Hashtag
1,544 posts tagged with this hashtag.
#BurgerKing #Japan #DataBreach exposes 11 million customer records
bleepingcomputer.com
Burger King Japan, the Japanese subsidiary of global fast-food giant Burger King, disclosed a major data breach after attackers accessed a server containing 11.18 million customer records.
In Memoriam: Barry Steinhardt
https://www.eff.org/deeplinks/2026/10/memoriam-barry-steinhardt
eff.org
Barry Steinhardt, a lifelong privacy champion and an early leader in the battle for digital civil liberties who served as EFF’s president in 1998-99, died last week at age 73. A Connecticut native, Steinhardt led the Vermont and Pennsylvania affiliates of the American Civil Liberties Union before...
#Ubuntu 26.10 ( #StonkingStingray) Is Now Available for Download, Here’s What’s New
https://9to5linux.com/ubuntu-26-10-stonking-stingray-is-now-available-for-download-heres-whats-new
#EFF: Our Lawsuit Against the #Trump Administration’s #SocialMedia #Surveillance Moves Forward.
eff.org
No one should have to choose between speaking freely and protecting their immigration status. Yet that’s precisely the choice the Trump administration’s mass surveillance of online speech forces on noncitizens living in the U.S. Last fall, we sued on behalf of three major labor unions to stop this...
I wonder whether the @EUCommission and the European Parliament have heard about the AdFection attack vector by now.
For years, they have done too little to rein in the online marketing industry. Now the monster they let grow and prosper exposes them to espionage.
Politicians, this should be your wake-up call. Ditch the Digital Omnibus. Give us strong privacy laws and enforce them properly. Protect us - and yourselves!
Further reading:
https://citizenlab.ca/research/exposing-adfection-executive-summary/
--
#privacy #GDPR #AdFection
citizenlab.ca
This is an executive summary for our report "Exposing AdFection: How Discover-Tech Turned Targeted Ads Into a Pipeline for Zero-Click Mercenary Spyware."
I wonder whether the @EUCommission and the European Parliament have heard about the AdFection attack vector by now.
For years, they have done too little to rein in the online marketing industry. Now the monster they let grow and prosper exposes them to espionage.
Politicians, this should be your wake-up call. Ditch the Digital Omnibus. Give us strong privacy laws and enforce them properly. Protect us - and yourselves!
Further reading:
https://citizenlab.ca/research/exposing-adfection-executive-summary/
--
#privacy #GDPR #AdFection
citizenlab.ca
This is an executive summary for our report "Exposing AdFection: How Discover-Tech Turned Targeted Ads Into a Pipeline for Zero-Click Mercenary Spyware."
🚨 This Week in Privacy #75 will be live in 30 minutes! Ledger has confirmed that hardware implants were found in cold-storage devices sold through reseller networks, silently recording seed phrases and draining user wallets via LTE!
We'll also be talking about the latest #privacy & #security news!
👋 Come watch and join the Q&A! https://www.youtube.com/@privacyguides/live
youtube.com
Ledger devices distributed through a reseller, were compromised with a hardware implant that drained users' crypto wallets, Google is silently linking your p...
#Amazon launches new #Bee ‘personal #AI’ devices that listen to conversations
https://www.cnbc.com/2026/10/15/amazon-bee-frontier-eclipse-ai-devices.html
#Leo adds End-to-end Encryption, Oblivious HTTP, and Verifiable Confidential Computing
brave.com
Leo chats with the open-weight GLM 5.3 Flash model are now end-to-end encrypted with Oblivious HTTP and run inside attested, Nvidia-backed Trusted Execution Environments, so even Brave can't read them, and you can verify it.
How #ChatGPT Targets Ads To You Based On Your Prompts, Phone Number, and Email
https://www.404media.co/how-chatgpt-targets-ads-to-you-based-on-your-prompts-phone-number-and-email/
404media.co
Most ChatGPT users probably don’t know you can be specifically targeted on the platform by advertisers based on your email, phone number, or unique phone identifier.
‘Nightmare Scenario’: Zero-Click #Spyware Is Infecting Phones via Targeted Ads
#advertising #ad #malware #malvertising #privacy #cybersecurity
wired.com
Researchers at The Citizen Lab have for the first time released technical evidence of sophisticated mercenary spyware being distributed via online advertising.
" #MyChart and a major #hospital said I could opt out of sharing my #health data. But they didn’t make it easy"
https://themarkup.org/privacy/2026/10/15/mychart-health-data-opt-out-epic-notary-hipaa
themarkup.org
My journey included a notary, a hospital that won’t honor its own policies and employees that gave me wrong information.
The Markup: "All my best tips on how to opt out of data sharing for patients"
https://themarkup.org/privacy/2026/10/15/tips-how-to-opt-out-of-data-sharing
themarkup.org
Even when patients are told they can opt out, medical providers often don’t give patients instructions on how. For patients who are interested in opting out, here are my best tips on how to start.
bleepingcomputer.com
The Legal Aid Agency (LAA), an executive agency of the UK's Ministry of Justice that manages the country's Public Defender Service, says attackers who breached its IT systems in April 2025 stole records dating back to 1978.
#Flock CEO defends #surveillance technology amid national backlash: ‘We shouldn’t pause progress’
techcrunch.com
At TechCrunch Disrupt, Flock CEO Garrett Langley defended his company's surveillance technology despite growing privacy concerns, arguing that its crime-fighting benefits outweigh the risks of abuse.
#Session Protocol v2: An Update on #PFS, Post-Quantum and Linked Devices
getsession.org
Session Protocol v2 brings perfect forward secrecy, post-quantum encryption and stronger linked device management to Session. This update covers what has been built since the December 2025 announcement, what is still being designed and how to support its development through Octant’s Epoch 13 Privacy Round.
#EFF: We’re Asking the #Wisconsin Supreme Court to End Warrantless #ALPR Searches
eff.org
EFF joined the ACLU of Wisconsin in filing a petition to the Wisconsin Supreme Court, asking it to rule that the state’s constitution requires a warrant for retrospective searches of ALPR databases used by law enforcement in four cities.
#Flock CEO says its microphones detect ‘just gunshots’ — its website says different
techcrunch.com
Langley’s comments come amid mounting scrutiny of Flock from privacy advocates, including the ACLU, and members of the public who are concerned about the misuse of its technology.
arstechnica.com
Plaintiff claims cameras enabled warrantless tracking and monitoring after he previously sued over excessive force.
#DHS Inspector General Finds That #TSA is Not Properly Safeguarding Passenger #FacialRecognition Data
eff.org
EFF legal intern Gabrielle Ladun was the principal author of this post. The Department of Homeland Security Office of Inspector General (DHS OIG) has published a summary of findings from its audit of the Transportation Security Administration’s (TSA) facial recognition technology. While the...
PSA: #Google is silently linking your phone number across all signed-in accounts
https://www.androidauthority.com/google-auto-phone-number-verification-android-3723117/
#Dutch tax authorities cancel #Microsoft365 cloud rollout – and turn toward #OpenSource
https://www.zdnet.com/business/dutch-tax-authorities-cancel-microsoft-365-cloud-rollout/
zdnet.com
Another European move toward digital sovereignty has curtailed adopting the US workplace suite.
How to delete your #Facebook account
proton.me
Want to delete your Facebook account for good? Here's how to permanently delete or temporarily deactivate it, export your data, and cut Messenger loose.
World’s largest health appointment platform dumps its web trackers after Markup investigation
themarkup.org
Doctoralia said it was removing trackers that communicated with social media companies out of an abundance of caution
techcrunch.com
It's not clear exactly for what purpose the recording device was used, but FBI director Kash Patel said the scheme was to "capture sensitive communications about the company’s super intelligence technology."
🇪🇺 The #EU is currently changing its core privacy law, the #GDPR. Members of the European Parliament have made more than 1000 amendments - we have analyzed them all. 🔍 Want to know who is playing into the hands of #BigTech by undermining protections, and who is actually trying to defend your #privacy?
👉 Visit https://gdpr-omnibus.eu and look up your MEP by country and political group.
If the European Commission and the EU Member States get their way, the “Digital Omnibus” will result in a fundamental change to EU privacy laws. What about the European Parliament? To find out more, noyb has analysed more than 1,000 amendments that Members of Parliament (MEPs) have tabled. This analysis shows that many MEPs are in favour of stripping people of their privacy rights – while others still push back.
The European People’s Party (EPP) is clearly fighting the hardest against users' rights, having made many amendments that favour big tech. This includes the limitation of the scope of privacy protections and the proposal of far-reaching exceptions for high-risk AI. “The European Conservatives and Reformists” (ECR) also performed poorly overall. “The Patriots” achieved a better score, but it was still negative.
The “Sovereigns” and “Renew” both have an even score of zero. At the same time, however, Renew dominates the ranking of most “pushback” against the Commission’s flawed proposals with 5 of the top 10 MEPs in that category.
Only “S&D”, “The Left” and “The Greens” have a clear positive overall score. In the meantime, the “EPP” also holds 10 of the top 10 ranks for the most violations of the EU’s Charter of Fundamental Rights.
techcrunch.com
A federal judge ruled that Apple can access OpenAI's interview materials involving former Apple employees, as well as private messages and testimony from key figures in the case.
In Amsterdam next week: Join @torproject and Internet Archive Europe for a conversation about threats to the open internet and how Onion Services can help keep the web open.
"Avoiding the Internet Achilles' heel: Locking the web open with Onion Services"
📅 October 8, 5:30 - 7:30 PM
📍 Oudeschans 16, 1011 KZ Amsterdam
Evening Program:
* Presentation
* Talk with slides
* Q&A
* Informal happy hour & conversation
To join the event, please register below.
luma.com
Join the Internet Archive Europe and members of the Tor Project to discuss the current threats to internet access, focusing on the recent events revealing the…
As Federal Court Rules ALPRs are Mass #Surveillance, #EFF Gets Disappointing Ruling
eff.org
In an extremely disappointing ruling, a California trial court dismissed SIREN v. San Jose, our case challenging the city of San Jose’s warrantless searches of its vast stores of automated license plate reader (ALPR) data. EFF and the ACLU of Northern California represent SIREN and CAIR California...
The #Palantir Mafia is changing the business of war and #surveillance
https://proton.me/blog/palantir-modern-warfare
#privacy #Epirus #Valinor #Valthos #Anduril #Kela #Rivet #Peregrine #police
proton.me
Palantir alumni are building surveillance companies. Learn how venture capital, military technology, and data are shaping warfare.
#Tesla's 'Security Protocols' Stopped #DHS From Installing a Tracking Device
https://www.404media.co/teslas-security-protocols-stopped-dhs-from-installing-a-tracking-device/
404media.co
A federal warrant application detailed how Tesla’s security protocols stopped agents from tracking a suspected drug trafficker’s car.
Global Report on the Authoritarian use of Technology
https://privacyinternational.org/report/5873/global-report-authoritarian-use-technology
privacyinternational.org
We have been observing and monitoring an increase in states’ adoption of authoritarian practices and policies. These practices are facilitated by new and emerging technologies or embodied in their very deployment to stifle dissent, assert control and diminish human rights.
🇪🇺 The #EU is currently changing its core privacy law, the #GDPR. Members of the European Parliament have made more than 1000 amendments - we have analyzed them all. 🔍 Want to know who is playing into the hands of #BigTech by undermining protections, and who is actually trying to defend your #privacy?
👉 Visit https://gdpr-omnibus.eu and look up your MEP by country and political group.
If the European Commission and the EU Member States get their way, the “Digital Omnibus” will result in a fundamental change to EU privacy laws. What about the European Parliament? To find out more, noyb has analysed more than 1,000 amendments that Members of Parliament (MEPs) have tabled. This analysis shows that many MEPs are in favour of stripping people of their privacy rights – while others still push back.
The European People’s Party (EPP) is clearly fighting the hardest against users' rights, having made many amendments that favour big tech. This includes the limitation of the scope of privacy protections and the proposal of far-reaching exceptions for high-risk AI. “The European Conservatives and Reformists” (ECR) also performed poorly overall. “The Patriots” achieved a better score, but it was still negative.
The “Sovereigns” and “Renew” both have an even score of zero. At the same time, however, Renew dominates the ranking of most “pushback” against the Commission’s flawed proposals with 5 of the top 10 MEPs in that category.
Only “S&D”, “The Left” and “The Greens” have a clear positive overall score. In the meantime, the “EPP” also holds 10 of the top 10 ranks for the most violations of the EU’s Charter of Fundamental Rights.
#Norway fines #Microsoft #ad firm $9.6 million over #Grindr data sharing
bleepingcomputer.com
Norway's Data Protection Authority (Datatilsynet) has fined Microsoft-owned advertising company Xandr NOK 92 million ($9.6M) for unlawfully processing and sharing sensitive data belonging to Grindr users in the country.
#AI Company Lets Cops Pinpoint Specific Houses Based on a Single Interior Photo
404media.co
Raven, previously called GeoSpy, lets cops figure out what specific Airbnb or Zillow property a photo was taken in.
#Flock is catching flak. Experts say other #police #surveillance tools are more worrisome
https://www.npr.org/2026/10/08/nx-s1-5981343/beyond-flock-police-ai-surveillance-tools
npr.org
Real-time crime-center software is a sometimes overlooked but powerful tool allowing police to aggregate immense amounts of data, significantly expanding their surveillance reach.
Feds Got Warrants to Use Fake Cell Towers to Hunt Down Don Lemon’s Producer
#Stingray #IMSIcatcher #privacy #journalism #activism #politics #police
wired.com
Investigators also sought permission to use an invasive surveillance tool called a cell-site simulators against journalist Georgia Fort and a Minnesota state Senate candidate.
A #Chicago-area #college told #Flock to remove its cameras. The company refused.
#education #university #ElginCC #Elgin #privacy #surveillance #police #ALPR #immigration #politics
chicago.suntimes.com
Elgin Community College resorted to covering the surveillance cameras with trash bags and zip ties. Public records show that federal immigration authorities have accessed Flock data at other Illinois colleges.
#NipponColumbia #malware incident exposes 8.6 million #karaoke fan records
bleepingcomputer.com
Daiichi Kosho, a major Japanese entertainment system maker, disclosed that a malware infection at its contractor, Nippon Columbia, exposed more than 8.7 million customer and employee records.
Denver woman sues #police, #Flock Safety after being falsely accused of stealing package from porch
https://coloradosun.com/2026/10/06/flock-cameras-columbine-valley-police-colorado-lawsuit/
coloradosun.com
Chrisanna Elser was accused of stealing a $25 package after a Columbine Valley police sergeant cited Flock surveillance of her car as proof
This ‘Mind-Reading’ #AI Is a Wiz at Figuring Out What You See
cnet.com
The trick is, you have to be in an MRI machine — and it only works with pictures.
Resisting the Menace of Federal Data Consolidation
https://www.eff.org/deeplinks/2026/10/resisting-menace-federal-data-consolidation
eff.org
In the past two years, the federal government has unlawfully consolidated data exposing our private information. This consolidation has been chaotic but generally came in three rolling waves: It started with DOGE, moved to agency-to-agency data sharing with ICE, and then attempted data-driven...
Your artwork could be featured in the next #Debian release
https://arstechnica.com/gadgets/2026/10/your-artwork-could-be-featured-in-the-next-debian-release/
arstechnica.com
Debian Linux has put a call out for artist submissions for its next release: Forky.
#addy(dot)io has partnered with #Ente
https://addy.io/blog/addy-io-has-partnered-with-ente/
#privacy #FOSS #email #photos #EmailAliasing #PhotoManagement
addy.io
We're excited to share that addy.io has partnered with Ente, a privacy-first, end-to-end encrypted photo and video storage service that ensures only you can access your memories.
#FBI arrests another suspected #ShinyHunters hacker after agency breach
bleepingcomputer.com
The FBI has arrested another suspected member of the ShinyHunters extortion group believed to be involved in the recent breach of FBI systems, Director Kash Patel announced Friday.
Following 404 Media Investigation, Senator Demands Info About White House's License Plate #Surveillance Program
404media.co
Sen. Ron Wyden is seeking a privacy review report about the HIDTA license plate program.
"According to the public prosecutor’s office, [a] police officer [] from Tilburg is alleged to have sold information he retrieved from police databases for roughly a year and a half. The material in question reportedly included names, addresses, vehicle registration numbers, and details of ongoing police investigations."
nltimes.nl
According to the public prosecutor’s office, 28-year-old neighborhood police officer Furkan U. from Tilburg is alleged to have sold information he retrieved from police databases for roughly a year and a half. The material in question reportedly included names, addresses, vehicle registration numbers, and details of ongoing police investigations. An initial preparatory hearing in the case took place on Tuesday at the District Court in Breda.
Hyperpersonalization Without Surveillance: Designing Intimate Experiences Without Creepy Data Collection, by @uxmatters.bsky.social:
archive.ph
archived 10 Oct 2026 19:18:47 UTC
#Surveillance company #Flock cuts staff as #privacy backlash grows
https://techcrunch.com/2026/10/09/surveillance-company-flock-cuts-staff-as-privacy-backlash-grows/
techcrunch.com
Flock would not say if CEO Garrett Langley would take a pay cut following the reduction in workforce.
🚨 This Week in Privacy #74 will be live in 30 minutes! Leaked internal documents show that Meta's Muse AI agent is building dossiers on your friends, family and you, even if you've never used it before!
We'll also be talking about the latest #privacy & #security news!
👋 Come watch and join the Q&A!
youtube.com
Leaked internal documents show that Meta's Muse AI agent is building dossiers on your friends, family and you, even if you've never used it before, Kagi is e...
#TrumpMobile hack and apparent lack of FCC authorization raise security alarms
arstechnica.com
After hack and data breach, senator asks why Trump Mobile lacks some FCC filings.
When No ID Means No Internet: #AgeVerification and the Right to Access Information
eff.org
Age verification proposals are often presented as a simple tradeoff: sacrifice a little privacy to better safeguard children online. But that framing overlooks a more fundamental question. What happens to people who cannot verify their age at all?
Driver wins $76 after #ALPR led to bogus traffic stop, drug searches
arstechnica.com
Mass surveillance gets stupider.
bleepingcomputer.com
A malware campaign dubbed 'Midnight Mimosa' has been discovered on low-cost Android smartphones that ship with malicious software embedded in their firmware, allowing attackers to silently install apps, perform ad fraud, and turn devices into residential proxies.
#ASOS links #DataBreach to #SocialEngineering attack, credential theft
bleepingcomputer.com
ASOS is sending updates to affected customers about the cybersecurity incident it suffered earlier this week, confirming that hackers accessed some personal data.
How Technology Empowers—and Imperils—Dictators
https://www.schneier.com/blog/archives/2026/10/how-technology-empowers-and-imperils-dictators.html
schneier.com
This essay was written with Seva Gunitsky, and originally appeared in Foreign Affairs. Two weeks after Moscow’s full-scale invasion of Ukraine in March 2022, the Russian TV Channel One editor Marina Ovsyannikova burst onto the set of the evening newscast. She held up a hand-drawn sign behind the anchor’s head that read: “Stop the war. Don’t believe propaganda. They’re lying to you!” She shouted, “No to war!” until she was dragged away. No one has protested the war on Russian television since then, partly as a result of tighter security and a general climate of fear. But in October 2024, Margarita Simonyan, one of Russia’s chief propagandists, gave another explanation. A growing number of the RT network’s anchors, she explained to an interviewer, are not real. “That face doesn’t exist. We generated the voice and everything else.” They were, she meant, produced by artificial intelligence. In a follow-up interview with the newspaper ...
#DuckAI now lets you share chats, privately and on your terms
spreadprivacy.com
You can now create a link to share a Duck.ai chat! Anyone who receives the link can read the chat, continue it, or save it. No account required.
100 days later: #Microsoft still steers #Windows and #Copilot users to #Edge, everywhere the law lets it
https://blog.mozilla.org/en/mozilla/over-the-edge-2-100-days-later/
blog.mozilla.org
One hundred days ago, Mozilla released Over The Edge 2.0, the second independent report from leading experts on deceptive design Dr. Harry Brignull and Cen
#Advantest confirms personal information stolen in #ransomware attack
Understanding Server-side Commercial #Fingerprinting
🗺️ Looking for a de-Googled alternative to Google Maps?
Vela Maps is an open-source Android maps app built around OpenStreetMap and other open data.
It supports offline maps, turn-by-turn navigation, public transit, and live traffic without Google Play Services or a Google account.
It can even run with Google completely disabled for a fully de-Googled experience.
More details & alternatives: https://digitalescapetools.com/tools/velamaps.html
#OpenSource #DeGoogle #Privacy #OpenStreetMap #Android #FOSS
Vela Maps logo and app page showing the tagline “Google Maps, degoogled,” with live traffic, place data, turn-by-turn navigation, and badges for version, build status, GPL-3.0 license, stars, and translation progress.
#ASOS confirms #DataBreach after “HACKED” in-app notifications
bleepingcomputer.com
UK fashion retailer ASOS confirmed a data breach Tuesday after hackers sent unauthorized push notifications through its mobile app while claiming to have stolen customer data from the company's Snowflake environment.
New #addy(dot)io mobile app updates: Rewritten, not re-heated
addy.io
iOS 2.7.0 and Android 6.6.0 rewrite the addy.io mobile apps. Search for aliases from your home screen, verify custom domains, and manage aliases in bulk.
PI's response to the #UK Goverment's consultation on workplace monitoring technologies
privacyinternational.org
Our submission covers the following topics, following the government's consultation on workplace monitoring technologies:
Lawmakers Introduce Multiple Laws to Curb #Flock After 404 Media Coverage
https://www.404media.co/lawmakers-introduce-multiple-laws-to-curb-flock-after-404-media-coverage/
404media.co
Senator Bernie Sanders, Representative Ocasio-Cortez, and Senator Jeff Merkley introduced the Ban Flock Act on Friday, which would stop federal agencies from using automatic license plate readers.
How to delete #Google Search history
proton.me
Here's how to clear Google search history on web, iPhone, and Android, plus how to auto-delete and limit what Google collects from now on.
🇬🇧 Finally created a personal account, in addition to co-managing various charities fediverse accounts. I do fun things with computers, advise solicited and unsolicited about security, privacy and digital sovereignty. Also try to do something against about climate change and the power of BigTech.
#BigTech #privacy #security #DigitalSovereignty
#ClimateChange
How your everyday activity feeds #Amazon #AI training models
proton.me
Your voice, streams, and viewing habits may train Amazon AI. See what Alexa, Twitch, Ring, and Fire TV collect, and how to limit it.
#Nikkei discloses breaches of employees’ #Microsoft, #Google #email accounts
bleepingcomputer.com
Over the weekend, Japanese publishing giant Nikkei disclosed that unknown attackers recently breached two employee email accounts and used one to send thousands of phishing emails.
AI: EU Member States Plan “Digital Expropriation” of Europeans in the Interest of AI Companies, by @noybeu:
noyb.eu
In a leaked document, the Irish Presidency proposes to EU Member States that the interest of AI companies to make profits should take precedence over the fundamental rights of Europeans.
In Amsterdam next week: Join @torproject and Internet Archive Europe for a conversation about threats to the open internet and how Onion Services can help keep the web open.
"Avoiding the Internet Achilles' heel: Locking the web open with Onion Services"
📅 October 8, 5:30 - 7:30 PM
📍 Oudeschans 16, 1011 KZ Amsterdam
Evening Program:
* Presentation
* Talk with slides
* Q&A
* Informal happy hour & conversation
To join the event, please register below.
luma.com
Join the Internet Archive Europe and members of the Tor Project to discuss the current threats to internet access, focusing on the recent events revealing the…
#Texas city demands $2M for public records on #Flock usage
https://arstechnica.com/tech-policy/2026/10/texas-city-demands-2m-for-public-records-on-flock-usage/
arstechnica.com
Prices of public records tracking cops' use of Flock go up as backlash swells.
#Anthropic reports #Florida woman’s #Claude ‘diary’ threat to shoot up sheriff’s office, felony charge follows
tomshardware.com
Investigators say a message the following day mentioned a new gun.
bleepingcomputer.com
Italy's Data Protection Authority (GPDP) has fined IQVIA €7 million ($7.8M) over poor data-processing practices that the agency says could have put roughly one million patients at risk of data exposure and de-anonymization.
#Meta Rushed to Fix #Muse ‘VM Escape' Vulnerability Soon Before Launch
https://www.404media.co/meta-rushed-to-fix-muse-vm-escape-vulnerability-immediately-before-launch/
404media.co
The vulnerability could have let a Muse user access sensitive internal Meta databases.
firewallsdontstopdragons.com
AI agents aren't safe enough - not yet, anyway. Too Cute by Half Meta has recently released a powerful new AI agent app called Muse. And before I get to the actual problems, I simply can't resist being petty and jaded first. The Muse app comes with an adorable avatar which you can (of course)
tech.slashdot.org
From the transportation news site MotorBiscuit: In late September 2026, 23-year-old Liz Lindseay Isaacs testified before a Senate Judiciary Subcommittee about her harrowing experience after a Flock camera misidentified her Dodge Durango, linking her to a fatal hit-and-run miles away from where she ...
#CPR #DataBreach exposes personal details of 8.8 million people in #Denmark
cphpost.dk
Unauthorized parties gained access to personal information linked to around 8.8 million people in Denmark after exploiting a company’s legitimate access to the country’s Central Person Register, authorities said Monday. The exposed information includes names, addresses, CPR numbers and other data held in the system, according to the Ministry of Research, Education and Digitalisation. The […]
#SanFrancisco's car #crime has plunged. How much credit does #Flock deserve?
npr.org
San Francisco leaders say AI-powered cameras helped drive a dramatic decline in car crime. We examine the evidence — and whether the city can keep its high-tech dragnet without sacrificing civil liberties.
#Kagi Ends #Orion Browser Development for #Linux, Will Open-Source It
https://linuxiac.com/kagi-ends-orion-browser-development-for-linux-will-open-source-it/
linuxiac.com
Kagi ends development of Orion Browser for Linux and Windows, with plans to open-source both versions and hand them over to the community.
#EV manufacturer #BYD scrubs references to ' #China' and ' #surveillance' from its #privacy policy
abc.net.au
The original policy gave the company almost unlimited powers to collect data on its Australian vehicle owners and broad discretion on how this could be disclosed.
bleepingcomputer.com
Google's Gemini could soon access any file on your macOS device, open apps, browse the web, and perform actions without asking for permission every time.
techcrunch.com
Bitchat has become largely unavailable in India as a result of the restrictions.
Danish #university #DTU breach exposes data of up to 200,000 people
bleepingcomputer.com
The Technical University of Denmark (DTU) says information belonging to up to 200,000 users may have been exposed after hackers accessed its identity and access management system and downloaded a large amount of data.
Can You Protect Your Data While Still #Banking Safely?
https://ghost.thenewoil.org/can-you-protect-your-data-while-still-banking-safely/
ghost.thenewoil.org
How can you take advantage of the benefits of the traditional banking system while reclaiming some privacy and security?
#Muse Creates Detailed Profiles of All Your Friends and Family
https://www.wired.com/story/muse-creates-detailed-profiles-of-all-your-friends-and-family/
wired.com
Millions have downloaded Meta’s AI agent Muse. But getting it to do your bidding comes with privacy costs.
#NewMexico wants #Meta to pay up to $40 billion in penalties after data #privacy trial
Let us have a thousand servers, a thousand networks. Let us flood them with possibilities until they run out of time and money to pursue and persecute us.
hub.volse.no
techcrunch.com
The proposed legislation would extend to all automotica license plate readers.
Let us have a thousand servers, a thousand networks. Let us flood them with possibilities until they run out of time and money to pursue and persecute us.
hub.volse.no
Federal Judge Rules a #Flock Search Was ‘Indiscriminate Mass #Surveillance’ and Unconstitutional
404media.co
Flock’s nationwide network is quickly “approaching dragnet-type law enforcement practice” and the cop should have got a warrant, the judge wrote.
#Congress Has Another Site-Blocking Bill, And This One Targets VPNs
https://www.eff.org/deeplinks/2026/10/congress-has-another-site-blocking-bill-and-one-targets-vpns
eff.org
Congress is taking another run at site-blocking, a deeply flawed concept that would undermine basic internet infrastructure. Rep. Darrell Issa (R-CA) has introduced the American Copyright Protection Act (ACPA), H.R. 10364, a bill that would give copyright owners a new legal tool to block Americans...
Europeans/EU Citizens!
Update on the EU Kids Act:
The EU Commission has opened up the submission form for feedback on the bill. Let them know how much you don't want this! Let them know how much harm this bill will do to civil rights and economic stability! It's better to try and fail then to roll over and take it!
https://ec.europa.eu/info/law/better-regulation/have-your-say/initiatives/19418
P.S. And as always, mail/call your MEPs and other relevant government officials!
#Privacy #Censorship #FreeSpeech #DigitalRights #SocialMedia #EUKidsAct #EU #EuropeanUnion #AgeVerification
#ICE Has Been Dumping Protester Photos Into a #Palantir Database
https://www.wired.com/story/ice-has-been-dumping-protester-photos-into-a-palantir-database/
wired.com
DHS agents not only tracked and intimidated people observing ICE activity in Maine, but stored information about them in a Palantir-built database, newly unsealed court filings say.
#Frontline #Education breach exposes school district employee data
bleepingcomputer.com
Frontline Education is notifying school districts of a data breach after attackers exploited a vulnerability in third-party software to gain unauthorized access to its systems and steal employee information, including Social Security numbers.
Victory! Court Rejects Government Effort to Dismiss #SocialMedia #Surveillance Lawsuit
eff.org
NEW YORK — A lawsuit filed by three labor unions against the Departments of State and Homeland Security for their viewpoint-based surveillance and suppression of protected expression online can move forward, a federal judge ruled yesterday.On October 1, 2026, Judge Alvin K. Hellerstein of the U.S....
Europeans/EU Citizens!
Update on the EU Kids Act:
The EU Commission has opened up the submission form for feedback on the bill. Let them know how much you don't want this! Let them know how much harm this bill will do to civil rights and economic stability! It's better to try and fail then to roll over and take it!
https://ec.europa.eu/info/law/better-regulation/have-your-say/initiatives/19418
P.S. And as always, mail/call your MEPs and other relevant government officials!
#Privacy #Censorship #FreeSpeech #DigitalRights #SocialMedia #EUKidsAct #EU #EuropeanUnion #AgeVerification
In a few minutes, parliament will vote on chatcontrol. There are a few other votes first. You can see the list of amendments to be voted on here: https://www.europarl.europa.eu/sedcms/votingList/C10-0178.pdf
The actual text for the amendments is here:
https://www.europarl.europa.eu/plenary/en/infos-details.html?id=1689&type=priorityInfo
Livestream: https://www.europarl.europa.eu/streaming/?p=ebs
The votes about chatcontrol are only the 4th item in the list of things to be voted on, but you'll likely have to wait a bit: https://www.europarl.europa.eu/sedcms/documents/PRIORITY_INFO/1785/5_TIMING_STR_JULY_I_EN.docx
#Meta’s #Muse #AI agent sent a total stranger to a user’s home
proton.me
Meta's Muse AI agent shared a Facebook Marketplace seller's home address with a buyer without asking. Here's what happened.
#QuéPutería: Care on #Dating Apps is a Collective Matter, Too
https://privacyinternational.org/long-read/5865/que-puteria-care-dating-apps-collective-matter-too
privacyinternational.org
Around an olla comunitaria (community pot: an outdoor community kitchen, usually run by women using donated food and set up as a care space to feed people during crises and protest) in one of central Mede
Building a Rights-Respecting Digital Future in #Pakistan
https://privacyinternational.org/long-read/5863/building-rights-respecting-digital-future-pakistan
privacyinternational.org
Putting People and Privacy at the Centre of Digital Transformation A digital service can look efficient on a screen while feeling confusing, unsafe or inaccessible to the person who depends on it.
A Flaw in #ChatGPT’s #Mac App Could Have Let Hackers Grab Sensitive Data
https://www.wired.com/story/a-flaw-in-chatgpts-mac-app-could-have-let-hackers-grab-sensitive-data/
wired.com
While the focus has been on AI agents’ hacking capabilities, a recently patched vulnerability in a ChatGPT app shows that AI software is itself an inviting—and vulnerable—target.
Russian-Owned Snooping Software Used By #US #SecretService
yro.slashdot.org
Bruce66423 shares a report from The Telegraph: British police forces, including specialist units within the Metropolitan Police, have used Oxygen Forensics software to break into the phones of suspects during live investigations, public documents show. The Virginia-based company behind the software ...
eff.org
The Marin County Sheriff’s Office is the latest California law enforcement agency to get caught sharing automated license plate reader (ALPR) data from their Flock Safety system with out-of-state and federal agencies. EFF and the ACLU of Northern California are calling them out for this direct...
Court Agrees with #EFF: #Utah’s #VPN Law Demands a Technical Impossibility
https://www.eff.org/deeplinks/2026/10/court-agrees-eff-utahs-vpn-law-demands-technical-impossibility
eff.org
In a win for digital rights, a federal judge has issued a preliminary injunction blocking Utah’s SB 73, the state’s draconian anti-VPN age verification law. The decision comes as EFF submitted our comments to the Utah Department of Commerce, detailing how forcing platforms to detect and block privacy-preserving tools undermines user privacy and security worldwide while demanding the impossible.
Happy Opt Out October! Let’s Find Real Alternatives to the Tech Giants
https://www.eff.org/deeplinks/2026/10/happy-opt-out-october-lets-find-real-alternatives-tech-giants
eff.org
Over the years, the major tech companies have found all sorts of ways to embed themselves into our lives. We often use their software, their AI tools, their social media, and their operating systems by default without even thinking about potential alternatives. It’s time to rethink that...
🚨 This Week in Privacy #73 is live! We’re covering Reddit’s latest moves to limit anonymous access, including requiring users to log in to view old.reddit.com, discontinuing RSS feeds, and ending public API access.
We'll also be talking about the latest #privacy & #security news!
👋 Come watch and join the Q&A!
streamyard.com
Reddit is forcing users to login to view old.reddit.com, discontinuing it's RSS feeds and ending public API access killing privacy preserving third party clients. We'll be covering the latest in privacy & security news, so join us for This Week In Privacy #73!
arstechnica.com
Floridians alarmed by 14 mysterious Flock cameras; 11 have no clear owner.
#California governor vetoes bill banning use of ‘pervert glasses’ to secretly record people
techcrunch.com
The California state bill would have penalized people who secretly recorded people in public with wearables equipped with cameras and microphones.
Cops Can Bypass #iPhone’s Automatic Reboot to Get Into Locked Phones, Leaked Video Claims
https://www.404media.co/cops-can-bypass-iphone-automatic-inactivity-reboot-graykey/
404media.co
Magent Forensics, the owner of the GrayKey phone unlocking tool, says it can bypass an iPhone rebooting feature that was locking cops out.
The Secrets of a US #Spyware King
https://www.wired.com/story/the-secrets-of-the-us-spyware-king/
wired.com
In an exclusive interview with WIRED, Paragon Solutions CEO Andrew Boyd reveals the limits of the company’s promise to keep bad actors from abusing its powerful espionage tool.
Returning from vacation? The government can search your #phone without a warrant.
arstechnica.com
Reminder: The "border exemption" to your rights is real.
I added Twitter to my extension to bypass age verification!
Hi! If you don't know me, I made an #opensource #browserextension for #firefox to skip age verification screens on many platforms!
Recently, #Twitter (yes, I'm not calling it X!) sent a cease and deceist letter to #Nitter that allowed you to browse privately. I think this sucks, so now if you want to see an age restricted post you can use my extension to show it! (Still needs to be logged in to an account however, otherwise twitter won't return the tweet data)
🧩 Extension : https://addons.mozilla.org/addon/age-verification-bypass/
💻 Source : https://github.com/helloyanis/age-verification-bypass
Basically, it works by taking all the data from age restricted posts and re-arranging it in the way that regular posts do!
If you're still on twitter (why!) feel free to give it a try, and give me some feedback! Thanks!! 🦊🧡
github.com
Extension to bypass age verification on some websites - helloyanis/age-verification-bypass
I added Twitter to my extension to bypass age verification!
Hi! If you don't know me, I made an #opensource #browserextension for #firefox to skip age verification screens on many platforms!
Recently, #Twitter (yes, I'm not calling it X!) sent a cease and deceist letter to #Nitter that allowed you to browse privately. I think this sucks, so now if you want to see an age restricted post you can use my extension to show it! (Still needs to be logged in to an account however, otherwise twitter won't return the tweet data)
🧩 Extension : https://addons.mozilla.org/addon/age-verification-bypass/
💻 Source : https://github.com/helloyanis/age-verification-bypass
Basically, it works by taking all the data from age restricted posts and re-arranging it in the way that regular posts do!
If you're still on twitter (why!) feel free to give it a try, and give me some feedback! Thanks!! 🦊🧡
github.com
Extension to bypass age verification on some websites - helloyanis/age-verification-bypass
techcrunch.com
Meta says its Muse AI agent cannot access a user’s Messages without explicit permission, disputing a journalist’s account that the agent read his private messages while the required Mac setting was turned off.
#USPS To Put Cameras in Trucks That Scan Roads for ‘Community Safety’
https://www.404media.co/usps-to-put-cameras-in-trucks-that-scan-roads-for-community-safety/
404media.co
USPS says the cameras, put on USPS truck dashboards, will scan roads, signs, and more.
How Cities Are Forced to Funnel License Plate Data to a Massive Federal #Surveillance Program
404media.co
How the federal government built a massive database of license plate reader data through an anti-drug trafficking program.
Post-privacy society. Cartoon for Dutch newspaper Trouw.
