile, the EPA in 2025 laid off hundreds of employees who monitored pollution that could hurt human health.

Top agency officials are also directing staff to issue fewer violation notices and reduce other enforcement actions. In December, the EPA formalized a new “compliance first” enforcement policy that stresses working with suspected violators to correct problems before launching any formal action that could lead to fines or mandatory correction measures.

“Formal enforcement … is appropriate only when compliance assurance or informal enforcement is inapplicable or insufficient to achieve rapid compliance,” wrote Craig Pritzlaff, who is now a principal deputy assistant EPA administrator, in a Dec. 5 memo to all enforcement officials and regional offices.

Only in rare cases involving an immediate hazard should enforcers use traditional case tools, Pritzlaff said. “Immediate formal enforcement may be required in certain circumstances, such as when there is an emergency that presents significant harm to human health and the environment,” he wrote.

Federal agencies like the EPA, with staffs far outmatched in size compared to the vast sectors of the economy they oversee, typically have used enforcement actions not only to deal with violators but to deter other companies from breaking the law. Environmental advocates worry that without environmental cops visible on the beat, compliance will erode.

Pritzlaff joined the EPA last fall after five years heading up enforcement for the Texas Commission on Environmental Quality, where nonprofit watchdog group Public Citizen noted that he was known as a “reluctant regulator.” Public Citizen and other advocacy groups criticized TCEQ under Pritzlaff’s leadership for its reticence to take decisive action against repeat violators.

One example: An INEOS chemical plant had racked up close to 100 violations over a decade before a 2023 explosion that sent one worker to the hospital, temporarily shut down the Houston Ship Channel and sparked a fire that burned for an hour. Public Citizen said it was told by TCEQ officials that the agency allowed violations to accumulate over the years, arguing it was more efficient to handle multiple issues in a single enforcement action.

“But that proved to be untrue, instead creating a complex backlog of cases that the agency is still struggling to resolve,” Public Citizen wrote last fall after Pritzlaff joined the EPA. “That’s not efficiency, it’s failure.”

Early last year, TCEQ fined INEOS $2.3 million for an extensive list of violations that occurred between 2016 and 2021.

“A slap on the wrist”

The EPA doesn’t always take entities to court when they violate environmental laws. At times, the agency can resolve these issues through less-formal administrative cases, which actually increased during the first eight months of Trump’s second term when compared to the same period in the Biden administration, according to the new report.

However, most of these administrative actions involved violations of requirements for risk management plans under the Clean Air Act or municipalities’ violations of the Safe Drinking Water Act. The Trump administration did not increase administrative cases that involve pollution from industrial operations, Environmental Integrity Project spokesperson Tom Pelton said over email.

Another signal of declining enforcement: Through September of last year, the EPA issued $41 million in penalties—$8 million less than the same period in the first year of the Biden administration, after adjusting for inflation. This suggests “the Trump Administration may be letting more polluters get by with a slap on the wrist when the Administration does take enforcement action,” the report reads.

Combined, the lack of lawsuits, penalties, and other enforcement actions for environmental violations could impact communities across the country, said Erika Kranz, a senior staff attorney in the Environmental and Energy Law Program at Harvard Law School, who was not involved in the report.

“We’ve been seeing the administration deregulate by repealing rules and extending compliance deadlines, and this decline in enforcement action seems like yet another mechanism that the administration is using to de-emphasize environmental and public health protections,” Kranz said. “It all appears to be connected, and if you’re a person in the US who is worried about your health and the health of your neighbors generally, this certainly could have effects.”

The report notes that many court cases last longer than a year, so it will take time to get a clearer sense of how environmental enforcement is changing under the Trump administration. However, the early data compiled by the Environmental Integrity Project and other nonprofits shows a clear and steep shift away from legal actions against polluters.

Historically, administrations have a “lot of leeway on making enforcement decisions,” Kranz said. But this stark of a drop could prompt lawsuits against the Trump administration, she added.

“Given these big changes and trends, you might see groups arguing that this is more than just an exercise of discretion or choosing priorities [and] this is more of an abdication of an agency’s core mission and its statutory duties,” Kranz said. “I think it’s going to be interesting to see if groups make those arguments, and if they do, how courts look at them.”

This article originally appeared on Inside Climate News, a nonprofit, non-partisan news organization that covers climate, energy, and the environment. Sign up for their newsletter here.

Photo of Inside Climate News

Under Trump, EPA’s enforcement of environmental laws collapses, report finds Read More »

eu-says-tiktok-needs-to-drop-“addictive-design”

EU says TikTok needs to drop “addictive design”

TikTok said: “The Commission’s preliminary findings present a categorically false and entirely meritless depiction of our platform, and we will take whatever steps are necessary to challenge these findings through every means available to us.”

