Tornado Cash Co-Founder Roman Storm Convicted, Raising Fears for Privacy Rights and Open-Source Development

Roman Storm’s guilty verdict is sending shockwaves through privacy advocates and the open-source development community, with many warning it could change how the US criminal justice system treats creators of decentralized tools.

A federal jury in New York on August 6 convicted the Tornado Cash co-founder of operating an unlicensed money-transmitting business, a charge that could carry up to five years in prison. Jurors could not agree on two other allegations, conspiracy to launder money and conspiracy to breach US sanctions, leaving prosecutors the option to bring those charges to trial again.

Tornado Cash, launched in 2019 by Storm along with Alexey Pertsev and Roman Semenov, was designed to obscure the origins of cryptocurrency transactions and give users financial privacy.

Although the protocol never took control of user funds, US authorities claimed it had been exploited for laundering illicit proceeds and sanctioned it before later reversing that decision in March. Pertsev is facing trial in the Netherlands, Semenov is still wanted by the FBI, and Storm’s arrest took place a year after Pertsev’s.

In September 2024, Judge Katherine Failla allowed the case to move forward, ruling that Tornado Cash met the definition of a money transmitter under federal law and should have followed Anti-Money Laundering and Know Your Customer rules. Privacy supporters have long argued that holding developers accountable for the actions of users, particularly when they lack the technical ability to intervene, creates a dangerous precedent.

The Blockchain Association, a crypto policy group, called the decision “a dangerous precedent for open-source software developers.”

In an earlier amicus brief, it said Storm had no custody or control over the funds moving through Tornado Cash and warned the ruling could lead to criminal charges against creators of browsers, messaging apps, or other tools if those were misused.

Keep reading

The Government Is Not Your Friend

This week’s guilty verdict for Roman Storm on the count of conspiracy to operate an unlicensed money service business is absolutely insane.

FinCEN, the regulator responsible for licensing, monitoring, and enforcement actions concerning criminal activity in money transmission has itself explicitly stated that self-custodial tooling that facilitates the transmission of value using cryptocurrencies are not money transmitters and are not subject to the relevant regulations.

So, how did we get here? Eight months after the election of a president who describes himself as a Bitcoin and cryptocurrency advocate, after the Department of Justice themselves have explicitly stated that they are not going to engage in regulation by prosecution, or prosecute mixing services, how was Roman Storm found guilty?

There is nothing to describe this situation except pure, unbridled insanity. Incoherence. Hypocrisy and contradiction. There is a lesson here, though, one that I think it’s time more people in this space learn. 

The government’s word is worthless. It means nothing. 

They will continue cracking down on privacy, they will continue pushing KYC surveillance through things like the GENIUS Act and through the backdoor, applying them to just stablecoins (for now). They will continue treating the desire for privacy as evidence of criminal intent. They will do all these things while talking out of the other side of their mouth about supporting Bitcoiners and the “importance of self custody.” 

This is what the government does. This is what politicians do. It is inherent in their very nature. 

We need to stop treating these people as our friends. We need to stop pretending and lying to ourselves that they can be won over and become powerful allies to push the values and tools that we wish to see in the world. They are not our friends. They will not become allies, sharing a common cause with us. They are our enemies. 

It is time to stop pretending. These people must be treated as hostile, and dealt with as such. 

We need to stop begging them for clauses and riders in bills. We need to take them to court. We need to stop kissing their ass and pandering to their egos and notion of public persona. We need to call them out as the two-faced spineless people they are. 

If there is any legitimacy whatsoever to the legal foundations of the United States government, we do not need new laws, we do not need these people’s permission — we have the Constitution. Remind them of that in court. 

If, at the end of all of that, this system is so corrupt and hypocritical that it functionally ignores the constitutional rights of Americans (and non-Americans), then we need to ignore them.

Keep reading

Bipartisan bill would require IRS to notify taxpayer if seeking private financial info

Taxpayers will have more control over how the Internal Revenue Service acquires their personal information if a newly-introduced bill becomes law.

The bipartisan Taxpayer Notification and Privacy Act, brought forward Thursday by Sens. John Barrasso, R-Wyo., and Raphael Warnock, D-Ga., would require the IRS to inform taxpayers of the exact tax information it plans to seek from third parties, such as employers or banks, at least 45 days before doing so.

During that time period, taxpayers would have the option to provide the IRS directly with their personal financial information (used to calculate whether a person owes taxes) rather than have third parties – such as their bank or employer – do so.

According to Warnock and Barrasso, the bill is meant to protect taxpayer privacy and reputation and increase IRS transparency.