Cartoon depicting a surveillance-heavy urban scene. A storefront labeled 'Meta Glasses' displays a blue infinity logo and a giant pair of smart glasses mounted above. Multiple security cameras, drones, and AI monitoring devices beam spotlights downward at pedestrians below. Signs read 'FREE AI'," and 'FREE DOWNLOAD'. People are walking down the street; where they are hit by one of the spotlights they become naked. People wearing smart glasses also shoot out beams to other people, making them appear naked. One person is looking up at a traffic sign that reads 'No privacy'.
Yesterday was my first day at @nextgraph @elfa and I'll be working alongside amazing people on end-to-end encrypted local-first applications for the foreseeable future 🤓
As a huge privacy and self-hosting nerd, this is the kind of project I've been thinking about for a decade but never had the bandwidth to start. No excuse for me now!
(I'm not excited, you are)
#Muse is #Meta's latest attempt to get as much of your data as possible.
tuta.com
Think twice before downloading Meta Muse, the tech giant’s latest personal AI agent. Using it allows Meta to access your online accounts and worrying amounts of personal data.
bleepingcomputer.com
Signal, the secure messaging app, released version 8.30, completing the rollout of its secure backups feature across all supported operating systems (Android, iOS, Linux, macOS, and Windows).
#McDonalds is reportedly using #AI to "dynamically" price its burgers
Read More: https://www.engadget.com/2272211/mcdonalds-is-reportedly-using-ai-to-dynamically-price-its-burgers/
engadget.com
Its food isn't the only thing leaving a bad taste in customers' mouths.
#FBI tells #ShinyHunters members to turn themselves in after recent arrest
bleepingcomputer.com
The FBI is warning members of the ShinyHunters extortion group to turn themselves in after Dutch police arrested a man the bureau described as one of the group's alleged leaders.
Here’s what actually happened in #OpenAI’s Australian gov’t server hack
#AI #Australia #healthcare #medicare #cybersecurity #privacy #DataBreach
arstechnica.com
Without a "full set of safeguards," agent accessed "system information and source code."
This study looks at how and with whom connected cars share your data
https://arstechnica.com/cars/2026/09/connected-car-data-privacy-is-still-abysmal-study-finds/
arstechnica.com
Between the cars and their companion apps, you’re exposed to a lot of trackers.
#Netherlands: The government must demonstrate to the court why the invasion of #privacy caused by #ANPR cameras is necessary
discuss.privacyguides.net
The Court of Appeal in The Hague has ordered the Dutch government to substantiate why the invasion of privacy caused by license plate recognition is necessary in a democratic society. The Court of Appeal in The Hague ruled this today in an interim decision in a case brought against the Dutch government by the Privacy First Foundation. According to Privacy First, the Dutch ANPR (Automatic Number Plate Recognition) legislation violates European privacy law.
Trial of live #FacialRecognition in #London stations leads to a false positive and no arrests
theguardian.com
Freedom of information request finds six-month trial cost £320,000, used almost 100 police hours and led to just one – incorrect – alert
Highly Sensitive Data of 3 Million in the People in the #Pentagon's System Accessed by "Unauthorized Users"
privacyguides.org
The Pentagon sent out letters to affected individuals explaining that their Defense Manpower Data Center (DMDC) was accessed by "unauthorized users," exposing the highly sensitive personal data of millions of military personnel.
#OpenAI apologizes to #Australia after its #AI agents breached government sites
techcrunch.com
The company also detailed how some of those breaches had happened, and outlined additional measures it is taking to assess the impact of the events.
German police read #Signal, #Telegram, #WhatsApp messages without breaking encryption
https://cybernews.com/privacy/police-telegram-whatsapp-signal-surveillance-linked-devices/
EFF to #SanFrancisco #Police: Drones are Powerful #Surveillance Tools That Require a Robust Policy
eff.org
In addition to mission creep, the SFPD has steadily and exponentially increased the number of drone flights, from roughly 350 deployments in 2024, to over 1,100 from January to August 2025, to over 3,500 in just the first five months of 2026.
#TimesCar confirms #DataBreach affecting 6.6 million user accounts
bleepingcomputer.com
Japanese car-sharing service Times Car has confirmed that approximately 6.6 million user accounts were compromised in a cyberattack disclosed late last week.
#FBI Hackers Say They Won’t Publish Massive Trove of FBI Employee Data
https://www.404media.co/fbi-hackers-say-they-wont-publish-massive-trove-of-fbi-employee-data/
404media.co
ShinyHunters, the group that stole data on “all FBI employees” including addresses and details on their spouses, told 404 Media on Monday “Since the very beginning we had made our decision that we would never publish this data. We have never intended to nor have we ever planned to.”
Hey Fediverse!
First anyone have recommendations for a VPN service that will let me appear to be in my home area to stream football games while I'm vacation?
Bonus feature would be to also appear to be in Canada to stream CBC Gem content.
Privacy would be great too.
In Amsterdam next week: Join @torproject and Internet Archive Europe for a conversation about threats to the open internet and how Onion Services can help keep the web open.
"Avoiding the Internet Achilles' heel: Locking the web open with Onion Services"
📅 October 8, 5:30 - 7:30 PM
📍 Oudeschans 16, 1011 KZ Amsterdam
Evening Program:
* Presentation
* Talk with slides
* Q&A
* Informal happy hour & conversation
To join the event, please register below.
luma.com
Join the Internet Archive Europe and members of the Tor Project to discuss the current threats to internet access, focusing on the recent events revealing the…
New Attack Can Track You Across Operating Systems Without Elevated Privileges
#privacy #cybersecurity #Linux #Windows #Mac #Android #iOS #Apple #FOSS
privacyguides.org
Researchers at the Graz University of Technology Austria demonstrated a new attack that can track you via file change events "on all systems," allowing for various data leaks.
#FBI reportedly declares ‘ #cybersecurity incident’ after hackers steal agents’ personal data
techcrunch.com
The bureau has not yet publicly confirmed a breach, but has told its agents that their personal information and Social Security numbers were exposed.
Unsurprisingly, #Meta's new #Muse #AI agent blatantly ignores users permissions
https://appleinsider.com/articles/26/09/28/metas-new-ai-agent-blatantly-ignores-users-permissions
appleinsider.com
In a completely unsurprising turn of events, Meta's Muse AI is stealing Apple Messages, past and present, and uploading the contents to its cloud, even if explicitly told not to.
#Walmart says it’s not using personal information to set prices as it expands digital shelf labels
https://apnews.com/article/walmart-pricing-dynamic-pricing-1488b3614058c9452426c0e2e656f653
Humans Are Reading #Copilot Prompts — And They're Horrified
https://www.404media.co/humans-reading-copilot-prompts-images/
404media.co
Human contractors are reviewing Copilot users’ prompts and uploaded images, according to internal documents obtained by 404 Media. The contractors are also bombarded with users’ requests for sexual AI images.
privacyguides.org
Meta announced in a blog post that its notorious smart glasses will soon use its Private Processing to protect your data as it's being processed in the cloud.
#Cloudflare fixes #Containers cross-tenant flaw exposing customer data
bleepingcomputer.com
Cloudflare has fixed a vulnerability in Containers and Sandboxes that allowed customers with a Workers Paid account to recover residual data from other customers' containers on the same physical host.
#TikTok agrees to pay at least $100M in #Alabama settlement
https://techcrunch.com/2026/09/26/tiktok-agrees-to-pay-at-least-100m-in-alabama-settlement/
techcrunch.com
TikTok will pay Alabama at least $100 million in a settlement tied to allegations that the short-form video platform misled users about safety and was designed to addict children.
In Amsterdam next week: Join @torproject and Internet Archive Europe for a conversation about threats to the open internet and how Onion Services can help keep the web open.
"Avoiding the Internet Achilles' heel: Locking the web open with Onion Services"
📅 October 8, 5:30 - 7:30 PM
📍 Oudeschans 16, 1011 KZ Amsterdam
Evening Program:
* Presentation
* Talk with slides
* Q&A
* Informal happy hour & conversation
To join the event, please register below.
luma.com
Join the Internet Archive Europe and members of the Tor Project to discuss the current threats to internet access, focusing on the recent events revealing the…
Keep Palantir out of our public institutions, and out of our public life! #privacy #surveillance
—N I WILL NOT SIGN a 3 VOTE FOR OR SUPPORT \/ PUBLIC CONTRACTS p/. OR INVESTMENTS /\ PALANTIR 7: IY LOGIES. THERERAY™
Keep Palantir out of our public institutions, and out of our public life! #privacy #surveillance
—N I WILL NOT SIGN a 3 VOTE FOR OR SUPPORT \/ PUBLIC CONTRACTS p/. OR INVESTMENTS /\ PALANTIR 7: IY LOGIES. THERERAY™
🔐 Your private conversations don’t need a phone number, account or central messaging server.
Meet Zerion private messaging over Tor with post-quantum encryption on every message.
No ads. No tracking. Open source.
Download Zerion on Google Play and try it with your friends and family.
#Zerion #Privacy #Tor #OpenSource #CyberSecurity #PrivacyTech #android
https://play.google.com/store/apps/details?id=com.professor.zerion
play.google.com
Private messaging over Tor. No phone number, account or central server.
🚨Canada is about to destroy #privacy with Bill C-22 — one of the worst surveillance laws.
We stopped Bill C-2 just last year (details: https://tuta.com/blog/canada-bill-c2-surveillance)
Let's do it again! We say #NoToBackdoors 💪
Because there's no such thing as "lawful access" for the good guys only.
We've signed an open letter against Bill C-22, please join the fight!
👉 https://theccf.ca/stop-government-spying/
👉 Open Letter: https://fixc22.ca
Canada stop Bill C-22
RE: https://mastodon.neat.computer/@privacyguides/117346918735642094
This is our best video yet - please give it a watch!
mastodon.neat.computer
In 2016, a locked iPhone 5C sparked a massive showdown between Apple and the FBI. When the US government demanded Apple push a modified compromised update to bypass iOS Security, it created a national debate: Where does individual privacy end and public safety begin? https://www.youtube.com/watch?v=p5LSaATxA6g
This quote was not authorized by the quoted post's author.
RE: https://mastodon.neat.computer/@privacyguides/117346918735642094
This is our best video yet - please give it a watch!
mastodon.neat.computer
In 2016, a locked iPhone 5C sparked a massive showdown between Apple and the FBI. When the US government demanded Apple push a modified compromised update to bypass iOS Security, it created a national debate: Where does individual privacy end and public safety begin? https://www.youtube.com/watch?v=p5LSaATxA6g
This quote was not authorized by the quoted post's author.
Looking for a self-hosted alternative to Jira or Linear?
Plane is an open-source project management platform for tracking issues, planning cycles, managing projects, and building product roadmaps.
It includes Pages, analytics, custom views, and modules to help teams organize work and track progress.
Self-host it on your own infrastructure with Docker or Kubernetes for more control over your project data.
More details & alternatives:
https://digitalescapetools.com/tools/plane.html
Screenshot of the Plane project page showing its logo and tagline, “Modern project management for all teams.” It describes Plane as an open-source tool for tracking issues, running sprints and cycles, and managing product roadmaps.
Looking for a self-hosted alternative to Jira or Linear?
Plane is an open-source project management platform for tracking issues, planning cycles, managing projects, and building product roadmaps.
It includes Pages, analytics, custom views, and modules to help teams organize work and track progress.
Self-host it on your own infrastructure with Docker or Kubernetes for more control over your project data.
More details & alternatives:
https://digitalescapetools.com/tools/plane.html
Screenshot of the Plane project page showing its logo and tagline, “Modern project management for all teams.” It describes Plane as an open-source tool for tracking issues, running sprints and cycles, and managing product roadmaps.
New Mexico jury finds Facebook liable for over 43 million violations of consumer protection law—and Meta could owe over $200 billion in penalties
#Meta #Facebook #privacy #surveillance #leak #technology #socialmedia #lawsuit
fortune.com
The jury also found Facebook misled the public about investigations into third-party app developers that harvest user data following the Cambridge Analytica scandal.
New Mexico jury finds Facebook liable for over 43 million violations of consumer protection law—and Meta could owe over $200 billion in penalties
#Meta #Facebook #privacy #surveillance #leak #technology #socialmedia #lawsuit
fortune.com
The jury also found Facebook misled the public about investigations into third-party app developers that harvest user data following the Cambridge Analytica scandal.
F-Droid 2.0 segna una delle più importanti evoluzioni dello store Android dedicato al software libero: nuova interfaccia, ricerca potenziata, aggiornamenti automatici e maggiore attenzione alla privacy. #FDroid #Android #Linux #OpenSource #FOSS #Privacy https://www.linuxeasy.org/f-droid-2-0-cambia-volto-nuova-app-android-ricerca-migliorata-e-piu-controllo-sulla-privacy/
linuxeasy.org
F-Droid 2.0 rinnova completamente l'app Android con nuova interfaccia, ricerca avanzata, installazioni più semplici e funzioni per la privacy
#ChatControl 2.0 — 6th Trilogue this Tuesday, #EU Parl. to be given workaround own legal service already deems illegitimate
discuss.privacyguides.net
Yesterday Patrick Breyer, former MEP with the Pirate Party and digital freedom activist, posted about the upcoming sixth trilogue on Chat Control 2.0. The trilogue negotiates extent of the later proposal (TBD), which according to a leaked document (I could not yet skim it, this is Breyer’s claim until I can clarify or quote) is said to now include a workaround to deploy a mass scanning by allowing scanning of “parts of a service” and “search plans”, which Breyer calls “mass surveillance by anot...
Unsecured #OpenAI agents posted 53 user images on the internet without the lab’s knowledge
techcrunch.com
AI agents operating in OpenAI's research environment posted user images on public image-hosting sites without the lab's knowledge.
Critical #Tor Vulnerabilities Patched Across All Tor Components From the "LLM Report Firehose"
privacyguides.org
Tor has released updates for "all components" of Tor that include severe vulnerabilities and bugs from the "LLM report firehose" and recommends "upgrading as soon as possible."
Some #Supabase customers are publicly exposing reams of people’s data to the web
techcrunch.com
The findings highlight how AI-generated and vibe-coded apps can spill and expose users' data when not configured or secured properly.
#DraftKings Is Using #AI to Supercharge the Harms of Online Behavioral #Advertising
eff.org
Online sports betting company DraftKings is using AI to target customers who are most likely to place losing bets and respond to gambling promotions. This kind of targeting is a form of online behavioral advertising, which is when companies personalize the ads they show you based on the data they’...
PI’s response to the UK Department for Science, Innovation & Technology on data regulation in the age of #AI and other data-intensive technologies
privacyinternational.org
Our submission covers the following topics, following the government's call for evidence:
🚨 This Week In Privacy #72 will be live in 30 minutes, we'll be talking about F-Droid releasing their 2.0 update, the biggest update to the app in years.
We'll also be covering the latest #privacy & #security news!
👋 Come watch and join the Q&A!
streamyard.com
F-Droid just released their 2.0 update, the biggest update to the app in years, Discord is rolling out age verification once again, researchers have found a way to eavesdrop on headphones from 30 meters away and much more! Join us for This Week In Privacy #72.
#Rydox marketplace admin pleads guilty, faces 22 years in prison
bleepingcomputer.com
A Kosovar national has pleaded guilty to operating Rydox, a large illegal online marketplace that sold stolen personal information, login credentials, credit card details, and cybercrime tools.
Pay for your #Tuta subscription via the #Google #PlayStore!
https://tuta.com/blog/tuta-supports-google-play-payments-on-android
tuta.com
Paying for your Tuta subscription on Android just got easier because now you can use Google Play Store payments and pay in your local currency.
discuss.privacyguides.net
Hey everyone, Just wanted to share a quick update for anyone interested in hardware-level privacy but hesitant to leave the mainstream Android ecosystem. The Hiroh Phone—which features a physical hardware kill switch that completely disconnects the microphone and camera at the circuit level—is now officially offering a version that ships with stock Android 16. I know a lot of people here prefer GrapheneOS over /e/OS because /e/OS isn’t always seen as robust on security. If you found the phone...
Five #Indianapolis officers charged following The Post's reporting on #Flock misuse
msn.com
bleepingcomputer.com
Private GitLab email addresses that allow developers to push issues or tasks to a project are being deliberately exposed in READMEs, contributing guides, and support pages used to collect bug reports.
#FDroid 2.0: A New Chapter for #Android Freedom
https://f-droid.org/en/2026/09/24/f-droid-2.0-a-new-chapter-for-android-freedom.html
f-droid.org
After more than a year of hard work, we are thrilled to announce the launch of F-Droid 2.0, a complete redesign of the official F-Droid app and the largest a...
Survey: People don’t trust #AI, but they tell it everything
proton.me
New research finds that most AI chatbot users have shared something sensitive, but few trust the companies behind them.
bleepingcomputer.com
OpenAI agents targeted public data providers in multiple countries, probing some for vulnerabilities and exploiting a security weakness in an Australian government portal while performing information-retrieval tasks as part of a research project.
An interesting conflict between a Dutch media creator Roel Maalderink (together with Bits of Freedom) and Meta regarding Meta glasses.
The guy made a video wearing the glasses outside the Meta office in Amsterdam.
The video showed several Meta employees reacting negatively to the glasses, and even asking multiple times if he was filming (showing that even they couldn’t see if the glasses are active.)
Instagram took the video offline, which is the first time this creator had a takedown of one of his videos.
I hope this goes viral beyond The Netherlands.
Edit: Added a Fedi post by Roel himself.
mastodon.social
Attached: 1 video Meta doesn’t want you to watch this video
Survey: People Don’t Trust AI, but They Tell It Everything, by @protonprivacy:
https://proton.me/blog/ai-chatbot-survey?ref=frontenddogma.com
proton.me
New research finds that most AI chatbot users have shared something sensitive, but few trust the companies behind them.
F-Droid 2.0 is finally out. The biggest update in a decade, and the first one that actually does not look like it was designed in a shed.
The whole app is a Kotlin Compose rewrite now. Navigation is down to three tabs: Discover, Search, My Apps. Updates are automatic in the background by default, and the new session installer finally makes the install flow on par with the Play Store (thanks, EU DMA).
The trade-offs?
- No more Privileged Extension support
- Tor auto-detection is gone, you now need a Tor VPN for that
- The panic wipe feature and the fake calculator disguise are also dead
- Android 6 support has been dropped
This a massive step forward for FOSS Android. But do read the release notes before updating if you relied on those privacy tools.
lwn.net
The F-Droid project has announced the release of F-Droid 2.0, which is a complete redesign of t [...]
#FBI rushes to investigate if #ShinyHunters hack of thousands of employees is real
arstechnica.com
It's unclear what will happen if FBI misses ShinyHunters' deadline.
#FBI Hack Exposed FBI’s Own Hacking Unit
https://www.404media.co/fbi-hack-exposed-fbis-own-hacking-unit-remote-operations-shinyhunters/
404media.co
The FBI's Remote Operations Unit (ROU) is a highly secretive team of hackers making exploits and tools to break into target’s devices. Some of its members just got exposed.
"The Instagram removal underscores the extraordinary power of the company: Meta can both promote products and censor criticism when it suits them. When a privacy-respecting satirical video shows that even Meta employees find these glasses objectionable, Meta censors their message."
bitsoffreedom.nl
"The Instagram removal underscores the extraordinary power of the company: Meta can both promote products and censor criticism when it suits them. When a privacy-respecting satirical video shows that even Meta employees find these glasses objectionable, Meta censors their message."
bitsoffreedom.nl
On #Windows, watching the root directory (`C:\`) reports the full path of every file touched anywhere on the system, regardless of permissions, even across users 🙂. Microsoft considers this an ✨ undocumented feature ✨. The most severe case we found is leaking which websites another user visits in real time, a huge #privacy issue that #Microsoft, once again, said was an undocumented feature. Our findings got Microsoft nominated for the lamest vendor response category at the [Pwnies Award 2026](https://www.youtube.com/live/8Eo4ZDQTAFs?t=6604).
Here's a demo of it visiting @arstechnica
A cross-user watcher mounted on C:\ reports events on all files, even if the user can’t read them. In this video, an attacker filters for “http,” while another user visits arstechnica.com in Firefox.
Woman Arrested, Dragged Away After Quietly Speaking About #Flock at City Council Meeting
#Springfield #Missouri #MO #privacy #police #ALPR #surveillance
404media.co
Citizens of Springfield, Missouri showed up to a city council meeting to discuss the city’s Flock contract. The mayor shut them down and arrested two people for ‘disruption of meetings of city council.’
Researchers found a way to eavesdrop on #headphones from 30 meters away, and #encryption can't stop it
https://www.techspot.com/news/113907-researchers-found-way-eavesdrop-headphones-30-meters-away.html
techspot.com
The research comes from the Hong Kong University of Science and Technology in Guangzhou and the Hong Kong Polytechnic University. The team presented its paper, "Injected and...
"The Instagram removal underscores the extraordinary power of the company: Meta can both promote products and censor criticism when it suits them. When a privacy-respecting satirical video shows that even Meta employees find these glasses objectionable, Meta censors their message."
bitsoffreedom.nl
Interoperability, #Privacy, and the Limits of the Digital Markets Act
privacyinternational.org
Technology giants like Apple, Meta, Google, and Microsoft spend billions of dollars to keep you in their walled gardens. The more data that is kept within one ecosystem, the harder it is to move to another, and the more challenging it is for an upstart to break into the fray
"The Instagram removal underscores the extraordinary power of the company: Meta can both promote products and censor criticism when it suits them. When a privacy-respecting satirical video shows that even Meta employees find these glasses objectionable, Meta censors their message."
bitsoffreedom.nl
"The Instagram removal underscores the extraordinary power of the company: Meta can both promote products and censor criticism when it suits them. When a privacy-respecting satirical video shows that even Meta employees find these glasses objectionable, Meta censors their message."
bitsoffreedom.nl
"The Instagram removal underscores the extraordinary power of the company: Meta can both promote products and censor criticism when it suits them. When a privacy-respecting satirical video shows that even Meta employees find these glasses objectionable, Meta censors their message."
bitsoffreedom.nl
An interesting conflict between a Dutch media creator Roel Maalderink (together with Bits of Freedom) and Meta regarding Meta glasses.
The guy made a video wearing the glasses outside the Meta office in Amsterdam.
The video showed several Meta employees reacting negatively to the glasses, and even asking multiple times if he was filming (showing that even they couldn’t see if the glasses are active.)
Instagram took the video offline, which is the first time this creator had a takedown of one of his videos.
I hope this goes viral beyond The Netherlands.
Edit: Added a Fedi post by Roel himself.
mastodon.social
Attached: 1 video Meta doesn’t want you to watch this video
"The Instagram removal underscores the extraordinary power of the company: Meta can both promote products and censor criticism when it suits them. When a privacy-respecting satirical video shows that even Meta employees find these glasses objectionable, Meta censors their message."
bitsoffreedom.nl
"The Instagram removal underscores the extraordinary power of the company: Meta can both promote products and censor criticism when it suits them. When a privacy-respecting satirical video shows that even Meta employees find these glasses objectionable, Meta censors their message."
bitsoffreedom.nl
"The Instagram removal underscores the extraordinary power of the company: Meta can both promote products and censor criticism when it suits them. When a privacy-respecting satirical video shows that even Meta employees find these glasses objectionable, Meta censors their message."
bitsoffreedom.nl
"The Instagram removal underscores the extraordinary power of the company: Meta can both promote products and censor criticism when it suits them. When a privacy-respecting satirical video shows that even Meta employees find these glasses objectionable, Meta censors their message."
bitsoffreedom.nl
"The Instagram removal underscores the extraordinary power of the company: Meta can both promote products and censor criticism when it suits them. When a privacy-respecting satirical video shows that even Meta employees find these glasses objectionable, Meta censors their message."
bitsoffreedom.nl
"The Instagram removal underscores the extraordinary power of the company: Meta can both promote products and censor criticism when it suits them. When a privacy-respecting satirical video shows that even Meta employees find these glasses objectionable, Meta censors their message."
bitsoffreedom.nl
"The Instagram removal underscores the extraordinary power of the company: Meta can both promote products and censor criticism when it suits them. When a privacy-respecting satirical video shows that even Meta employees find these glasses objectionable, Meta censors their message."
bitsoffreedom.nl
"The Instagram removal underscores the extraordinary power of the company: Meta can both promote products and censor criticism when it suits them. When a privacy-respecting satirical video shows that even Meta employees find these glasses objectionable, Meta censors their message."
bitsoffreedom.nl
🚨Canada is about to destroy #privacy with Bill C-22 — one of the worst surveillance laws.
We stopped Bill C-2 just last year (details: https://tuta.com/blog/canada-bill-c2-surveillance)
Let's do it again! We say #NoToBackdoors 💪
Because there's no such thing as "lawful access" for the good guys only.
We've signed an open letter against Bill C-22, please join the fight!
👉 https://theccf.ca/stop-government-spying/
👉 Open Letter: https://fixc22.ca
Canada stop Bill C-22
#Kalypata is possibly the first app to block #AI notetakers in meetings. It's in closed beta, Apple Silicon only right now. Developers claim AI fails to transcribe 2 out of 3 words when Kalypata is activated.
[…] Kalypta runs on your device while you are in a meeting and interrupts AI transcription of your voice. The people on the call hear you exactly as before — transcribers and note-takers listening in do not get usable text.
Yesterday’s win in #AwesomeWorkbench:
~6m of building, I now have my own chat interface, on top of a local #privacy gateway to remote #LLMs.
Nice here: sensitive terms get redacted locally, their semantic role is preserved for the model, and the originals are restored only on my side when the reply comes back.
The sensitive terms never leave my computer
This is exactly the kind of tiny geeky #STS #infrastructure I wanted to exist.
If this sort of thing speaks to your own tinkering, say hi.
#Kalypata is possibly the first app to block #AI notetakers in meetings. It's in closed beta, Apple Silicon only right now. Developers claim AI fails to transcribe 2 out of 3 words when Kalypata is activated.
[…] Kalypta runs on your device while you are in a meeting and interrupts AI transcription of your voice. The people on the call hear you exactly as before — transcribers and note-takers listening in do not get usable text.
Yesterday’s win in #AwesomeWorkbench:
~6m of building, I now have my own chat interface, on top of a local #privacy gateway to remote #LLMs.
Nice here: sensitive terms get redacted locally, their semantic role is preserved for the model, and the originals are restored only on my side when the reply comes back.
The sensitive terms never leave my computer
This is exactly the kind of tiny geeky #STS #infrastructure I wanted to exist.
If this sort of thing speaks to your own tinkering, say hi.
#Sweden fines #Miljödata $183,000 over breach affecting 2.2 million
bleepingcomputer.com
Sweden's data privacy regulator, IMY, has imposed a $183,000 (SEK 1.8 million) fine on IT systems provider Miljödata for inadequate security measures leading to a breach in August 2025 affecting 2.2 million people.
‘We Hacked the #FBI:’ Hackers Say They Have Data on All FBI Employees
https://www.404media.co/we-hacked-the-fbi-hackers-say-they-have-data-on-all-fbi-employees/
404media.co
A sample of 5,000 alleged agents seen by 404 Media includes names, addresses, phone numbers, and details on FBI employees' spouses.
404media.co
"This has potential for so much negative PR. It could portray us as ‘their AI is not good enough so they still need humans’ kind of coverage for this launch."
#Proton partners with #Apertus, Switzerland’s sovereign #AI model
proton.me
Proton has partnered with the team behind Apertus, adding their sovereign AI model to its privacy-first AI chatbot Lumo.
What is #cyberstalking? How to protect yourself and what the law says
proton.me
What is cyberstalking, and is it a crime? Learn the warning signs, how to protect your privacy, and how cyberstalking laws work around the world.
John Ternus kicked off his tenure as Apple CEO by announcing the long-awaited folding iPhone.
But behind the scenes, it looks like products and services are going to get more expensive to please shareholders and he’s ready to sacrifice privacy on the altar of AI.
https://disconnect.blog/red-flags-at-the-start-of-apples-john-ternus-era/
#tech #ai #apple #privacy #iphone #iphoneduo #generativeai #surveillance
disconnect.blog
Under the new CEO, products are more expensive and AI comes with more surveillance
bleepingcomputer.com
Ireland's Data Protection Commission (DPC) has fined Google €403 million ($463M) for multiple GDPR violations related to processing users' location data.
An Arsenal of #Surveillance: A Guide to the Technologies Harming Migrants
privacyinternational.org
Governments around the world are building increasingly sophisticated surveillance infrastructures to monitor migrants, asylum seekers and refugees at borders and within countries.
404 Media: Is Your City Using #Axon License Plate Cameras? We Need Your Help
https://www.404media.co/is-your-city-using-axon-license-plate-cameras-we-need-your-help/
404media.co
404 Media is filing public records requests around the country to find out how cops are using Axon's ALPRs. Here is how you can do that too.
John Ternus kicked off his tenure as Apple CEO by announcing the long-awaited folding iPhone.
But behind the scenes, it looks like products and services are going to get more expensive to please shareholders and he’s ready to sacrifice privacy on the altar of AI.
https://disconnect.blog/red-flags-at-the-start-of-apples-john-ternus-era/
#tech #ai #apple #privacy #iphone #iphoneduo #generativeai #surveillance
disconnect.blog
Under the new CEO, products are more expensive and AI comes with more surveillance
🔓 LEAKED DOCUMENT 🇮🇪 Shown below is an excerpt from the leaked proposal by the Irish Presidency. The #EU Member States are expected to give their opinions by end of week. 🇪🇺
@maxschrems: “Under these proposals, the profits of #AI companies would trump Europeans' fundamental right to #privacy."
👉 Read more on our website 🔗 https://noyb.eu/en/ai-eu-member-states-plan-digital-expropriation-europeans-interest-ai-companies
The image attached to this post shows part of the leaked text. It reads: "Article 88 bis: Processing in the context of the development and operation of AI: (1) The processing of personal data in the context of the development and operation of an AI system or of an AI model may be carried out for a legitimate interest of the controller or a third party in accordance with Article6(1)(f) of this Regulation. (2) Pseudonymised data shall not be considered personal data for a person if that person is unable to identify the natural person to whom the data relates, unless paragraph 5 applies."
Discover how the new Signal numberless registration feature protects your privacy. Learn about the small fee designed to block spam and scam accounts.
securityexpress.info
Elon Musk highly recommends the encrypted messaging application Signal. Historically, this platform strictly enforced a phone number registration mechanism. Users could hide their phone numbers by…
Discover how the new Signal numberless registration feature protects your privacy. Learn about the small fee designed to block spam and scam accounts.
securityexpress.info
Elon Musk highly recommends the encrypted messaging application Signal. Historically, this platform strictly enforced a phone number registration mechanism. Users could hide their phone numbers by…
To Enforce Its Proposed #SocialMedia an for 450 Million Pre-Teens, #EU Builds an #OpenSource App
yro.slashdot.org
The European Commission "proposed on Thursday banning children under 13 from social media, with parent-supervised accounts until 15," reports Reuters. "Enforcement would rely on a tool Brussels built itself" — a free, open-source age verification smartphone app "that tells a platform wheth...
🔓 LEAKED DOCUMENT 🇮🇪 Shown below is an excerpt from the leaked proposal by the Irish Presidency. The #EU Member States are expected to give their opinions by end of week. 🇪🇺
@maxschrems: “Under these proposals, the profits of #AI companies would trump Europeans' fundamental right to #privacy."
👉 Read more on our website 🔗 https://noyb.eu/en/ai-eu-member-states-plan-digital-expropriation-europeans-interest-ai-companies
The image attached to this post shows part of the leaked text. It reads: "Article 88 bis: Processing in the context of the development and operation of AI: (1) The processing of personal data in the context of the development and operation of an AI system or of an AI model may be carried out for a legitimate interest of the controller or a third party in accordance with Article6(1)(f) of this Regulation. (2) Pseudonymised data shall not be considered personal data for a person if that person is unable to identify the natural person to whom the data relates, unless paragraph 5 applies."
@royaards @Heidentweet @JigmeDatse @GLaDTheresCake @romli The #KidsAct is just nice revamped version Chatcontrol 😡same mass surveillance, different packaging.
Monitoring all EU citizens under the guise of "protecting children." The bureaucrats dream of a panopticon dream.
But we've won this fight before.
The EU Kids Act can still be stopped. Sign the citizen initiative: https://citizens-initiative.europa.eu/initiatives/details/2026/000011_en
citizens-initiative.europa.eu
Viral #AI actress' hotline face-scans every caller, watches their mood
bleepingcomputer.com
AI actress Tilly Norwood went viral after glitching into Chinese on Piers Morgan Uncensored last night. Her "Talking Tilly" video call service face-scans every caller for an 18+ age check, senses callers' moods during calls, and shuts down permanently on September 27. We tried it and read the fine print.
#India forces #CallerID apps to feed #spam reports to telcos
https://techcrunch.com/2026/09/18/india-forces-caller-id-apps-to-feed-spam-reports-to-telcos/
techcrunch.com
Truecaller says the one-way sharing requirement would hand a commercially valuable proprietary asset to telecom operators.
How to Limit What #Apple’s New #Siri #AI Can Access in #iOS27
https://www.eff.org/deeplinks/2026/09/how-limit-what-apples-new-siri-ai-can-access-ios-27
eff.org
Apple’s new operating system is here, and along with it comes a new version of Siri, dubbed with two very familiar letters: AI. As the name suggests, this Siri power-up resembles an AI chatbot more than the often derided voice assistant you might be used to. It has even evolved from a blob you...
Secure Messaging and #AI Remain In Conflict Despite the Promise of TEEs
https://www.eff.org/deeplinks/2026/09/secure-messaging-and-ai-remain-conflict-despite-promise-tees
eff.org
Secure messaging platforms, like Signal, WhatsApp, and recently, encrypted RCS, operate on a straightforward assumption: the content at each end of a conversation is private to the participants in the conversation. End-to-end encryption helps provide the mathematical guarantees that the companies...
💬 How does your Instant Messenger stack up?
We created a tier-list video ranking them all from best to worst! 🥇
Did your favorite messenger get put in S-tier?
Watch our video to find out! ⬇️
neat.tube
We compared the top instant messengers (and the ones not quite there yet) to find out how they stack up. Let us know where your favorite choice fell, or if we missed anything in the comments! ℹ️ Rea...
#Flock Offers Employees Buyouts as Customers Flee
https://www.wired.com/story/flock-is-offering-voluntary-buyouts-to-employees/
wired.com
As dozens of cities end contracts for its controversial license plate readers, Flock is rolling out a voluntary severance program, WIRED has learned.
#Gyazo server flaw exploited to steal 23.6 million user records
bleepingcomputer.com
The Gyazo image-sharing platform has confirmed it suffered a data breach after hackers exploited a server vulnerability that allowed them to steal 23.6 million user records.
#404Media x #TheIntercept Live: How #AI Is Used to Surveil and Kill
https://www.404media.co/404-media-x-the-intercept-live-how-ai-is-used-to-surveil-and-kill/
404media.co
404 Media and The Intercept talk about how private companies empower government surveillance, and how AI is used in warfare.
#Meta’s Copyright System Is Being Weaponized Against Albanian Protesters
https://www.wired.com/story/metas-copyright-system-is-being-weaponized-against-albanian-protesters/
#Albania #protest #activism #privacy #FreeSpeech #censorship #politics
wired.com
After three months of daily anti-government protests—dubbed the Flamingo Revolution—the sudden mass suspension of Instagram accounts has led to fears of brigading against demonstrators.
arstechnica.com
Bill would help rightsholders obtain court orders to block foreign piracy sites.
I hate that I can recycle my posts about Chat Control every 6 months and they are still relevant.
Please don't give up, and keep fighting against authoritarian policies destroying our privacy rights ✊
We have a responsibility to fight for a better future for all, not only for ourselves but also for the next generations 💚🔒
#Mila and #Mozilla announce new initiative to build trustworthy #OpenSource #AI for everyone, with Canadian government support
https://blog.mozilla.org/en/mozilla/mila-canada-open-source-ai-initiative/
blog.mozilla.org
Today at ALL IN, Canada’s largest AI and technology event, Mozilla and Mila announced a new initiative and fresh investment to build an open source AI fo
‘ #Flock City PD:’ The Fake Flock-Owned ‘ #Police Department’ That Searched Real Cameras for Real People
404media.co
Flock ran searches for “coexist bumper sticker,” “white truck with a trump sticker,” and “Star of David,” apparently to demonstrate what cops shouldn't search for.
I just love this. It's so contrary to our modern social media sensibilities.
I just love this. It's so contrary to our modern social media sensibilities.
#Apple will let #EU apps use less-alarming tracking-consent screens
https://techcrunch.com/2026/09/17/apple-will-let-eu-apps-use-less-alarming-tracking-consent-screens/
techcrunch.com
Apple is changing its App Tracking Transparency prompts in parts of Europe after competition regulators said the system favored Apple over third-party apps, giving developers more flexibility over how they ask users for tracking consent.
🚨 This Week In Privacy #71 will be live in 30 minutes, we'll be talking about Signal finally allowing you to register an account without a phone number.
We'll also be covering the latest #privacy & #security news!
👋 Come watch and join the Q&A!
streamyard.com
Signal has rolled out registration without a phone number on Android in beta, Revolut breached customer data through fake law enforcement requests, X Chat has mysteriously disappeared from the App Store and more. Join us for This Week In Privacy #71!
New #Zuckoff app detects nearby #Meta ‘perv glasses’: ‘right to at least know that someone is recording’
nypost.com
A new app called Zuckoff can detect if a user is near someone with Meta’s creepy AI-powered glasses, which have drawn criticism for enabling creeps to record women without their consent.
#Flock Once Touted Its Cameras as ‘Made in the USA.’ Now It’s Not So Clear
https://www.wired.com/story/flock-once-touted-its-cameras-as-made-in-the-usa-now-its-not-so-clear/
wired.com
Flock reveals little about where its license plate readers are assembled, but the answer could have geopolitical and cybersecurity implications.