TikTok is owned by China’s ByteDance, although a recent deal with the Trump administration will spin off its US arm into a joint venture majority owned by American investors. The venture will provide data and algorithm security, while ByteDance will retain control of the app’s main business lines in the US, including ecommerce, advertising, and marketing.

European watchdogs have previously taken action against TikTok for breaking the bloc’s digital rules. Last year, Irish regulators issued a 530 million euro fine against TikTok for sending users’ data to China, while Brussels has also probed its online advertising practices.

The EU’s move on Friday comes as other nations move closer to social media bans for teenagers.

Earlier this week, Spain was the latest country to announce it will stop access to social media for children under the age of 16 to curb the potentially harmful impact of online content on young people.

France and the UK are also considering similar measures, following the lead of Australia, which in December became the first country in the world to ban under-16s from holding accounts for 10 apps deemed to be potentially harmful to teenagers and children.

© 2026 The Financial Times Ltd. All rights reserved. Not to be redistributed, copied, or modified in any way.

EU says TikTok needs to drop “addictive design” Read More »

lawyer-sets-new-standard-for-abuse-of-ai;-judge-tosses-case

Lawyer sets new standard for abuse of AI; judge tosses case


“Extremely difficult to believe”

Behold the most overwrought AI legal filings you will ever gaze upon.

Frustrated by fake citations and flowery prose packed with “out-of-left-field” references to ancient libraries and Ray Bradbury’s Fahrenheit 451, a New York federal judge took the rare step of terminating a case this week due to a lawyer’s repeated misuse of AI when drafting filings.

In an order on Thursday, district judge Katherine Polk Failla ruled that the extraordinary sanctions were warranted after an attorney, Steven Feldman, kept responding to requests to correct his filings with documents containing fake citations.

One of those filings was “noteworthy,” Failla said, “for its conspicuously florid prose.” Where some of Feldman’s filings contained grammatical errors and run-on sentences, this filing seemed glaringly different stylistically.

It featured, the judge noted, “an extended quote from Ray Bradbury’s Fahrenheit 451 and metaphors comparing legal advocacy to gardening and the leaving of indelible ‘mark[s] upon the clay.’” The Bradbury quote is below:

“Everyone must leave something behind when he dies, my grandfather said. A child or a book or a painting or a house or a wall built or a pair of shoes made. Or a garden planted. Something your hand touched some way so your soul has somewhere to go when you die, and when people look at that tree or that flower you planted, you’re there. It doesn’t matter what you do, he said, so long as you change something from the way it was before you touched it into something that’s like you after you take your hands away. The difference between the man who just cuts lawns and a real gardener is in the touching, he said. The lawn-cutter might just as well not have been there at all; the gardener will be there a lifetime.”

Another passage Failla highlighted as “raising the Court’s eyebrows” curiously invoked a Bible passage about divine judgment as a means of acknowledging the lawyer’s breach of duty in not catching the fake citations:

“Your Honor, in the ancient libraries of Ashurbanipal, scribes carried their stylus as both tool and sacred trust—understanding that every mark upon clay would endure long beyond their mortal span. As the role the mark (x) in Ezekiel Chapter 9, that marked the foreheads with a tav (x) of blood and ink, bear the same solemn recognition: that the written word carries power to preserve or condemn, to build or destroy, and leaves an indelible mark which cannot be erased but should be withdrawn, let it lead other to think these citations were correct.

I have failed in that sacred trust. The errors in my memorandum, however inadvertent, have diminished the integrity of the record and the dignity of these proceedings. Like the scribes of antiquity who bore their stylus as both privilege and burden, I understand that legal authorship demands more than mere competence—it requires absolute fidelity to truth and precision in every mark upon the page.”

Lawyer claims AI did not write filings

Although the judge believed the “florid prose” signaled that a chatbot wrote the draft, Feldman denied that. In a hearing transcript in which the judge weighed possible sanctions, Feldman testified that he wrote every word of the filings. He explained that he read the Bradbury book “many years ago” and wanted to include “personal things” in that filing. And as for his references to Ashurbanipal, that also “came from me,” he said.

Instead of admitting he had let an AI draft his filings, he maintained that his biggest mistake was relying on various AI programs to review and cross-check citations. Among the tools that he admitted using included Paxton AI, vLex’s Vincent AI, and Google’s NotebookLM. Essentially, he testified that he substituted three rounds of AI review for one stretch reading through all the cases he was citing. That misstep allowed hallucinations and fake citations to creep into the filings, he said.

But the judge pushed back, writing in her order that it was “extremely difficult to believe” that AI did not draft those sections containing overwrought prose. She accused Feldman of dodging the truth.