“[T]axpayers shouldn’t have to worry about the Internal Revenue Service (IRS) soliciting personal financial information behind their backs. They deserve to have the option to provide this sensitive information to the IRS directly,” Barrasso said.

“By providing that opportunity, our bipartisan bill will safeguard the reputation of taxpayers and small business owners across the country. It will also force the IRS to be as transparent as possible when it comes to the privacy of hardworking Americans,” he added.

Currently, if the IRS contacts third parties for tax information, it needs to notify the taxpayer that it is doing so, but it does not need to reveal which information it is seeking or from which entities. If passed, the bill would change that within 12 months of its being enacted.

The bill does include an exception, however. If the IRS determined that the information sought from a third party “is necessary notwithstanding whether the taxpayer could independently provide such information,” the IRS would not be subject to the extra reporting requirements stipulated by the bill.

Keep reading

“Chat Control” – EU Proposal To Scan All Private Messages Gains Momentum

A controversial European Union proposal dubbed “Chat Control” is regaining momentum, with 19 out of 27 EU member states reportedly backing the measure.

The plan would mandate that messaging platforms, including WhatsApp, Signal and Telegram, must scan every message, photo and video sent by users starting in October, even if end-to-end encryption is in place, popular French tech blogger Korben wrote on Monday.

Denmark reintroduced the proposal on July 1, the first day of its EU Council presidency. France, once opposed, is now in favor, Korben said, citing Patrick Breyer, a former member of the European Parliament for Germany and the European Pirate Party.

Belgium, Hungary, Sweden, Italy and Spain are also in favor, while Germany remains undecided. However, if Berlin joins the majority, a qualified council vote could push the plan through by mid-October, Korben said.

A qualified majority in the EU Council is achieved when two conditions are met. First, at least 55 percent of member states, meaning 15 out of 27, must vote in favor. Second, those countries must represent at least 65% of the EU’s total population.

Keep reading

Germany Turns Its Back on Decades‑Old Privacy Protections with Sweeping Surveillance Bill

For half a century, Germany’s privacy laws were treated like sacred scripture. Politicians swore by them, courts fortified them, and bureaucrats turned them into a national export. Other countries rolled out surveillance programs; Germany rolled out lectures about why that was a terrible idea. It was all rooted in the same ugly history lesson: if you give the state a big enough file on you, sooner or later you’ll end up in it.

That memory ran deep. The Nazi regime used personal records like ammunition, and the East German Stasi built a domestic surveillance industry so bloated it could have applied for EU funding.

Postwar Germany responded by making privacy a central pillar of its democratic identity. The Federal Constitutional Court even invented a “right to informational self‑determination,” which sounded academic but translated roughly to: “The government doesn’t get to rummage through your life just because it’s bored.”

Privacy commissioners became feared watchdogs who could slap down ministries and corporations alike. Every time politicians tried to sneak through a new security law, they’d be met with lawsuits, public outrage, and years of procedural trench warfare. It was tedious, but that was the point; democracy is supposed to make snooping inconvenient.

Now comes the Interior Ministry’s summer special: a bill that would let authorities hack devices without suspicion, track every airline passenger automatically, and scrap independent oversight.

We obtained a copy of the bill for you here.

Keep reading

DIGITAL ID: The Shocking Plan to Kill Free Speech Forever

The U.S. is on the verge of launching a dystopian online surveillance machine—and disturbingly, Republicans are helping make it law.

The SCREEN Act and KOSA claim to protect kids, but they’re Trojan horses. If passed, every American adult would be forced to verify their ID to access the internet—just like in Australia, where “age checks” morphed into speech policing. In the UK, digital ID is already required for jobs, housing, and healthcare.

This is how they silence dissent: by tying your identity to everything you read, say, or buy online.

The trap is nearly shut. Once it locks in, online freedom vanishes forever.

Will Americans wake up before it’s too late? Watch Maria Zeee expose the full blueprint—and how little time we have left.

Keep reading

EU Revives Plan to Ban Private Messaging

The European Union is still wrestling with a controversial plan that would turn private messaging services into surveillance tools. For over three years, talks have stalled over whether providers should be forced to scan every user’s messages for possible illegal material and forward anything suspicious to law enforcement.

The European Commission is still pushing for a universal scanning requirement.

In contrast, the European Parliament insists any checks should apply only to unencrypted messages from people already under suspicion. Attempts to strike a deal have repeatedly fallen apart, with Poland the latest presidency to walk away without an agreement.

July brought a change in leadership of the Council of the EU, with Denmark stepping in and putting chat scanning back at the top of the legislative pile. Copenhagen wants this handled as a priority and wasted no time tabling a new draft on its very first day in charge.