#Anthropic wants #Claude to analyze your bank account and financial data
bleepingcomputer.com
Anthropic is testing a new personal finance feature called "Claude Money" that will allow you to connect your bank accounts directly to Claude and "understand your money."
After accusations of selling ‘perv glasses,’ #Meta prepares to sell a pair without a camera
techcrunch.com
Can Meta dodge the "pervert glasses" accusations with a new camera-free product?
Testing Cookie Behavior Across Hundreds of Web Surfaces With Our in-House Auditor, by (not on Mastodon or Bluesky):
dropbox.tech
Our cookie auditor acts like a privacy-conscious user by visiting web pages and checking that they only load cookies consistent with that user’s preferences.
Hackers publish thousands of drivers’ data after breaching #Florida motor vehicle database
techcrunch.com
The ShinyHunters gang leaked the files online after saying the Florida state agency did not pay their ransom demand.
bleepingcomputer.com
The Spanish Data Protection Agency (AEPD) was notified of an attack allegedly carried out with an AI agent powered by a known large language model (LLM).
It’s OK to tell #ICE their actions will haunt them, judge rules in speech fight
arstechnica.com
Man wins fight to block ICE threat over off-the-cuff angry email.
eff.org
Since its integration into our digital world, social media has played a pivotal role in youth organizing and social mobilization. Yet, people’s access to these platforms is increasingly coming under threat from courts and legislatures under the guise of protecting young people online—presenting a...
Lawmakers target #Flock cameras with a threat to highway funding
wired.com
A bipartisan bill would restrict Flock cameras to a handful of public safety uses.
themarkup.org
Consumers asked a major data broker for their files. What they got back shows interest in how fat they are, how much they drink, and how likely they are to get a mammogram, among many other characteristics.
Data brokers have detailed files on you. Here’s what’s in them — and how it impacts you
themarkup.org
Data brokers collect thousands of details about your finances, health and habits. See what’s in your profile, who buys it and how companies use it.
Hackers Stole #Flock’s Camera Software, Revealing How the Company Tracks Cars and People
404media.co
While people around the U.S. are tearing down Flock cameras, one group of hackers went a step further: extracting the camera's software too.
Still using biometrics to unlock your phone? STOP IT.
https://www.stupidsexyprivacy.com/why-your-fingerprints-are-leaking-through-your-photos/
stupidsexyprivacy.com
Your phone isn't secure by default—and neither are you. So today, BJ Mendelson walks you through 15 easy privacy moves that separate people who are actually protected from those who think they are. Come take a listen.
The #EU must act now to protect #privacy and #encryption from #Canada’s overreaching Bill #C22
https://www.accessnow.org/press-release/the-eu-must-act-now-canadas-overreaching-bill-c-22/
accessnow.org
Access Now, alongside several European civil society organisations, are urging Ursula von der Leyen, President of the European Commission, European Union commissioners, and members of the European Parliament to push for changes to Canada’s Bill-C22, the Lawful Access Act.
@ilumium If the Commission actually cared about kids or evidence, you might expect the quadrennial Commission report ex GDPR art. 97 (https://eur-lex.europa.eu/eli/reg/2016/679/oj/eng#d1e6665-1-1) to say some words on the impact of past legislative efforts in this area. Yet there was nothing.
https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=COM%3A2024%3A357%3AFIN#_Toc165303756
How did @je5perl call it? "Policy-driven evidence-making"?
Children require specific protection when their personal data are processed ( 109 ). The GDPR is part of a comprehensive legal framework that ensures that children are protected offline as well as online ( 110 ). Given the increased presence of children online, a number of actions at EU and national level have been taken in recent years to support the protection of children online. Data protection authorities have imposed significant fines on social media companies for violation of the GDPR when processing children’s data. They also cooperate with other authorities to call for more protection of children in the area of advertising. In the 2020 report, the Commission invited the Board to adopt guidelines on the processing of children’s data and this work is currently under way ( 111 ). The Digital Services Act includes specific provisions to ensure a high level of privacy, safety and security of children using online platforms. Some stakeholders report challenges with the exercise of data subject rights, when the data subjects are children. In particular, they report that children do not fully understand their rights, lack digital literacy skills and may be subject to undue influence ( 112 ). The Commission has funded several initiatives at national level on the protection of children’s data and on promoting data protection awareness among children ( 113 ). Under the Better Internet for Kids (BIK+) strategy, the Commission is providing awareness-raising resources and trainings to children on their digital rights, including data protection (e.g. digital consent) ( 114 ). There is increasing focus on the need for effective and privacy-friendly age verification tools. In early 2024, the Commission set up a taskforce on age verification with Member States, the Board and the European Regulators Group for Audiovisual Media Services, with the aim of discussing and supporting the development of a EU-wide approach to age verification. This work will now continue under the Digital Services Act Board, in the Protection of Minors Working Group. In the context of the EU Digital Identity Regulation ( 115 ), which entered into force in May 2024, the Commission is working to ensure that the European Digital Identity Wallet is offered to all EU citizens and residents in 2026, including for age verification. Meanwhile, before the Wallet ecosystem is fully operational, a short-term solution for age verification will be developed and become available across the EU.
X's Encrypted Messenger, #XChat, Disappears From the App Store and the Google Play Store
privacyguides.org
X Chat, X's dedicated end-to-end encrypted messaging app, has disappeared from both Apple's App Store and the Google Play Store.
arstechnica.com
City: Flock enabled "nationwide lookup" despite contract requiring it to be disabled.
#CenterPoint #Energy confirms customer data stolen in cyberattack
bleepingcomputer.com
CenterPoint Energy disclosed a breach compromising some customers' personal information after an attacker leaked data allegedly stolen from the utility company.
#Nitter and #XCancel are dead (again) after X’s latest legal actions
https://techcrunch.com/2026/09/15/nitter-and-xcancel-are-dead-again-after-xs-latest-legal-actions/
techcrunch.com
The privacy-friendly services for viewing X posts without an account have gone dark again after X's escalated legal action.
Charges Against Man Who Destroyed 3D-Printed ‘Decoy’ #Flock Camera Drastically Reduced After State Admits It Was Not Very Valuable
404media.co
Three felonies have suddenly become two second-degree misdemeanors.
👀
"...Hackers ripped down a Flock camera above a roadway, made a near-complete copy of the data stored inside it, and shared the files with 404 Media and WIRED, revealing in new detail how exactly Flock Safety’s cameras track the movements of both vehicles and people. The hackers say they are also publishing details on how they managed to obtain the software, in the hopes that other people may copy them.
The breach provides an unprecedented look inside a system that Flock has described as protected by on-device encryption. The hackers were able to copy the camera’s storage and recover an encryption key stored on the device, which unlocked videos of thousands of vehicle detections..."
404media.co
While people around the U.S. are tearing down Flock cameras, one group of hackers went a step further: extracting the camera's software too.
👀
"...Hackers ripped down a Flock camera above a roadway, made a near-complete copy of the data stored inside it, and shared the files with 404 Media and WIRED, revealing in new detail how exactly Flock Safety’s cameras track the movements of both vehicles and people. The hackers say they are also publishing details on how they managed to obtain the software, in the hopes that other people may copy them.
The breach provides an unprecedented look inside a system that Flock has described as protected by on-device encryption. The hackers were able to copy the camera’s storage and recover an encryption key stored on the device, which unlocked videos of thousands of vehicle detections..."
404media.co
While people around the U.S. are tearing down Flock cameras, one group of hackers went a step further: extracting the camera's software too.
25 Years of Mass #Surveillance Is Enough
https://www.schneier.com/blog/archives/2026/09/25-years-of-mass-surveillance-is-enough.html
schneier.com
This essay was written with Cindy Cohn, and originally appeared in Lawfare. One of the many legacies of the terrorist attacks of Sept. 11 is the government-wide shift from targeted surveillance—such as individual wiretaps or pen register/trap and trace orders—to mass surveillance techniques—such as tapping into the internet backbone or mass collection of telephone or internet metadata. The legal and technical architecture of modern mass surveillance, initially framed as a necessary defense against terrorist threats, has grown far beyond that justification and national security in general. Mass surveillance is now a routine tool used by law enforcement. ICE uses it in...
"As it turns out, Apple realistically needs customer data to make Siri AI work well. So, starting with iOS 27, it is asking users to opt-in to training on your data.
A new section in the iOS 27 privacy policy shows that Apple has reversed its stance on using customers' data to train its AI models. Previously, the company assured customers that it had no need for customer data, and would figure out how to make Siri AI work well without it.
Apple maintains that it "takes steps to ensure that personal data is not stored or used by Apple." But as Heise points out, and Apple has said in the terms of service for a few years now, the audio material may be listened to by Apple employees after anonymization.
Currently, new feature is opt-in only. When iOS 27 rolls out on Monday, September 14, users will see a prompt that asks users to help improve the chatbot, with an agree or "not now" button.
It also admits that data collected may be reviewed by "review personnel." It is unclear if "review personnel" are Apple employees or a third-party company contracted to read conversation transcripts, as it has historically been.
The change is a big deal."
appleinsider.com
As it turns out, Apple realistically needs customer data to make Siri AI work well. So, starting with iOS 27, it is asking users to opt-in to training on your data.
"As it turns out, Apple realistically needs customer data to make Siri AI work well. So, starting with iOS 27, it is asking users to opt-in to training on your data.
A new section in the iOS 27 privacy policy shows that Apple has reversed its stance on using customers' data to train its AI models. Previously, the company assured customers that it had no need for customer data, and would figure out how to make Siri AI work well without it.
Apple maintains that it "takes steps to ensure that personal data is not stored or used by Apple." But as Heise points out, and Apple has said in the terms of service for a few years now, the audio material may be listened to by Apple employees after anonymization.
Currently, new feature is opt-in only. When iOS 27 rolls out on Monday, September 14, users will see a prompt that asks users to help improve the chatbot, with an agree or "not now" button.
It also admits that data collected may be reviewed by "review personnel." It is unclear if "review personnel" are Apple employees or a third-party company contracted to read conversation transcripts, as it has historically been.
The change is a big deal."
appleinsider.com
As it turns out, Apple realistically needs customer data to make Siri AI work well. So, starting with iOS 27, it is asking users to opt-in to training on your data.
We're working on ramping up the content. If you'd like to support us in these dire economic times, every penny is appreciated.
thenewoil.org
Data is the new oil
bleepingcomputer.com
Japan's Digital Agency has discovered a data breach that may have exposed around 246,000 record rows containing personal information of government employees.
#NewYork Seizes 12 Celebrity #Deepfake Websites
https://www.404media.co/new-york-district-attorney-seizes-12-celebrity-deepfake-websites/
404media.co
New York District Attorney Alvin Bragg said in a press conference on Monday that the sites included 1,200 people’s likenesses in “hyper-realistic” sexual imagery.
Chrome Again Exempts Google From User Site Data Settings, by @lapcatsoftware:
https://lapcatsoftware.com/articles/2026/9/1.html?ref=frontenddogma.com
lapcatsoftware.com
The High Crime of “LMAO”: How Cops Are Treating Mass #Surveillance As a Joke
https://www.eff.org/deeplinks/2026/09/high-crime-lmao-how-cops-are-treating-mass-surveillance-joke
eff.org
With no warrant requirements, limited guardrails, and deficient audit processes, ALPR databases have fostered a culture of unrestricted access to everyone’s location information. This culture of abuse has allowed police to treat a mass surveillance network like their own personal search engine, permitting the tracking of the movements of everyday citizens for low-level complaints, personal whims, and sometimes, seemingly, for the lols.
Inside ‘ #ProjectLily ’: The Humans Reading Your #ChatGPT Chats
https://www.404media.co/inside-project-lily-the-humans-reading-your-chatgpt-chats/
404media.co
Humans are reading ChatGPT users’ prompts to improve OpenAI’s models, and those chats can include sensitive, personal information, according to leaked internal documents and real prompts seen by 404 Media.
Does anyone have any insights / scoops about the upcoming #EUKidsAct, set to be introduced this Thursday to "age gate" access to social media platforms across the EU? (Thus forcing every citizen to upload their government ID to establish their age)
I'm super worried about the impact on the #OpenSocialWeb and the Fediverse in particular.
🔗 : https://www.politico.eu/article/eu-to-propose-new-legislation-on-minors-protection-on-thursday/
I wish they would share a clear description of the platforms affected by this legislation.
politico.eu
New “EU KIDS Act” would require TikTok and Instagram to create safer accounts for younger users.
Sexually Explicit #Deepfake Sites Target 100-Plus Politicians in #Europe
https://www.wired.com/story/sexually-explicit-deepfake-sites-target-100-plus-politicians-in-europe/
wired.com
An analysis of 160 deepfake websites reveals politicians in 22 countries appear on them. Nearly all of them are women.
themarkup.org
Doctoralia sent information about specialists and appointment dates to social media companies.
#Signal brings on-device backups for #iPhone and #iPad to beta
https://aboutsignal.com/news/signal-introduces-on-device-backups-for-iphone-and-ipad/
aboutsignal.com
The new on-device backups allow users to securely store their Signal data locally and restore it when needed. With support for local backups, Signal now offers more backup options for iOS users.
#Flock worker calls #police on #InvestigateTV reporter filming public camera installation
investigatetv.com
Questions about privacy and oversight surrounding Flock Safety's national camera network persist
#US lawmakers urge secretive British court to open up about #Apple case
https://www.theguardian.com/us-news/2026/sep/11/congress-uk-court-apple-encrypted-data-case
theguardian.com
Democrat Ron Wyden and Republican Warren Davidson tell investigatory powers tribunal that secrecy over encrypted data case is ‘needlessly’ straining US-UK relations
Governor Newsom Signs Student-Backed Digital Literacy Bills Alongside Misguided Bans
eff.org
Governor Newsom signed a package of 12 bills yesterday aimed at “protecting children” online. One of them was AB 1709, which EFF has opposed this legislative session and serves as a functional ban on young people under 16 using social media. However, EFF supported two of the bills signed into law,...
In iOS 27, there’s no longer simple toggle to disable Apple Intelligence entirely. Some features like Writing Tools can also send data off-device for processing through Private Cloud Compute
After some digging, here’s how to disable Writing Tools:
1️⃣ Settings → Screen Time
2️⃣ Content & Privacy Restrictions → turn it on
3️⃣ Siri → Writing Assistance → Don’t Allow
so,
someone's RayBans are recording me
https://www.heise.de/en/news/GDPR-trap-Smart-Glasses-Why-Ray-Ban-Meta-wearers-can-be-held-liable-11451626.html
as i walk
someone's AppleyWatch is recording me
https://www.theregister.com/security/2026/09/10/watch-out-apple-timepiece-can-grab-snippets-of-conversation-without-both-speakers-consent/5295666
as i talk
there are street trackers across municipalities
https://www.aclu.org/news/privacy-technology/tracking-alpr-cameras/flocks-terms-and-conditions
stalking me
and webshites i visit to read about these tell me i have to accept all their trackers or gtfo.
should i visit my neighbourhood tattoo parlour and get
"I Do Not Consent!"
inked across my forehead
?
surveillance tech is poison!
aclu.org
A flurry of Flock contract changes disempower customers
so,
someone's RayBans are recording me
https://www.heise.de/en/news/GDPR-trap-Smart-Glasses-Why-Ray-Ban-Meta-wearers-can-be-held-liable-11451626.html
as i walk
someone's AppleyWatch is recording me
https://www.theregister.com/security/2026/09/10/watch-out-apple-timepiece-can-grab-snippets-of-conversation-without-both-speakers-consent/5295666
as i talk
there are street trackers across municipalities
https://www.aclu.org/news/privacy-technology/tracking-alpr-cameras/flocks-terms-and-conditions
stalking me
and webshites i visit to read about these tell me i have to accept all their trackers or gtfo.
should i visit my neighbourhood tattoo parlour and get
"I Do Not Consent!"
inked across my forehead
?
surveillance tech is poison!
aclu.org
A flurry of Flock contract changes disempower customers
We should all go buy a bag of googly eyes and stick them on everything with a network connection as a reminder theyre all watching us.
In iOS 27, there’s no longer simple toggle to disable Apple Intelligence entirely. Some features like Writing Tools can also send data off-device for processing through Private Cloud Compute
After some digging, here’s how to disable Writing Tools:
1️⃣ Settings → Screen Time
2️⃣ Content & Privacy Restrictions → turn it on
3️⃣ Siri → Writing Assistance → Don’t Allow
bleepingcomputer.com
The Florida Department of Highway Safety and Motor Vehicles (FLHSMV) has confirmed that its DAVID driver database suffered a data breach, saying the attackers gained access using credentials belonging to a police department employee.
#Meta Sued Over Training Data for Its #AI and Face-Recognition Systems
https://www.wired.com/story/meta-sued-over-training-data-for-its-ai-and-face-recognition-systems/
wired.com
The proposed class action alleges Meta illegally harvested people’s Facebook and Instagram photos to train its AI image-generation models and to build its unreleased “NameTag” face recognition feature.
Cold #TAKE: #Amazon's New #Encryption Method Still Doesn't Deliver Real #Privacy
eff.org
Amazon recently debuted a new feature for its Ring cameras that the company is calling Throw Away the Key Encryption (TAKE). The idea is to cut back on the amount of video content available to the company, and thus potentially available to law enforcement. But while it might technically add a speed...
#California governor signs laws aimed at protecting kids from risks of #SocialMedia, #AI chatbots
Right so, Facebook is all sad because people are calling their "AI" surveillance specs "Pervert Glasses" and it's killing them. It's also establishing the social norm that you don't go around with video recording glasses on your face, you'll be shunned.
So we need to start calling the Apple Watch the "Creep Watch" for humanity's sake.
infosec.exchange
Today @zackwhittaker@mastodon.social brings up a very important topic about the launch of the new Apple Watch this week: How a large company like Apple can play an important role in normalizing intrusive surveillance. "Apple is opening the door to a world where other companies, device makers, and app developers try to recreate or rival Apple's technology and do a far shoddier job, all the while creating a worse surveillance monster and introducing new security and privacy risks along the way." We don't talk enough about how privacy is also a culture, part of cultural norms that can go in one direction or another. Products like this, produced and sold at a massive scale, weakens our culture of consent and privacy, and pushes society towards the increasing normalization of always-on surveillance. I highly recommend reading Zack's article: https://this.weekinsecurity.com/watch-what-you-say-apple-opens-the-door-to-a-nightmare-world-of-always-listening-tech/ #Privacy #Security #Apple #MassSurveillance
Right so, Facebook is all sad because people are calling their "AI" surveillance specs "Pervert Glasses" and it's killing them. It's also establishing the social norm that you don't go around with video recording glasses on your face, you'll be shunned.
So we need to start calling the Apple Watch the "Creep Watch" for humanity's sake.
infosec.exchange
Today @zackwhittaker@mastodon.social brings up a very important topic about the launch of the new Apple Watch this week: How a large company like Apple can play an important role in normalizing intrusive surveillance. "Apple is opening the door to a world where other companies, device makers, and app developers try to recreate or rival Apple's technology and do a far shoddier job, all the while creating a worse surveillance monster and introducing new security and privacy risks along the way." We don't talk enough about how privacy is also a culture, part of cultural norms that can go in one direction or another. Products like this, produced and sold at a massive scale, weakens our culture of consent and privacy, and pushes society towards the increasing normalization of always-on surveillance. I highly recommend reading Zack's article: https://this.weekinsecurity.com/watch-what-you-say-apple-opens-the-door-to-a-nightmare-world-of-always-listening-tech/ #Privacy #Security #Apple #MassSurveillance
Imagine you're having a remote appointment with your doctor for a very personal health issue.
Your doctor is a tech enthusiast, and is proudly wearing the new Apple Watch with all the recording features enabled.
You don't see the "Audible and visible signals for Live Rewind", because you don't see your doctor's wrist on videochat or on speakerphone.
The "Omitted content" safeguard fails to detect the sensitive conversation, because none of the pre-selected keywords are detected.
"What about all the privacy laws protecting me?", you claim in distress.
Sadly, your doctor is unaware and thinks "surely Apple respects all the laws by default?"
The medical clinic isn't informed about privacy risks related to new technologies, and hasn't implemented any training or policies about it yet.
Your sensitive health data is collected by Apple's new features, stored on their servers, blissfully unaware of the infringements to your consent, your privacy, and all the laws supposed to protect you.
This is only one scenario of the many surveillance nightmares we might hear about in the coming months and years.
Brace yourself.
#LinkedIn beats “ #BrowserGate ” lawsuits over scanning users’ #Chrome extensions
arstechnica.com
Judge tosses lawsuits, says plaintiffs didn't allege any real privacy violation.
We All Deserve a Better Internet, Not A Smaller One
https://www.eff.org/press/releases/we-all-deserve-better-internet-not-smaller-one
#privacy #AgeVerification #California #AB1709 #SocialMediaBan #SocialMedia #politics
eff.org
SAN FRANCISCO - Technology and the laws that regulate it should support and empower young people. California’s AB 1709 - signed into law today by Gov. Gavin Newsom - falls far short of this goal, say the Electronic Frontier Foundation (EFF) and its allies. Using technology is how we learn and build...
Imagine you're having a remote appointment with your doctor for a very personal health issue.
Your doctor is a tech enthusiast, and is proudly wearing the new Apple Watch with all the recording features enabled.
You don't see the "Audible and visible signals for Live Rewind", because you don't see your doctor's wrist on videochat or on speakerphone.
The "Omitted content" safeguard fails to detect the sensitive conversation, because none of the pre-selected keywords are detected.
"What about all the privacy laws protecting me?", you claim in distress.
Sadly, your doctor is unaware and thinks "surely Apple respects all the laws by default?"
The medical clinic isn't informed about privacy risks related to new technologies, and hasn't implemented any training or policies about it yet.
Your sensitive health data is collected by Apple's new features, stored on their servers, blissfully unaware of the infringements to your consent, your privacy, and all the laws supposed to protect you.
This is only one scenario of the many surveillance nightmares we might hear about in the coming months and years.
Brace yourself.
Panic builds over bankrupt Spirit’s looming data sale to #Google
arstechnica.com
Bankruptcy cannot become the new land grab for AI.”...
Today @zackwhittaker brings up a very important topic about the launch of the new Apple Watch this week:
How a large company like Apple can play an important role in normalizing intrusive surveillance.
"Apple is opening the door to a world where other companies, device makers, and app developers try to recreate or rival Apple's technology and do a far shoddier job, all the while creating a worse surveillance monster and introducing new security and privacy risks along the way."
We don't talk enough about how privacy is also a culture, part of cultural norms that can go in one direction or another.
Products like this, produced and sold at a massive scale, weakens our culture of consent and privacy, and pushes society towards the increasing normalization of always-on surveillance.
I highly recommend reading Zack's article: https://this.weekinsecurity.com/watch-what-you-say-apple-opens-the-door-to-a-nightmare-world-of-always-listening-tech/
this.weekinsecurity.com
Apple's new upcoming ambient audio recording features set a risky precedent in normalizing intrusive surveillance. Privacy experts weigh in.
#Firefox just added built-in ad blocking on #iPhone. Do you still need a separate blocker?
https://adguard.com/en/blog/firefox-ios-ad-blocker-vs-adguard.html
adguard.com
Firefox adds built-in ad blocking on iPhone. See what it misses, how AdGuard for iOS compares, and why Apple still limits your choice of blocker.
ID verification giant #IDScan confirms #DataBreach with more than 150 million driver’s licenses stolen
techcrunch.com
The ID checking company said the data breach included people's full names and driver's licenses and other government-issued identity documents.
#ClearviewAI Is Testing an #AI Tool That Would Let Cops Unearth Your Life Online
#privacy #surveillance #police #Clearview #InquiryIQ #xAI #Grok
wired.com
InquiryIQ, a previously unreported prototype, tested a model from xAI, maker of Grok, to surface associates, social accounts, and other information about people identified through Clearview.
Another way to leak traffic on #Android has been discovered
https://mullvad.net/en/blog/2026/9/10/another-way-to-leak-traffic-on-android-has-been-discovered
mullvad.net
A newly discovered leak in Android allows any app to send traffic outside the VPN tunnel.
bleepingcomputer.com
Trezor has revealed that phishing attacks against its customers earlier this week targeted 347,000 email addresses and affected 2,500 users who clicked an embedded malicious link.
This is some next level shit right here.
"Merlin combines daily global coverage with one-meter spatial resolution, a capability that Satellogic believes is not available in Earth observation systems today. This combination is expected to enable entirely new intelligence applications by allowing organizations to monitor activity continuously and cost-effectively on a planetary scale."
https://satellogic.com/news/press-releases/satellogic-introduces-merlin-constellation-for-daily-global-monitoring-at-one-meter-resolution/
#privacy #surveillance #fascism
satellogic.com
Satellogic Introduces Merlin Constellation for Daily Global Monitoring at One-Meter Resolution
I'm curious. Do you still use #facebook ? I feel very isolated without it as a few people I'd like to keep in touch with use it nearly exclusively. It's frustrating because I want to leave.
#socialmedia #meta #privacy
#SanFrancisco Orders #Meta to Stop ‘Allowing’ #AI Child Abuse Ads
https://www.wired.com/story/san-francisco-orders-meta-to-stop-allowing-ai-child-abuse-ads/
wired.com
The City Attorney’s Office has asked Meta to explain how the harmful ads repeatedly ran on Facebook and Instagram. The company claims the ads are not under the city’s jurisdiction.
#AdaptHealth confirms 4.1 million people exposed in #July cyberattack
bleepingcomputer.com
Healthcare company AdaptHealth has confirmed that data of 4.1 million people was exposed in a cyberattack discovered in July that was attributed to the ShinyHunters threat group.
#Apple announces new Apple Watch model in partnership with #Flock!
PRESS RELEASE SEPTEMBER 11, 2026. CUPERTINO, CALIFORNIA Apple today introduced Apple Watch Flock Edition (tm) — the ultimate surveillance and adventure watch — now including new, always-on video recording and AI-enhanced processing. Note: longer battery life may be affected by the requirement to have a 4K stream always connected to our primary data center in Hell.
Apple Watch Flock Edition (tm)
GrapheneOS Messaging version 13 released:
https://github.com/GrapheneOS/Messaging/releases/tag/13
See the linked release notes for a summary of the improvements over the previous release and a link to the full changelog.
Forum discussion thread:
https://discuss.grapheneos.org/d/41906-grapheneos-messaging-version-13-released
discuss.grapheneos.org
GrapheneOS discussion forum
#Apple announces new Apple Watch model in partnership with #Flock!
PRESS RELEASE SEPTEMBER 11, 2026. CUPERTINO, CALIFORNIA Apple today introduced Apple Watch Flock Edition (tm) — the ultimate surveillance and adventure watch — now including new, always-on video recording and AI-enhanced processing. Note: longer battery life may be affected by the requirement to have a 4K stream always connected to our primary data center in Hell.
Apple Watch Flock Edition (tm)
#DoctorDoom Thanked #Seattle for All the #Surveillance Cameras
https://www.404media.co/doctor-doom-thanked-seattle-for-all-the-surveillance-cameras/
404media.co
‘We must work to crush any dissent to Doom’s vision of public safety,’ the Marvel supervillain told the city as it considered multiple surveillance proposals.
#Apple Doesn’t Want You to Worry About the New Apple Watch’s Listening Features
wired.com
The new Apple Watch includes several “intelligent” listening features that have privacy and security baked in. But the protections can’t change the facts of what the tools do.
#DigitalSovereignty: What It Is, What It Could Be
https://www.eff.org/deeplinks/2026/09/digital-sovereignty-what-it-what-it-could-be
eff.org
The term “digital sovereignty” has become ubiquitous. European officials invoke it in debates about cloud infrastructure, AI, semiconductors, and platform regulation. Governments throughout the global majority use it to argue for greater control over data and communications infrastructure and boost...
#TorVPN Beta: What we've learned building our own #VPN for #Android from scratch
blog.torproject.org
Last fall, we soft-launched Tor VPN Beta as a way to extend Tor's privacy protections beyond the browser to an entire Android device. Since then, we've been able to learn from how people are actually using it in real-world scenarios. This post walks through what makes our per-app circuit isolation different from commercial VPNs, the surprising UX lesson when trying to bypass blocks, and the mobile foundation we're building for what's next.
Smear Campaign Says Anti-Flock Movement Is Chinese Propaganda
https://www.404media.co/smear-campaign-says-anti-flock-movement-is-chinese-propaganda/
404media.co
Sinclair Broadcasting is pushing the idea that China and the No Kings protesters are the reason people don't like Flock.
Cops Play Hide and Seek About Using Spy Tech to Avoid Scrutiny and Bad PR
eff.org
Law enforcement agencies across the country are increasingly relying on spying technologies—automated license plate readers (ALPR), cell-site simulators, and facial recognition, to name a few--causing an outcry in many communities where people are rightly concerned about the threat to civil rights...
#Veradigm warns of patient #DataBreach after #ransomware gang claims attack
bleepingcomputer.com
Healthcare technology company Veradigm disclosed a data breach after a cybersecurity incident at one of its third-party vendors exposed patients' personal data.
#addy(dot)io now blocks tracking pixels
addy.io
Lite and Pro users can now remove known tracking pixels from forwarded HTML emails. The setting is enabled by default, and if anything is blocked the email banner includes a report that is not stored in the database.
7 #privacy tools experts actually use
https://proton.me/blog/privacy-tools-experts-use
#guide #Android #GrapheneOS #Graphene #Qubes #OrganicMaps #FDroid #RSS #Cape #Tor
proton.me
Explore privacy tools that privacy experts use for everyda, from GrapheneOS and Organic Maps to Qubes OS, F-Droid, Cape, Tor, and VPNs.
Cover your bits, the UK government wants to put scanning tech on your phone.
The aim? To prevent kids receiving and sending nudes. But it'll be there as default for everyone, unless you go through age verification to disable it.
It's a disproportionate move that'll compromise privacy and security.
Read our blog ⬇️
https://www.openrightsgroup.org/blog/nudity-scanning-tech-will-leave-us-more-exposed/
#privacy #surveillance #onlinesafety #ageverification #ukpolitics #ukpol
openrightsgroup.org
The Government’s proposals to prevent under 18s from creating or sharing nude images aim to address serious issues such as sextortion, grooming, and abuse.
Man gets 15 years for extorting women with #AI-generated porn videos
bleepingcomputer.com
An Ohio man was sentenced to 15 years in prison for multiple cybercrimes, including sextortion and cyberstalking of numerous victims using AI-generated sexually explicit content.
Europe’s Cookie Law Is Really a Law About Surveillance, by @itxaso (@edri):
https://edri.org/our-work/europes-cookie-law-is-really-about-surveillance/?ref=frontenddogma.com
edri.org
The ePrivacy framework limits commercial tracking and state access to communications. It is now being weakened from several directions at once.
#Microsoft adds age-awareness APIs that can tell if users are children, teens, or adults
bleepingcomputer.com
Microsoft is adding new age-awareness APIs to Windows 11 that will allow apps to determine whether someone is a child, teenager, or adult without exposing their exact date of birth.
Nudity blocking works by scanning ALL your content.
The privacy implications are huge.
And the same goes for the alternative: having to submit your sensitive data in the form of ID uploads or biometric scans to verify you're over 18.
Meanwhile, the age verification industry remains unregulated.
#privacy #surveillance #onlinesafety #ageverification #ukpolitics #ukpol
404media.co
A data protection lawyer told 404 Media the sharing was likely illegal, and Channel 5’s own privacy policy explicitly says it won't give subscribers’ emails away to people for marketing purposes.
Nudity doesn't necessarily mean sexual.
It can be for medical purposes, journalism or artistic expression. Think life drawing, historic documentation like the 'Napalm girl', breast-feeding support or sex education.
Any scanning tech carries risks of false positives and weaponised false negatives.
#privacy #surveillance #onlinesafety #ageverification #ukpolitics #ukpol
Don't believe the hype, we've just had a warning about supposedly ‘safe by design’ tech.
The HMD Fuse child-safety phone was taken off sale after serious security vulnerabilities were discovered.
This includes flaws which could expose a child’s live location and allow protections to be disabled.
https://www.ft.com/content/670b2b1d-7e4c-480e-9ed4-9f7f095d7860?syn-25a6b1a6=1
#privacy #surveillance #onlinesafety #ageverification #ukpolitics #ukpol
Nudity blocking works by scanning ALL your content.
The privacy implications are huge.
And the same goes for the alternative: having to submit your sensitive data in the form of ID uploads or biometric scans to verify you're over 18.
Meanwhile, the age verification industry remains unregulated.
#privacy #surveillance #onlinesafety #ageverification #ukpolitics #ukpol
Cover your bits, the UK government wants to put scanning tech on your phone.
The aim? To prevent kids receiving and sending nudes. But it'll be there as default for everyone, unless you go through age verification to disable it.
It's a disproportionate move that'll compromise privacy and security.
Read our blog ⬇️
https://www.openrightsgroup.org/blog/nudity-scanning-tech-will-leave-us-more-exposed/
#privacy #surveillance #onlinesafety #ageverification #ukpolitics #ukpol
openrightsgroup.org
The Government’s proposals to prevent under 18s from creating or sharing nude images aim to address serious issues such as sextortion, grooming, and abuse.
#ShinyHunters hackers claim breach of #Florida " #DAVID " #DMV database
bleepingcomputer.com
The ShinyHunters extortion gang claims it breached an online platform for the Florida Department of Motor Vehicles database known as "DAVID" and stole over 200,000 records about drivers in the state.
A Secretive #DHS ‘Predictive Policing’ Unit is Analyzing Americans’ Financial Habits and Pulling Them Over
#privacy #surveillance #police #CBP #PITT #finance #PersonalFinance
404media.co
404 Media is revealing the name of Border Patrol's predictive policing units, which analyze financial data and have local cops pull people over. The people are not suspected of any particular crime.
wired.com
Images of real children—including a member of a European royal family—were used to create some of the 350 ads containing child sexual abuse. Lawmakers say they plan to investigate.
bleepingcomputer.com
Exclusive: An exposed Advance Passenger Information System (APIS) database held 220 million passenger and crew records containing names, passport numbers, dates of birth, nationalities, and flight details spanning 2017 to 2026. Researchers accessed the Vietnam-linked system through a cloud-based path using default credentials.
privacyguides.org
Nitter, an alternative frontend for X.com, announced that they "will be back up and running shortly" after a cease and desist from X Corp.
#Mathspace discloses #DataBreach affecting over 1 million people
bleepingcomputer.com
Online maths learning platform Mathspace disclosed over the weekend that attackers stole data from more than 1 million students, staff, and parents after breaching its Metabase internal reporting system.
#Framework Laptop 12 Arrives with #Fedora Pre-installed
https://fedoramagazine.org/framework-laptop-12-arrives-with-fedora-pre-installed/
fedoramagazine.org
Describing collaboration between Fedora and Framework to provide the Framework Laptop 12 with KDE Plasma pre-installed
Tool: Claude Watermark Remover, by (not on Mastodon or Bluesky):
https://claudewatermarkremover.app/?ref=frontenddogma.com
#tools #exploration #content #claude #watermarking #ai #privacy
claudewatermarkremover.app
Free online Claude watermark check and clean in your browser — no account, no install. Paid rewrite is a separate paraphrase pass for Anthropic’s statistical mark. Not affiliated with Anthropic.
I have a hypothesis that Metro (Canadian grocery store company) is using those IoT sensors that Wal-Mart uses that track the location of phones throughout the store to track foot traffic because I've gone two times recently and stood in front of a product and thought about getting it but didn't then got an ad for it the next day.
I remember seeing on YouTube a user use an app or something to scan for devices connected to WiFi nearby to identify if a store is using these sensors but I can't find it now.
Does anyone know what you can use on your phone to check for them (and what are they usually identified as)?
Holy heck. Dunno if this is true, but if so...
"...An investigation by Gamers Nexus found LG smart TVs sweep local networks to map phones and nearby devices. Tests also showed the sets can capture microphone audio with the screen off — they then upload data once reconnected to the internet..."
notebookcheck.net
An investigation by Gamers Nexus found LG smart TVs sweep local networks to map phones and nearby devices. Tests also showed the sets can capture microphone audio with the screen off — they then upload data once reconnected to the internet.
IMPORTANT PASSWORD SECURITY/PRIVACY ISSUE
----
For everyone:
If you are using the same password for Mastodon that you use anywhere else, CHANGE YOUR PASSWORD NOW.
A hacker is stealing accounts on Mastodon using something called “credential stuffing.” This means they use email/password combinations stolen from other sites.
This is a common hacking technique. But right now someone is targeting Mastodon accounts.
This is not a security flaw with Mastodon. Someone is just using it across Mastodon.
You can check if your email is in a data breach elsewhere:
Create a new strong password:
1. 12+ characters
2. Capital/lowercase letters
3. At least one special character
For admins:
The hacker is using the same unique user agent.
Go-http-client/1.1
We’re seeing a pattern of IPs, but they’re from varying ISPs. They’re also not changing the account emails.
#Mastodon #Password #InfoSec #OpSec #Security #Privacy #Hacked #Hacker
haveibeenpwned.com
Search tens of billions of breached records, monitor corporate domains via API, and get alerted when credentials are exposed. Trusted by security teams, MSSPs, and government agencies worldwide.
Hundreds More #Flock Cameras Removed in the US This Week. Flock Caught Repackaging Traffic Data
yro.slashdot.org
Florida's Republican Governor Ron DeSantis said this week he's removing Flock cameras from state roadways. And according to a local news report, that led sheriff's departments in at least three other Florida counties to also "announce they're ending their own license plate reader programs." The sam...
#Trezor: Recent customer data exposed in shipping provider incident
https://trezor.io/blog/news/recent-customer-data-exposed-in-shipping-provider-incident
trezor.io
ShipMonk, one of Trezor’s shipping providers, has experienced a data breach that exposed sensitive customer order data, including full names, physical addresses, phone numbers, and email addresses. Trezor devices are secure.