“The Court sees things differently: AI generated this citation from the start, and Mr. Feldman’s decision to remove most citations and write ‘more of a personal letter’” is “nothing but an ex post justification that seeks to obscure his misuse of AI and his steadfast refusal to review his submissions for accuracy,” Failla wrote.

At the hearing, she expressed frustration and annoyance at Feldman for evading her questions and providing inconsistent responses. Eventually, he testified that he used AI to correct information when drafting one of the filings, which Failla immediately deemed “unwise,” but not the one quoting Bradbury.

AI is not a substitute for going to the library

Feldman is one of hundreds of lawyers who have relied on AI to draft filings, which have introduced fake citations into cases. Lawyers have offered a wide range of excuses for relying too much on AI. Some have faced small fines, around $150, while others have been slapped with thousands in fines, including one case where sanctions reached $85,000 for repeated, abusive misconduct. At least one law firm has threatened to fire lawyers citing fake cases, and other lawyers have imposed other voluntary sanctions, like taking a yearlong leave of absence.

Seemingly, Feldman did not think sanctions were warranted in this case. In his defense of three filings containing 14 errors out of 60 total citations, Feldman discussed his challenges accessing legal databases due to high subscription costs and short library hours. With more than one case on his plate and his kids’ graduations to attend, he struggled to verify citations during times when he couldn’t make it to the library, he testified. As a workaround, he relied on several AI programs to verify citations that he found by searching on tools like Google Scholar.

Feldman likely did not expect the judge to terminate the case as a result of his AI misuses. Asked how he thought the court should resolve things, Feldman suggested that he could correct the filings by relying on other attorneys to review citations, while avoiding “any use whatsoever of any, you know, artificial intelligence or LLM type of methods.” The judge, however, wrote that his repeated misuses were “proof” that he “learned nothing” and had not implemented voluntary safeguards to catch the errors.

Asked for comment, Feldman told Ars that he did not have time to discuss the sanctions but that he hopes his experience helps raise awareness of how inaccessible court documents are to the public. “Use of AI, and the ability to improve it, exposes a deeper proxy fight over whether law and serious scholarship remain publicly auditable, or drift into closed, intermediary‑controlled systems that undermine verification and due process,” Feldman suggested.

“The real lesson is about transparency and system design, not simply tool failure,” Feldman said.

But at the hearing, Failla said that she thinks Feldman had “access to the walled garden” of legal databases, if only he “would go to the law library” to do his research, rather than rely on AI tools.

“It sounds like you want me to say that you should be absolved of all of these terrible citation errors, these missed citations, because you don’t have Westlaw,” the judge said. “But now I know you have access to Westlaw. So what do you want?”

As Failla explained in her order, she thinks the key takeaway is that Feldman routinely failed to catch his own errors. She said that she has no problem with lawyers using AI to assist their research, but Feldman admitted to not reading the cases that he cited and “apparently” cannot “learn from his mistakes.”

Verifying case citations should never be a job left to AI, Failla said, describing Feldman’s research methods as “redolent of Rube Goldberg.”

“Most lawyers simply call this ‘conducting legal research,’” Failla wrote. “All lawyers must know how to do it. Mr. Feldman is not excused from this professional obligation by dint of using emerging technology.”

His “explanations were thick on words but thin on substance,” the judge wrote. She concluded that he “repeatedly and brazenly” violated Rule 11, which requires attorneys to verify the cases that they cite, “despite multiple warnings.”

Noting that Feldman “failed to fully accept responsibility,” she ruled that case-terminating sanctions were necessary, entering default judgment for the plaintiffs. Feldman may also be on the hook to pay fees for wasting other attorneys’ time.

Case abruptly ending triggers extensive remedies

The hearing transcript has circulated on social media due to the judge’s no-nonsense approach to grilling Feldman, whom she clearly found evasive and lacking credibility.

“Look, if you don’t want to be straight with me, if you don’t want to answer questions with candor, that’s fine,” Failla said. “I’ll just make my own decisions about what I think you did in this case. I’m giving you an opportunity to try and explain something that I think cannot be explained.”

In her order this week, she noted that Feldman “struggled to make eye contact” and left the court without “clear answers.”

Feldman’s errors came in a case in which a toy company sued merchants who allegedly failed to stop selling stolen goods after receiving a cease-and-desist order. His client was among the merchants accused of illegally profiting from the alleged thefts. They faced federal charges of trademark infringement, unfair competition, and false advertising, as well as New York charges, including fostering the sale of stolen goods.

The loss triggers remedies, including an injunction preventing additional sales of stolen goods and refunding every customer who bought them. Feldman’s client must also turn over any stolen goods in their remaining inventory and disgorge profits. Other damages may be owed, along with interest. Ars could not immediately reach an attorney for the plaintiffs to discuss the sanctions order or resulting remedies.

