Unless I’m missing something, the post is plain wrong in some parts. You can’t POST to a Cross-Site API because the browser will send a CORS preflight first before sending the real request. The only way around that are iirc form submits, for that you need csrf protection.

Also the CORS proxy statement is wrong if I don’t misunderstand their point. They don’t break security because they are obviously not the cookie domain. They’re the proxy domain so the browser will never send cookies to it.

Anyways, don’t trust the post or me. Just read https://owasp.org/ for web security advice.

Amazon Web Services, the largest cloud provider in the world

It is literally just Nvidia Encoder. So hardware encoding on Nvidia GPUs. What codes are supported depends on the GPU

Agreed. Even going back to sharing stuff via Whatsapp or something like that, they are going to evade control for sure. But when will society be ready to just be honest with kids about what exists and teach them how to safely explore that and give them context? I guess we’d rather have dystopian control than that

It is also mentioned that the rules could get superseded by EU law requiring identification as well. And with the US doing stupid stuff as well you might run out of VPN locations in the future

https://www.politico.eu/article/spain-builds-porn-passport-to-stop-kids-watching-smut/ I guess this? Wild stuff.