Holy heck. Dunno if this is true, but if so...
"...An investigation by Gamers Nexus found LG smart TVs sweep local networks to map phones and nearby devices. Tests also showed the sets can capture microphone audio with the screen off — they then upload data once reconnected to the internet..."
notebookcheck.net
An investigation by Gamers Nexus found LG smart TVs sweep local networks to map phones and nearby devices. Tests also showed the sets can capture microphone audio with the screen off — they then upload data once reconnected to the internet.
Let us have a thousand servers, a thousand networks. Let us flood them with possibilities until they run out of time and money to pursue and persecute us.
hub.volse.no
#IDScan sued over alleged #DataBreach affecting 153 million drivers
bleepingcomputer.com
Multiple lawsuits have been filed against identity verification company IDScan after hackers allegedly breached the service and offered to sell more than 153 million driver's licenses.
US #military disabled ad tracking on troops’ devices following reports of targeted attacks
techcrunch.com
A senator's letter confirms the U.S. military moved to prevent the tracking after foreign adversaries used location data to target troops.
Signal app is removing the phone number requirement...if you pay a one-time fee.
Will you pay?
An Algorithmic Failure Beneath the Secret #Ballot
https://blog.citp.princeton.edu/2026/08/03/an-algorithmic-failure-beneath-the-secret-ballot/
blog.citp.princeton.edu
The secret ballot is one of the load-bearing walls of democracy. In Georgia, as in most states, this allows you to know whether your neighbor voted, but never who they voted for. Yet, in multiple states including Georgia, that guarantee is actively at risk.
wired.com
Homeland Security Investigations agents hit the outdoor retailer with a controversial subpoena as part of a dragnet search for the identities of protesters who entered a Minnesota church in March.
Signal app is removing the phone number requirement...if you pay a one-time fee.
Will you pay?
French hospital fined €500,000 after breach exposes data of 727,000
#France #CNIL #HPL #healthcare #privacy #cybersecurity #DataBreach
bleepingcomputer.com
France's data protection authority (CNIL) has fined Hôpital privé de la Loire €500,000 ($580,000) for failing to adequately protect patients' and their relatives' data.
arstechnica.com
Open source, commercial, single-hop, multi-hop, mixnet? The array of options is dizzying.
🚨 This Week In Privacy #69 will be live in 30 minutes, we'll be talking about how Google may have removed a key security feature from their Pixel 11 devices. We'll also be covering the latest privacy & security news!
👋 Come watch and join the Q&A!
streamyard.com
The GrapheneOS team has discovered that the Pixel 11 devices appear to have a key security feature disabled, the feature then re-appeared in a later beta update but was still disabled. We'll explain everything you need to know, and cover the latest privacy & security news on This Week In Privacy #69!
#Flock Taught Cops How to Surveil #NoKings Protesters
https://www.404media.co/flock-taught-cops-how-to-surveil-no-kings-protesters/
#privacy #politics #ALPR #surveillance #police #protest #activism
404media.co
A Flock webinar teaches police how to surveil protests, fireworks shows, parades, bike races, and more.
mullvad.net
Mullvad has operated public encrypted DNS (DoH) servers since 2022. They are unnecessary when using Mullvad VPN — traffic is already encrypted and Mullvad VPN's internal DNS handles all queries.
This Is Flock’s #AI Search Tool for Cops
wired.com
WIRED rebuilt Flock’s latest search tool from code the company sends to a police officer’s browser. Its AI can keep watch across multiple cameras for anyone fitting a written description.
#Google Messages Bug Sends Old Texts to Random People
https://www.privacyguides.org/news/2026/09/02/google-messages-bug-sends-old-texts-to-random-peopl/
privacyguides.org
A bug in Google Messages is causing some people's texts from months or years ago to be sent to random people instead.
🇪🇺 European Citizen's Initiative against ID age verification online
Just yesterday, Stop Killing the Internet, from the people at @StopKillingGames, launched an ECI against ID age verification! This is great but it needs 1 million signatures !
So, if you are a citizen of #eu , please sign it! If you don't, or even if you do, still share it around so more people know about it and can sign it!
https://eci.ec.europa.eu/066/public/#/screen/home
Reaching the signature threshold will not mean that ID age verification will immediately become illegal, but the subject will be brought to the @EUCommission and they'll have to do SOMETHING about it. This is already a huge step in the right direction!
Please boost and share this post to spread the word! Thank you!
eci.ec.europa.eu
Give your support !
Moving this to the replies since it's less important, but I'm the dev of a #firefox add-on to get past age verification on some of these sites so that's great news for me too!
github.com
Extension to bypass age verification on some websites - helloyanis/age-verification-bypass
🇪🇺 European Citizen's Initiative against ID age verification online
Just yesterday, Stop Killing the Internet, from the people at @StopKillingGames, launched an ECI against ID age verification! This is great but it needs 1 million signatures !
So, if you are a citizen of #eu , please sign it! If you don't, or even if you do, still share it around so more people know about it and can sign it!
https://eci.ec.europa.eu/066/public/#/screen/home
Reaching the signature threshold will not mean that ID age verification will immediately become illegal, but the subject will be brought to the @EUCommission and they'll have to do SOMETHING about it. This is already a huge step in the right direction!
Please boost and share this post to spread the word! Thank you!
eci.ec.europa.eu
Give your support !
"I rented a car, and within hours, my #DriversLicense was for sale"
arstechnica.com
The FBI is reportedly investigating a massive data breach that is unfolding in real time.
#Norway considers ban on camera-enabled wearable ‘pervert glasses’
https://techcrunch.com/2026/09/02/norway-considers-ban-on-camera-enabled-wearable-pervert-glasses/
techcrunch.com
The Nordic country says wearable camera headsets need to be regulated given their privacy risks.
404media.co
“Is there any talk to redesign the Outpost to not look exactly like the Flock camera — I think it will help agencies with the optics while we batten down the hatches,” one apparent cop asked during a now deleted Axon webinar.
The #ManifestV2 era is over: #Chrome removes #AdGuard #AdBlocker MV2 from the Web Store
https://adguard.com/en/blog/adguard-adblocker-manifestv2-removal.html
adguard.com
Chrome has removed AdGuard Ad Blocker MV2 from its Web Store. See what existing users need to do, how MV3 differs, and what alternatives remain.
#Australia’s Proposed #Privacy Law Changes
https://discuss.privacyguides.net/t/australias-proposed-privacy-law-changes/40397
discuss.privacyguides.net
Attorney-General Michelle Rowland has just unveiled the government’s proposed changes to Australia’s privacy laws. They include: A test so companies can no longer justify collecting more information than they need, or using it in ways Australians don’t expect. A right to erasure so Australians can request social media. companies and search engines delete their personal information. Measures to stop businesses in trading personal information, such as shopping habits and location data, without...
#Meta's $17 Billion Settlement is a Bad Deal for Teens and All #SocialMedia Users
eff.org
Meta’s settlement with 52 state attorneys general is a bad deal for all internet users, and especially for teens. In this post, we go through the Settlement’s provisions in detail.
#AestoHealth says #DataBreach affects over 9.5 million patients
#Aesto #privacy #cybersecurity #healthcare #VillageMD #Everside #MarathonHealth #Marana #TogetherHealth
bleepingcomputer.com
Aesto LLC, operating as Aesto Health, disclosed that a data breach discovered recently affects more than 9.5 million individuals.
techcrunch.com
Flock's searchable network of 130,000 license plate cameras around the U.S. have sparked bipartisan privacy and civil liberties concerns.
#Novocure #DataBreach affects more than 1,400 #cancer patients
bleepingcomputer.com
Healthtech company Novocure says the data of an undisclosed number of employees and more than 1,400 U.S. cancer patients has been exposed in a mid-August cyberattack.
Introducing #AdBlocker for #Firefox on #iOS: More Control, Fewer Distractions
blog.mozilla.org
There’s only so much room on your screen. Pop-ups, overlays, and ads can take over fast, getting between you and what you came to do. That’s where
My Wireshark test of Firefox 148 showed that its AI kill switch disables generative features, but leaves telemetry and advertising untouched. Six months later, Mozilla’s CEO has called the switch perhaps the most important AI feature of all. I retested it in Firefox 155.
Read the full article: https://marius.blog/firefox-155-ai-kill-switch-retest/
#AI #Firefox #Mozilla #OpenSource #privacy #telemetryI spoke with @tante@tldr.nettime.org for this article.
Firefox 155 welcome screen saying You're in safe paws
USians should lock/freeze your credit reports with all three major credit bureaus. It's not that complicated and can be done on their websites.
You then just put in a temporary thaw on each one when you do need to apply for credit. Took me 5 minutes total last time I needed to let lenders in.
TransUnion
Equifax
Experian
Those are the three bureaus.
Also, visit https://annualcreditreport.com at least annually to get your free credit reports and make sure they are right.
annualcreditreport.com
USians should lock/freeze your credit reports with all three major credit bureaus. It's not that complicated and can be done on their websites.
You then just put in a temporary thaw on each one when you do need to apply for credit. Took me 5 minutes total last time I needed to let lenders in.
TransUnion
Equifax
Experian
Those are the three bureaus.
Also, visit https://annualcreditreport.com at least annually to get your free credit reports and make sure they are right.
annualcreditreport.com
Mozilla released Firefox 155 yesterday, so I took another look at its AI kill switch. The switch has grown since Firefox 148, but telemetry and advertising remain active. I retested it with Wireshark, and Mozilla’s internal reaction to my previous findings became part of the story too.
#Firefox #Mozilla #AI #Privacy #OpenSource
marius.blog
My Wireshark test of Firefox 148 showed that its AI kill switch disables generative features, but leaves telemetry and advertising untouched. Six months…
My Wireshark test of Firefox 148 showed that its AI kill switch disables generative features, but leaves telemetry and advertising untouched. Six months later, Mozilla’s CEO has called the switch perhaps the most important AI feature of all. I retested it in Firefox 155.
Read the full article: https://marius.blog/firefox-155-ai-kill-switch-retest/
#AI #Firefox #Mozilla #OpenSource #privacy #telemetryI spoke with @tante@tldr.nettime.org for this article.
Firefox 155 welcome screen saying You're in safe paws
My Wireshark test of Firefox 148 showed that its AI kill switch disables generative features, but leaves telemetry and advertising untouched. Six months later, Mozilla’s CEO has called the switch perhaps the most important AI feature of all. I retested it in Firefox 155.
Read the full article: https://marius.blog/firefox-155-ai-kill-switch-retest/
#AI #Firefox #Mozilla #OpenSource #privacy #telemetryI spoke with @tante@tldr.nettime.org for this article.
Firefox 155 welcome screen saying You're in safe paws
Breaking, exclusive and spicy, from me:
A new identity theft service launched on the dark web this week is selling digital scans of more than 153 million drivers licenses from people in the United States and Canada. Based on interviews with individuals whose licenses are available for purchase on this service, it appears to be siphoning images collected by a widely-used identity verification company based in Louisiana. KrebsOnSecurity also has learned that the New Orleans field office of the Federal Bureau of Investigation (FBI) today launched an official inquiry into the source of the images.
https://krebsonsecurity.com/2026/09/fbi-probes-service-selling-153m-drivers-licenses/
A record available at this identity theft service that includes the drivers license for U.S. Defense Secretary Pete Hegseth, who is one of several high-ranking U.S. government officials whose drivers licenses can be found for sale. The record shows a picture of Hegseth wearing a suit and tie.
Breaking, exclusive and spicy, from me:
A new identity theft service launched on the dark web this week is selling digital scans of more than 153 million drivers licenses from people in the United States and Canada. Based on interviews with individuals whose licenses are available for purchase on this service, it appears to be siphoning images collected by a widely-used identity verification company based in Louisiana. KrebsOnSecurity also has learned that the New Orleans field office of the Federal Bureau of Investigation (FBI) today launched an official inquiry into the source of the images.
https://krebsonsecurity.com/2026/09/fbi-probes-service-selling-153m-drivers-licenses/
A record available at this identity theft service that includes the drivers license for U.S. Defense Secretary Pete Hegseth, who is one of several high-ranking U.S. government officials whose drivers licenses can be found for sale. The record shows a picture of Hegseth wearing a suit and tie.
#EFF to Governor #Newsom: Veto #California’s #AB1709
https://www.eff.org/deeplinks/2026/08/eff-gov-newsom-veto-californias-ab-1709
eff.org
The California legislature passed Assembly Bill 1709 (A.B. 1709) today, which functions as a sweeping ban on social media use for young people under the age of 16. This well-intentioned, but deeply flawed piece of legislation, cuts young people off from essential information and experiences,...
Think twice before installing this device promising free movies
arstechnica.com
In exchange for free stuff, devices make home connections part of a proxy network.
#Trump Goes After Anonymous #Email Provider in #Italy. The Real Target Is #FreeSpeech in the U.S.
https://theintercept.com/2026/08/28/trump-antifa-terrorist-websites-free-speech/
theintercept.com
Trump designated a collective that provides anonymous email services as a foreign “terrorist” group. It could curtail free speech in the U.S.
#Doxxing Safety Part II: Incident Response
https://www.eff.org/deeplinks/2026/08/doxxing-safety-part-ii-incident-response
eff.org
Doxxing, also known as the deliberate sharing of personal information to harass or endanger someone, is a tricky thing to protect against. It often happens by some ill-intentioned person accessing publicly available information, then sharing that information more widely in the hopes it will...
#Doxxing Safety Pt I: Prevention and Footprint Management
https://www.eff.org/deeplinks/2026/08/doxxing-safety-pt-i-prevention-and-footprint-management
eff.org
Doxxing is the deliberate disclosure of personal information in order to bully, harass, intimidate, or instigate a chain of harms against someone. It's a tricky thing to protect against when the jerk doing it is often able to use legal and accessible means to do so. The odds are stacked against...
#Privacy on the Map (Part 2): Progress, Pitfalls, and the Fight for Enforceable Location Data Protections
eff.org
Last year, we published our rubric for what comprehensive and protective location privacy laws should look like, outlining the baseline standards states should meet to shield individuals from pervasive location surveillance. Since then, state lawmakers across the country have begun responding to calls like these, with Connecticut, Maryland, New Jersey, Oregon, and Virginia enacting new consumer privacy restraints on an industry that profits off our physical movements.
#LGBT Q&A: What’s One Thing I Can Do Today to Improve My Safety and Security Online as an LGBTQ+ Person?
eff.org
This post is adapted from a video recorded by EFF and the Trevor Project. Head over to our TikTok or Instagram to watch! EFF answers all the queer digital rights questions you submit to us through our LGBT Q...
#Berlin confirms data theft after #Rhysida #ransomware attack claims
bleepingcomputer.com
Berlin's city administration has confirmed that cybercriminals are attempting to extort the city after the Rhysida ransomware gang listed it on their data leak site.
Police Use Surveillance Cameras to Narc On Guy Who Found $30 on the Ground
Earlier this month, the Albany Police Department in Georgia made a post on Facebook asking the public to help identify a man guilty of a despicable crime: picking up $30 off the floor that he found in a Walmart.
#Albany #Georgia #police #surveillance #privacy #walmart
https://futurism.com/future-society/police-surveillance-man-money-ground
futurism.com
Police in Albany used an image taken surveillance footage to try find a man who picked up money off the ground in a Walmart.
#California’s #AgeVerification Bill Passes with #Linux Exemption Intact
https://linuxiac.com/californias-age-verification-bill-passes-with-linux-exemption-intact/
linuxiac.com
California lawmakers have approved AB 1856, requiring age signals from covered operating systems while keeping its open-source carve-out intact.
#FulcrumSec claims #Manchester Airports hack, theft of 86 GB of data
bleepingcomputer.com
FulcrumSec claims it stole 86 GB of data from Manchester Airports Group. BleepingComputer validated one traveller's record, while samples revealed detailed customer, booking, and travel information beyond what MAG initially disclosed.
bleepingcomputer.com
Multiple extensions for Google Chrome and Microsoft Edge delivered a malware framework that deployed modules to steal cryptocurrency, sensitive data, and browser history, as well as inject ClickFix lures.
Police Use Surveillance Cameras to Narc On Guy Who Found $30 on the Ground
Earlier this month, the Albany Police Department in Georgia made a post on Facebook asking the public to help identify a man guilty of a despicable crime: picking up $30 off the floor that he found in a Walmart.
#Albany #Georgia #police #surveillance #privacy #walmart
https://futurism.com/future-society/police-surveillance-man-money-ground
futurism.com
Police in Albany used an image taken surveillance footage to try find a man who picked up money off the ground in a Walmart.
They confided in #ChatGPT. Their secrets ended up in court.
https://www.yahoo.com/news/us/articles/confided-chatgpt-secrets-ended-court-090000568.html
yahoo.com
Wear Your Way Out Of #AI #Surveilance
https://hackaday.com/2026/08/29/wear-your-way-out-of-ai-surveilance/
hackaday.com
For decades now many of us have lived in surveillance societies where it’s difficult not to be within the view of a camera. When being noticed depended on the attention span of a minimum wage…
"I asked 100 companies for my data. Some deleted it instead."
wired.com
Testing 100 companies found privacy requests often led to confusion and dead ends.
#McKesson discloses breach after #ShinyHunters claims patient data theft
#privacy #cybersecurity #DataBreach #healthcare #pharmaceutical
bleepingcomputer.com
Healthcare and pharmaceutical distribution giant McKesson has disclosed a cybersecurity incident involving unauthorized access to third-party applications and data theft, with the ShinyHunters extortion group claiming it stole 284 million patient data records.
I've been interviewed by @XavCC for @APC . If you want an overview of what Libervia is, and know a bit of the work with @nlnet / @NGIZero grants, and the behind-the-scenes, check it at
https://www.apc.org/en/news/libervia-building-all-one-communication-platform-grounded-right-privacy
Thanks @XavCC !
#Libervia #XMPP #interview #NLnet #NGI #decentralization #privacy #open #standards
apc.org
This month’s profile in our interview series “Building a Free Internet for the Future” features the Libervia project, an all-in-one communication platform offering alternatives for instant messaging, (micro)blogging, file sharing, photo albums, events, forums and more.
I've been interviewed by @XavCC for @APC . If you want an overview of what Libervia is, and know a bit of the work with @nlnet / @NGIZero grants, and the behind-the-scenes, check it at
https://www.apc.org/en/news/libervia-building-all-one-communication-platform-grounded-right-privacy
Thanks @XavCC !
#Libervia #XMPP #interview #NLnet #NGI #decentralization #privacy #open #standards
apc.org
This month’s profile in our interview series “Building a Free Internet for the Future” features the Libervia project, an all-in-one communication platform offering alternatives for instant messaging, (micro)blogging, file sharing, photo albums, events, forums and more.
It's been a long time since I've needed to wipe a drive, and the tool I used to use (Darik's Boot and Nuke) hasn't been updated since 2015 (I did say it's been a while, right? :) ). ShredOS picks up where it left off: it's built around nwipe, which is itself a DBAN fork. So, if you want to wipe your drives before trashing or reselling, do check it out. It's at https://shredos.org/
Warning: SSDs do a lot under the hood to make themselves last longer, and the side effect is that tools like this won't actually do the erasure you might be expecting. Fortunately, ShredOS includes tools that are specifically for this, including hdparm and nvme-cli. Their site talks about how to use those tools to actually erase those disks, too.
shredos.org
Download ShredOS ISO for free and permanently erase hard drives, SSDs, and USB devices. Secure bootable disk wiping software for complete data destruction.
GrapheneOS Unable to Complete Pixel 11 Port Due to Cut Security Feature
privacyguides.org
GrapheneOS has completed a partial port to the new Pixel 11 devices, but they say they're unable to complete it due to Google dropping ARM Memory Tagging Extension (MTE) support.
It's been a long time since I've needed to wipe a drive, and the tool I used to use (Darik's Boot and Nuke) hasn't been updated since 2015 (I did say it's been a while, right? :) ). ShredOS picks up where it left off: it's built around nwipe, which is itself a DBAN fork. So, if you want to wipe your drives before trashing or reselling, do check it out. It's at https://shredos.org/
Warning: SSDs do a lot under the hood to make themselves last longer, and the side effect is that tools like this won't actually do the erasure you might be expecting. Fortunately, ShredOS includes tools that are specifically for this, including hdparm and nvme-cli. Their site talks about how to use those tools to actually erase those disks, too.
shredos.org
Download ShredOS ISO for free and permanently erase hard drives, SSDs, and USB devices. Secure bootable disk wiping software for complete data destruction.
GrapheneOS Unable to Complete Pixel 11 Port Due to Cut Security Feature
privacyguides.org
GrapheneOS has completed a partial port to the new Pixel 11 devices, but they say they're unable to complete it due to Google dropping ARM Memory Tagging Extension (MTE) support.
More Americans oppose police license plate cameras than support them: survey
techcrunch.com
The backlash against license plate readers comes amid a wave of police abuses of surveillance cameras.
arstechnica.com
Meta fixes AI glasses to stop recording any time users cover up the safety light.
eff.org
EFF, Access Now, and Data Privacy Brasil are putting forward recommendations to strengthen robust privacy and data protection safeguards in the context of Brazil's elections. The recommendations stress the close relationship between violations of personal data protection and challenges to the...
Toy-making giant #Hasbro disclose #DataBreach affecting employees
bleepingcomputer.com
Hasbro, one of the world's largest toy and game companies, has disclosed that attackers have accessed the personal and financial information of an undisclosed number of employees.
wired.com
Alpharetta, Georgia, cops share data with thousands of Flock users, ranging from federal agencies to a fish and wildlife commission. The reasons why show how vast—and invasive—the network has become.
Buried in #Meta’s $18B settlement is a legal pass on kids’ data
https://techcrunch.com/2026/08/27/buried-in-metas-18b-settlement-is-a-legal-pass-on-kids-data/
techcrunch.com
Meta’s settlement with 29 states allows it to retain certain data from children under 13 to train and test age-detection models, highlighting a privacy trade-off built into the deal.
A List of #ICE Subpoenas to Tech Companies
https://www.eff.org/deeplinks/2026/08/list-ice-subpoenas-tech-companies
eff.org
This is likely an undercount. The full scope is hard to pin down because these subpoenas typically only come to light when a user is given notice and challenges them in court, or when a company documents them in a transparency report.
🚨 This Week In Privacy #68 will be live in 30 minutes, we'll be talking about how Nitter was just sent a cease and desist from X (Twitter) raising concerns over other frontends suffering the same fate. We'll also be covering the latest privacy & security news!
👋 Come and watch and join the Q&A!
streamyard.com
X.com has sent a cease and desist letter to Nitter, the privacy focused frontend for Twitter, demanding immediate takedown of the service and its repositories. This move brings into question whether other privacy frontends could also suffer the same fate, we'll discuss this and more on This Week In Privacy #68!
A #Georgia #Cop Used #Flock to Track 2 Other Cops: His Ex and Her Friend
https://www.wired.com/story/a-georgia-cop-used-flock-to-track-2-other-cops-his-ex-and-her-friend/
wired.com
After an affair with a fellow police officer ended, a Georgia cop used Flock to track her movements—and those of a man whose vehicle often showed up near hers, internal investigation records show.
#Brave launches #Email Aliases to keep your personal email address private from websites
brave.com
Starting with desktop version 1.94, Brave is offering Email Aliases to let you sign up for online services without revealing your personal email address. Aliases forward to your primary inbox, helping reduce spam and break cross-site tracking.
#Manchester Airports Group says hackers stole travelers' data
#MAG #airport #travel #privacy #cybersecurity #DataBreach #Stansted #EastMidlands
bleepingcomputer.com
The Manchester Airports Group (MAG) disclosed that hackers breached its systems and stole customer data, including Wi-Fi sign-ups from Manchester, Stansted, and East Midlands airports.
#Android17 adds #ECH support to make web browsing harder to track
bleepingcomputer.com
Google is introducing new network security protections in Android 17 to strengthen connection privacy, address cellular vulnerabilities, and protect the privacy of users' home networks.
404media.co
The deputy resigned after an investigation uncovered an alleged history of racism, stalking, and sexual abuse.
How #Chrome tracks you and how to limit it
proton.me
Learn how Chrome tracks your activity, what information it sends to Google, and which privacy settings can reduce tracking while you browse.
We are losing ground on keeping our digital #privacy every day it seems. Age verification and adjecet initiatives are pushed with (seemingly) good intentions, but grave consequences.
That's why this #EU citizen initiative is important. Free #internet is in danger. Please sign, and #DontKillTheInternet.
eci.ec.europa.eu
Give your support !
We are losing ground on keeping our digital #privacy every day it seems. Age verification and adjecet initiatives are pushed with (seemingly) good intentions, but grave consequences.
That's why this #EU citizen initiative is important. Free #internet is in danger. Please sign, and #DontKillTheInternet.
eci.ec.europa.eu
Give your support !
#Carhartt #DataBreach exposes information of 12.9 million accounts
bleepingcomputer.com
The ShinyHunters extortion group has published sensitive data from nearly 13 million accounts stolen from clothing retailer giant Carhartt earlier this month, according to data breach notification service Have I Been Pwned.
#Privacy watchdog warns of ‘serious risks’ over #EU #police agency #surveillance
https://www.politico.eu/article/europol-data-processing-reform-privacy-risks-edps-warning/
politico.eu
Changes would allow Europol to hold data on vast numbers of people with no links to criminality, data watchdog says.
#Alabama country boy vs #AI #surveillance and #privacy defilement
Jacob Rockwell at a #Pensacola, #Florida #CityCouncil meeting
👏 👏 👏
(Jacob's actually from Escambia County, which is the far Western tip of Florida, so basically Alabama)
A man at a podium reads a speech from his smartphone
#Alabama country boy vs #AI #surveillance and #privacy defilement
Jacob Rockwell at a #Pensacola, #Florida #CityCouncil meeting
👏 👏 👏
(Jacob's actually from Escambia County, which is the far Western tip of Florida, so basically Alabama)
A man at a podium reads a speech from his smartphone
#Alabama country boy vs #AI #surveillance and #privacy defilement
Jacob Rockwell at a #Pensacola, #Florida #CityCouncil meeting
👏 👏 👏
(Jacob's actually from Escambia County, which is the far Western tip of Florida, so basically Alabama)
A man at a podium reads a speech from his smartphone
How Chrome Tracks You and How to Limit It, by @protonprivacy:
https://proton.me/blog/chrome-tracking-privacy?ref=frontenddogma.com
proton.me
Learn how Chrome tracks your activity, what information it sends to Google, and which privacy settings can reduce tracking while you browse.
#Meta agrees to $18 billion settlement over teen #SocialMedia harms
bleepingcomputer.com
Meta has reached a proposed settlement worth up to approximately $18 billion with a bipartisan coalition of 52 attorneys generals over allegations that Facebook and Instagram were deliberately designed to encourage compulsive use by children and teenagers.
French Top Court Gets It Right, Strikes Down #SocialMediaBan For Youths
eff.org
In a welcome win for free expression, France’s top court has struck down the country’s legislation that banned social media use for people under 15 years old, which had been scheduled to take effect in January 2027.
Aw, It’s Baby’s First #AI #Surveillance System
https://www.nytimes.com/2026/08/02/business/smart-baby-monitors-nanit-owlet.html
#Microsoft tests new #privacy controls for #Windows11 desktop apps
bleepingcomputer.com
Microsoft has begun testing new privacy controls that will let Windows 11 users choose which desktop applications can access their camera, microphone, and precise location.
Is the #ChatGPT #iMessage a helpful assistant or a #privacy backdoor?
proton.me
ChatGPT's iMessage plugin feeds your end-to-end encrypted texts into an AI pipeline, opens a privacy backdoor, and grants system permissions.
#NewZealand PM introduces under-16 #SocialMedia and #AI companion ban
jurist.org
The New Zealand government announced on Monday that it has introduced a bill to ban social media for youth under 16. The law would require social media platforms and AI companions to verify users' age...
#ICE Wants the Country’s Voter Data
404media.co
Voting data is public by design, but ICE is looking for a federal contractor to help it handle voter registration and history files to find what it describes as fraud.
"Ring introduces better default encryption standards to address privacy concerns"
"Ring data still gets sent to the cloud, but it'll be deleted after being used to power smart home controls."
engadget.com
Ring data still gets sent to the cloud, but it'll be deleted after being used to power smart home controls.
techcrunch.com
X has sent cease-and-desist letters to Nitter, the open source project behind privacy-friendly X front ends, demanding its instances and code repository be taken down over alleged scraping.
arstechnica.com
Privilege escalation attack grants "full control" and freedom from Meta's servers/apps.
bleepingcomputer.com
Healthcare and services provider Nutex is investigating a data breach incident where an unauthorized third party exfiltrated information from company servers.
It's OK to Take a Break from Thinking About Digital #Privacy
https://theprivacydad.com/its-ok-to-take-a-break-from-thinking-about-digital-privacy/
theprivacydad.com
Taking a break from digital privacy news, online engagement in discussion groups and testing new privacy tools can be a positive, healthy experience.
The County Prosecutors Who Became #ICE Informants
https://www.wired.com/story/the-county-prosecutors-who-became-ice-informants/
wired.com
Illinois prosecutors shared defendants’ personal data with federal immigration agents without criminal warrants, public disclosure, or legislative oversight.
#GTA6 Leaker Now Charges $165K To Make Contact, Builds System Linking #Monero Payment To Private #Session
https://www.ibtimes.co.uk/cyberleek-gta6-leaks-contact-fee-1815962
ibtimes.co.uk
CyberLeek, behind GTA 6 leaks, charges $165,000 to open communication via Monero payment, offering advertising and custom content opportunities. The fee initiates contact, not a purchase.
Ads and tracking infiltrated TVs. Now they’re coming for monitors.
arstechnica.com
Monitor vendors are playing with fire.
#Apple Won't Change #HideMy #Email Domain After Backlash
https://www.macrumors.com/2026/08/24/apple-hide-my-email-domain/
macrumors.com
Apple today said it is reversing its decision and will not change the email domain used for the iCloud+ Hide My Email feature. Emails sent using Hide My Email will continue to use the same icloud.com domain that Apple uses for standard iCloud emails. In June, Apple said it would unify the email domains used by Sign in with Apple and Hide My Email under a single private.icloud.com domain.
Norway to crack down on the use of smart glasses.
Norwegian officials have said the country is planning to regulate the use of smart glasses and similar devices, and was considering a ban on features that enable facial recognition in public spaces.
#Norway #SmartGlasses #Tech #Meta #Google #PervertGlasses #FacialRecognition #AI #Privacy
mediafaro.org
Norwegian officials have said the country is planning to regulate the use of smart glasses and similar devices, and was considering a ban on features that enable facial recognition in …
So #Proton for e-mail and other services like calendar and notes.... yes or no? 🤔 Any recommendations? Or horror stories?
Norway to crack down on the use of smart glasses.
Norwegian officials have said the country is planning to regulate the use of smart glasses and similar devices, and was considering a ban on features that enable facial recognition in public spaces.
#Norway #SmartGlasses #Tech #Meta #Google #PervertGlasses #FacialRecognition #AI #Privacy
mediafaro.org
Norwegian officials have said the country is planning to regulate the use of smart glasses and similar devices, and was considering a ban on features that enable facial recognition in …
So #Proton for e-mail and other services like calendar and notes.... yes or no? 🤔 Any recommendations? Or horror stories?
I’m Leaving WhatsApp
I’m leaving WhatsApp. It’s an integral part of the Meta / Facebook empire, which is currently being sued by 29 states for the harm that it causes to children. While WhatsApp claims end-to-end encryption, they retain your metadata, which forms part of your social graph which they then use as part of their marketing efforts….
https://dave.moskovitz.co.nz/2026/08/26/im-leaving-whatsapp/
#OpenSource #privacy #signal #facebook #meta
dave.moskovitz.co.nz
I'm leaving WhatsApp. It's an integral part of the Meta / Facebook empire, which is currently being sued by 29 states for the harm that it causes to children. While WhatsApp claims end-to-end encryption, they retain your metadata, which forms part of your social graph which they then use as part of their marketing efforts.
@davemosk
I *had* never used it ... until I (sort of) *had to* use it.
I'd been a very happy Signal user. But then joining a community (I strongly support) that entirely communicates (almost exclusively) via WhatsApp (and some public facing stuff via Facebook) had meant the end of it.
Gladly on my GrapheneOS phone I was able to use a throw-away SIM (foreign, from a recent EU trip) to register a WhatsApp account in an entirely isolated user profile.
It is painful to have to use WhatsApp (for that one thing) now. But it is also painful – depending on one's community – to *not* use it.
The big question is this: How can one (peacefully) motivate such a community to 'get off' of WhatsApp/Facebook without alienation and offending them? Certainly educated arguments don't work. :-(
Any strategies?
I’m Leaving WhatsApp
I’m leaving WhatsApp. It’s an integral part of the Meta / Facebook empire, which is currently being sued by 29 states for the harm that it causes to children. While WhatsApp claims end-to-end encryption, they retain your metadata, which forms part of your social graph which they then use as part of their marketing efforts….
https://dave.moskovitz.co.nz/2026/08/26/im-leaving-whatsapp/
#OpenSource #privacy #signal #facebook #meta
dave.moskovitz.co.nz
I'm leaving WhatsApp. It's an integral part of the Meta / Facebook empire, which is currently being sued by 29 states for the harm that it causes to children. While WhatsApp claims end-to-end encryption, they retain your metadata, which forms part of your social graph which they then use as part of their marketing efforts.
Inaudible sounds used to fingerprint browsers catch #AliExpress red-handed
arstechnica.com
Is the technique outdated? Yes. Is it still creepy? Also yes.
#Flock CEO calls for ‘compromise’ as #surveillance company faces growing backlash
techcrunch.com
Flock Safety faces a growing public outcry over concerns that its surveillance technology could be misused.
Digital legacy planning does not have to start with a huge account inventory.
In episode 447 of the Shared Security Podcast, Scott Wright recommends one practical first step: set up legacy or emergency contacts on your most critical accounts so trusted access is possible if you die or become incapacitated.
Full episode: https://sharedsecurity.net/2026/08/24/what-happens-to-your-digital-life-when-you-die/
Watch on YouTube: https://youtu.be/4MRJOvlrsyc
Shared Security Podcast short: Set up legacy and emergency contacts now.
Identity of the week 😎
That's on Fauxx, available on @fdroidorg
Active persona Dana Davis 65+ - Retired Fashion, Beauty, Travel
American Who Wiped His Phone With 'Duress' Password During Border Search Gets Felony Charges
yro.slashdot.org
Federal prosecutors have charged activist Samuel Tunick with obstruction after he gave Customs and Border Protection officers a duress passcode that wiped his GrapheneOS-powered Pixel during a border search. "His prosecution is one of the earliest known instances of the federal authorities charging ...
#TikTok reaches $400M settlement over children’s #privacy lawsuit
https://techcrunch.com/2026/08/21/tiktok-reaches-400m-settlement-over-childrens-privacy-lawsuit/
techcrunch.com
Two years after the U.S. Department of Justice alleged that TikTok violated the Children’s Online Privacy Protection Act, it has reached a $400 million settlement.
#Motorola’s #GrapheneOS phones will launch in 2027 priced higher than Pixels
arstechnica.com
The private Android-based OS will expand beyond Pixels next year.
#EFF and Civil Society Groups Call on #Nottinghamshire #Police to Halt Live Face Recognition
eff.org
This week, EFF, along with Big Brother Watch, Defend Digital Me, Liberty, Open Rights Group, Race Equality First, Statewatch, and Stopwatch, wrote to Nottinghamshire Police Force in the UK raising concern about the proposed roll-out of live facial recognition technology (LFR), and called for its...
#PrivateEquity firm #Apollo confirms #DataBreach amid hacking wave targeting financial giants
techcrunch.com
The private equity giant confirms a breach, weeks after Google researchers said hackers were targeting financial companies.
arstechnica.com
Ars looks at Zuckoff, the latest free app detecting Meta AI glasses amid privacy backlash.
How desktop apps watch you: A network analysis of popular #Windows software
https://adguard.com/en/blog/how-desktop-apps-watch-you-research.html
adguard.com
We analyzed network traffic from popular Windows apps and found hidden tracking everywhere — from music players to PDF readers. Here is what they send and how to stop it.
@PrivacyDigest Don't forget to install the same proprietary spying apps from the same abusing companies, but with a different account. Surely they won't track your device model and IP to add more data to the same unique personal profile. Much #privacy such #security
#Apple Threat Notification: How to protect against mercenary #spyware
https://tuta.com/blog/what-to-do-if-you-get-an-apple-threat-notification
tuta.com
If you have recently received an Apple Threat Notification on your iPhone, iPad, or Mac follow these steps to protect your device.
#SickKids #DataBreach exposes employee and job applicant info
bleepingcomputer.com
Toronto's Hospital for Sick Children (SickKids) says a cybersecurity incident exposed the personal information of some current and former employees and job applicants, stemming from a flaw in third-party software. Clinical systems and patient records were not affected. (264)
Set Up a Separate Work Profile on Your #Android Phone
It is possible to achieve your desired work-life balance on your #smartphone. Just set up separate #accounts using this built-in Android feature.
#privacy #security
https://www.wired.com/story/set-up-a-separate-work-profile-on-your-android-phone/
wired.com
It is possible to achieve your desired work-life balance on your smartphone. Just set up separate accounts using this built-in Android feature.
' #DarthVader' Wants #Flock in #SanDiego
https://www.404media.co/darth-vader-spoke-in-support-of-flock-at-san-diego-city-council-meeting/
404media.co
"The emperor is a fan of Flock, and we must continue utilizing Flock technologies so that we can follow and surveil the rebel scum," Vader said during the meeting.
Some Tech Companies Have Privately Pushed Back on #ICE Subpoenas. They Should All Do More.
eff.org
When companies receive these unlawful subpoenas, they should be clear with the public that they will not hand over the data unless a court compels them to do so.