Failla emphasized in her order that Feldman appeared to not appreciate “the gravity of the situation,” repeatedly submitting filings with fake citations even after he had been warned that sanctions could be ordered.

That was a choice, Failla said, noting that Feldman’s mistakes were caught early by a lawyer working for another defendant in the case, Joel MacMull, who urged Feldman to promptly notify the court. The whole debacle would have ended in June 2025, MacMull suggested at the hearing.

Rather than take MacMull’s advice, however, Feldman delayed notifying the court, irking the judge. He testified during the heated sanctions hearing that the delay was due to an effort he quietly undertook, working to correct the filing. He supposedly planned to submit those corrections when he alerted the court to the errors.

But Failla noted that he never submitted corrections, insisting instead that Feldman kept her “in the dark.”

“There’s no real reason why you should have kept this from me,” the judge said.

The court learned of the fake citations only after MacMull notified the judge by sharing emails of his attempts to get Feldman to act urgently. Those emails showed Feldman scolding MacMull for unprofessional conduct after MacMull refused to check Feldman’s citations for him, which Failla noted at the hearing was absolutely not MacMull’s responsibility.

Feldman told Failla that he also thought it was unprofessional for MacMull to share their correspondence, but Failla said the emails were “illuminative.”

At the hearing, MacMull asked if the court would allow him to seek payment of his fees, since he believes “there has been a multiplication of proceedings here that would have been entirely unnecessary if Mr. Feldman had done what I asked him to do that Sunday night in June.”

Photo of Ashley Belanger

Ashley is a senior policy reporter for Ars Technica, dedicated to tracking social impacts of emerging policies and new technologies. She is a Chicago-based journalist with 20 years of experience.

Lawyer sets new standard for abuse of AI; judge tosses case Read More »

“ice-out-of-our-faces-act”-would-ban-ice-and-cbp-use-of-facial-recognition

“ICE Out of Our Faces Act” would ban ICE and CBP use of facial recognition

A few Senate Democrats introduced a bill called the ‘‘ICE Out of Our Faces Act,” which would ban Immigration and Customs Enforcement (ICE) and Customs and Border Protection (CBP) from using facial recognition technology.

The bill would make it “unlawful for any covered immigration officer to acquire, possess, access, or use in the United States—(1) any biometric surveillance system; or (2) information derived from a biometric surveillance system operated by another entity.” All data collected from such systems in the past would have to be deleted. The proposed ban extends beyond facial recognition to cover other biometric surveillance technologies, such as voice recognition.

The proposed ban would prohibit the federal government from using data from biometric surveillance systems in court cases or investigations. Individuals would have a right to sue the federal government for financial damages after violations, and state attorneys general would be able to bring suits on behalf of residents.

The bill was submitted yesterday by Sen. Edward J. Markey (D-Mass.), who held a press conference about the proposal with Sen. Jeff Merkley (D-Ore.), and US Rep. Pramila Jayapal (D-Wash.). The Senate bill is also cosponsored by Sens. Ron Wyden (D-Ore.), Angela Alsobrooks (D-Md.), and Bernie Sanders (I-Vt.).

“This is a dangerous moment for America,” Markey said at the press conference, saying that ICE and CBP “have built an arsenal of surveillance technologies that are designed to track and to monitor and to target individual people, both citizens and non-citizens alike. Facial recognition technology sits at the center of a digital dragnet that has been created in our nation.”

“ICE Out of Our Faces Act” would ban ICE and CBP use of facial recognition Read More »

neocities-founder-stuck-in-chatbot-hell-after-bing-blocked-1.5-million-sites

Neocities founder stuck in chatbot hell after Bing blocked 1.5 million sites


Microsoft won’t explain why Bing blocked 1.5 million Neocities websites.

Credit: Aurich Lawson | NeoCities

One of the weirdest corners of the Internet is suddenly hard to find on Bing, after the search engine inexplicably started blocking approximately 1.5 million independent websites hosted on Neocities.

Founded in 2013 to archive the “aesthetic awesomeness” of GeoCities websites, Neocities keeps the spirit of the 1990s Internet alive. It lets users design free websites without relying on standardized templates devoid of personality. For hundreds of thousands of people building websites around art, niche fandoms, and special expertise—or simply seeking a place to get a little weird online—Neocities provides a blank canvas that can be endlessly personalized when compared to a Facebook page. Delighted visitors discovering these sites are more likely to navigate by hovering flashing pointers over a web of spinning GIFs than clicking a hamburger menu or infinitely scrolling.