Leaked records from a closed door July meeting show the Danish text closely tracks earlier proposals from Belgium and Hungary, with no concessions for encrypted conversations. A softer version from Poland, which would have made scanning voluntary and left encrypted chats alone, has been dropped entirely.

Out of 27 EU countries, 20 spoke during the July debate, each lodging what officials call a “comprehensive audit reservation.” Germany summed up the atmosphere by noting, “the familiar mood was clear.”

Italy, Spain, and Hungary have been in favor of mandatory chat scanning from the start. France could tip the balance since blocking the plan requires four countries representing at least 35 percent of the EU’s population. Paris has moved from tentative support to saying it could “basically support the proposal.”

Others remain cautious or opposed. Belgium, despite earlier enthusiasm, admits encrypted scanning is “a difficult topic nationally.” Estonia reports a “national conflict between security authorities and data protection officers regarding encryption and client-side scanning.” Austria is bound by a parliamentary vote against mandatory scanning or undermining encryption, a stance shared by the Netherlands. Luxembourg and Slovenia say they are still “not yet convinced.”

Keep reading

Denmark Is Fighting AI by Giving Citizens Copyright to Their Own Faces

Your image, your voice, and your essence as a human being could be gobbled up and regurgitated by AI. The clock is ticking on when you’re control over your image and representation is completely out of your hands.

To tip the scales back in favor of those who wish to remain in firm control of their image, Denmark has put forth a proposal that would give every one of its citizens the legal ground to go after someone who uses their image without their consent.

This specifically covers deepfakes, those videos of a person’s face or body that have been digitally altered so they appear to be someone else.

The Scandinavian nation has put forth a proposal to amend its copyright laws so that everyone owns the rights to their own face, their own voice, and their body. Current laws aren’t quite up to snuff when it comes to protecting people from having their likenesses twisted and contorted.

Keep reading

Supreme Court Urged to Halt Mississippi’s Online Digital ID Law Over Free Speech and Privacy Concerns

NetChoice has filed an emergency application with the US Supreme Court to halt the enforcement of Mississippi’s online age verification digital ID law, House Bill 1126, after the Fifth Circuit stayed a preliminary injunction without explanation. The group is urging the Court to reinstate the district court’s ruling and protect First Amendment rights, which it argues are under immediate threat.

The Mississippi law compels every person, regardless of age, to verify their identity before creating accounts on social media platforms, and requires minors to obtain explicit parental consent.

NetChoice argues that this framework “unconstitutionally imposes content-based parental-consent, age-verification, and monitoring-and-censorship requirements for vague categories of speech on social media websites.”

The emergency filing warns of far-reaching consequences, asserting that “the Act will prevent access to that expression for some users entirely—including those unwilling or unable to verify their age and minors who cannot secure parental consent.”

We obtained a copy of the filing for you here.

Adults would also be subject to this regime, required to share private information in order to access constitutionally protected online spaces.

According to the brief, “the Act would require adults and minors to provide personally identifying information to access all manner of fully protected speech.”

NetChoice compares this level of state control to a dystopian system where “stationing government-mandated clerks at every bookstore and theater to check identification before citizens can access books, movies, or even join conversations” would be the norm.

The brief continues, “This Act thus presents far different issues from pornography laws… it ‘directly targets’ a staggering amount of fully protected speech.”

Keep reading

Drones, cameras, AI: University of Illinois real time crime center raises privacy concerns

Thousands of cameras. A fleet of drones. Gun shot detection devices. Stationary and vehicle-mounted automatic license plate readers.

A major metropolitan city? No, the University of Illinois Urbana-Champaign.

The University of Illinois Urbana-Champaign’s Real-Time Information Center furnishes the institution’s Division of Public Safety with a number of technologically sophisticated tools that have some privacy experts alarmed.

The drones, gunshot detection devices, automatic license plate readers, and campus-wide system of roughly 3,000 security cameras are among the tools currently utilized at the campus, which enrolls about 59,000 students.

Social media monitoring programs and “AI-driven video analytics software” are also among the technologies being evaluated for possible future implementation, according to a document sent by Urbana Police Chief Larry Boone.

He sent it to city officials as they deliberate a proposed city ordinance to establish stricter approval, oversight, and transparency requirements for Urbana’s own acquisition and use of the kinds of surveillance tools being used by the university’s Real-Time Information Center.

According to the document, the Real-Time Information Center provides a wide array of services designed to enhance public safety, streamline operations, and support law enforcement agencies.

Keep reading