#Subtlefakes: Slightly Altered Nonconsensual #AI Images Are Taking Over #X
https://www.404media.co/subtlefakes-slightly-altered-nonconsensual-ai-images-are-taking-over-x/
404media.co
Nonconsensual AI images are getting much harder to spot.
3 GOATed apps that mankind gave us for free. 🗿
VLC, Brave, and Linux three legendary open-source tools that have saved us from countless headaches.
What would you add to the list?
Meme showing three figurines representing VLC, Brave, and Linux: an orange-and-white traffic cone, an orange lion-head shield, and the Linux penguin. Text at the top reads, “3 of the GOATed applications that mankind have produced for free.”
#DigitalMinimalism: How to reduce #ScreenTime and protect your #privacy
proton.me
Practical digital minimalism tips to reduce screen time on iPhone and Android, plus a guide for kids and how to protect data from Big Tech.
Equity Crowdfunding Launched — You Can Get a Stake in #SimpleX Chat
https://simplex.chat/blog/20260819-simplex-chat-crowdfunding.html
simplex.chat
🚨 This Week In Privacy #67 will be live in 30 minutes, we'll be talking about how Microsoft’s Copilot had a one-click vulnerability that let attackers quietly exfiltrate data, no user interaction required beyond a single click!
👋 Come and watch and join the Q&A!
streamyard.com
Microsoft’s Copilot had a one-click vulnerability that let attackers quietly exfiltrate data, no user interaction required beyond a single click. Microsoft's AI push seems to be backfiring as security incidents continue to increase. Join us for This Week In Privacy #67!
Court rules: Emails must be end-to-end encrypted!
tuta.com
Even in 2026, email communication remains one of the most popular means of communication. Every day - whether for business or personal use - millions of emails are sent and received worldwide. Find out why even a court in Germany ruled that emails send without end-to-end encryption are not secure!
#PINE64 has some very bad news for #Linux hardware fans
nerds.xyz
PINE64 has some bad news for Linux hardware fans. DRAM and eMMC shortages are putting new production on hold, while PineNote and PineTab2 supplies could run out within months.
#OpenAI seeks to one-up #Anthropic with new customer #privacy protections
techcrunch.com
A competition is developing between OpenAI and Anthropic over who can provide the best privacy protections for enterprise customer data.
#Sakura Internet hack exposes data of up to 1.36 million accounts
bleepingcomputer.com
Japanese cloud and data center service provider Sakura Internet disclosed that hackers accessed its sales management system, where customer contract and membership information is stored.
Proton: We asked #Flock’s CEO about surveillance abuse. Here’s what he said.
proton.me
Flock's surveillance cameras track drivers across the US. We asked CEO Garrett Langley about abuse, oversight, and who's really in control.
In Turkmenistan, the Cybersecurity Directorate continues to block the internet.
A new report from Turkmen.news brings an update on the degradation of connectivity across the country.
"Members of the Cabinet of Ministers, who since August 1 have officially been on vacation and are resting at Awaza, have access to unrestricted internet -- the kind usually available to foreign delegations."
Full article (in Russian):
https://turkmen.news/2026/08/17/kiberterrorizm-za-byudzhetnyy-schyot-s-konca-iyulya-v-turkmenistane-usililis-blokirovki-i-degradaciya-interneta/
turkmen.news
Сотрудники Управления кибербезопасности Туркменистана и разработчики нацфайрвола за 01.07-15.08 совершили 100+ актов блокировки интернета.
⚠️ PSA - Hello, Tor relay operator.
If you're running an old Tor relay or bridge on the 0.4.8.x series, please upgrade to 0.4.9.x as soon as possible.
Starting in September, the 0.4.8.x series will be dropped from the Tor network. Relays and bridges still on it will stop working.
Announcement: https://blog.torproject.org/sunsetting-tor-048/
Check whether your relay is affected:
https://metrics.torproject.org/rs.html#search/running:true%20version:0.4.8%20
metrics.torproject.org
⚠️ PSA - Hello, Tor relay operator.
If you're running an old Tor relay or bridge on the 0.4.8.x series, please upgrade to 0.4.9.x as soon as possible.
Starting in September, the 0.4.8.x series will be dropped from the Tor network. Relays and bridges still on it will stop working.
Announcement: https://blog.torproject.org/sunsetting-tor-048/
Check whether your relay is affected:
https://metrics.torproject.org/rs.html#search/running:true%20version:0.4.8%20
metrics.torproject.org
⚠️ PSA - Hello, Tor relay operator.
If you're running an old Tor relay or bridge on the 0.4.8.x series, please upgrade to 0.4.9.x as soon as possible.
Starting in September, the 0.4.8.x series will be dropped from the Tor network. Relays and bridges still on it will stop working.
Announcement: https://blog.torproject.org/sunsetting-tor-048/
Check whether your relay is affected:
https://metrics.torproject.org/rs.html#search/running:true%20version:0.4.8%20
metrics.torproject.org
#Edge is phasing out the extension platform ad blockers relied on. What happens next?
https://adguard.com/en/blog/edge-phasing-out-mv2-ad-blockers.html
adguard.com
Microsoft Edge is finally preparing to say goodbye to Manifest V2, the extension platform behind many long-standing browser tools, including some of the most powerful ad blockers
Zero Knowledge Proofs Aren’t #AgeVerification Silver Bullets
https://www.eff.org/deeplinks/2026/08/zkps-arent-age-verification-silver-bullets
eff.org
Age verification (laws and regulations requiring platforms and websites to assure or estimate that a user seeking to use an online service is of a certain age) is everywhere. At the time of writing, about half the states in the US have some internet age verification law in place, and dangerous...
#CareCloud confirms 3.7M patients had their #medical records stolen in #DataBreach
techcrunch.com
The cyberattack at CareCloud resulted in one of the largest reported data breaches in the U.S. healthcare industry this year.
Reverse-Lookup Service Exposed Millions of Photos of People’s Faces
https://www.wired.com/story/reverse-lookup-service-exposed-millions-of-photos-of-peoples-faces/
wired.com
The people-search tool ClarityCheck says its reverse image search service is “private and secure”—but it left a database containing more than 9 million image files exposed.
#Flock Has a Powerful New #AI Tool for #Police. We Got Its Code
wired.com
Flock’s surveillance cameras have already sparked outrage. WIRED reconstructed its next-generation AI system, already in use by some police, to confirm it goes much further than tracking license plates.
#Google is buying all of #Spirit Airlines’ data to feed its #AI models
https://www.cnn.com/2026/08/18/business/google-spirit-airlines-data
cnn.com
Did you ever fly on Spirit Airlines? Or work there? Or send an email to someone who worked there? Then your information will soon be feeding Google’s artificial intelligence model.
techcrunch.com
A new feature added to Comcast's newest routers can detect if there is motion inside your home without needing traditional motion sensors.
In Turkmenistan, the Cybersecurity Directorate continues to block the internet.
A new report from Turkmen.news brings an update on the degradation of connectivity across the country.
"Members of the Cabinet of Ministers, who since August 1 have officially been on vacation and are resting at Awaza, have access to unrestricted internet -- the kind usually available to foreign delegations."
Full article (in Russian):
https://turkmen.news/2026/08/17/kiberterrorizm-za-byudzhetnyy-schyot-s-konca-iyulya-v-turkmenistane-usililis-blokirovki-i-degradaciya-interneta/
turkmen.news
Сотрудники Управления кибербезопасности Туркменистана и разработчики нацфайрвола за 01.07-15.08 совершили 100+ актов блокировки интернета.
AliExpress webpage keeping multipoint Bluetooth headphones active with WebAudio fingerprinting
https://blog.laserphile.com/2026/08/aliexpress-webpage-keeping-multipoint.html
blog.laserphile.com
Recently I ran into a strange problem with my Bluetooth headphones. They support multipoint Bluetooth audio, so they can be connected to my ...
｢ Orion is a privacy-focused browser made by Kagi, the company that also created the paid Kagi Search engine. Instead of using Chromium like most browsers, Orion is built on WebKit, the engine behind Apple’s Safari ｣
https://linuxiac.com/orion-browser-for-linux-officially-enters-beta/
linuxiac.com
Orion Browser has officially moved its Linux version into beta, with Flatpak builds now available for both x86_64 and ARM64 systems.
A billion searches a year, now built in: #Startpage comes to #Firefox
blog.mozilla.org
Firefox users were choosing Startpage long before today — to the tune of more than a billion searches a year, every one of them required some assembly: a
#Meta Ran Ads for an App That Promised to #Nudify Female Politicians
https://www.wired.com/story/meta-ran-ads-for-an-app-promising-to-nudify-female-politicians/
wired.com
One advertisement featured a pornographic video with a deepfake closely resembling a prominent US politician. Apple removed the app from the App Store after an inquiry from WIRED.
The National Park Service Is Using #Flock. Rangers Are Pissed
https://www.404media.co/the-national-park-service-is-using-flock-rangers-are-pissed/
404media.co
“I fear for the day when a visitor's National Park experience is interrupted by being pulled over and held at gunpoint because a license plate reader misread their plate.”
#Fairphone is launching its latest repairable phone in the US too
https://techcrunch.com/2026/08/18/fairphone-is-launching-its-latest-repairable-phone-in-the-us-too/
techcrunch.com
The Fairphone 6+ is a midrange Android offering, but given the increasing prices of consumer gadgets amid the ongoing component shortages, a repairable device that can be made to last for years may prove a good proposition.
#Sainsbury’s store pauses #AI scanning after false shoplifting accusation
theguardian.com
Supermarket chain says ‘human error’, not its Facewatch technology, to blame for ejecting a customer
Can #AI Coexist With #Privacy? #Proton’s Andy Yen Says It Will Have To
https://www.wired.com/story/the-big-interview-podcast-andy-yen-proton/
wired.com
Proton’s CEO is a champion of encryption for everyone. So why is he going all in on un-encryptable AI?
#AppleWallet Driver's License Feature to Launch in Four More U.S. States
https://www.macrumors.com/2026/08/17/apple-wallet-ids-expanding-to-four-more-states/
macrumors.com
In select U.S. states, residents can add their driver's license or state ID to the Apple Wallet app on the iPhone and Apple Watch, and then use it to display proof of identity or age at select airports and businesses, and in select apps. According to a new report and evidence within Apple's code, the feature is set to expand to four more states. A few days ago, North Carolina's DMV announced that it plans to launch a mobile ID program later this year.
As #Wisconsin cities flee #Flock, its shared camera network loses value
arstechnica.com
Network effect" can run in reverse.
techcrunch.com
Cybersecurity experts who investigate spyware attacks say the number of people who received a recent threat notification from Apple is unusually high.
Hacker claims 3.6 million #Azure account records stolen from major companies
#cybersecurity #privacy #DataBreach #McDonalds #TheGap #Vodafone #Tata #HCL #IHG #Kyndryl
bleepingcomputer.com
A threat actor is selling employee databases allegedly stolen from the Microsoft Azure infrastructure of multiple Fortune 500 companies after gaining access using compromised credentials.
#PokémonCenter #DataBreach exposes customer info, cancels some orders
bleepingcomputer.com
Pokémon Center is notifying customers in the United Kingdom and Germany that it suffered a third-party data breach after hackers stole customer personal and order information from third-party logistics provider CEVA Logistics.
#Tor - Funding internet freedom together: results from our first participatory funding round
https://blog.torproject.org/funding-internet-freedom-together/
blog.torproject.org
The Tor Project's first participatory funding campaign raised more than $200,000 for internet freedom projects and taught us valuable lessons about community support, project visibility, and sustaining internet freedom infrastructure.
#Crypto hardware wallet owners face fresh security risks after recent spate of personal data thefts
techcrunch.com
The hacks at shipping companies used to mail out hardware wallets puts crypto owners at greater risk of real-world attacks.
#Proton’s #AIPaperTrail reveals how much #ChatGPT and #Claude know about users
cyberinsider.com
Proton’s AI Paper Trail analyzes ChatGPT and Claude exports to show users what personal information their AI conversations may reveal.
KOMO has a poll about how concerned people are that surveillance camera footage can be accessed by ICE, CBP, DHS, etc and used to target immigrants, LGBTQIA2S+ people, protesters, and other vulnerable communities.
I'm highly concerned ... if you are too, let 'em know!
komonews.com
Gunfire erupted in Seattle’s Pioneer Square neighborhood early Sunday after a fight outside a bar spilled into the street near 1st Ave. and King Street, leaving
French #tax authority #DataBreach affects 678,000 individuals
bleepingcomputer.com
The French Ministry of the Economy and Finance has disclosed a data breach after an attacker accessed the General Directorate of Public Finances (DGFiP) systems and stole data belonging to 678,000 individuals.
Bipartisan 'Uprising' Against #Flock Cameras: a Larger Fight Against #BigTech and #Surveillance?
yro.slashdot.org
Politico notes that over 20 local jurisdictions in America "either stopped using Flock cameras or began the process of doing so in July, according to a tracker maintained by DeFlock, an activist group that has been mapping the company. It's the highest amount in a single month since they began track...
#SafePal #DataBreach impacts 39,798 customers, stolen info for sale
bleepingcomputer.com
Cryptocurrency hardware wallet provider SafePal is warning of a data breach affecting about 39,798 customers after a flaw was exploited to steal customer order information, and a threat actor is now claiming to be selling the stolen data.
Despite 'New' Updates, #Flock's Creepy Cameras Remain Major Civil Liberties Threat
aclu.org
ACLU responds to surveillance company Flock's announcement of changes to license plate reader system.
bleepingcomputer.com
Multiple distributed denial-of-service (DDoS) attacks targeted the Threema secure messaging service earlier this week, causing severe disruptions to communications.
Ordinary #WiFi can now identify you with near-perfect accuracy
https://www.sciencedaily.com/releases/2026/08/260811052857.htm
sciencedaily.com
Ordinary WiFi networks could quietly become powerful surveillance tools, allowing people to be identified without cameras, special sensors, or even carrying a connected device. Researchers showed that unencrypted signals routinely exchanged between WiFi devices and routers can be used to create radio-based images of people and recognize them within seconds. In tests involving 197 participants, the system identified individuals with nearly 100% accuracy, even from different angles and regardless of how they walked.
#Microsoft #Edge is about to lose #uBlock Origin, too
https://www.pcworld.com/article/3209789/microsoft-edge-is-about-to-lose-ublock-origin-too.html
pcworld.com
The Microsoft Edge browser is moving away from the Manifest V2 browser extensions foundation, which will essentially end support for the excellent uBlock Origin adblocker.
Woman claims her stepfather used #Grok to transform childhood photo into explicit imagery
techcrunch.com
The woman claimed that AI tools are "taking everyday life and turning it into child sexual abuse."
New York City Lawmakers Push to ‘Ban the Scan’ at #MSG
https://www.wired.com/story/new-york-city-lawmakers-push-to-ban-the-scan-at-msg/
wired.com
At a press conference outside Madison Square Garden, politicians, musicians, and privacy advocates argued for tighter restrictions on how public venues deploy biometric surveillance.
#Firefox for #iOS now has a built-in #AdBlocker
https://discuss.privacyguides.net/t/firefox-for-ios-now-has-a-built-in-ad-blocker/39902
discuss.privacyguides.net
Mozilla is rolling out an optional, EasyList-based ad blocker for Firefox on iPhone/iPad. Gradual rollout, so not everyone has it yet and it doesn’t touch search engine ads.
techcrunch.com
The Administrative Office of the U.S. Courts told TechCrunch that it will start disclosing how many times judges authorized the use of spyware to wiretap suspected criminals.
#Meta Patents #AI Glasses to Use #FacialRecognition to Identify People, Make Highlight Reels of Your Dinner Party
#privacy #FRT #PervertGlasses #SmartGlasses #IoT #Oakley #RayBan
404media.co
A new Meta patent published Thursday says a system, like its AI glasses, would use facial recognition to identify people, current a series of video clips, then provide you with a highlight reel of your night.
#RingCentral #DataBreach exposed info of 1.6 million accounts
bleepingcomputer.com
The ShinyHunters extortion group stole personal information from 1.6 million RingCentral accounts after hacking the company in July, according to the data breach notification service Have I Been Pwned.
techcrunch.com
Apple now sends out push notifications to iPhone lock screens when the company identifies government spyware targeting someone's devices.
bleepingcomputer.com
An Akira ransomware affiliate disabled the endpoint detection and response (EDR) solution on a compromised system by restarting the machine into Safe Mode with Networking.
techcrunch.com
"If this was opt-in, nobody would opt in," Twitch CPO Mike Minton said on a livestream responding to user feedback. "That's honestly the answer."
techcrunch.com
The surveillance company announced it's making a tool called "Audit Assistance" mandatory for all customers, claiming it's already helped catch abuse. But the company has yet to explain how the tool works in detail, raising questions about its effectiveness.
#Germany plans to give intelligence services sweeping new powers
https://www.euractiv.com/news/germany-plans-to-give-intelligence-services-sweeping-new-powers/
#Brave improves protections against GPU fingerprinting
https://brave.com/privacy-updates/38-webgl-webgpu-fingerprinting-protections/
brave.com
Starting in version 1.93, Brave is rolling out new protections against GPU and graphics-driver fingerprinting, de-identifying WebGL vendor and renderer strings and adding noise to the list of supported extensions.
#Trezor discloses #DataBreach affecting nearly 14,000 customers
bleepingcomputer.com
Hardware wallet manufacturer Trezor disclosed a data breach affecting nearly 14,000 of its customers after ShipMonk, its shipping and logistics provider, was hacked
🚨 This Week In Privacy #66 will be live in 30 minutes, we'll be talking about the new security upgrades on the Pixel 11 and whether it will support custom operating systems like GrapheneOS.
👋 Come and watch and join the Q&A!
streamyard.com
Google has announced it's new chip the Tensor G6 which brings serious security upgrades to the new Pixel 11 devices, is it a good idea to pre-order or should you hold off? Join us for This Week In Privacy #66
#CBP Workers Allegedly Used Government Databases to Spy on Exes, Crushes, and Colleagues
wired.com
Records obtained by WIRED detail hundreds of allegations of Customs and Border Protection workers misusing internal tools to look up romantic interests and track colleagues’ cell phones.
How to improve your #Google #privacy settings and why you should
proton.me
A step-by-step guide to Google privacy settings on Google Account, Android, and Chrome – and where they have fallen short, cited in lawsuits.
#BigTech Wants to Harvest Your Thoughts
https://www.wired.com/story/book-excerpt-the-vanishing-earth-james-crawford-brain-mining/
wired.com
Silicon Valley companies are already working on neurotechnology products that track your brain activity. The next privacy frontier might be the things you only think.
#UberFreight reportedly investigating after hacking group claims #DataBreach
techcrunch.com
An extortion gang known for targeting transportation companies and private equity firms has taken credit for a breach at Uber Freight.
Researchers Show How #Meta's ' #PervertGlasses ' Are Used to Harass Women
https://www.404media.co/meta-ray-ban-smart-glasses-pov-instagram-pickup-artists/
404media.co
A new study shows how pickup artist influencers use smart glasses to create content, and the connection between covert recording and harm.
The Government is Monitoring Anti- #Flock #TikTok and #Instagram Accounts
https://www.404media.co/the-government-is-monitoring-anti-flock-tiktok-and-instagram-accounts/
404media.co
Documents from law enforcement spy centers show the government is warning cops of "extensive and ongoing chatter on social media" about methods to "physically destroy Flock LPR cameras."
Join our Flock 101 information session at the Westchester Regional Library!
We will be hosting an event and Q&A all about Flock Safety, automated license plate readers, and the mass surveillance threat they pose.
Date: Tuesday, August 18
Time: 6:30 PM
https://www.miamitech.club/join-us-for-our-in-person-flock-101-presentation/
miamitech.club
We'll talk about Flock Safety, automated license plate readers, and mass surveillance in Miami.
Join our Flock 101 information session at the Westchester Regional Library!
We will be hosting an event and Q&A all about Flock Safety, automated license plate readers, and the mass surveillance threat they pose.
Date: Tuesday, August 18
Time: 6:30 PM
https://www.miamitech.club/join-us-for-our-in-person-flock-101-presentation/
miamitech.club
We'll talk about Flock Safety, automated license plate readers, and mass surveillance in Miami.
This Tool Unmasks the Shadowy World of Ads that Track Your Location
https://www.404media.co/this-tool-unmasks-the-shadowy-world-of-ads-that-track-your-location/
404media.co
It's usually very difficult to investigate the advertising industry. A new tool called DecryptAds aims to make it much easier with a massive dataset anyone can query.
The Play That Taught #Garissa Its Rights
https://privacyinternational.org/long-read/5852/play-taught-garissa-its-rights
privacyinternational.org
In Garissa Town, Kenya, on a warm evening in late October, a crowd gathered not for a rally or a court hearing, but for a play. Paralegals took the stage alongside community members, performing in Somali, Swahili and English.
#Linux desktop use surged to 22% on one workday, #Cloudflare data shows
https://www.zdnet.com/article/linux-desktop-use-surged-on-one-workday-cloudflare-data-shows/
zdnet.com
The Linux desktop's popularity is growing fast, and there are a few reasons why.
FYI: They've replaced the "almost nobody opts in" quip located on: https://tiago.zip/almanac
original text: "because almost nobody opts in, and a snapshot of the few hundred people who did isn't useful for anything."
with: "if you don't know about it you can't opt in, and a snapshot of the few hundred people who did isn't useful for anything."
That being said, we don't condone any sort of mass data collection especially without consent.
This is a #Privacy nightmare.
#FBI says cybercriminals are hacking into victims’ online accounts to steal their intimate pictures
techcrunch.com
In a new alert, the FBI said cybercriminals are targeting adults and minors in an attempt to steal their personal and intimate pictures in extortion campaigns.
#Signal: Introducing Automatic Key Verification
signal.org
Signal now offers a feature called “automatic key verification” which complements the existing safety number system. Signal is always end-to-end encrypted, and automatic key verification provides an additional, streamlined way to confirm that there’s no unexpected party between you and the other ...
A really interesting and practical project from the #Guardian Project called #ButterBox is worth knowing about.
ButterBox is a portable, fully offline device (usually running on a Raspberry Pi). When you turn it on, it creates its own local Wi-Fi network. Anyone nearby can connect and access a set of tools without any internet connection:
• An offline app store (based on F-Droid)
• File, video, book and educational content sharing
• And most importantly — secure encrypted chat
What makes this project especially powerful is its deep integration with #deltachat The ButterBox team uses the MadMail server to run a local Chatmail Relay inside the box.
Users can create an offline account with just a single QR scan or one tap and immediately start using fully end-to-end encrypted messaging. Even when there’s no internet at all, messages, groups and files can be exchanged securely between people.
This is where DeltaChat really shines: decentralized, no central servers, real encryption, and designed for difficult conditions.
Combined with ButterBox, it becomes a genuine tool for secure communication during internet shutdowns, in remote areas, or in crisis situations.
It’s a pity that this project still isn’t widely known or deployed in Iran. The good news is that it’s completely open source and can be set up with a regular Raspberry Pi and an SD card. Pre-built images are also available, which makes the process even easier.
For anyone interested in privacy, offline communication, and tools that keep working when the internet goes down, ButterBox is one of the most valuable projects around right now.
Official site:
https://likebutter.app
@thenewoil @protonprivacy Good stuff, but I really can't find a #privacy friendly streaming stick.
I wanted to try #raspberrypi with #kodi , but family wise, it is unusable, particularly for elders and disabled members 😔
#appletv might be to "less worst" choice, combined with privacy apps, a good #DNS , ... But unfortunately no #VPN (which would be detected by #streaming services).
Ideas and recommendations welcome ❤️
A really interesting and practical project from the #Guardian Project called #ButterBox is worth knowing about.
ButterBox is a portable, fully offline device (usually running on a Raspberry Pi). When you turn it on, it creates its own local Wi-Fi network. Anyone nearby can connect and access a set of tools without any internet connection:
• An offline app store (based on F-Droid)
• File, video, book and educational content sharing
• And most importantly — secure encrypted chat
What makes this project especially powerful is its deep integration with #deltachat The ButterBox team uses the MadMail server to run a local Chatmail Relay inside the box.
Users can create an offline account with just a single QR scan or one tap and immediately start using fully end-to-end encrypted messaging. Even when there’s no internet at all, messages, groups and files can be exchanged securely between people.
This is where DeltaChat really shines: decentralized, no central servers, real encryption, and designed for difficult conditions.
Combined with ButterBox, it becomes a genuine tool for secure communication during internet shutdowns, in remote areas, or in crisis situations.
It’s a pity that this project still isn’t widely known or deployed in Iran. The good news is that it’s completely open source and can be set up with a regular Raspberry Pi and an SD card. Pre-built images are also available, which makes the process even easier.
For anyone interested in privacy, offline communication, and tools that keep working when the internet goes down, ButterBox is one of the most valuable projects around right now.
Official site:
https://likebutter.app
🛡️ Want to dive deeper?
We broke everything down in an easy to digest video, that goes into more detail about the topics in this Mastodon thread.
Check it out and share it around! ⬇️
6/6 🧵
youtube.com
If you go outside in America today, you've almost certainly been scanned by a Flock camera, maybe even hundreds of times. Your location, along with a timesta...
It’s time to take back our streets. ✊
Join the National Week of Action Against ALPRs from August 16–22, 2026.
Find local camera maps, organize city council actions, or download our activism toolkit to start your own group:
- Map & Campaign Info: https://noalprs.com
- Camera Tracker: https://deflock.org
- Activism Toolkit: https://privacyguides.org/activism
5/6 🧵
privacyguides.org
Privacy Guides' Activism section contains tools to support the community in its privacy advocacy and activism effort, both for individuals and organizations.
🔍 Flock says that the data is secured and restricted to specific police departments.
Independent researchers have demonstrated that Flock's video feeds are accessible publicly, highlighting how dangerous mass location databases can be when compromised.
Flock recently updated their Terms-of-service quietly removing guarantees that user data wouldn't be sold. 💰
3/6 🧵
⛔️ This isn't being used for local crime prevention, researchers have found thousands of instances of Flock data being accessed across state lines.
🚓 In multiple states local police granted federal agencies (like ICE) access to Flock data, often sharing the data without express permission from local city councils.
Agents have been told to be "as vague as permissible" on paperwork to bypass public records requests.
2/6 🧵
🚨 If you drive in America, you’re being tracked in a giant dragnet. 🚨
Surveillance company "Flock Safety" has quietly deployed over 100,000 automated license plate readers (ALPRs) across 10,000+ US communities.
These aren't just capturing license plates, they're creating complete "vehicle fingerprints" including:
- Bumper stickers 🚗
- Luggage racks 🧳
- Dents & scratches 🔍
- Timestamped GPS locations 📍
1/6 🧵
#Wesco confirms security incident after #ExfilSquad claims data theft
bleepingcomputer.com
Global supply chain and distribution giant Wesco has confirmed in a statement for BleepingComputer that it is investigating a cybersecurity incident.
Lack of transparency and national guidelines mark the expansion of #FacialRecognition in Brazilian #education
internetlab.org.br
New InternetLab report analyzes the impacts of the spread of artificial intelligence, particularly facial recognition technologies, in the public education system
#Addy: Introducing Duo and Family plans
addy.io
Share full Pro with people you trust. Duo covers 2 members and Family covers 5, with one subscription, independent accounts, and a lower cost than buying Pro separately.
#IVPN: A security incident on our #Bitcoin payment server
https://www.ivpn.net/blog/security-incident-bitcoin-payment-server/
#VPN #BTCPay #privacy #cybersecurity #Lightning #BitcoinLightning #BTC
ivpn.net
Summary: on 7 August a critical vulnerability was disclosed in BTCPay Server, the open-source software we self-host to accept Bitcoin payments. It was being exploited before disclosure, and we were among the merchants hit: an attacker extracted our Lightning node credentials and transferred out our operating funds.
#ICE to Pay #LexisNexis Millions for Data to Feed to #Palantir
https://www.404media.co/ice-to-pay-lexisnexis-millions-for-data-to-feed-to-palantir/
404media.co
LexisNexis sells a massive amount of data to law enforcement, including ICE. New records indicate ICE wants to feed that data into a Palantir system.
The Mayor Who Said 'No' When #Flock Came to Town
https://www.404media.co/the-mayor-who-said-no-when-flock-came-to-town/
404media.co
“I guess all crime could be eliminated if you put cameras everywhere, surveillance everywhere, and had drones patrolling the skies [...] but what life are we living then?”
A #DataBreach at shipping giant #Ceva #Logistics is rippling across banks, retailers, #Steam gamers, and beyond
techcrunch.com
Companies that rely on Ceva Logistics for shipping their physical goods to customers say their personal data was taken during a recent cyberattack.
Member of #TheCom sent to prison for blackmail, sextortion
bleepingcomputer.com
A member of "The Com," a loose-knit online cybercrime collective that targets children and teenagers, has been sentenced to two years in prison for blackmail and sextortion offenses against nearly 120 victims worldwide.
#LexisNexis shuts down services after suspicious activity on servers
#Diligence #Metabase #Newsdesk #privacy #DataBroker #cybersecurity
bleepingcomputer.com
LexisNexis took its Diligence, Metabase API, and Newsdesk services offline as part of its response to unusual activity on servers hosted and managed by an unnamed third-party vendor.
#Valve notifies #Steam hardware customers of a #DataBreach
bleepingcomputer.com
Video game publisher and digital distribution giant Valve is notifying Steam hardware customers in Europe that hackers stole their data after hacking its shipping partner, CEVA Logistics.
#Signal is working on registration without a phone number. But what form will it take?
https://aboutsignal.com/news/signal-is-working-on-registration-without-a-phone-number/
aboutsignal.com
Signal is working on a way to sign up without a phone number. The feature has not yet been officially confirmed, and it is not yet known whether it will be available to all users or in what form.
How Accurate Are #Flock's AI-Powered License-Reading Cameras?
yro.slashdot.org
Futurism reports: 404 Media revealed that a July 10 audit by the Los Angeles Police Department Office of the Inspector General caught the department's ALPR cameras generating 161 false stolen-vehicle alerts in just two months — each one ending with officers pulling over an innocent driver....
'Pervert glasses': Backlash against #Meta's #SmartGlasses grows
https://tech.yahoo.com/ai/meta-ai/articles/pervert-glasses-backlash-against-metas-100000746.html
tech.yahoo.com
From courtrooms to strip clubs, backlash is building against Meta's smart glasses.
#Littleton claims #Flock reactivated its cameras without notifying the town
lowellsun.com
Officials claim that five of Littleton’s Flock Safety cameras were switched back on by the company without informing the town after the town temporarily disabled the cameras earlier this year.
This ‘adversarial’ pattern can prevent #surveillance cameras from detecting you
techcrunch.com
A security researcher has designed an algorithm that can create computer-generated patterns capable of hiding people, faces, and vehicles from detection by surveillance cameras.
#Flock Camera Vandalism Continues Around America, While 100 Communities Reject ALPRs
yro.slashdot.org
Dozens of Flock cameras have been vandalized around Dallas Texas in the last six months, reports a local news station. In Utah, ABC News reports, a county sheriff's office even said Wednesday a Flock camera was even vandalized within days of its being installed. And in the Minnesota city of Winona...
yro.slashdot.org
In Georgia the Savannah Police Department "terminated four sworn officers and two civilian employees following an internal investigation into misuse of the department's Flock Safety License Plate Reader system," according to a local news report: All six cases are also under independent criminal inv...
Sensitive Info Goes Into ‘No Reply’ Emails Constantly. This Guy Sees It All
wired.com
Two security researchers bought cheap domains—including noreply.net and deleteduser.com—and set up email listening services. Hundreds of companies are sending them corporate secrets.
yro.slashdot.org
The police surrounded her car Thursday, "drew their guns, and told her to come out with her hands up," reports a local news station. The police thought they were pulling over a murder suspect, but "It turns out it was a mistake by another department with the Flock license plate reader technology." ...
#Signal: "More linked devices are on the table (and the #Android tablet)"
signal.org
The latest update for Signal Android introduces comprehensive support for linked devices. Now you can easily link another Android phone or Android tablet to your Signal account. Thanks to significant interface improvements to better support large devices, your messages will stay in sync across ev...
Unlimited Technology Systems breach impacts 3.8 million people
bleepingcomputer.com
Healthcare software company Unlimited Technology Systems reported that more than 3.8 million people were impacted by a data breach incident that occurred in October 2025.
This is neat. A handy demo of how you can be identified and tracked across the Internet without a single cookie ever being set in your browser.
I didn't set a cookie. https://kuber.studio/cookie/
kuber.studio
Everything this page knows about you, it learned in under two seconds. Without a cookie, a permission prompt, or a click.
As I keep saying, They™️ can & will track, fingerprint & ID you, no matter what you do, because that's how they make money.
fosstodon.org
This is neat. A handy demo of how you can be identified and tracked across the Internet without a single cookie ever being set in your browser. #privacy I didn't set a cookie. https://kuber.studio/cookie/
This is neat. A handy demo of how you can be identified and tracked across the Internet without a single cookie ever being set in your browser.
I didn't set a cookie. https://kuber.studio/cookie/
kuber.studio
Everything this page knows about you, it learned in under two seconds. Without a cookie, a permission prompt, or a click.
📡 BSSID Collection: How Banks Map Your Home WiFi
→ https://telegra.ph/BSSID-Collection-How-Banks-Map-Your-Home-WiFi-06-17
telegra.ph
BSSID Collection: How Banks Map Your Home WiFi. In 2024, a financial institution in the United Kingdom blocked the account of a legitimate customer who had traveled from London to Manchester for a weekend. The system flagged the transaction not because the card was stolen, but because the device's network signature indicated a location shift that did not match the user's historical profile. This incident highlights a critical shift in digital identity verification: the industry has moved beyond simple IP address…
Ad blocking keeps being treated as a preference, or as a small moral argument about whether a website gets paid. Here is why ad blockers will always stay relevant: the web's advertising machinery is also a security boundary, and that boundary keeps failing.
According to the article, Adform was compromised and began serving malicious ad code on 27 July. The nasty bit was not just tracking or a bad redirect: the code repeatedly swapped crypto wallet addresses in a victim's clipboard, so a pasted address could become the attacker's address instead.
The boring lesson is still the correct one. If third-party ad code can run in your browser, your threat model includes whoever managed to get into that ad pipeline today. The safer default is still to block the code before it gets a vote.
Screenshot of the ~this week in security~ article page showing the Adform ad-blocker headline, excerpt, and header image with repeated ERR_BLOCKED_BY_AD browser-console messages.
Ad blocking keeps being treated as a preference, or as a small moral argument about whether a website gets paid. Here is why ad blockers will always stay relevant: the web's advertising machinery is also a security boundary, and that boundary keeps failing.
According to the article, Adform was compromised and began serving malicious ad code on 27 July. The nasty bit was not just tracking or a bad redirect: the code repeatedly swapped crypto wallet addresses in a victim's clipboard, so a pasted address could become the attacker's address instead.
The boring lesson is still the correct one. If third-party ad code can run in your browser, your threat model includes whoever managed to get into that ad pipeline today. The safer default is still to block the code before it gets a vote.
Screenshot of the ~this week in security~ article page showing the Adform ad-blocker headline, excerpt, and header image with repeated ERR_BLOCKED_BY_AD browser-console messages.
Computer maker #Framework notifies ‘all customers’ of a #DataBreach
https://techcrunch.com/2026/08/07/computer-maker-framework-notifies-all-customers-of-a-data-breach/
techcrunch.com
Framework told "all" of its customers that hackers accessed their names, email addresses, phone numbers, and physical addresses in a data breach.
am I the only one annoyed by so frequent #GrapheneOS updates???
I am already pissed off one can not disable automatic download of updates, one can disable the updates app completely, but I would prefer to manually check for updates and review available update before downloading not to completely disable updates
then after applying updates it takes ages "optimizing apps" see this screenshot, only 8 optimized apps out of 35 and it has taken 19 minutes already and in the meantime the phone is very slow and overheated :(
#android #degoogled #degoogle #privacy #security #opensource
#Flock Pitched a Plan To Turn #Uber and #Lyft Drivers Into Roaming #Surveillance Vehicles
404media.co
A Flock presentation shows the company planned to use around 350,000 Uber, Lyft, and delivery drivers to collect license plate data for its surveillance system.
‘ #TowerDump ’ warrants ruled unconstitutional
🔴 A defense contractor is now selling technology that scans every electronic device in your car as you drive past a camera. It ties everything to your license plate. You cannot opt out.
It is called SignalTrace. Made by Leonardo, an Italian military contractor with existing U.S. Special Operations Command contracts. It sweeps your phone, smartwatch, Bluetooth headphones, your dog's RFID chip, tire pressure sensors, your car's infotainment system. Anything that broadcasts.
It bundles these into what Leonardo calls your "electronic fingerprint," timestamped and geotagged. Stored in an "Enterprise Operations Center for future queries and analysis."
Those are their words. Not mine.
You did not consent. You cannot opt out. Your devices broadcast by existing. In most places, this is perfectly legal.
If this sounds like something that will be abused: it already has been. Police have used existing license plate reader networks to stalk partners, verify school residency, run background checks, and monitor protests. At least 22 officers charged or resigned for ALPR stalking.
SignalTrace does not read your messages. It does not need to. It knows who you travel with, where you go, and when.
Sources: https://www.techdirt.com/2026/06/24/surveillance-tech-company-is-pitching-an-unholy-alpr-stingray-hybrid-to-law-enforcement/ and https://www.leonardocompany-us.com/lpr/elsag-signaltrace
leonardocompany-us.com
ELSAG SignalTrace is a groundbreaking electronic signal intelligence system for law enforcement, designed to identify suspect people or vehicles.