That’s the style of Internet that Kyle Drake, Neocities’ founder, strives to maintain. So he was surprised when he noticed that Bing was curiously blocking Neocities sites last summer. At first, the issue seemed resolved by contacting Microsoft, but after receiving more recent reports that users were struggling to log in, Drake discovered that another complete block was implemented in January. Even more concerning, he saw that after delisting the front page, Bing had started pointing users to a copycat site where he was alarmed to learn they were providing their login credentials.

Monitoring stats, Drake was stunned to see that Bing traffic had suddenly dropped from about half a million daily visitors to zero. He immediately reported the issue using Bing webmaster tools. Concerned that Bing was not just disrupting traffic but possibly also putting Neocities users at risk if bad actors were gaming search results, he hoped for a prompt resolution.

“This one site that was just a copy of our front page, I didn’t know if it was a phishing attack or what it was, I was just like, ‘whoa, what the heck?’” Drake told Ars.

However, weeks went by as Drake hit wall after wall, submitting nearly a dozen tickets while trying to get past the Bing chatbot to find a support member to fix the issue. Frustrated, he tried other internal channels as well, including offering to buy ads to see if an ads team member could help.

“I tried everything,” Drake said, but nothing worked. Neocities sites remained unlisted on Bing.

Although Bing only holds about 4.5 percent of the global search engine market, Drake said it was “embarrassing” that Neocities sites can’t be discovered using the default Windows search engine. He also noted that many other search engines license Bing data, further compounding the issue.

Ultimately, it’s affecting a lot of people, Drake said, but he suspects that his support tickets are being buried in probably trillions of requests each day from people wanting to improve their Bing indexing.

“There’s probably an actual human being at Bing that actually could fix this,” Drake told Ars, but “when you go to the webmaster tools,” you’re stuck talking to an AI chatbot, and “it’s all kind of automated.”

Ars reached Microsoft for comment, and the company took action to remove some inappropriate blocks.

Within 24 hours, the Neocities front page appeared in search results, but Drake ran tests over the next few days that showed that most subdomains are still being blocked, including popular Neocities sites that should garner high rankings.

Pressed to investigate further, Microsoft confirmed that some Neocities sites were delisted for violating policies designed to keep low-quality sites out of search results.

However, Microsoft would not identify which sites were problematic or directly connect with Neocities to resolve a seemingly significant amount of ongoing site blocks that do not appear to be linked to violations. Instead, Microsoft recommended that Neocities find a way to work directly with Microsoft, despite Ars confirming that Microsoft is currently ignoring an open ticket.

For Drake, “the current state of things is unknown.” It’s hard to tell if popular Neocities sites are still being blocked or if possibly Bing’s reindexing process is slow. Microsoft declined to clarify.

He’s still hoping that Microsoft will eventually resolve all the improper blocks, making it possible for Bing users to use the search engine not just to find businesses or information but also to discover creative people making websites just for fun. With so much AI slop invading social networks and search engines, Drake sees Neocities as “one of the last bastions of human content.”

“I hope we can resolve this amicably for both of us and that this doesn’t happen again in the future,” Drake said. “It’s really important for the future of the small web, and for quality content for web surfers in an increasingly generative AI world, that creative sites made by real humans are able to get a fair shot in search engine results.”

Bing deranked suspected phishing site

After Drake failed to quietly resolve the issue with Bing, he felt that he had no choice but to alert users to the potential risks from Bing’s delisting.

In a blog post in late January, Drake warned that Bing had “completely blocked” all Neocities subdomains from its search index. Even worse, “Bing was also placing what appeared to be a phishing attack against Neocities on the first page of search results,” Drake said.

“This is not only bad for search results, it’s very possible that it is actively dangerous,” Drake said.

After “several” complaints, Bing eventually deranked the suspected phishing site, Drake confirmed. But Bing “declined to reverse the block or provide a clear, actionable explanation for it,” which leaves Neocities users vulnerable, he said.

Since “it’s easy to get higher pagerank than a blocked site,” Drake warned that “it is possibly only a matter of time before another concerning site appears on Bing searches for Neocities.”

The blog emphasized that Google, the platform’s biggest traffic driver, was not blocking Neocities, nor was any search engine unlinked to Bing data. Urging a boycott that may force a resolution, Drake wrote, “we are recommending that Neocities users, and the broader Internet in general, not use Bing or search engines that source their results from Bing until this issue is resolved.

“If you use Bing or Bing-powered search engines, Neocities sites will not appear in your search results, regardless of content quality, originality, or compliance with webmaster guidelines,” Drake said. “If any Neocities-like sites appear on these results, they may be active phishing attacks against Neocities and should be treated with caution.”

Bing still blocking popular Neocities sites

Drake doesn’t want to boycott Bing, but in his blog, he said that Microsoft left him no choice but public disclosure:

“We did not want to write this post. We try very hard to have a good relationship with search engine providers. We would much rather quietly resolve this issue with Bing staff and move on. But after months of attempting to engage constructively through multiple channels, it became clear that silence only harms our users. Especially those who don’t realize their sites are invisible on some search engines.”

Drake told Ars that he thinks most people don’t realize how big Neocities has gotten since its early days reviving GeoCities’ spunk. The platform hosts 1,459,700 websites that have drawn in 13 billion visitors. Over the years, it has been profiled in Wired and The New York Times, and more recently, it has become a popular hub for gaming communities, Polygon reported.

As Neocities grew, Drake told Ars that much of his focus has been on improving content moderation. He works closely with a full-time dedicated content moderation staffer to quickly take down any problematic sites within 24 hours, he said. That effort includes reviewing reports and proactively screening new sites, with Drake noting that “our name domain provider requires us to take them down within 48 hours.”

Microsoft prohibits things like scraping content that could be considered copyright infringement or automatically generating content using “garbage text” to game the rankings. It also monitors for malicious behavior like phishing, as well as for prompt injection attacks on Bing’s large language model.

It’s unclear what kind of violations Microsoft found ahead of instituting the complete block; however, Drake told Ars that he has yet to identify any content that may have triggered it. He said he would promptly remove any websites flagged by Microsoft, if he could only talk to someone who could share that information.

“Naturally, we still don’t catch 100 percent of the sites with proactive moderation, and occasionally some problematic sites do get missed,” Drake said.

Although Drake is curious to learn more about what triggered the blocks, he told Ars that it’s clear that non-violative sites are still invisible on Bing.

One of the longest-running and most popular Neocities sites, Wired Sound for Wired People, is a perfect example. The bizarre, somewhat creepy anime fanpage is “very popular” and “has a lot of links to it all over the web,” Drake said. Yet if you search for its subdomain, “fauux,” the site no longer appears in Bing search results, as of this writing, while Google reliably spits it out as the top result.

Drake said that he still believes that Bing is blocking content by mistake, but Bing’s automated support tools aren’t making it easy to defend creators who are randomly blocked by one of the world’s biggest search engines.

“We have one of the lowest ratios of crap to legitimate content, human-made content, on the Internet,” Drake said. “And it’s really frustrating to see that all these human beings making really cool sites that people want to go to are just not available on the default Windows search engine.”

Photo of Ashley Belanger

Ashley is a senior policy reporter for Ars Technica, dedicated to tracking social impacts of emerging policies and new technologies. She is a Chicago-based journalist with 20 years of experience.

Neocities founder stuck in chatbot hell after Bing blocked 1.5 million sites Read More »

fbi-stymied-by-apple’s-lockdown-mode-after-seizing-journalist’s-iphone

FBI stymied by Apple’s Lockdown Mode after seizing journalist’s iPhone

Apple made Lockdown Mode for people at high risk

CART couldn’t get anything from the iPhone. “Because the iPhone was in Lockdown mode, CART could not extract that device,” the government filing said.

The government also submitted a declaration by FBI Assistant Director Roman Rozhavsky that said the agency “has paused any further efforts to extract this device because of the Court’s Standstill Order.” The FBI did extract information from the SIM card “with an auto-generated HTML report created by the tool utilized by CART,” but “the data contained in the HTML was limited to the telephone number.”

Apple says that LockDown Mode “helps protect devices against extremely rare and highly sophisticated cyber attacks,” and is “designed for the very few individuals who, because of who they are or what they do, might be personally targeted by some of the most sophisticated digital threats.”

Introduced in 2022, Lockdown Mode is available for iPhones, iPads, and Macs. It must be enabled separately for each device. To enable it on an iPhone or iPad, a user would open the Settings app, tap Privacy & Security, scroll down and tap Lockdown Mode, and then tap Turn on Lockdown Mode.

The process is similar on Macs. In the System Settings app that can be accessed via the Apple menu, a user would click Privacy & Security, scroll down and click Lockdown Mode, and then click Turn On.

“When Lockdown Mode is enabled, your device won’t function like it typically does,” Apple says. “To reduce the attack surface that potentially could be exploited by highly targeted mercenary spyware, certain apps, websites, and features are strictly limited for security and some experiences might not be available at all.”

Lockdown Mode blocks most types of message attachments, blocks FaceTime calls from people you haven’t contacted in the past 30 days, restricts the kinds of browser technologies that websites can use, limits photo sharing, and imposes other restrictions. Users can exclude specific apps and websites they trust from these restrictions, however.

FBI stymied by Apple’s Lockdown Mode after seizing journalist’s iPhone Read More »

judge-gives-musk-bad-news,-says-trump-hasn’t-intervened-to-block-sec-lawsuit

Judge gives Musk bad news, says Trump hasn’t intervened to block SEC lawsuit

Now, Musk may be running out of arguments after Sooknanan shot down his First Amendment claims and other claims nitpicking the statute as unconstitutionally vague.