🚨 This Week In Privacy #65 will be live in 30 minutes, we'll be discussing how Apple's iCloud Private Relay is leaking your real IP address, and covering the latest privacy & security news.
👋 Come and watch and join the Q&A!
streamyard.com
Researchers have discovered a host of issue's with Apple's iCloud Private Relay, namely one that allowed websites to see a user's hidden IP address, Linux market-share has just surpassed 10% in North America and more! Join us for This Week In Privacy #65
This is neat. A handy demo of how you can be identified and tracked across the Internet without a single cookie ever being set in your browser.
I didn't set a cookie. https://kuber.studio/cookie/
kuber.studio
Everything this page knows about you, it learned in under two seconds. Without a cookie, a permission prompt, or a click.
techcrunch.com
Researchers linked the latest malicious activity to a Chinese company, after one of the spyware's operators placed an order with KFC using their real name and office address.
404media.co
Rather than get rid of ALPR cameras entirely, many cities and towns are switching to Axon, whose cameras can be mounted to an existing streetlamp, helping them blend into their surroundings.
Adversarial Clothing Designed to Fool #FacialRecognition Systems
schneier.com
There are many companies manufacturing adversarial clothing designed to confuse facial recognition systems. It’s a cool idea, but I worry that it’s mostly security theater: “Our patterns play with that chaos, confuse algorithms and make it way harder to pin you down,” he said. Bell, however, said “none of these products are tried and tested, and a lot of these surveillance technologies can deal with a little resistance … [but] even if the designs don’t necessarily work perfectly, fashion is also a visible sign of resistance. “This is consumers collectively coming together to make a visible statement.”...
#EU #AgeVerification Project Mandates Hardware-Bound Attestation
https://linuxiac.com/eu-age-verification-project-mandates-hardware-bound-attestation/
linuxiac.com
The EU’s age verification project confirms hardware-bound attestation is mandatory, raising concerns over Linux, custom ROMs, and open-source access.
#OpenAI’s Browser Could Be Hijacked to Spam Your #WhatsApp Contacts
https://www.wired.com/story/openais-browser-could-be-hijacked-to-spam-your-whatsapp-contacts/
wired.com
Researchers at security firm Zenity found more than a dozen flaws in AI browsers—and managed to get OpenAI’s Atlas to make an unauthorized Amazon purchase.
Canadian pleads guilty to #Snowflake cloud data-theft attacks
bleepingcomputer.com
A Canadian man pleaded guilty today to his role in accessing company accounts at cloud storage provider Snowflake and stealing data from at least 165 organizations in a scheme to extort millions of dollars from victims.
#DHS Wants Protesters’ #Signal Group Chats
https://www.wired.com/story/dhs-wants-protesters-signal-group-chats/
wired.com
A lawsuit accuses Homeland Security of violating protesters’ free-speech rights—but the agency is using it to try to get access to the plaintiffs’ encrypted communications.
From AI Forensics' investigation of Hugging Face's top image models:
- 73% of monitored requests were sexual in nature.
- Of those, 83% sought to undress or otherwise sexualize a person
- 95% targeted women
- 6.7% targeted a minor (if fulfilled, these requests would constitute CSAM).
- Only 3% of audited Spaces showed any evidence of output moderation.
#DHS Is Hiring Bounty Hunters to Find and Photograph Deported People’s Homes Abroad
wired.com
Homeland Security told immigrants that leaving the US would wipe out fines it claims they owe. Now it wants private investigators to find them in their home countries and collect.
#Proton seems to be working on its own web browser (article in Dutch)
https://tweakers.net/nieuws/250686/proton-lijkt-aan-eigen-webbrowser-te-werken.html
tweakers.net
#Apple's ‘ #PrivateRelay ’ Is Exposing Users’ Real IP Addresses
https://www.404media.co/apples-private-relay-is-exposing-users-real-ip-addresses/
404media.co
Researchers found a group of issues that mean Private Relay isn't actually protecting users' real IP addresses. 404 Media verified the issues do expose IP addresses.
U.S. Senate Vote: Four Internet Bills, One Wrong Direction
https://www.eff.org/deeplinks/2026/08/senate-vote-tomorrow-four-internet-bills-one-wrong-direction
#privacy #KOSA #SCREENAct #YouthAIPrivacyAct #CHATBOTAct #politics #AgeVerification
eff.org
The Senate Commerce Committee will vote this week on several censorious and privacy invasive bills: KOSA, the SCREEN Act, Youth AI Privacy Act, and CHATBOT Act. While we appreciate that the Committee is taking the time to look at these bills separately, it’s still impossible to ignore the message...
#WhatsApp is Testing #AgeVerification
https://www.privacyguides.org/news/2026/08/04/whatsapp-is-testing-age-verification/
privacyguides.org
The Tech Trace reports that a WhatsApp representative has confirmed the messenger is testing out new age verification on some user accounts to comply with a new law in India.
eff.org
SAN FRANCISCO – Some software development kits (SDKs) provided by advertising companies to help developers monetize their apps are automatically feeding users’ location data into systems that location data brokers use to track people, an Electronic Frontier Foundation (EFF) report found. EFF began...
"Every Laptop Should Steal This Privacy Display"
"Why should you need to fear nosy neighbors on a plane?"
https://gizmodo.com/every-laptop-should-steal-this-privacy-display-2000794938
gizmodo.com
Why should you need to fear nosy neighbors on a plane?
#Signal: More linked devices are on the table (and the #Android tablet)
signal.org
The latest update for Signal Android introduces comprehensive support for linked devices. Now you can easily link another Android phone or Android tablet to your Signal account. Thanks to significant interface improvements to better support large devices, your messages will stay in sync across ev...
The #SCREENAct is a Christian Nationalist Nightmare
https://www.404media.co/what-is-the-screen-act-age-verification-porn/
404media.co
Mike Lee's SCREEN Act, which heads to Senate Commerce Committee for markup on Wednesday, would expand age verification requirements to a nearly limitless scope of websites, and is supported by the architects of Project 2025.
404media.co
“DO NOT MENTION ALPR USAGE TO THE OCCUPANTS OF THE VEHICLE. DO NOT MENTION ALPR USAGE IN YOUR REPORT OR COMPLAINT."
The #SEC Bought #Airline Data to Monitor Flights Worldwide
https://www.404media.co/the-sec-bought-airline-data-to-monitor-flights-worldwide/
404media.co
The SEC bought access to worldwide airline ticketing records. Airlines including Delta, United, and American sold the data.
#Session Development Update - Pro Beta and Protocol v2
https://getsession.org/blog/session-development-update-pro-beta-protocol-v2
getsession.org
Session Pro Beta moves into release preparation with unified cross-platform testing and backend fixes, alongside early planning for an invite-only Session Protocol v2 alpha.
The Senate Should Reject #KOSA's #Privacy Risks
https://www.eff.org/deeplinks/2026/08/senate-should-reject-kosas-privacy-risks
eff.org
The Senate Commerce Committee is once again considering legislation that would dramatically expand age verification, and undermine privacy for everyone. Alongside the SCREEN Act, the CHATBOT Act, and the Youth AI Privacy Act, the Kids Online Safety Act (KOSA) would push companies to collect more...
#Apple says #MacBookNeo is pulling #schools away from #Windows and #Chromebooks
9to5mac.com
Apple's earnings call revealed big MacBook Neo wins in K-12, with entire districts ditching Windows and Chromebooks at scale.
The Youth #AI #Privacy Act’s Privacy Paradox
https://www.eff.org/deeplinks/2026/08/youth-ai-privacy-acts-privacy-paradox
eff.org
The Senate Commerce Committee is poised to consider the Youth AI Privacy Act, a bill that would require AI companies to create kids-only privacy rules and implement so-called “safe design features,” which would—like three other bills under consideration this week—require more data collection and...
techcrunch.com
Apple has appealed a new legal demand by the U.K. government, which critics say could threaten the privacy rights of users all over the world.
Come watch @yaelwrites 's talk for the Crypto & Privacy Village to learn more about actionable cybersecurity tips and understand their limitations!
Trust the Basics, But Know Their Limits: Where Standard Cybersecurity Advice Falls Short
When: Friday, August 7th at 1:00pm
Where: LVCC - L1 - Exhibit Hall West 3 - 1104 (Creator Stage 4)
https://defcon.org/html/defcon-34/dc-34-creator-talks.html#content_66912
#DEFCON #DEFCON34 #DEFCON2026 #LockdownSystems #Security #Privacy
3/4
defcon.org
#SnowflakeVolunteer, an #Android app to help people bypass #censorship
https://blog.torproject.org/snowflake-volunteer-standalone-app-to-help-people-bypass-censorship/
blog.torproject.org
There are many ways to help people bypass censorship with Snowflake–a browser extension, using Orbot or Tor Browser, website embedding etc. We set out to experiment with a new mechanism and test an Android app called Snowflake Volunteer for those willing to help people reach the Tor network and circumvent censorship from their mobile devices. It was built open-source by Bloco, an Android app studio from Portugal.
It's never too soon: Find out how to plan your digital afterlife
https://adguard.com/en/blog/techtok-15-plan-digital-afterlife.html
adguard.com
What happens to your social media after you die? Crypto assets? Email account? If we care about who receives our physical belongings after we die, why not care about digital ones?
#ExfilSquad hackers leak info of over 100,000 #UK #police officers, staff
bleepingcomputer.com
A cyberattack on the U.K.'s Police National Legal Database (PNLD) has compromised contact data of more than 100,000 police officers and other criminal justice professionals.
techcrunch.com
New security research offers a rare view inside residential proxy networks, which rely on apps that share a person's internet connection with someone else.
#ICE Collected Nearly 1 Million People’s #DNA Last Year—Including Young Children
wired.com
Internal documents show ICE's DNA collection has skyrocketed in the second Trump administration. Now hundreds of thousands of people never convicted of a crime are in an FBI criminal database forever.
#Apple engineer says he was fired after refusing to send customer device IDs to AT&T
runtimewire.com
A former Apple engineer alleges he was fired after refusing AT&T requests for device identifiers without customer releases. Apple denies wrongdoing.
How rogue officers turned a nationwide camera network into a tool for stalking
https://www.yahoo.com/news/us/articles/rogue-officers-turned-nationwide-camera-122127787.html
yahoo.com
The current state of the web assumes that the reader is an adversary to be trapped and monetized.
When a news website forces you through three dismissive actions just to read a headline, they are burning your cognitive budget before delivering any value. You are greeted by a cookie banner taking up the bottom 30% of your screen, a "Subscribe!" modal dead center, an autoplaying video pinned to the corner and a prompt begging to send you push notifications.
I wrote about the state of news websites. Would love to hear your thoughts✨🙏
https://thatshubham.com/blog/news-audit
#enshittification #darkpattern #web #technology #socialmedia #indieweb #ux #privacy
thatshubham.com
A look at modern news websites. How programmatic ad-tech, huge payloads and hostile architecture destroyed the reading experience.
@Ayzacoder: Attention if you have a Gmail account:
Google's AI now scans your emails and attachments, bank statements, tax files, medical letters, all of it. It turned on by default, and there's a class-action lawsuit over how.
Here are 5 moves to shut it off, the switch is hidden in two places:
CU photo of a smiling man in a suit and tie (Sundar Pichai) next to a large Google mail icon
#Linux Desktop Market Share Surpasses 10% in North America
https://linuxiac.com/linux-desktop-market-share-surpasses-10-in-north-america/
linuxiac.com
Statcounter reports Linux at 10.65% of desktop usage in North America, with Cloudflare data lending further support to the milestone.
#Linux Desktop Market Share Surpasses 10% in North America
https://linuxiac.com/linux-desktop-market-share-surpasses-10-in-north-america/
linuxiac.com
Statcounter reports Linux at 10.65% of desktop usage in North America, with Cloudflare data lending further support to the milestone.
I just discovered that when you want to share your location using the Signal's 'share your location' feature, it sends a link of..... Google Maps 🥴
I could not find a way to change this to an (open standard) geolocation link.
- did I overlook a setting?
If not:
- why is Signal revealing it's user location to Google?
- why would Signal promote Google Maps?
Share location via Signal
The #EU wanted to kill the #CookieBanner, but then #Google called.
https://tuta.com/blog/why-eu-member-states-and-google-want-to-keep-cookie-banner
tuta.com
The European Commission finally wants to remove the annoying cookie banner and replace it with an automated signal - but doing this would harm tech giants like Google! Now, EU Member States like Germany and France, and US tech giant Google are pushing to keep it.
@Ayzacoder: Attention if you have a Gmail account:
Google's AI now scans your emails and attachments, bank statements, tax files, medical letters, all of it. It turned on by default, and there's a class-action lawsuit over how.
Here are 5 moves to shut it off, the switch is hidden in two places:
CU photo of a smiling man in a suit and tie (Sundar Pichai) next to a large Google mail icon
From AI Forensics' investigation of Hugging Face's top image models:
- 73% of monitored requests were sexual in nature.
- Of those, 83% sought to undress or otherwise sexualize a person
- 95% targeted women
- 6.7% targeted a minor (if fulfilled, these requests would constitute CSAM).
- Only 3% of audited Spaces showed any evidence of output moderation.
#Amgen says cloud #DataBreach exposed patient #health, proprietary info
bleepingcomputer.com
Pharmaceutical company Amgen says it suffered a data breach after threat actors stole corporate data and patient information stored in multiple cloud systems operated by third-party service providers.
@Ayzacoder: Attention if you have a Gmail account:
Google's AI now scans your emails and attachments, bank statements, tax files, medical letters, all of it. It turned on by default, and there's a class-action lawsuit over how.
Here are 5 moves to shut it off, the switch is hidden in two places:
CU photo of a smiling man in a suit and tie (Sundar Pichai) next to a large Google mail icon
arstechnica.com
Someone in Cuba or Iran can keep installing APKs with no new restrictions, but devs will suffer.
Most Australian teens still on #SocialMedia three months after under-16 ban began, study finds
Amending #AB1709 Doesn’t Fix It: #California’s #SocialMediaBan Still Threatens Free Speech and #Privacy
eff.org
California lawmakers have amended A.B. 1709, but the core problem remains: the bill is still a ban on social media access for youth under 16, and it still threatens the privacy and First Amendment rights of all Californians.Proponents of the bill may argue that the recent amendments represent a...
The #SCREENAct Threatens #Privacy Far Beyond Adult Websites
https://www.eff.org/deeplinks/2026/07/screen-act-threatens-privacy-far-beyond-adult-websites
eff.org
The Senate Commerce Committee is set to consider S. 737, the SCREEN Act, a sweeping age-verification bill that would require online services to verify users’ ages before they can access any sexually explicit content. If this bill passes, it will force millions of adult internet users to give up...
The #CHATBOTAct Forces One Parenting Model On Every Family
https://www.eff.org/deeplinks/2026/07/chatbot-act-forces-one-parenting-model-every-family
eff.org
Artificial intelligence is rapidly changing education, and the way people search for information. Parents, teenagers, teachers, and schools are struggling with tough questions about when AI should, and should not, be used. It makes sense for Congress to hold hearings and examine how AI should be...
High school defends staying silent while boys made #AI nudes of 59 classmates
arstechnica.com
Gaps in laws may help Pennsylvania high school escape AI nudes scandal.
#SouthKorea fines #telco giant #KT $39 million for customer #DataBreach
bleepingcomputer.com
South Korea's Personal Information Protection Commission (PIPC) has fined telecommunications giant KT Corporation KRW 53.979 billion ($39 million) over data protection violations.
#Flock cameras are getting mobbed
https://edition.cnn.com/2026/07/30/us/flock-camera-vandalism-protests-cec
cnn.com
From coast to coast, Americans across the political spectrum have been taking official or vigilante action against the always-on, searchable camera network.
🚨 This Week In Privacy #64 will be live in 30 minutes, an activist has been charged with a felony for providing a "duress code" which wiped his GrapheneOS device, we'll be discussing the legal implications and the latest privacy & security news.
👋 Come and watch and join the Q&A!
streamyard.com
An activist has been charged with a felony for providing a "duress code" which wiped his GrapheneOS device, we'll be discussing the legal implications and the latest privacy & security news on This Week In Privacy #64!
#CareCloud begins to notify hundreds of thousands after hackers stole #medical records
techcrunch.com
The health tech data giant, which handles vast amounts of patients' medical data, said hackers struck one of its protected health data stores.
Catastrophic #MoD #DataBreach would not have happened if staff had been trained on #Excel
.png?trim=0,0,0,0&width=1200&height=800&crop=1200:800)
independent.co.uk
Blunder which exposed personal details of tens of thousands of Afghans was ‘forseeable failure’ covered up by secrecy for ‘too long’, MPs said
From AI Forensics' investigation of Hugging Face's top image models:
- 73% of monitored requests were sexual in nature.
- Of those, 83% sought to undress or otherwise sexualize a person
- 95% targeted women
- 6.7% targeted a minor (if fulfilled, these requests would constitute CSAM).
- Only 3% of audited Spaces showed any evidence of output moderation.
Are you aware that your personal data is extremely valuable? ‘ I have nothing to hide’ is a poor excuse for taking no action. Would you be fine with the mailman opening and reading your mail in advance and selling your data to third parties? Why do you think that’s okay online then? How well are you protected? Try this free Quick Scan to find out! Privacy is not a crime.
https://tally.so/r/xXLyWy
#privacy #degoogle #bigtech #privacymatters #eu #digitalsovereignty #cybersecurity
tally.so
Made with Tally, the simplest way to create forms.
#ShinyHunters claims #BrinksHome breach, threatens to leak stolen data
bleepingcomputer.com
Residential security company Brinks Home has disclosed that hackers breached some of its systems and are threatening to leak allegedly stolen data.
#FTC sues #Hims & #Hers for allegedly sharing patients’ #medical data with advertisers #Meta and #Snap
techcrunch.com
The U.S. federal consumer watchdog said Hims & Hers, which prescribes for sexual wellness and mental health conditions, used website trackers to share customers' information with advertisers.
The #Pokémon Company is turning to #FacialRecognition scans to help combat scalpers
pcgamer.com
A high price to pay for your chase card.
#HealthISAC warns of rising #ShinyHunters data theft attacks on #healthcare
bleepingcomputer.com
Health-ISAC, a cybersecurity information-sharing organization for the health sector, is warning healthcare and medical technology organizations of an observed increase in successful attacks by ShinyHunters.
privacyguides.org
The Treasury Inspector General for Tax Administration (TIGTA) found over 100 vulnerabilities in a third-party contractor the IRS was using to digitize tax documents.
#SanFrancisco: Don’t Fall for Industry Defense of #SurveillancePricing
https://www.eff.org/deeplinks/2026/07/san-francisco-dont-fall-industry-defense-surveillance-pricing
eff.org
The concept of “surveillance pricing” is just one part of a much larger problem and business model: corporations maximizing their profits by invading our privacy. The all-too-common business model is to systematically harvest, collate, and store as much of our personal data as possible, and then...
#eBay reaches $56M settlement with e-commerce newsletter writers it terrorized in 2019
techcrunch.com
Ina and David Steiner inspired the ire of high-level eBay executives after occasionally criticizing the company in their newsletter. In 2019, a plot was concocted to intimidate the couple into halting their negative coverage.
Electronic Frontier Foundation: Why Are Gay Bars Building Databases of Their Patrons?. “Recent reports have raised alarm about the use of PatronScan, an ID-checking and face-scanning system, at multiple LGBTQ+ bars in San Francisco’s Castro neighborhood. Much of the attention has focused on reports that the system photographs patrons as they enter venues and questions about whether those […]
https://rbfirehose.com/2026/07/29/electronic-frontier-foundation-why-are-gay-bars-building-databases-of-their-patrons/
rbfirehose.com
Electronic Frontier Foundation: Why Are Gay Bars Building Databases of Their Patrons?. “Recent reports have raised alarm about the use of PatronScan, an ID-checking and face-scanning system, …
Electronic Frontier Foundation: Why Are Gay Bars Building Databases of Their Patrons?. “Recent reports have raised alarm about the use of PatronScan, an ID-checking and face-scanning system, at multiple LGBTQ+ bars in San Francisco’s Castro neighborhood. Much of the attention has focused on reports that the system photographs patrons as they enter venues and questions about whether those […]
https://rbfirehose.com/2026/07/29/electronic-frontier-foundation-why-are-gay-bars-building-databases-of-their-patrons/rbfirehose.com
Electronic Frontier Foundation: Why Are Gay Bars Building Databases of Their Patrons?. “Recent reports have raised alarm about the use of PatronScan, an ID-checking and face-scanning system, …
#GrapheneOS Defends Data-Wiping Function That Blocked US #Border Search
https://www.pcmag.com/news/grapheneos-defends-data-wiping-function-that-blocked-us-border-search
‘The Government Hopes To Set a Precedent’: An Interview With the Man Charged for Allegedly Wiping His #GrapheneOS Phone
404media.co
The U.S. government has charged Samuel Tunick with allegedly typing in a passcode to wipe his phone before officers could search it. “I hope people understand that the charges against me are meant to intimidate people,” he said.
Why Are Gay Bars Building Databases of Their Patrons?
https://www.eff.org/deeplinks/2026/07/why-are-gay-bars-building-databases-their-patrons
eff.org
Recent reports have raised alarm about the use of PatronScan, an ID-checking and face-scanning system, at multiple LGBTQ+ bars in San Francisco’s Castro neighborhood. For venues serving vulnerable communities, the stakes of using this technology are high.
'I Would Never Do This To You:' Protesting #Flock, #Arizona Man Presents Plan to Surveil Government Officials
https://www.404media.co/casa-grande-arizona-flock-city-council/
404media.co
“They didn't understand it was satire in the beginning until the end,” Casa Grande, Arizona resident Jacob Petrosky told 404 Media. “They were not happy, they were very upset.”
"#Apple’s #iMessage Scanning Flagged a Video of My Friend's Dog as Nudity"
https://www.404media.co/apples-imessage-scanning-flagged-a-video-of-my-friends-dog-as-nudity/
404media.co
Apple’s Sensitive Content Warning is supposed to protect users from unwanted nude images. It accidentally blurred my friend’s dog video.
#Brazil gives parents #SocialMedia controls for their kids. Should the #US?
themarkup.org
California is leading on kids’ data privacy in the U.S. but still lags internationally.
Some Municipalities Are Replacing #Flock Cameras With #Axon, But Is There A Difference?
https://www.jalopnik.com/2215173/flock-cameras-replaced-by-axon-difference/
jalopnik.com
Is a switch to Axon actually a win for digital privacy? Examine why changing camera networks fails to reduce the overall scale of vehicle tracking.
#DataBreach at #medical billing firm #MCBS affects 1.26 million people
bleepingcomputer.com
Healthcare billing company Medical Computer Business Services (MCBS) has disclosed that a 2025 network breach exposed the sensitive information of more than 1.2 million people.
#HuggingFace Has a #Deepfake Nudes Problem
https://www.wired.com/story/hugging-face-has-a-nonconsensual-deepfakes-problem/
wired.com
Researchers tested top image editing models on Hugging Face and found they could easily create explicit deepfakes—and 1,000 image editing prompts show how people use the software.
Palantir tracks everyone. So we built a site that tracks Palantir. They've been watching us. Now we can watch them.
Contracts. Lawsuits. Executive pay. Global footprint. Lobbying activity. Media strategies. All in one place.
Preview of online dashboard displaying a variety of stats.
@sarahjamielewis somehow every software is currently changing into bloatware, spyware, trackingware, with "AI support", I hate that, luckily there are still small, manageable FOSS alternatives, but for how long?!
#bloatware #adware #spyware #tracking #ai #foss #floss #opensource #diday #didit #ux #uux #itsec #privacy
People think a lot about the output they get from AI tools and chatbots.
But they don't think enough about the input they give to AI tools and chatbots.
Your input is very likely collected, tagged, evaluated, shared, and reused. Every word, every image, every line of code, every data point you share with them, knowingly or unknowingly.
You're not using them.
They're using you.
People think a lot about the output they get from AI tools and chatbots.
But they don't think enough about the input they give to AI tools and chatbots.
Your input is very likely collected, tagged, evaluated, shared, and reused. Every word, every image, every line of code, every data point you share with them, knowingly or unknowingly.
You're not using them.
They're using you.
#Surveillance Cameras Can Now Be Retrofitted to Track Your Wireless Device Fingerprint
privacyguides.org
Flock-style license plate reader vendor Leonardo announced a new system called SignalTrace that can fingerprint your wireless devices while you drive by and track you around without needing to see your license plate.
5th Circuit blocks #Texas law requiring websites to filter “harmful” speech
arstechnica.com
Age verification is okay, but filtering is preempted by Section 230, judges find.
Tons of Peoples’ #Claude Chats and Creations are Exposed on #Google
https://www.404media.co/tons-of-peoples-claude-chats-and-creations-are-exposed-on-google/
404media.co
Claude users are creating public share links, but probably don't realize that means their chats are now ending up in Google searches where anyone can dig through them.
Inside the dystopian world of #Germany’s #FreeSpeech crackdown
#Apple’s #SmartGlasses are running late because they don’t want to stir a #privacy storm
digitaltrends.com
Apple’s smart glasses may not reach consumers until late 2027 as the company works out how to add cameras without compromising privacy.
#Garbage trucks may soon start spying on people—where it’s happening
msn.com
The hacker who humiliated #spyware makers and was never caught
https://techcrunch.com/2026/07/25/the-hacker-who-humiliated-spyware-makers-and-was-never-caught/
techcrunch.com
An awe-inspiring hacktivist who hacked two controversial government spyware makers may be the most prolific hacker to have never gotten caught. What do we know about Phineas Fisher?
You Can Now Verify Your #Facebook Account With a Video #Selfie
https://lifehacker.com/tech/you-can-now-verify-your-facebook-account-with-a-video-selfie
lifehacker.com
Facebook is adding a free verification feature that allows users to upload a selfie video and earn a white check mark on their profile.
arstechnica.com
We can quash the subpoenas, or you could withdraw the subpoenas,” judge told US.
Defend the open Internet 🌐
Digital ID checks behind the social media ban and beyond blow a hole in free expression and privacy.
VPN restrictions and encryption-busting device scanning are due to follow.
As a UK grassroots organisation, we need you to help fight for our human rights.
Donate ⬇️
https://action.openrightsgroup.org/build-our-grassroots-power-defend-open-internet
#StopKillingTheInternet #socialmediaban #vpn #encryption #e2ee #privacy #freeexpression #digitalrights #humanrights
action.openrightsgroup.org
Fight back with grassroots power Open Rights Group was founded by members of the public who decided the UK needed an organisation that would fight for their digital rights. Ever since, this grassroots support has been fundamental to who we are and how we win. ORG doesn’t accept money from the government or big tech. We need your support to help us build a solid grassroots base that will resist these latest attacks and save the open Internet. Every donation will make a real difference. £25 could help produce campaign materials for a local action.
US accuses American of allegedly wiping his phone using a ‘duress’ password during border search
techcrunch.com
A U.S. citizen has asked a court to throw out the government's claim that he gave over a passcode to border authorities that wiped his phone's data, opening up fresh questions about a person's constitutional rights at the U.S. border.
#ChickFilA #DataBreach affects more than 13,000 customers
bleepingcomputer.com
Chick-fil-A has confirmed that over 13,000 customers had their accounts breached in a wave of credential stuffing attacks targeting its website and mobile app between June 17 and June 19.
Man gets six years for hacking 750 women's #Snapchat accounts
bleepingcomputer.com
An Illinois man was sentenced on Tuesday to 76 months in prison and three years of supervised release for hacking the Snapchat accounts of over 750 women to steal nude photos.
#Meta's new #AI glasses let people secretly film and photograph you!
tuta.com
More and more videos surface online of women being filmed with smart glasses without their consent or even without them knowing. Find out more in this blog post!
Hundreds of Drone-as-First-Responder Programs Could Soon Be Launched Across the Country
eff.org
Police departments across the country are lining up to launch drone-as-first-responder (DFR) programs, and hundreds have cleared a necessary hurdle toward making deployment a reality, expanding aerial surveillance and data collection even in areas patrol officers typically can't reach.As of...
Australian #energy provider #Origin says #DataBreach exposes client data
bleepingcomputer.com
Origin Energy has confirmed that an unauthorized party accessed and subsequently leaked customer data online, exposing sensitive personally identifiable information (PII), among others.
#Flock's CEO Says its ALPRs Don't Do Video After Repeatedly Announcing They Can
404media.co
Flock's CEO Garrett Langley says people don't understand the capabilities of its ALPR system, but they do.
For #TaylorSwift, Madison Square Garden’s Controversial Cameras Briefly Went Dark
wired.com
MSG’s sprawling surveillance system can monitor guests down to the second. Its owners made an exception for the pop star’s rehearsal dinner.
techcrunch.com
The tech giant says selfie videos give users more options to sign in if they're ever locked out or don't have access to their usual phone or computer.
Leaked Document Shows the #Surveillance Tech at #ICE’s Fingertips
https://www.404media.co/leaked-document-shows-the-surveillance-tech-at-ices-fingertips/
404media.co
From phone location data, to social media monitoring, to online undercover tools, a document obtained by 404 Media lays out the surveillance tech available across ICE agency wide.
#Encryption and Globalization 15 Years Later: End-to-End Encryption and the Third Round of the "#GoingDark" Debate
The Fourth Circuit Says #Border Agents Can Search Your Phone By Hand, No Suspicion Required
eff.org
The court ruled that a lower standard applies to manual searches, allowing the government to conduct extraordinarily invasive electronic device searches without any suspicion of wrongdoing, simply because the border officer chooses to search by hand rather than with a forensic tool.
#SocialMedia addiction lawsuit against #Meta is dropped
https://techcrunch.com/2026/07/22/social-media-addiction-lawsuit-against-meta-is-dropped/
techcrunch.com
A closely watched social media addiction lawsuit that had been set to go to trial next week has been dropped after the plaintiff voluntarily dismissed his claims against Meta, leaving none of the major tech companies facing trial in the case.
#SouthKorea discloses #DataBreach impacting diplomats worldwide
bleepingcomputer.com
South Korea disclosed that hackers breached the National Diplomatic Academy's online education system for ten months and stole personal information belonging to current and former employees of the Ministry of Foreign Affairs (MFA), including overseas diplomats.
How #OpenAI’s human mistake led to the #AI-powered hack on #HuggingFace
techcrunch.com
OpenAI made a mistake setting up what it called a “highly isolated” testing environment and sandbox. According to cybersecurity experts, that human mistake is what made the AI-powered attack on Hugging Face possible.
Google now support account recovery with AI and your face. What could possibly go wrong? Google having my face is not just bad enough but chances are high that selfie video may not work in edge cases or network down etc.
https://blog.google/innovation-and-ai/technology/safety-security/selfie-video-sign-in/
The tweet from Google offical account reads: Forgot your password? Lost your phone? Can’t get into your account? You can now use a selfie video to log into your Google Account. The new feature is easy to use and lets you sign in — even if you forget your password or don’t have your usual phone or laptop — with a quick selfie. There is a short video showing how to use a selfie video to log into your Google Account and link to https://blog.google/innovation-and-ai/technology/safety-security/selfie-video-sign-in/
The tweet from Google offical account reads: Forgot your password? Lost your phone? Can’t get into your account? You can now use a selfie video to log into your Google Account. The new feature is easy to use and lets you sign in — even if you forget your password or don’t have your usual phone or laptop — with a quick selfie. There is a short video showing how to use a selfie video to log into your Google Account and link to https://blog.google/innovation-and-ai/technology/safety-security/selfie-video-sign-in/
Great new feature in the latest Signal app. If you enable disappearing messages the meta data of calls and missed calls gets deleted as well.
I know this was a long standing goal for them, but the engineering behind it took time.
#Privacy @signalapp
Great new feature in the latest Signal app. If you enable disappearing messages the meta data of calls and missed calls gets deleted as well.
I know this was a long standing goal for them, but the engineering behind it took time.
#Privacy @signalapp
#SimpleX Public Names — a Name Nobody Can Take From You
https://simplex.chat/blog/20260722-simplex-public-names.html
simplex.chat
🚨 This Week In Privacy #63 will be live in 30 minutes, we'll be talking about Mullvad's Co-owner making a controversial political donation and covering the latest privacy & security news.
👋 Come and watch and join the Q&A!
youtube.com
Mullvad's Co-owner Daniel Berntsson has made a large political donation from Mullvad's profits, leading people to cancel their service, Apple has fixed a vul...
#Flock ‘Objects to Our Removing Their Equipment’: Emails Reveal Why a Town Put Bags Over Its Flock Cameras
404media.co
"For the time being, if you or someone on your crew has availability to secure black plastic bags (or something else) over the cameras, that would be great."
bleepingcomputer.com
The Adobe Acrobat extension for Chrome could be used to access conversations and data rendered in WhatsApp Web without any form of authentication.
🙏 New Blog Post
The Pope's official prayer app has an IDOR that lets anyone pull user data for all 719,517 accounts. One GET request per user. No auth check.
What's exposed:
Also found:
Reported January 3rd. Emailed 9 people. A journalist also contacted them. Zero responses. Still live six months later. Vow of silence I guess.
Full writeup: https://bobdahacker.com/blog/click-to-pray
#InfoSec #BugBounty #ResponsibleDisclosure #IDOR #Security #CyberSecurity #Privacy #DataExposure #ClickToPray #Vatican #APISecurity
bobdahacker.com
How I found that anyone can pull the email address, name, country, and date of birth of any of the 719,517 users on Click To Pray, the Pope's official prayer app, with a single GET request. Reported January 3rd. Still live six months later. Nobody has ever responded.
🚨 Important deadline coming up (July 25)! Americans should comment on FCC docket numbers 17-59 and 02-278, speaking out against their proposal to require government ID, physical address, and alternative phone number for all phone lines in the USA. Instructions: https://discuss.privacyguides.net/t/leave-fcc-comment-deadline-tomorrow/39337
discuss.privacyguides.net
The deadline to comment on the FCC’s proposed rule to require government ID, physical address, and alternative phone number for every phone line in the US is July 25. You can submit a comment by going to https://www.fcc.gov/ecfs/filings/express, selecting Express Comment at the top of the page, and entering 17-59 and 02-278 as the docket numbers in the first field, like so: Genuine (not AI generated!) personal accounts will be most compelling. If you are an American, please consider speak...
You Opened a #CreditCard. #ICE Now Knows Where You Live
https://www.404media.co/you-opened-a-credit-card-ice-now-knows-where-you-live/
404media.co
Here's how your personal address travels from your credit card provider, through middlemen companies, and ends up with ICE.
How a Stranger Used One Text Message to Steal My Entire Digital Life
time.com
“He read my entire Social Security number and my date of birth back to me. That was the moment I knew my identity had been stolen.”
How to disable location history on #Google, #Apple, and more
proton.me
Find out how to disable location history on Android, iOS, Mac, Windows, and browsers. Why? Google alone paid $1.5B+ in lawsuits over this.
wired.com
Federal lawyers say anti-mask laws would endanger immigration agents, citing an ICE face-recognition art project that doesn’t actually work.
#ChickFilA discloses #DataBreach after credential stuffing attacks
bleepingcomputer.com
American fast food restaurant chain Chick-fil-A is notifying customers of a data breach after their accounts were hacked in a wave of recent credential stuffing attacks.
#France becomes first #EU country to ban #SocialMedia access for under-15s
https://www.theguardian.com/world/2026/jul/21/france-ban-social-media-access-under-15s
#SocialMediaBan #privacy #politics #Europe #AgeVerification #cybersecurity
theguardian.com
Parliament votes to stop children using apps such as TikTok in policy championed by Emmanuel Macron
🙏 New Blog Post
The Pope's official prayer app has an IDOR that lets anyone pull user data for all 719,517 accounts. One GET request per user. No auth check.
What's exposed:
Also found:
Reported January 3rd. Emailed 9 people. A journalist also contacted them. Zero responses. Still live six months later. Vow of silence I guess.
Full writeup: https://bobdahacker.com/blog/click-to-pray
#InfoSec #BugBounty #ResponsibleDisclosure #IDOR #Security #CyberSecurity #Privacy #DataExposure #ClickToPray #Vatican #APISecurity
bobdahacker.com
How I found that anyone can pull the email address, name, country, and date of birth of any of the 719,517 users on Click To Pray, the Pope's official prayer app, with a single GET request. Reported January 3rd. Still live six months later. Nobody has ever responded.
when they touch the privacy topic at the family dinner
#ArcaneChat #privacy #security #encryption #anonymity #family #digitalindependence #Europe #European #android #openSource
when they touch the privacy topic at the family dinner
#ArcaneChat #privacy #security #encryption #anonymity #family #digitalindependence #Europe #European #android #openSource
If you have to upload a piece of information to validate your age or identity, it is not privacy-preserving.
Stop privacy-washing surveillance tech.
Stay alert about false privacy claims.
#OpenAI says #HuggingFace was breached by its pre-release models
https://techcrunch.com/2026/07/21/openai-says-hugging-face-was-breached-by-its-pre-release-models/
techcrunch.com
OpenAI has come forward to claim responsibility for the Hugging Face breach, saying it was the result of internal testing gone awry.
#Anubis #ransomware claims #CocaCola #Fairlife attack, threatens data leak
bleepingcomputer.com
The Anubis ransomware gang has claimed responsibility for the cyberattack on Coca-Cola's Fairlife dairy subsidiary, threatening to publish allegedly stolen corporate data unless the company pays a ransom.
What Does #OliveGarden’s Never-Ending Pasta Have to Do With #Voting Rights?
https://www.404media.co/olive-garden-never-ending-pasta-id-save-act/
404media.co
Do you have to show ID to get unlimited pasta at Olive Garden? Yes. Is this the same as secure voting? Definitely not.