Whether Musk can defeat the SEC lawsuit without Trump’s intervention remains to be seen as the lawsuit advances. In her opinion, the judge found that the government’s interest in requiring disclosures to ensure fair markets outweighed Musk’s fears that disclosures compelled speech revealing his “thoughts” and “strategy.” Accepting Musk’s arguments would be an “odd” choice to break “new ground,” she suggested, as it could foreseeably impact a wide range of laws.

“Many laws require regulated parties to state or explain their purposes, plans, or intentions,” Sooknanan wrote, noting courts have long upheld those laws. Additionally, it seemed to be “common sense” for the SEC to compel disclosures “alerting the investing public to potential changes in control,” she said.

“The Court does not doubt that Mr. Musk would prefer to avoid having to disclose information that might raise stock prices while he makes a play for corporate control,” Sooknanan wrote. But there was no violation of the First Amendment, she said, as Congress struck the appropriate balance when it wrote the statute requiring disclosures.

Musk may be able to develop his arguments on selective enforcement as a possible path to victory. But Sooknanan noted that “despite having very able counsel,” his case right now seems weak.

In her opinion, Sooknanan also denied as premature Musk’s motions to strike from potential remedies the SEC requests for disgorgement and injunctive relief.

Likely troubling Musk, instead of balking at the potential fines, the judge suggested that “the SEC’s request to disgorge $150 million” appeared reasonable. That amount, while larger than past cases flagged by Musk, “corresponds to the Complaint’s allegation” that Musk’s violation of SEC requirements “allowed him to net that amount,” Sooknanan wrote.

“A straightforward application of the law reveals that none” of Musk’s arguments “warrant dismissal of this lawsuit,” Sooknanan said.

Judge gives Musk bad news, says Trump hasn’t intervened to block SEC lawsuit Read More »

“capture-it-all”:-ice-urged-to-explain-memo-about-collecting-info-on-protesters

“Capture it all”: ICE urged to explain memo about collecting info on protesters

Senator Edward J. Markey (D-Mass.) demanded that Immigration and Customs Enforcement (ICE) confirm or deny the existence of a “domestic terrorists” database that lists US citizens who protest ICE’s immigration crackdown.

ICE “officers and senior Trump administration officials have repeatedly suggested that the Department of Homeland Security (DHS) is building a ‘domestic terrorists’ database comprising information on US citizens protesting ICE’s actions in recent weeks,” Markey wrote in a letter yesterday to Acting ICE Director Todd Lyons. “If such a database exists, it would constitute a grave and unacceptable constitutional violation. I urge you to immediately confirm or deny the existence of such a database, and if it exists, immediately shut it down and delete it.”

Creating a database of peaceful protesters “would constitute a shocking violation of the First Amendment and abuse of power,” and amount to “the kinds of tactics the United States rightly condemns in authoritarian governments such as China and Russia,” Markey said.

Markey’s letter said DHS officials “have repeatedly stated that the agency is engaged in efforts to monitor, catalog, and intimidate individuals engaged in peaceful protests,” and gave several examples. Trump border czar Tom Homan recently told Laura Ingraham on Fox News, “One thing I’m pushing for right now, Laura, we’re going to create a database where those people that are arrested for interference, impeding, and assault, we’re going to make them famous. We’re going to put their face on TV. We’re going to let their employers, and their neighborhoods, and their schools know who these people are.”

Markey’s letter called Homan’s comment “especially alarming given the numerous incidents in which DHS appears to have concluded that protesting ICE itself constitutes grounds for arrest.” Markey pointed to another recent incident in Portland, Maine, in which a masked ICE agent told an observer who was taking video that “we have a nice little database and now you’re considered a domestic terrorist.”

“Capture it all”: ICE urged to explain memo about collecting info on protesters Read More »

x-office-raided-in-france’s-grok-probe;-elon-musk-summoned-for-questioning

X office raided in France’s Grok probe; Elon Musk summoned for questioning

UK probe moves ahead with “urgency”

X said in July 2025 that it was “in the dark” over what specific allegations it faced related to manipulation of the X algorithm and fraudulent data extraction. X said it would not comply with France’s request for access to its recommendation algorithm and real-time data about all user posts.

The Paris prosecutor’s office today said the investigation is taking a “constructive approach” with the goal of ensuring that X complies with French laws “insofar as it operates on national territory.” In addition to Musk and Yaccarino, the prosecutor’s office is seeking interviews with X employees about the allegations and potential compliance measures.