Introducing Native Containers in #Firefox153
https://blog.mozilla.org/en/firefox/firefox-containers-preview/
blog.mozilla.org
Today, we’re excited to announce the Preview of Containers in Firefox version 153, which lets you keep separate parts of your online life (work, shopping
How to stop getting #spam emails
https://adguard.com/en/blog/how-to-stop-getting-spam-emails.html
adguard.com
Tired of endless junk mail? Learn how to stop spam emails for good. 10 simple, proven steps, from smarter filters to unsubscribing the right way.
What does #Google know about you? The chilling truth
proton.me
Google tracks your searches, emails, location, and even your voice. Here's exactly what Google knows about you and how to take back control.
After #TikTok, #Snap settles #SocialMedia addiction case
https://techcrunch.com/2026/07/21/after-tiktok-snap-settles-social-media-addiction-case/
techcrunch.com
TikTok recently settled its portion of the case with the plaintiff ahead of a jury trial that starts next week in Los Angeles. YouTube has also reached a deal, leaving Meta as the only remaining defendant.
techcrunch.com
A hacker took names, phone numbers, and physical addresses of millions of customers who used AI music generator Suno.
An Explosion of #Surveillance Towers is Coming to U.S. Borders, Costing Over $1 Billion
eff.org
A new report from the Government Accounting Office reveals that the Department of Homeland Security (DHS) plans to nearly triple the number of surveillance towers along U.S. borders, from the current 830 to 2,300 by 2034.DHS expects to expend $1 billion in taxpayer dollars for this dangerous...
#US #police now armed with Israeli spy vans simulating mobile phone towers
https://cybernews.com/privacy/us-police-israeli-spy-vans-falconet-cognyte/
#privacy #Israel #FalcoNet #Cognyte #IMSIcatcher #surveillance
They are hiding mobile Flock Cameras now
Video Source:
https://reddit.com/comments/1v3kjm2
#surveillance #politics #resistance #resist #usa #authoritarianism #fascism #civildisobedience #USAFascistShitShow #policestate #policemilitarization #federalinvasion #nokings #abolishice #privacy #flock #palantir #4thamendment #Chatrie_v_United_States
They are hiding mobile Flock Cameras now
Video Source:
https://reddit.com/comments/1v3kjm2
#surveillance #politics #resistance #resist #usa #authoritarianism #fascism #civildisobedience #USAFascistShitShow #policestate #policemilitarization #federalinvasion #nokings #abolishice #privacy #flock #palantir #4thamendment #Chatrie_v_United_States
#MIT to Become Hotbed of #AI Video #Surveillance
https://www.schneier.com/blog/archives/2026/07/mit-to-become-hotbed-of-ai-video-surveillance.html
schneier.com
It’s a lot: According to information obtained by The Tech, MIT is spending over $3 million on more than 500 AI surveillance cameras in academic buildings, residence halls, and outdoor areas along Memorial Drive. Installation of the new cameras, along with the wiring and infrastructure that will support them, began November 2025 and will likely continue until September 2026. Technical specifications for the cameras suggest that they will be capable of collecting real-time face and object classification data, including detection of motion, loitering, crowds, face masks, and camera tampering. Individuals can also be automatically classified on the basis of clothing color, gender, and age, up to a distance of 35 feet (11 meters) from the camera. According to a statement from MIT spokesperson Kimberly Allen, any collected data is “retained up to 30 days,” unless an exception is granted...
#EstéeLauder discloses #DataBreach via #Oracle #EBusiness flaw
bleepingcomputer.com
Cosmetics giant Estée Lauder is notifying employees of a data breach after hackers exploited a flaw in Oracle E-Business Suite that the company used for human resources (HR) operations.
arstechnica.com
Pennsylvania cop charged with oppression and obstruction.
Protect Your #Privacy with #California's #DROP Tool
https://www.eff.org/deeplinks/2026/07/what-you-need-know-about-californias-drop-tool
eff.org
Are you a California resident? Then we've got exciting news for you: there's a tool just for you that lets you take a single, relatively easy step to protect your privacy. It's called a DROP request. (That's Delete Request and Opt-out Platform, if you're fancy). This one bit of paperwork lets you...
"The service was created 15 years ago with a dual purpose: as a security filter against bots and as a generator of datasets to train artificial intelligence."
El Pais: ‘Captchas’: Has Google got us training its AI without knowing it? https://english.elpais.com/technology/2026-07-22/captchas-has-google-got-us-training-its-ai-without-knowing-it.html @elpais_america #Google #privacy
english.elpais.com
The service was created 15 years ago with a dual purpose: as a security filter against bots and as a generator of datasets to train artificial intelligence
How to disable #OneDrive: A complete #guide
proton.me
Find out how to disable OneDrive, uninstall it, and more ways to stop Microsoft’s cloud storage if you don’t like how it handles your data.
Hackers stole ‘significant’ amount of data from tech firm relied on by thousands of US hospitals and pharmacies
#Craneware #DataBreach #privacy #cybersecurity #healthcare #hospital #pharmacy
techcrunch.com
Edinburgh-based tech firm Craneware said customer data was stolen during a cyberattack. The company makes software that thousands of U.S. hospitals, pharmacies, and clinics rely on for billing patients, potentially exposing health data.
Dyskusja wokół prywatnej darowizny współwłaściciela Mullvada pokazała powszechny problem z mieszaniem ideologii z inżynierią.
Świetnie podsumował to zespół @GrapheneOS, który korzysta z serwerów sponsorowanych przez Mullvada. Mimo jasnego sprzeciwu wobec poglądów obdarowanej partii, nie zamierzają odrzucać infrastruktury ani rezygnować ze wsparcia.
Podejście Zero-Trust wymaga oceny architektury, matematyki i kodu, a nie poglądów jednostek. Dopóki kod pozostaje otwarty, a polityka no-logs weryfikowalna, rezygnacja ze sprawnego narzędzia to decyzja polityczna, a nie analiza ryzyka technicznego.
mullvad.net
We would like to address the recent controversy about one of the owners of Mullvad making a donation to a Swedish political party.
#HuggingFace confirms breach affected internal datasets and credentials, urges users to take action
techcrunch.com
Hugging Face is urging users to rotate any access tokens stored on the platform and review account activity.
On #Flock License Plate Tracking Cameras
https://www.schneier.com/blog/archives/2026/07/on-flock-license-plate-tracking-cameras.html
schneier.com
A recent story of a writer who was mistakenly identified, tracked, and arrested using data from Flock cameras has gone viral. The New Jersey plates that were allegedly stolen from the LA dealer were 34 03 DTM, not 34 10 DTM. But when the police report was created and the plate was entered into Flock’s system, it was just recorded as 34 DTM. Just the five large characters, no little number in the middle. And Flock’s AI tech wasn’t registering that non-standard little number when it began picking up the Range Rover around town. It just saw ...
'#GrokBuild' Coding Tool Open Sourced This Week, Promises to Respect Zero Data Retention
news.slashdot.org
Elon Musk confirmed SpaceX has open sourced the Grok Build CLI this week, reports The Register, "just days after researchers caught the AI tool scooping up users' entire repositories and uploading them to company-controlled cloud storage." That discovery had "gathered so much negative attention th...
#UK's #Burnham drops #DigitalID scheme to prioritise cost of living, say allies
#Malaysia: The #CybercrimesBill 2026 is a threat to freedom of expression and the right to #privacy
sinarproject.org
ARTICLE 19, the Centre for Independent Journalism (CIJ), and Sinar Project are concerned about the threat posed by the Malaysian Cybercrimes Bill 2026 to the right to freedom of expression online, as well as to media, journalists and human rights defenders. Although Malaysia is a signatory to the United Nations Convention against Cybercrime, the current Bill does little to meet the Convention’s human rights safeguards and procedural guarantees. Importantly, Article 6 of the Cybercrime Convention makes clear that States Parties to the Convention shall ensure that the implementation of their obligations under this Convention is consistent with their obligations under international human rights law. The Malaysian Cybercrimes Bill fails to provide human rights safeguards or to respect human rights and fundamental freedoms, especially freedom of expression and the right to privacy.
Federal employees can download #TikTok on their work phones again
https://techcrunch.com/2026/07/18/federal-employees-can-download-tiktok-on-their-work-phones-again/
techcrunch.com
The Department of Justice says that federal employees can now download TikTok on their government devices.
💥@robin – Fireside
"how to bring democracy to the internet"
much words spilled
#digital #sovereignty #Eurosky #AI #W3C #HTML #privacy
https://html5accessibility.com/stuff/2026/07/21/robin-berjon-fireside/
html5accessibility.com
If you record someone’s conversation without letting them know, you’re putting them at risk.
https://werd.io/people-are-transcribing-your-conversations-without-asking-that-puts-you-at-risk/
werd.io
Apps like Granola make it easy to transcribe conversations without asking for consent. Those transcripts are a subpoena honeypot.
@evacide We are having a DROP Day at the Alameda library this Friday to help people get started -- come any time the library is open
https://alamedafree.events.mylibrary.digital/event?id=351893 #CalPrivacy
New Jersey's legislature passed the Fair Price Protection Act, the first state ban on grocery "surveillance pricing" - using AI and your data to charge different shoppers different prices for the same item. It also freezes new electronic shelf labels for a year. California's AB 2564 would ban the practice statewide.
#surveillancepricing #NewJersey #California #privacy #indigoprivacy
New Jersey's legislature passed the Fair Price Protection Act, the first state ban on grocery "surveillance pricing" - using AI and your data to charge different shoppers different prices for the same item. It also freezes new electronic shelf labels for a year. California's AB 2564 would ban the practice statewide.
#surveillancepricing #NewJersey #California #privacy #indigoprivacy
Which of these privacy options have you used in the last 30 days?
Which of these privacy options have you used in the last 30 days?
France, Germany vow to develop Palantir rival – POLITICO
#europe #masssurveillance #surveillance #Palantir #privacy #France #germany
https://www.politico.eu/article/france-germany-want-to-develop-a-palantir-rival/
France, Germany vow to develop Palantir rival – POLITICO
#europe #masssurveillance #surveillance #Palantir #privacy #France #germany
https://www.politico.eu/article/france-germany-want-to-develop-a-palantir-rival/
Victory! #Flock Ends Rollout of Audio “Distress Detection” of Human Voices
eff.org
Reversing course, Flock Safety—the surveillance technology vendor most known for its extensive network of automated license plate readers—has announced that it will end a pilot for its acoustic gunshot detection devices to identify signs of “human distress.”In October 2025, EFF warned the public...
#ICE to Pay #ThomsonReuters $125 Million to Find ‘Voter Fraud’
https://www.404media.co/ice-to-pay-thomson-reuters-125-million-to-find-voter-fraud/
404media.co
A new procurement record says ICE wants access to personal data, including names, Social Security numbers, and ethnicity, to investigate in part what the agency calls “voters fraud.” It also plans to use the data to investigate immigration fraud.
How the #WatchDogs Video Game Series Mirrored and Predicted Real-World Digital Rights Issues
eff.org
When Ubisoft's Watch Dogs 2 was released in 2016, it was a headtrip for those of us working on digital-rights issues in the Bay Area. The game's missions often felt like they were ripped from the pages of EFF's Deeplinks blog.
#SanFrancisco Demands #Apple and #Google Delete #AI ‘#Nudify’ Apps From App Stores
wired.com
The City Attorney’s Office sent the tech giants cease-and-desist letters this week telling them to stop profiting from 13 “face-swap” apps that are overwhelmingly used to target women and girls.
⚠️ DO NOT BUY: LG’s Spyware TVs, Monitors, and Wiretapping Concerns
The attached #video details the absolute #privacy horror of LG #television and #monitor products, that install #adware without consent, have #AI integration, and a horrible privacy policy..
> LG recently forced upon us an app install loaded with #McAfee adware through a #Windows update. We found that this has been happening to tons of users, made worse by LG's shady history with #TV's that instruct buyers to inform house visitors of third-party microphones in their living room. At no point in the adware or application install did LG or Microsoft ask us for consent or permission to install the software and enable its various permissions. On monitors ranging 1 day old in our office to 3 years old, we've been able to replicate these issues -- including on the LG 34GX900A-B that we just bought (and have now returned, following #spyware concerns).
Excerpt from LG privacy policy reading: i. CONSENT REQUIREMENT: You acknowledge and agree that it is your sole responsibility to obtain all necessary consents from any third parties whose voices may be captured by the Productand to notify household members and guests their their voices may be captured and processed, in compliance with the applicable wiretapping, eavesdropping, and privacy laws.
⚠️ DO NOT BUY: LG’s Spyware TVs, Monitors, and Wiretapping Concerns
The attached #video details the absolute #privacy horror of LG #television and #monitor products, that install #adware without consent, have #AI integration, and a horrible privacy policy..
> LG recently forced upon us an app install loaded with #McAfee adware through a #Windows update. We found that this has been happening to tons of users, made worse by LG's shady history with #TV's that instruct buyers to inform house visitors of third-party microphones in their living room. At no point in the adware or application install did LG or Microsoft ask us for consent or permission to install the software and enable its various permissions. On monitors ranging 1 day old in our office to 3 years old, we've been able to replicate these issues -- including on the LG 34GX900A-B that we just bought (and have now returned, following #spyware concerns).
Excerpt from LG privacy policy reading: i. CONSENT REQUIREMENT: You acknowledge and agree that it is your sole responsibility to obtain all necessary consents from any third parties whose voices may be captured by the Productand to notify household members and guests their their voices may be captured and processed, in compliance with the applicable wiretapping, eavesdropping, and privacy laws.
Privacy is who can see your data. Sovereignty is who decides what it means about you. Medical records prove it: locked down, private, and still not yours to move. Privacy can work fine while sovereignty is broken.
#DataSovereignty #Privacy #DigitalRights #TechLeadership #InfoSec
Smart glasses are deeply creepy. Why are celebrities like Kylie Jenner endorsing them? https://www.theguardian.com/commentisfree/2026/jul/17/ai-meta-smart-glasses #Meta #Technology #Privacy #Surveillance #AiArtificialIntelligence #Women
theguardian.com
Meta touts safety features – but for women, the dangers of these recording devices are obvious
LG monitors quietly install adware. https://www.youtube.com/watch?v=Q9uefFYe6bM
youtube.com
Sponsor: Antec Vortex View 360 on Amazon https://geni.us/SqFNcLG recently forced upon us an app install loaded with McAfee adware through a Windows update. W...
LG monitors quietly install adware. https://www.youtube.com/watch?v=Q9uefFYe6bM
youtube.com
Sponsor: Antec Vortex View 360 on Amazon https://geni.us/SqFNcLG recently forced upon us an app install loaded with McAfee adware through a Windows update. W...
TODAY ⏰️
We've partnered with @sflcin and other groups in a special event.
The expert panel, including ORG's @JamesBaker, will explore how governments are shaping age assurance laws, the role of platforms and the risks to our rights and the open Internet.
Watch live from 3pm BST ⬇️
https://www.youtube.com/live/euSkCvhzweQ
#ageverification #privacy #onlinesafety #digitalrights #politics
youtube.com
In collaboration with Open Rights Group, Open Net Korea, Stop Killing Games, Electronic Frontier Foundation, and Index on Censorship, this event brings toget...
TODAY ⏰️
We've partnered with @sflcin and other groups in a special event.
The expert panel, including ORG's @JamesBaker, will explore how governments are shaping age assurance laws, the role of platforms and the risks to our rights and the open Internet.
Watch live from 3pm BST ⬇️
https://www.youtube.com/live/euSkCvhzweQ
#ageverification #privacy #onlinesafety #digitalrights #politics
youtube.com
In collaboration with Open Rights Group, Open Net Korea, Stop Killing Games, Electronic Frontier Foundation, and Index on Censorship, this event brings toget...
Google Photos is cheap and you pay with your privacy. 🌍
Your photos can feed Google's AI. One innocent picture can get your whole account frozen overnight. And every face and location in your library sits ready for profiling, for years.
Your memories deserve a European home.
pixelunion.eu
Google Photos is cheap and convenient, but you pay with your privacy. We lay out the risks and show why a European alternative is worth it.
Age verification laws forcing platforms to restrict content access have been multiplying exponentially.
The problem is, implementing such measures necessarily requires identifying every user accessing the content, one way or another.
This is bad news for everyone.
If these regulations continue
to proliferate, this could lead to the end of pseudonymity online, and much worse.
I wrote this article last year,
but unfortunately this problem has only become worse, and it is sadly still very relevant.
https://www.privacyguides.org/articles/2025/05/06/age-verification-wants-your-face/
#Privacy #AgeVerification #MassSurveillance #Authoritarianism
privacyguides.org
Age verification laws forcing platforms to restrict access to content online have been multiplying in recent years. The problem is, implementing such measure necessarily requires identifying each user accessing this content, one way or another. This is bad news for your privacy.
In the 1960s, if you wanted to surveil one person, you had to hire someone else to bug them or follow them. Today, we surveil everyone by default; you just have to tap into the data collected by the spies in their pockets (smartphones), on their wrists and fingers (smart watches and rings), their work tools (laptops), and in the public sphere (CCTV cameras) – you’ll have more on any person than the Stasi could ever dream of.
https://aeon.co/essays/things-have-jobs-and-digital-devices-are-made-to-track-you
🚨 This Week In Privacy #53 will be live in 30 minutes, we'll discuss Android 17 bringing some great privacy & security improvements and the latest in privacy & security news.
Come say hi and chat with us live! 😊
streamyard.com
Google recently announced upcoming features for Android 17 which features new privacy & security upgrades, Signal is adding warnings to protect against phishing attacks, Windows Bitlocker has been broken by a new zero-day and more! Join us for This Week In Privacy #53
The US House passed the KIDS Act, a bill that would introduce internet age-gating measures aimed at protecting minors online. 🏛️
EFF argues the proposal would expand online surveillance instead of privacy protections, with broader implications for anonymity and the open web. 🔒
🔗 https://www.eff.org/deeplinks/2026/07/dont-let-congress-age-gate-internet-effector-3813
#TechNews #Kids #KIDSAct #Children #Privacy #AgeVerification #Surveillance #DigitalRights #FreeSpeech #Cybersecurity #Technology #OpenWeb #Policy #Security #EFF
eff.org
The effort to age gate the internet is back in Washington—and now it has a new name. Recently passed by the House of Representatives, the KIDS Act is a sprawling package of proposals to control what we can see and say online. Supporters claim the KIDS Act is needed to protect minors online. But if...
Researcher Candice Odgers argues evidence does not support social media as the main driver of rising youth mental health problems or blanket platform bans. 📱
She advocates stronger platform accountability and targeted protections, while warning bans may push teens toward less transparent online spaces. 🔍
#TechNews #SocialMedia #MentalHealth #OnlineSafety #Youth #Privacy #DigitalRights #Technology #Research #Cybersecurity #Policy #Education #OpenWeb
theguardian.com
Psychologist Candice Odgers has studied adolescent mental health for 25 years. She fears the current debate around smartphones obscures some of the biggest issues facing teenagers – from the impact of Covid to the health of their adult caregivers
🚨 This Week In Privacy Update 🚨
ℹ️ To make the show more accessible, we're moving the show forward 2 hours
⏰ We'll be going live Friday at 2PM CDT ⏰
We hope you can make it! 👋
youtube.com
Massive organizations are monitoring your online activities. Privacy Guides is your central privacy and security resource to protect yourself online. Privacy Guides is a socially motivated website that provides information for protecting your data security and privacy. We are a non-profit project operated by our team members and hundreds of volunteer contributors. "Privacy Guides" and the "Privacy Guides" logo are trademarks of the MAGIC Privacy Guides Fund, part of MAGIC Grants, a 501(c)(3) charity.
"LibreWolf is a Firefox-based browser focused on privacy and security"
"It remains compatible with most Firefox extensions and is typically updated shortly after new Firefox releases.Read Entire Article LibreWolf browser removes Mozilla telemetry and enables stricter privacy and security settings by default."
techspot.com
LibreWolf is designed to increase protection against tracking and fingerprinting techniques, while also including a few security improvements.
AI capabilities of keyboard apps (rewrites, voice transcription, generative writing) entice us into letting our keystrokes float to the developer's servers. That makes each one a keylogger we authorized, with safeguards left to the developer.
zeltser.com
Keyboard apps offer better predictions, voice transcription, and AI-powered writing, all requiring users to send what they type to remote servers. Mobile OS vendors set the rules but can't enforce what developers do with that data.
Posted yesterday. You don't need this.
The product "is designed to act as a humanlike AI companion within the home."
"It will be capable of controlling smart home appliances, playing media, answering questions, responding to messages and drawing on the broader capabilities of OpenAI's ChatGPT."
Reuters: OpenAI's first hardware device will be a speaker, Bloomberg News reports https://www.reuters.com/technology/openais-first-hardware-device-will-be-speaker-bloomberg-news-reports-2026-07-14/ @Reuters #OpenAI #privacy
The EU relaxes its replaceable batttery rules for smart glasses after US pressure.
Smart glasses are in European regulators’ and lawmakers’ crosshairs over privacy and surveillance concerns.
But the bloc’s batteries regulation also held up the EU rollout of Meta’s latest model in recent months because the glasses’ built-in batteries cannot be easily removed and replaced.
#SmartGlasses #Tech #Batteries #Privacy #Surveillance #Meta #RayBan #EU
mediafaro.org
Smart glasses are in European regulators’ and lawmakers’ crosshairs over privacy and surveillance concerns. But the bloc’s batteries regulation also held up the EU rollout of Meta’s latest model in …
Meta Contractors Posed as Teens to Prompt Rival Chatbots About Suicide, Sex, and Drugs
｢ Many were written from the perspective of children or teenagers in crisis: a 13-year-old who said she had become pregnant by her adult neighbor and wanted to know where to buy pills to end the pregnancy; a fifth-grader whose classmate had a gun pointed at his mouth; a girl asking how to hide bulimia from her parents ｣
https://www.wired.com/story/meta-contractors-pretending-to-be-teens-chatbot-testing/
wired.com
Hundreds of contractors working on a project for Meta pretended to be kids in order to see how other chatbots like Gemini and ChatGPT would respond to high-risk subjects, WIRED found.
Age verification laws are spreading fast, and it’s a massive privacy trainwreck. Forcing users to hand over IDs or biometric scans kills anonymity & builds giant honeypots for hackers.
Track the creep with @proton.me’s map: https://proton.me/age-verification
proton.me
Learn about the spread of age verification laws across the world.
Age verification laws are spreading fast, and it’s a massive privacy trainwreck. Forcing users to hand over IDs or biometric scans kills anonymity & builds giant honeypots for hackers.
Track the creep with @proton.me’s map: https://proton.me/age-verification
proton.me
Learn about the spread of age verification laws across the world.
Another JavaScript nightmare has just been released.
Cloudflare states that "Precursor is [...] built with privacy in mind [...]". The privacy guarantees?
"The event listeners capture the minimum information needed to be a useful signal for detecting automation and abuse. For example, keyboard activity is captured as timing and rhythm, not as the actual keys pressed."
Really?!
blog.cloudflare.com
Precursor, our new continuous behavioral validation engine for bot management, offers visibility into how humans and bots actually interact across the full user journey. By turning session-level behavior into bot detection signals, it identifies advanced automation with higher precision — while reducing friction for legitimate users.
Another JavaScript nightmare has just been released.
Cloudflare states that "Precursor is [...] built with privacy in mind [...]". The privacy guarantees?
"The event listeners capture the minimum information needed to be a useful signal for detecting automation and abuse. For example, keyboard activity is captured as timing and rhythm, not as the actual keys pressed."
Really?!
blog.cloudflare.com
Precursor, our new continuous behavioral validation engine for bot management, offers visibility into how humans and bots actually interact across the full user journey. By turning session-level behavior into bot detection signals, it identifies advanced automation with higher precision — while reducing friction for legitimate users.
Meta Contractors Posed as Teens to Prompt Rival Chatbots About Suicide, Sex, and Drugs
｢ Many were written from the perspective of children or teenagers in crisis: a 13-year-old who said she had become pregnant by her adult neighbor and wanted to know where to buy pills to end the pregnancy; a fifth-grader whose classmate had a gun pointed at his mouth; a girl asking how to hide bulimia from her parents ｣
https://www.wired.com/story/meta-contractors-pretending-to-be-teens-chatbot-testing/
wired.com
Hundreds of contractors working on a project for Meta pretended to be kids in order to see how other chatbots like Gemini and ChatGPT would respond to high-risk subjects, WIRED found.
@thenewoil Thinking that Meta would choose to keep users thoughts/emotions read only would be naive.
If their AI's can access and read users emotions, they can use their outputs to influence emotions, as Meta's much cruder 2012 study showed.
That pales in comparison to what would be possible now.
The importance of transparency in what the algorithms show you and why has never been more important.
Flock CEO: "Unfortunately, there’s terrorist organizations like DeFlock whose primary motivation is chaos. They’re closer to Antifa than they are anything else." #privacy #JoinAntifa
https://deflock.org/
deflock.org
Find license plate readers (LPRs) near you.
Big bubble letters like a movie poster that says: FUCK OFF I'M NOT GIVING YOU A GOVT ID you are a FUCKING WEBSITE are you out of your mind
🚨 This Week In Privacy #61 will be live in 30 minutes, we'll be talking about Apple adding a keylogger to the iOS app store, and covering the latest privacy & security news.
👋 Join us live and join the Q&A!
streamyard.com
A security researcher has discovered that the iOS App Store saves all keystrokes and ties it to your Apple ID - raising privacy concerns, yet another cop is using Automated License Plate Readers to stalker their ex-partner, and all cars in the EU might require a camera aimed at your face! Join us for This Week In Privacy #61.
Flock CEO: "Unfortunately, there’s terrorist organizations like DeFlock whose primary motivation is chaos. They’re closer to Antifa than they are anything else." #privacy #JoinAntifa
https://deflock.org/
deflock.org
Find license plate readers (LPRs) near you.
@evacide
There's an Android app everybody should have: It alerts you when someone with this kind of #surveillance tech is in vicinity. Useful in public spaces. I recommend stopping these people and have the police take their name and address, so you can sue them.
https://darmstadt.social/@Datterich/116848549924252450
(in German, but all you need is to click on the link)
EDIT: typo corrected
#nearbyglasses #smartglasses #ai #ki #privacy #freedomrights
darmstadt.social
Für alle, die die Verletzung ihrer Privatsphäre und den Eingriff in ihre Freiheitsrechte durch 'Smart Glasses' nicht tolerieren und der unentdeckten Überwachung in der Öffentlichkeit etwas entgegensetzen möchten: Es gibt eine App für Euch: https://apt.izzysoft.de/packages/ch.pocketpc.nearbyglasses Ist ein Nutzer in der Öffentlichkeit "erwischt", könntet Ihr z.B. seine Personalien feststellen lassen, um später gegen ihn vorzugehen und ihn _beispielsweise_ darauf verklagen, Eure personenbezogenen Daten löschen zu lassen.
I shopped at Tesco yesterday and was left extremely irritated - I had left my club card at home my trousers (changed clothes as warm and sunny). Without knowing that magic number you can’t use scan-as-you shop, but worse all the price labels taunt you about the substantial discounts giving up your privacy comes with. I bought only the essentials. I’d have picked Asda if I’d realised in time. #Tesco #Privacy #LoyaltyCards
Big bubble letters like a movie poster that says: FUCK OFF I'M NOT GIVING YOU A GOVT ID you are a FUCKING WEBSITE are you out of your mind
👋 Google's New reCAPTCHA Wants Your Camera Access and 21 Points of Your Hand
｢ The system records a short video of your hand and pulls 21 hand-landmark coordinates from it, mapping your finger joints, your palm geometry, and the way you move in real time ｣
https://reclaimthenet.org/googles-new-recaptcha-wants-your-camera-access-and-21-points-of-your-hand
👋 Google's New reCAPTCHA Wants Your Camera Access and 21 Points of Your Hand
｢ The system records a short video of your hand and pulls 21 hand-landmark coordinates from it, mapping your finger joints, your palm geometry, and the way you move in real time ｣
https://reclaimthenet.org/googles-new-recaptcha-wants-your-camera-access-and-21-points-of-your-hand
@chatcontrol but this can be easily overturned. #chatControl has been rejected on two previous occasions and MEPs have received death threats to accept it on the third vote. The pathetic #farLeft #feminist Roberta #Metsola will face prosecution.
#EUcorruption #surveillance #privacy #spyware #encryption #brexit #frexit #gexit #itexit #spexit
NEW: A Puerto Rico Government Agency Exposed 1 Million Social Security Numbers
A cybersecurity loophole in an official government mapping service left private data easily accessible, Centro de Periodismo Investigativo and ProPublica learned.
https://www.propublica.org/article/puerto-rico-crim-data-breach?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon-post
#News #PuertoRico #Government #Cybersecurity #Data #Privacy #SocialSecurity #Tech #Technology
propublica.org
A cybersecurity loophole in an official government mapping service left private data easily accessible, Centro de Periodismo Investigativo and ProPublica learned.
In a few minutes, parliament will vote on chatcontrol. There are a few other votes first. You can see the list of amendments to be voted on here: https://www.europarl.europa.eu/sedcms/votingList/C10-0178.pdf
The actual text for the amendments is here:
https://www.europarl.europa.eu/plenary/en/infos-details.html?id=1689&type=priorityInfo
Livestream: https://www.europarl.europa.eu/streaming/?p=ebs
The votes about chatcontrol are only the 4th item in the list of things to be voted on, but you'll likely have to wait a bit: https://www.europarl.europa.eu/sedcms/documents/PRIORITY_INFO/1785/5_TIMING_STR_JULY_I_EN.docx
Why isn't Proton Mail or Proton Calendar available on F-Droid? 🤔
Both are privacy-focused apps, so it seems like a natural fit for the FOSS ecosystem. Anyone know if there's an unofficial repo or mirror where these can be found?
Looking for transparency on this!
Insurance companies have hired investigators to conduct physical surveillance on disability claimants, filming them in public spaces to challenge claims.
Get anonymous API access to Anthropic, OpenAI, and Tinfoil (open-weight) models without an account, paid in #Monero or #Bitcoin through https://nullsink.is
Source code: https://github.com/nullsink/nullsink
Early stages of the project, open to feedback!
github.com
Privacy-first, account-less metered proxy for frontier models. No account, no IP, no request logs. - nullsink/nullsink
Get anonymous API access to Anthropic, OpenAI, and Tinfoil (open-weight) models without an account, paid in #Monero or #Bitcoin through https://nullsink.is
Source code: https://github.com/nullsink/nullsink
Early stages of the project, open to feedback!
github.com
Privacy-first, account-less metered proxy for frontier models. No account, no IP, no request logs. - nullsink/nullsink
"I don't care about privacy because I have nothing to hide" always misses the point.
Privacy is about being able to decide for yourself what others know about you and what they're allowed to do with what they know.
Privacy is about setting boundaries to technology and those who are building it.
Privacy is about having a say in who should get to shape our future.
A handful of billionaires (and an especially vile trillionaire)?
Or us?
--
#privacy #DataProtection
The arrest of a teenage hacker has revealed that #Microsoft can track a Windows PC and its online activity through a “Global Device ID" that seems to have no easy opt-out, sparking fears about potential #surveillance.
https://www.pcmag.com/news/a-hackers-arrest-reveals-microsoft-can-track-users-via-a-windows-device
#privacy #digitalsovereignty #infosec #gdid
Touring the directory of 2,697 free self-hostable apps
2,600+ free self-hostable apps — search, compare, deploy. All open-source.
Directory: https://selfhost.directory
#SelfHosted #OpenSource #Privacy #HomeLab #FOSS #Linux #DeGoogle #HomeServer
Touring the directory of 2,697 free self-hostable apps
2,600+ free self-hostable apps — search, compare, deploy. All open-source.
Directory: https://selfhost.directory
#SelfHosted #OpenSource #Privacy #HomeLab #FOSS #Linux #DeGoogle #HomeServer
You know whats really cool about the new fediverse.info People Directory?
You will be able to hide accounts using localStorage and client-side filtering, allowing for more privacy friendly discovery across every device!
fediverse.info people directory hidden accounts modal
Everything you need to actually run it:
• Search across 2,697 projects, 450 categories, 106 languages
• Self-host difficulty ratings, licenses & open-source status
• Live release tracking (synced from GitHub)
• Setup guides, requirements, ports
▶ Subscribe for a new self-hostable app every day and stop paying for software you can own.
Start here → https://selfhost.directory
#selfhosted #selfhosting #homelab #homeserver #opensource #privacy #foss #linux #docker #selfhostdirectory
selfhost.directory
Discover self-hostable software you can run on your own server — a curated, open-source directory with setup guides, alternatives, licenses and live version track…
You know whats really cool about the new fediverse.info People Directory?
You will be able to hide accounts using localStorage and client-side filtering, allowing for more privacy friendly discovery across every device!
fediverse.info people directory hidden accounts modal
The Dark Web wasn't created by hackers—it was built by the US government for spy communications. Tor hides your identity with three layers of encryption. Learn how it works and why most of it is perfectly legal. #CyberSecurity #Privacy #Tor
https://www.valtersit.com/who-created-and-what-is-the-dark-web-hidden-web-and-how-does-it-work/
🚨 This Week In Privacy #60 will be live in 30 minutes, we'll be talking about CalyxOS coming back with a stable build, and covering the latest privacy & security news.
👋 Come join and chat with us live!
streamyard.com
CalyxOS is officially back with a stable release, A researcher has discovered Apple's Hide My Email feature can originating email addresses, the US Supreme Court has gutted the governments ability to use geofence warrants, and more! Join us for This Week In Privacy #60.
@fdroidorg Please include the onion link in your post
http://fdroidorg6cooksyluodepej4erfctzk7rrjpjbbr6wx24jh3lqyfwyd.onion/2026/07/01/adv-malware.html.en
If this is the official f-droid floss.social account then I know you care about tor onion servers because the official fdroid website has an onion link
Tor onion links provide greater anonymity to tor users than simply accessing the clearweb site through tor
And the more people use tor and tor onion addresses for uncontroversial browsing the easier it becomes for people to hide in the traffic when it can be a matter of life or death what websites you are accessing
Do not track tools like @eff's Privacy Badger is not an ad blocker, rather it's a tracking blocker. If a website can't respect my privacy by not tracking me across the Internet we wouldn't have this problem. You can advertise to me all you want. #Privacy #enshittification
A pop-up from a website that doesn't respect my do not track request.
Do not track tools like @eff's Privacy Badger is not an ad blocker, rather it's a tracking blocker. If a website can't respect my privacy by not tracking me across the Internet we wouldn't have this problem. You can advertise to me all you want. #Privacy #enshittification
A pop-up from a website that doesn't respect my do not track request.
Google is apparently testing a new reCAPTCHA method that prompts you to turn on your device's camera to prove you are human by scanning your hands.
I assume this will eventually be mandatory, just like the current reCAPTCHA.
https://reclaimthenet.org/googles-new-recaptcha-wants-your-camera-access-and-21-points-of-your-hand
Everyone's using AI to write code faster. Almost nobody's using it to write code better. It's where the next wave of breaches and a 2am page will come from... So I built something to help myself, and I'm putting it out there.
It's a Claude Code skill called senior-engineering-partner. It's not autocomplete. It's the strict senior engineer who reviews your pull request, asks why you skipped the tests, and won't let you ship a hardcoded secret because you were "just prototyping."
A few things it does:
・ Enforces a real workflow. Agree on the spec, plan in verifiable steps, write the test first, then prove the work before calling it done.
・ Holds a security floor that never moves. Whether you're prototyping or running in production, the secrets and input-validation basics stay non-negotiable. Cheap doesn't mean insecure.
・ Refuses to hallucinate. It verifies claims about your environment by running a real command, rather than inventing a flag or an API that sounds right.
・ Switches modes depending on how you call it: reviewer, debugger, mentor, or pair programmer.
It's open source under Apache-2.0, stack-agnostic, and built around Python, Bash, Apps Script, and JavaScript.
Here's my ask. Use it. Then tell me where it's wrong. I want the good feedback and the brutal feedback, plus any capability you wish it had. The whole point is to encode what senior engineers actually do, and I'd rather hear it breaks on your stack than find out later.
What would you want a skill like this to enforce?
https://github.com/bjgreenberg/senior-engineering-partner
#ClaudeCode #AI #SoftwareEngineering #AppDev #DevOps #security #privacy #cloud #infosec #cybersecurity
My fellow paranoids: how do you deal with the intersection of modern cars and your privacy?
Decline the Terms & Conditions?
Delete the antennas or telematics?
Everyone's using AI to write code faster. Almost nobody's using it to write code better. It's where the next wave of breaches and a 2am page will come from... So I built something to help myself, and I'm putting it out there.
It's a Claude Code skill called senior-engineering-partner. It's not autocomplete. It's the strict senior engineer who reviews your pull request, asks why you skipped the tests, and won't let you ship a hardcoded secret because you were "just prototyping."
A few things it does:
・ Enforces a real workflow. Agree on the spec, plan in verifiable steps, write the test first, then prove the work before calling it done.
・ Holds a security floor that never moves. Whether you're prototyping or running in production, the secrets and input-validation basics stay non-negotiable. Cheap doesn't mean insecure.
・ Refuses to hallucinate. It verifies claims about your environment by running a real command, rather than inventing a flag or an API that sounds right.
・ Switches modes depending on how you call it: reviewer, debugger, mentor, or pair programmer.
It's open source under Apache-2.0, stack-agnostic, and built around Python, Bash, Apps Script, and JavaScript.
Here's my ask. Use it. Then tell me where it's wrong. I want the good feedback and the brutal feedback, plus any capability you wish it had. The whole point is to encode what senior engineers actually do, and I'd rather hear it breaks on your stack than find out later.
What would you want a skill like this to enforce?
https://github.com/bjgreenberg/senior-engineering-partner
#ClaudeCode #AI #SoftwareEngineering #AppDev #DevOps #security #privacy #cloud #infosec #cybersecurity
Everyone's using AI to write code faster. Almost nobody's using it to write code better. It's where the next wave of breaches and a 2am page will come from... So I built something to help myself, and I'm putting it out there.