Separately, UK communications regulator Ofcom today provided an update on its investigation into Grok’s generation of sexual deepfakes of real people, including children. Ofcom is “gathering and analyzing evidence to determine whether X has broken the law” and is “progressing the investigation as a matter of urgency,” it said. Ofcom is not currently investigating xAI, the Musk company that develops Grok, but said it “continue[s] to demand answers from xAI about the risks it poses.”

The UK Information Commissioner’s Office (ICO), which regulates data protection, said today it opened a formal investigation into X regarding the “processing of personal data in relation to the Grok artificial intelligence system and its potential to produce harmful sexualized image and video content.”

“We have taken this step following reports that Grok has been used to generate non‑consensual sexual imagery of individuals, including children,” the ICO said. “The reported creation and circulation of such content raises serious concerns under UK data protection law and presents a risk of significant potential harm to the public.”

X office raided in France’s Grok probe; Elon Musk summoned for questioning Read More »

upset-at-reports-that-he’d-given-up,-trump-now-wants-$1b-from-harvard

Upset at reports that he’d given up, Trump now wants $1B from Harvard

Amid the Trump administration’s attack on universities, Harvard has emerged as a particular target. Early on, the administration put $2.2 billion in research money on hold and shortly thereafter blocked all future funding while demanding intrusive control over Harvard’s hiring and admissions. Unlike many of its peer institutions, Harvard fought back, filing and ultimately winning a lawsuit that restored the cut funds.

Despite Harvard’s victory, the Trump administration continued to push for some sort of formal agreement that would settle the administration’s accusations that Harvard created an environment that allowed antisemitism to flourish. In fact, it had become a running joke among some journalists that The New York Times had devoted a monthly column to reporting that a settlement between the two parties was near.

Given the government’s loss of leverage, it was no surprise that the latest installment of said column included the detail that the latest negotiations had dropped demands that Harvard pay any money as part of a final agreement. The Trump administration had extracted hundreds of millions of dollars from some other universities and had demanded over a billion dollars from UCLA, so this appeared to be a major concession to Harvard.

Given Trump’s tendency to avoid any appearance of concession, his hostile response to the reports was unsurprising. Several hours after the Times published its article, he took to Truth Social to say the government would now seek $1 billion from Harvard. While he separately called the Times’ coverage “completely wrong” and demanded a correction, Trump also favorably quoted the part of the Times article that noted the government had continued to threaten Harvard’s funding despite having lost in court.

All this will likely give Harvard even more ground to argue that the government is being arbitrary and capricious, should the saga ever end up back in court.

Upset at reports that he’d given up, Trump now wants $1B from Harvard Read More »

russian-drones-use-starlink,-but-ukraine-has-plan-to-block-their-internet-access

Russian drones use Starlink, but Ukraine has plan to block their Internet access

Ukraine and SpaceX say they recently collaborated to stop strikes by Russian drones using Starlink and will soon block all unregistered use of Starlink terminals in an attempt to stop Russia’s military from using the satellite broadband network over Ukraine territory.

Ukrainians will soon be required to register their Starlink terminals to get on a whitelist. After that, “only verified and registered terminals will be allowed to operate in the country. All others will be disconnected,” the Ukraine Ministry of Defense said in a press release today.

Ukraine Minister of Defense Mykhailo Fedorov “emphasized that the only technical solution to counter this threat is to introduce a ‘whitelist’ and authorize all terminals,” according to the ministry. “This is a necessary step by the Government to save Ukrainian lives and protect critical energy infrastructure,” Fedorov said.

Fedorov has posted on SpaceX CEO Elon Musk’s X social network a few times in the past few days about Russia’s use of Starlink and Ukraine’s attempt to counter it. On January 29, Fedorov said his agency contacted SpaceX hours after “reports that Russian drones equipped with Starlink connectivity were operating over Ukrainian cities.” Ukraine “proposed concrete ways to resolve the issue,” he said.

Fedorov said that SpaceX started working on a solution immediately after the outreach. Musk wrote yesterday, “Looks like the steps we took to stop the unauthorized use of Starlink by Russia have worked. Let us know if more needs to be done.”

Fedorov said yesterday that because of “the first steps taken in recent days, no Ukrainians have been killed by Russian drones using Starlink.” Fedorov said the ministry “will share instructions for Ukrainian users to register their Starlink terminals for verification” in the coming days, and that registration “will be simple, fast, and user-friendly.”

Ukraine’s whitelist plan will require residents to make “one visit to the nearest Administrative Services Center,” a process that Fedorov said will be “free, fast, and without excessive bureaucracy.” Businesses will be able to verify their Starlink terminals online, while the military and service members have separate systems for registration. Service members with personal Starlink terminals will “only need to add the terminal to the ‘whitelist’ to prevent disconnection.”

Russian drones use Starlink, but Ukraine has plan to block their Internet access Read More »