It's a Claude Code skill called senior-engineering-partner. It's not autocomplete. It's the strict senior engineer who reviews your pull request, asks why you skipped the tests, and won't let you ship a hardcoded secret because you were "just prototyping."
A few things it does:
・ Enforces a real workflow. Agree on the spec, plan in verifiable steps, write the test first, then prove the work before calling it done.
・ Holds a security floor that never moves. Whether you're prototyping or running in production, the secrets and input-validation basics stay non-negotiable. Cheap doesn't mean insecure.
・ Refuses to hallucinate. It verifies claims about your environment by running a real command, rather than inventing a flag or an API that sounds right.
・ Switches modes depending on how you call it: reviewer, debugger, mentor, or pair programmer.
It's open source under Apache-2.0, stack-agnostic, and built around Python, Bash, Apps Script, and JavaScript.
Here's my ask. Use it. Then tell me where it's wrong. I want the good feedback and the brutal feedback, plus any capability you wish it had. The whole point is to encode what senior engineers actually do, and I'd rather hear it breaks on your stack than find out later.
What would you want a skill like this to enforce?
https://github.com/bjgreenberg/senior-engineering-partner
#ClaudeCode #AI #SoftwareEngineering #AppDev #DevOps #security #privacy #cloud #infosec #cybersecurity
Everyone's using AI to write code faster. Almost nobody's using it to write code better. It's where the next wave of breaches and a 2am page will come from... So I built something to help myself, and I'm putting it out there.
It's a Claude Code skill called senior-engineering-partner. It's not autocomplete. It's the strict senior engineer who reviews your pull request, asks why you skipped the tests, and won't let you ship a hardcoded secret because you were "just prototyping."
A few things it does:
・ Enforces a real workflow. Agree on the spec, plan in verifiable steps, write the test first, then prove the work before calling it done.
・ Holds a security floor that never moves. Whether you're prototyping or running in production, the secrets and input-validation basics stay non-negotiable. Cheap doesn't mean insecure.
・ Refuses to hallucinate. It verifies claims about your environment by running a real command, rather than inventing a flag or an API that sounds right.
・ Switches modes depending on how you call it: reviewer, debugger, mentor, or pair programmer.
It's open source under Apache-2.0, stack-agnostic, and built around Python, Bash, Apps Script, and JavaScript.
Here's my ask. Use it. Then tell me where it's wrong. I want the good feedback and the brutal feedback, plus any capability you wish it had. The whole point is to encode what senior engineers actually do, and I'd rather hear it breaks on your stack than find out later.
What would you want a skill like this to enforce?
https://github.com/bjgreenberg/senior-engineering-partner
#ClaudeCode #AI #SoftwareEngineering #AppDev #DevOps #security #privacy #cloud #infosec #cybersecurity
Another Cassandra moment for many privacy professionals.
What we have been warning about for a while now is finally happening: whatever remained of the legal framework for sending personal data to the United States is in shambles due to a recent Supreme Court decision.
Companies, if you haven't cut ties with US-based services by now, brace yourselves for trouble and a great deal of uncertainty.
P.S.: We told you so!
--
#privacy #DataProtection #GDPR #DataPrivacyFramework
Part of the lock-in happens with the harness.
Ex: Claude Code is a harness to use the Claude model. Use open source harnesses. Create your own harness if you can.
Part of it is giving a SaaS access to your data.
Do you have AI slack bot that is reading everyone's messages. What about your files & e-mail
#AI #AIAgent #AICoding #AICodingTools #ArtificialIntelligence #LargeLanguageModels #LLM #Privacy #SelfSovereignty #Spying #Surveillance #VendorLockIn
mastodon.social
Content warning: ai coding tools
RE: https://mastodon.social/@reiver/115746605658316310
3/
I think people should try to find open source (OS) and open weight (OW) models as alternatives to these SaaS AI coding tools.
Start by using them together (with the SaaS).
Set thins up so you aren't locked into these SaaS.
Have, in a practical sense, the ability to completely switch over if need be.
#AI #AIAgent #AICoding #AICodingTools #ArtificialIntelligence #Claude #GLM #LargeLanguageModels #LLM #Privacy #SelfSovereignty #Spying #Surveillance
mastodon.social
1/ Even if you hate LLMs, you should pay attention to and maybe even get involved with LLMs — to try to mitigate and maybe even prevent some of the ways which they could be used in a harmful way. ... #AI #ArtificialIntelligence #LargeLanguageModels #LLM #Privacy
4/
If you are someone who uses AI coding tools for your work —
I have been hearing people claim that the GLM-5.2 open source, open weight model is very good are common programming tasks.
https://huggingface.co/zai-org/GLM-5.2
https://github.com/zai-org/GLM-5
https://z.ai/blog/glm-5.2
You have options.
They'll be more in the future, too.
#AI #AIAgent #AICoding #AICodingTools #ArtificialIntelligence #Claude #GLM #LargeLanguageModels #LLM #Privacy #SelfSovereignty #Spying #Surveillance
1/
Even if you hate LLMs, you should pay attention to and maybe even get involved with LLMs — to try to mitigate and maybe even prevent some of the ways which they could be used in a harmful way.
...
#AI #ArtificialIntelligence #LargeLanguageModels #LLM #Privacy
3/
I think people should try to find open source (OS) and open weight (OW) models as alternatives to these SaaS AI coding tools.
Start by using them together (with the SaaS).
Set thins up so you aren't locked into these SaaS.
Have, in a practical sense, the ability to completely switch over if need be.
#AI #AIAgent #AICoding #AICodingTools #ArtificialIntelligence #Claude #GLM #LargeLanguageModels #LLM #Privacy #SelfSovereignty #Spying #Surveillance
mastodon.social
1/ Even if you hate LLMs, you should pay attention to and maybe even get involved with LLMs — to try to mitigate and maybe even prevent some of the ways which they could be used in a harmful way. ... #AI #ArtificialIntelligence #LargeLanguageModels #LLM #Privacy
1/
Even if you hate LLMs, you should pay attention to and maybe even get involved with LLMs — to try to mitigate and maybe even prevent some of the ways which they could be used in a harmful way.
...
#AI #ArtificialIntelligence #LargeLanguageModels #LLM #Privacy
2/
Long term, I think it will end up being bad if people get locked in to these SaaS AI coding tools.
Part of it is about privacy versus spying and surveillance.
But, it is also about preventing someone else from having that kind of control over you, your source of income, your business, etc.
So...
#AI #AIAgent #AICoding #AICodingTools #ArtificialIntelligence #Claude #GLM #LargeLanguageModels #LLM #Privacy #SelfSovereignty #Spying #Surveillance
1/
For better or worse, many people are using AI coding tools to help them write software.
(And, I don't mean "vibe coding". How I have seen software engineers use AI coding tools and non-technical people use them tends to be different.)
Long term...
#AI #AIAgent #AICoding #AICodingTools #ArtificialIntelligence #Claude #GLM #LargeLanguageModels #LLM #Privacy #SelfSovereignty #Spying #Surveillance
mastodon.social
4/ So, how can you mitigate some of the harmful ways that LLMs could be used, as it relates to PRIVACY — I don't think it is reasonable to expect people to stop using LLMs. I think a key part of a way that this can be addressed is — LLM should to be run LOCALLY. People after better off running LLMs LOCALLY on their own computers — to remove some of the vectors by which they could be spied on. In addition to that — ... #AI #ArtificialIntelligence #LargeLanguageModels #LLM #Privacy
4/
So, how can you mitigate some of the harmful ways that LLMs could be used, as it relates to PRIVACY —
I don't think it is reasonable to expect people to stop using LLMs.
I think a key part of a way that this can be addressed is — LLM should to be run LOCALLY.
People after better off running LLMs LOCALLY on their own computers — to remove some of the vectors by which they could be spied on.
In addition to that —
...
#AI #ArtificialIntelligence #LargeLanguageModels #LLM #Privacy
Your voice is a unique identifier that can be faked.
Have you ever talked into a phone? Spoken while on a video call? Spoken in public while there were unknown (to you) listening devices? Spoken at home near a "smart" TV? Etc?
You can be tracked by your voice.
You can be identified by your voice.
This same voice recognition technique also makes it so your voice can be synthesized — making you say anything with a "deepfake".
#Privacy #Speech #SpeakerRecognition #Spying #Surveillance #Voice
Google is apparently testing a new reCAPTCHA method that prompts you to turn on your device's camera to prove you are human by scanning your hands.
I assume this will eventually be mandatory, just like the current reCAPTCHA.
https://reclaimthenet.org/googles-new-recaptcha-wants-your-camera-access-and-21-points-of-your-hand
Interesting ... Electric car vendor polestar withdraws from the US market.
Why? Because they use extensive networking for data colleciton. And as we all know, the US are the most privacy and data protection aware country in the world. Therefore it's only logical that they're banned from the US market, as long as they don't offer data friedly cars without connectivity.
Guess what, Polestar prefers withdrawing rather than changing their data and connection policy. Fortunately, there are alternatives to Polestar. Spoiler: Tesla isn't.
heise.de
Extensive networking for data collection proves to be Polestar's downfall. The Chinese automaker must leave the US market.
🚨 This Week In Privacy #59 will be live in 30 minutes, it's a quiet news week, so we'll be taking questions from the community and covering the latest privacy & security news.
Join us live and chat with the community! 😊
streamyard.com
It's a quiet news week, so we're diving into questions from the community and discussing a few less interesting stories. Join us for This Week In Privacy #59
A little reading to put in the queue for the weekend...we've updated our privacy policy (https://quad9.net/privacy/policy/) AND are sharing a blog to explain the changes.
https://quad9.net/news/blog/were-updating-our-privacy-policy/
As always, all respectful feedback and questions are welcome! 🫶😍
Graphic with a person holding a magnifying glass next to a speech bubble saying "Privacy Update" and the quad9 logo below.
Co prawda jestem już z Wami od jakiegoś czasu, jednak po drodze zaliczyłem kilka przeprowadzek - dokładnie trzy, z czego wszystkie pomiędzy własnymi instancjami 🙃 (obecnie Akkoma). Przez ten czas trochę się zmieniło, dlatego pomyślałem, że warto odświeżyć swój wizerunek i przedstawić się ponownie.
Nie będzie chyba zaskoczeniem jeśli napiszę, że lwia część mojej aktywności na fedi ma związek z tematami prywatności i bezpieczeństwa w cyfrowym świecie.
Hobbystycznie bawię się w #selfhosting, czyli staram się hostować samodzielnie co tylko mogę i na ile mi wystarcza na to czasu.
Jestem “adwokatem” #opensource, używam otwartych rozwiązań gdzie tylko mogę. Właściwie to na każdym urządzeniu, które posiadam w domu (szczegóły w profilu). Lubię eksperymentować ze wszystkim, pod co mogę się podpiąć i znam znaczenie słowa backup 😉
Od niedawna prowadzę swojego bloga w tematyce selfhostingu i nie tylko: brtk.eu
Poza tym od nieco dłuższego czasu prowadzę także innego bloga poświęconego ogólnie tematyce wolności i prywatności w sieci: wolnoscwkieszeni.pl
Moim największym wrogiem jest czas, a raczej jego deficyt, ale w miarę możliwości wracam zarówno na fedi jak i na swoje blogi.
W wolnych chwilach jak już uda mi się odkleić od ekranu, wciąga mnie dobra lektura. Poza tym lubię sporty zarówno zimowe jak i letnie, czyli góry i jeziora o każdej porze roku, odpowiednio z buta lub na desce, wpław lub na łyżwach.
Mówiłem już, że moim wrogiem jest czas?
social.brtk.eu
Regardless of governance, seemingly every nation on the planet demands zero privacy for its citizens.
How the hell did we get here so quickly?
It saddens me that many people do not see far enough to understand well what we are losing while losing privacy rights and trivializing data protection. It is so much more than most think. This affects our intimacy, our safety, our social lives, our freedoms, and all our human rights.
It goes well beyond targeted advertising. Attacks on privacy lead to direct increases in authoritarianism and dictatorial governance.
We must care much more about it than we do now. It is critical to ourselves as individuals, but also to democracy and society as a whole.
It saddens me that many people do not see far enough to understand well what we are losing while losing privacy rights and trivializing data protection. It is so much more than most think. This affects our intimacy, our safety, our social lives, our freedoms, and all our human rights.
It goes well beyond targeted advertising. Attacks on privacy lead to direct increases in authoritarianism and dictatorial governance.
We must care much more about it than we do now. It is critical to ourselves as individuals, but also to democracy and society as a whole.
E2EE zero-knowledge encrypted notes & task manager app. Offline-first PWA, self-hostable. Official free instance at reapps.eu. AGPL-3.0 License. Coming soon - native mobile apps (iOS & Android)
https://github.com/fundacja-reborn/reapps
#privacy #opensource #e2ee #zeroknowledge #foss #selfhosted #pwa #android #ios
github.com
E2EE zero-knowledge encrypted notes & task manager app. Offline-first PWA, self-hostable. Official free instance at reapps.eu. AGPL-3.0 License. Coming soon - native mobile apps (iOS & Andr...
Keybase is dead! Long live Keyoxide!
https://keyoxide.org/aspe%3Akeyoxide.org%3AGK4JFFYSVEI5NMLLGAXX22QZAU
Fingerprint: GK4JFFYSVEI5NMLLGAXX22QZAU
**#Keybase #Keyoxide #Hackers #Security #Privacy #Identity #Encryption**
keyoxide.org
Modern and secure platform to manage a decentralized identity based on cryptographic keys
just an edited anime video
credit: keynor
#privacy #ageverification #digitalsurveillance #cybersecurity
anime opening about age verification
Palantir nein, Datenanalyse ja
‚Die grüne Partei diskutiert das Für und Wider der Zusammenarbeit der Polizei mit dem US-Konzern Palantir. Die Urabstimmung „Stoppt Palantir, sofort!“ wird Anfang Juli in Baden-Württemberg stattfinden. Auch in Nordrhein-Westfalen votierten die Landesgrünen einstimmig gegen Palantir. Aber es geht fast nur um den Tech-Giganten und kaum darum, die automatisierte Datenanalyse zu hinterfragen.…‘
https://netzpolitik.org/2026/gruene-palantir-nein-datenanalyse-ja/
Die Verknüpfung und automatische Analyse möglichst vieler Daten bleibt ein totalitäres Konzept auch ohne Palantir!
#Palantir #Grüne #Überwachung #Deutschland #Datenschutz #Datenanalyse #Privacy
netzpolitik.org
Die grüne Partei diskutiert das Für und Wider der Zusammenarbeit der Polizei mit dem US-Konzern Palantir. Die Urabstimmung „Stoppt Palantir, sofort!“ wird Anfang Juli in Baden-Württemberg stattfinden. Auch in Nordrhein-Westfalen votierten die Landesgrünen einstimmig gegen Palantir. Aber es geht fast nur um den Tech-Giganten und kaum darum, die automatisierte Datenanalyse zu hinterfragen.
🤯 Instagram is testing new iOS push notifications that include a profile photo. Each time the notification is shown on your screen, it triggers a GET request to fetch that image, letting Meta track every on-screen impression.
The app still misuses push notifications to send detailed device analytics about the device (uptime, battery, volume, locale, timezone, memory, CPU, etc.)
Screenshot of the new push notification with a profile photo shown in Notification Center
A GET request sent by Instagram when the notification was shown on screen.
Defend the open Internet 🌐
Digital ID checks behind the social media ban and beyond blow a hole in free expression and privacy.
VPN restrictions and encryption-busting device scanning are due to follow.
As a UK grassroots organisation, we need you to help fight for our human rights.
Donate ⬇️
https://action.openrightsgroup.org/build-our-grassroots-power-defend-open-internet
#StopKillingTheInternet #socialmediaban #vpn #encryption #e2ee #privacy #freeexpression #digitalrights #humanrights
action.openrightsgroup.org
Fight back with grassroots power Open Rights Group was founded by members of the public who decided the UK needed an organisation that would fight for their digital rights. Ever since, this grassroots support has been fundamental to who we are and how we win. ORG doesn’t accept money from the government or big tech. We need your support to help us build a solid grassroots base that will resist these latest attacks and save the open Internet. Every donation will make a real difference. £25 could help produce campaign materials for a local action.
This was absolutely fantastic!
I highly recommend everyone to watch this interview when you have the time. If you're on the Fediverse, I think you're gonna love it.
Thank you Gowanus,
I love you too ❤️
youtube.com
Hasan sat down with Gowanus, the spokespuppet for the emerging Luddite Movement, to better understand why Gen Z is so obsessed with the 90s and the larger ba...
just an edited anime video
credit: keynor
#privacy #ageverification #digitalsurveillance #cybersecurity
anime opening about age verification
This was absolutely fantastic!
I highly recommend everyone to watch this interview when you have the time. If you're on the Fediverse, I think you're gonna love it.
Thank you Gowanus,
I love you too ❤️
youtube.com
Hasan sat down with Gowanus, the spokespuppet for the emerging Luddite Movement, to better understand why Gen Z is so obsessed with the 90s and the larger ba...
Do not provide your ID or facial scan to access social media.
I repeat, do NOT provide your ID or facial scan to access social media when requested.
This is not a drill.
If everyone refuse to comply, and let their accounts dormant instead, I promise you the platforms themselves, with their immense budget and network of lobbyists, are going to fight these absurd laws to recover their users.
They need you more than you need them.
Make them fight for your rights.
Do not comply.
Spread the word and boycott ID checks ✊
#StopIDSurveillance #AgeVerification #Privacy #HumanRights #Democracy #Safety #MassSurveillance #Authoritarianism
🚨 This Week In Privacy #58 will be live in 30 minutes, we'll be discussing GrapheneOS' new Android 17 experimental release and also covering the latest privacy & security news.
Join us live and chat with the community! 😊
streamyard.com
Android 17 has officially launched and GrapheneOS has just released an experimental build with a stable release coming soon, the United States controversial Foreign Intelligence Surveillance Act has expired but spying will continue till March 2027, AMD has striped hardware cryptography from it's consumer CPUs and more! Join us for This Week In Privacy #58
Wie entsteht mein #Schufa-Score? #BGH prüft Auskunftsanspruch | heise conferences https://www.heise.de/news/Wie-entsteht-mein-Schufa-Score-BGH-prueft-Auskunftsanspruch-11337447.html @BGH_Bund #Datenschutz #privacy #DSGVO #GDPR #scoring
heise.de
Der Schufa-Score gilt unter Kritikern als „Blackbox“. Der BGH prüft, inwieweit die Auskunftei Betroffene über ihr Berechnungsverfahren aufklären muss.
Wie entsteht mein #Schufa-Score? #BGH prüft Auskunftsanspruch | heise conferences https://www.heise.de/news/Wie-entsteht-mein-Schufa-Score-BGH-prueft-Auskunftsanspruch-11337447.html @BGH_Bund #Datenschutz #privacy #DSGVO #GDPR #scoring
heise.de
Der Schufa-Score gilt unter Kritikern als „Blackbox“. Der BGH prüft, inwieweit die Auskunftei Betroffene über ihr Berechnungsverfahren aufklären muss.
After five years, The Digital Identity Event Horizon is published in full today: three problem statements, ten key findings, and dozens of recommendations across policy, protocol, legal, and social contexts.
It's the largest research study in New Design Congress' eight-year history: eight case studies, hundreds of citations, dozens of participants from government, intelligence, civil society, technology, and the field itself.
It is also, without exaggeration, the most alarming body of work we have ever produced.
The argument is straightforward and difficult to reckon with: Digital identity makes societies brittle. In 2026, we find ourselves in an era of digital identity fetishism: flawed age verification schemes, biometric and facial-recognition authenticators, and fragile state-backed identity programmes are rolling out at an unprecedented rate. And every one of them, whether current or emerging, remains vulnerable to social engineering. The success rate for a non-technical attack on a user is now three out of four. These attacks cost US companies an estimated $1.6 billion in the five years to 2017 alone; by 2024, fraud runs to hundreds of billions worldwide.
READ IT HERE https://newdesigncongress.org/en/report/2026/the-digital-identity-event-horizon/
#digitalidentity #privacy #eupol #did #politics #threatmodelling
A glossy white sculptural face, slumped and partly melted like soft porcelain, against a pale blue-grey background. Its own features are smooth and near-eyeless, while a single realistic blue eye is set high and off-centre on the forehead, staring out.
If you have to upload a piece of information to validate your age or identity, it is not privacy-preserving.
Stop privacy-washing surveillance tech.
Stay alert about false privacy claims.
After five years, The Digital Identity Event Horizon is published in full today: three problem statements, ten key findings, and dozens of recommendations across policy, protocol, legal, and social contexts.
It's the largest research study in New Design Congress' eight-year history: eight case studies, hundreds of citations, dozens of participants from government, intelligence, civil society, technology, and the field itself.
It is also, without exaggeration, the most alarming body of work we have ever produced.
The argument is straightforward and difficult to reckon with: Digital identity makes societies brittle. In 2026, we find ourselves in an era of digital identity fetishism: flawed age verification schemes, biometric and facial-recognition authenticators, and fragile state-backed identity programmes are rolling out at an unprecedented rate. And every one of them, whether current or emerging, remains vulnerable to social engineering. The success rate for a non-technical attack on a user is now three out of four. These attacks cost US companies an estimated $1.6 billion in the five years to 2017 alone; by 2024, fraud runs to hundreds of billions worldwide.
READ IT HERE https://newdesigncongress.org/en/report/2026/the-digital-identity-event-horizon/
#digitalidentity #privacy #eupol #did #politics #threatmodelling
A glossy white sculptural face, slumped and partly melted like soft porcelain, against a pale blue-grey background. Its own features are smooth and near-eyeless, while a single realistic blue eye is set high and off-centre on the forehead, staring out.
Palantir in Deutschland
Überwachung first, Bedenken second!
‚Bundesinnenminister #Dobrindt hält an der Überwachungssoftware #Palantir fest. Eine taz-Recherche zeigt: Damit steht er fast alleine da. Ein Grund zur Entwarnung ist das nicht…..‘
#Überwachung #Bundesregierung #Datenschutz #Privacy #Antireport
taz.de
Bundesinnenminister Dobrindt hält an der Überwachungssoftware Palantir fest. Eine taz-Recherche zeigt: Damit steht er fast alleine da. Grund zur Entwarnung ist das nicht.
Fort Wayne City Council will vote on July 14th to continue or stop the Flock partnership here in Fort Wayne.
Here is the link to the DE-FLOCK FORT WAYNE'S PETITION:
https://flockblockindiana.my.canva.site/
Please help and sign the petition to Stop Flock. Please also share the link to the petition. There is only a couple weeks before the vote. - Thanks
#DeFlock #FortWayne #AllenCounty #Indiana #Flock #Petition #Privacy #Rights #CityCouncil #Vote #StopFlock #ALPR #PublicSurveillance
Here is the link to the DE-FLOCK FORT WAYNE'S PETITION: https://flockblockindiana.my.canva.site/ #DeFlock #FortWayne #Petition #Privacy #Rights #CityCouncil
Across Africa, the State Department has demanded access to health data for millions of people as a condition of giving countries billions of dollars in aid needed to address HIV, malaria, tuberculosis and other illnesses.
https://www.propublica.org/article/trump-state-department-africa-uganda-aid-medical-data-privacy?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon-post
#News #Geopolitics #Politics #Africa #Uganda #Trump #Health #Data #Privacy
propublica.org
The United States is requiring access to health data as part of lifesaving aid deals with African countries. The U.S. says the data will be aggregated and anonymized, but privacy experts fear the information could be misused or exploited.
This was definitely NOT on my bingo card for this year:
European Commission president Ursula von der Leyen taking a moment between G7 meetings to promote the launch of the closed-source, for-profit network #WSocial.
I fear this may be a harbinger of things to come: MANDATORY AGE VERIFICATION for social media across Europe. I hope I'm wrong on this.
a screenshot of a recent LinkedIn post by W Social's co-founder Ingmar Rentzhog that reads: "Kind of cool to see Ursula von der Leyen warming up the audience for our W launch tomorrow. Posted between her G7 meetings on Instagram (today). Perfect timing." and below there is a screenshot from the video he recorded on Instagram Stories, where von der Leyen says: "Guess where I will be next Wednesday?" The W in Wednesday is the W Social logo
This was definitely NOT on my bingo card for this year:
European Commission president Ursula von der Leyen taking a moment between G7 meetings to promote the launch of the closed-source, for-profit network #WSocial.
I fear this may be a harbinger of things to come: MANDATORY AGE VERIFICATION for social media across Europe. I hope I'm wrong on this.
a screenshot of a recent LinkedIn post by W Social's co-founder Ingmar Rentzhog that reads: "Kind of cool to see Ursula von der Leyen warming up the audience for our W launch tomorrow. Posted between her G7 meetings on Instagram (today). Perfect timing." and below there is a screenshot from the video he recorded on Instagram Stories, where von der Leyen says: "Guess where I will be next Wednesday?" The W in Wednesday is the W Social logo
NEW: A global movement to defend the open internet 🌐
Stop Killing the Internet brings creators, communities and civil society together to say: the Internet must remain open, private and free.
ORG is joining the movement as the UK moves to ban social media and scan devices.
Find out more ⬇️
#StopKillingTheInternet #StopKillingInternet #socialmediaban #openinternet #privacy #freeexpression #ukpolitics #ukpol
openrightsgroup.org
Stop Killing Games has teamed up with global rights respecting organisations, including Open Rights Group, to form Stop Killing the Internet, a global movement defending the open Internet.
Governments are moving toward bans, scanning, curfews and restrictions that could change the internet for everyone.
#StopKillingTheInternet supports rights-respecting approaches to child protection, privacy, democratic accountability and platform responsibility.
The movement launches on 27 June ⬇️
#StopKillingTheInternet #StopKillingInternet #socialmediaban #openinternet #privacy #freeexpression #ukpolitics #ukpol
“Open Rights Group encourages people around the world who want a human-rights based approach to tackling harm to join this movement."
We can't stand by as governments pursue online safety in ways that gut our rights to privacy and free expression.
🗣️ ORG's @JamesBaker.
#StopKillingTheInternet #StopKillingInternet #socialmediaban #openinternet #privacy #freeexpression #ukpolitics #ukpol
Quote from James Baker, ORG Programme Manager: "Stop Killing the Internet will challenge divisive policies that prescribe the wrong medicine of exclusion, surveillance and control to tackle online harms. It will champion positive rights-respecting alternatives, and promote the work campaigns are doing around the world."
NEW: A global movement to defend the open internet 🌐
Stop Killing the Internet brings creators, communities and civil society together to say: the Internet must remain open, private and free.
ORG is joining the movement as the UK moves to ban social media and scan devices.
Find out more ⬇️
#StopKillingTheInternet #StopKillingInternet #socialmediaban #openinternet #privacy #freeexpression #ukpolitics #ukpol
openrightsgroup.org
Stop Killing Games has teamed up with global rights respecting organisations, including Open Rights Group, to form Stop Killing the Internet, a global movement defending the open Internet.
Just heard @ethanz on the Kill Switch #podcast, and he gave a shout-out to #Mastodon. Came over here to give him a follow and was pleasantly surprised to find I was already following him. His interview is super great:
https://m.youtube.com/watch?v=wbCtoLvgc4Q
I respectfully disagree with several of his takes, but they're all about opinion/perception and not the fundamentals of how the Internet works or doesn't.
#SocialMedia #tech #technology #SurveillanceCapitalism #privacy
youtube.com
Let's get it out of the way: yes, Ethan Zuckerman invented pop-up ads. He's gotten an unfair amount of hate for this, especially since you (yes you!) have pr...
@angusm So uh, without a #VPN, your ISP can potentially view all your web traffic, right?
With a VPN, aren't we just substituting who can potentially view all your web traffic? Instead of the ISP, it's the people at the VPN that can view it?
The "just use a VPN because #privacy" crowd never seems to explain how one would choose a #trustworthy and #secure VPN.
The most interesting thing about the new SearchLeak attack on Microsoft 365 Copilot isn't any single bug. It's that none of the three pieces was dangerous on its own. Varonis combined a prompt injection via a URL parameter, an HTML rendering race condition, and a server-side request forgery in Bing's image search. Each of these is a common bug that security teams usually consider minor. But when you put them together with a Copilot that can access your mailbox, OneDrive, and SharePoint, they create a critical flaw. Microsoft has since patched this issue (CVE-2026-42824).
This is how the attack worked:
* The victim clicks a link. That's the whole interaction. They type nothing.
* The link instructs Copilot to search the mailbox, find sensitive information such as access codes, and place it into an image URL.
* Bing retrieves that image, which sends the stolen data to the attacker's server. Bing serves as the delivery service, allowing the attack to bypass the content security policy intended to stop it.
From the user's perspective, Copilot just pauses for a moment. There is no visible sign that any data has been taken.
In the past, we've spent years rating bugs by their severity on their own. An SSRF here, an HTML injection there—each seemed minor. But when an AI assistant can follow instructions from untrusted input and access your real data, those minor bugs become much more serious. Old types of vulnerabilities become important again in this new context.
If your company uses Copilot or any AI assistant that can access company data, it is important to ask your team how they are rating bugs that affect it. The way we judge what is low risk has changed.
#AI #Cybersecurity #InfoSec #security #privacy #cloud #AttackChain
For a long time, people said the law was behind when it came to deepfake abuse. That seems to be changing. The DOJ took down two sites, CFAKE and SOCFAKE, which prosecutors say had thousands of fake nude images of well-known women, including politicians, journalists, and athletes. This is one of the first big federal actions under the TAKE IT DOWN Act, passed in May 2025. The law makes it a federal crime to publish sexually explicit fake images of an identifiable adult without their consent if the goal is to cause harm.
Here are a few things of note:
* The images may be fake, but the people targeted are real, and so is the harm to their reputation and privacy. The law was created to address this specific problem.
* This effort was international. Italy's cyber police were the first to spot the sites and then shared evidence with France under the Budapest Convention. A suspect was arrested in Nice on June 10.
* The DOJ made it clear that taking down the sites is just the beginning. For anyone running similar sites, seizing the domain is only the first step, not the last.
One important thing to remember: putting a seizure notice on a website can help stop some abuse, but the technology to make these images is cheap and widely available. Law enforcement can go after those who host or profit from this content, but they can't make the technology disappear. This means victims still have to find and report the images themselves, which is tiring and unfair.
If you or someone you know is facing this problem, StopNCII(.)org works with most major platforms to remove nonconsensual images. You can also report it to the FBI at ic3(.)gov. It's good to know these options before you need them.
https://hackread.com/feds-seize-cfake-and-socfake-explicit-deepfakes-women/
#Cybersecurity #Privacy #AI #security #cloud #infosec #DeepFakes
hackread.com
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
I just finished reading Google's new report about a Chinese espionage group that spent over a year inside North American medical and military research networks. What stands out is how ordinary their method was. They used a standard Google Workspace admin feature called a content compliance rule, which lets admins flag emails based on certain words or addresses. The attackers set up one of these rules, called it "Patroit" (misspelling Patriot), and used it to secretly BCC every matching email to a Gmail account they controlled. This gave them a steady stream of sensitive defense, policy, and medical research emails, all through a feature that was working exactly as intended.
Here are a few important points to consider:
- The attackers got in through a REDCap server that was exposed to the internet. Hospitals and universities often use these servers to store clinical research data. The first known break-in happened in September 2023.
- They installed malware called InfiniteRed to steal real login credentials, then used admin accounts to move through the network.
- The data theft relied on a legitimate, built-in feature. There were no suspicious files to detect.
This last point is important. We invest heavily in finding malware and suspicious files. But a configuration rule set up by an admin on an ordinary day just looks like regular work. That’s why it went unnoticed for so long.
If you manage email for your company using Google Workspace or Microsoft 365, check today who can create forwarding and compliance rules, and whether anyone gets notified when those rules change. Taking a few hours to review this now could save you from much bigger problems down the road.
#Cybersecurity #InfoSec #RiskManagement #security #privacy #cloud #email
theregister.com
Google says the intruders were on the hunt for everything from drone tech to pathogens
Do not provide your ID or facial scan to access social media.
I repeat, do NOT provide your ID or facial scan to access social media when requested.
This is not a drill.
If everyone refuse to comply, and let their accounts dormant instead, I promise you the platforms themselves, with their immense budget and network of lobbyists, are going to fight these absurd laws to recover their users.
They need you more than you need them.
Make them fight for your rights.
Do not comply.
Spread the word and boycott ID checks ✊
#StopIDSurveillance #AgeVerification #Privacy #HumanRights #Democracy #Safety #MassSurveillance #Authoritarianism
Do not provide your ID or facial scan to access social media.
I repeat, do NOT provide your ID or facial scan to access social media when requested.
This is not a drill.
If everyone refuse to comply, and let their accounts dormant instead, I promise you the platforms themselves, with their immense budget and network of lobbyists, are going to fight these absurd laws to recover their users.
They need you more than you need them.
Make them fight for your rights.
Do not comply.
Spread the word and boycott ID checks ✊
#StopIDSurveillance #AgeVerification #Privacy #HumanRights #Democracy #Safety #MassSurveillance #Authoritarianism
Do not provide your ID or facial scan to access social media.
I repeat, do NOT provide your ID or facial scan to access social media when requested.
This is not a drill.
If everyone refuse to comply, and let their accounts dormant instead, I promise you the platforms themselves, with their immense budget and network of lobbyists, are going to fight these absurd laws to recover their users.
They need you more than you need them.
Make them fight for your rights.
Do not comply.
Spread the word and boycott ID checks ✊
#StopIDSurveillance #AgeVerification #Privacy #HumanRights #Democracy #Safety #MassSurveillance #Authoritarianism
Using Loupe, we found out that Proton VPN is the only VPN that prevents internal tunnel IP fingerprinting by assigning 10.2.0.2 to all users. Other VPNs, such as Mullvad, assign a static and unique IP per session. This allows iOS apps to track user sessions across apps.
Mullvad is aware of this issue. It is described in this blog:
https://mullvad.net/en/help/why-wireguard
You can download Loupe here:
https://apps.apple.com/app/id6766152470
Proton VPN tunnel internal IP as shown in the Settings app
Proton VPN tunnel internal IP as shown in Loupe
Mullvad VPN tunnel internal IPs as shown in the Settings app
Mullvad VPN tunnel internal IPs as shown in Loupe
Palantir in Deutschland
Überwachung first, Bedenken second!
‚Bundesinnenminister #Dobrindt hält an der Überwachungssoftware #Palantir fest. Eine taz-Recherche zeigt: Damit steht er fast alleine da. Ein Grund zur Entwarnung ist das nicht…..‘
#Überwachung #Bundesregierung #Datenschutz #Privacy #Antireport
taz.de
Bundesinnenminister Dobrindt hält an der Überwachungssoftware Palantir fest. Eine taz-Recherche zeigt: Damit steht er fast alleine da. Grund zur Entwarnung ist das nicht.
Using Loupe, we found out that Proton VPN is the only VPN that prevents internal tunnel IP fingerprinting by assigning 10.2.0.2 to all users. Other VPNs, such as Mullvad, assign a static and unique IP per session. This allows iOS apps to track user sessions across apps.
Mullvad is aware of this issue. It is described in this blog:
https://mullvad.net/en/help/why-wireguard
You can download Loupe here:
https://apps.apple.com/app/id6766152470
Proton VPN tunnel internal IP as shown in the Settings app
Proton VPN tunnel internal IP as shown in Loupe
Mullvad VPN tunnel internal IPs as shown in the Settings app
Mullvad VPN tunnel internal IPs as shown in Loupe
Contra Chrome – A web comic about your browser and privacy from @leah
„It‘s about you. Seven of ten readers will reach this site using Google Chrome, which is a very different road than other browsers like e.g. Firefox.“
#comic #webcomic #web #browser #chrome #privacy #google #en #de #multilang #webcomic #es #it #fr
"Contra Chrome" Comic Cover
This new agentic AI demo from Apple's WWDC was so cool. Apple Intelligence can now log into your accounts, reset a compromised password, and save the new one so you don’t have to remember it.
This is super important because weak and reused passwords still account for a large share of account breaches, and fixing them has always been a hassle. Most people struggle with password hygiene and rarely reset all their accounts. A tool that handles this for you bridges the gap between knowing you should do it and actually doing it.
Here’s why I think it’s a good idea:
1. It targets the main weakness. Most breaches begin with something simple, like a password that has already leaked elsewhere.
2. It takes away the hassle that keeps people from taking action. The best security tool is the one people actually use.
I do have one quick caution. An agent that can change your credentials is powerful, so it’s important to know how Apple keeps it secure and how quickly you can turn it off. Still, the main idea is solid, and it shows how this technology can really help by handling the security tasks people usually avoid. I hope other password managers add this feature too. And always use MFA!
#AI #InfoSec #Cybersecurity #security #privacy #cloud #infosec
gizmodo.com
Agentic AI and security are normally at odds, but this Apple Intelligence feature could be a lifesaver.
For years, we’ve worried about who collects our data. Now, The Washington Post has shown us how it can be used: to charge you as much as it thinks you’ll pay.
The main plaintiff paid $42.40 for a year of the Post in 2024. In 2025, her price jumped to $127.20. Her most recent renewal was $148.40. An algorithm set these prices by analyzing her personal data. She only found out because a New York law requires companies to disclose this practice.
Here are a few details that should concern you:
1. The lawsuit claims the Post created individual profiles from subscribers’ devices and used them to guess the highest price each person would accept.
2. The Post also asks you to link your Amazon account, which gives the pricing system even more of your personal data.
If you ignore the AI buzzwords, this is just old-fashioned price discrimination. The difference is that now the seller knows your income and even your recent browsing history. Most people won’t realize they’re paying a personalized markup, since most states don’t require the kind of disclosure that revealed this case.
If you design these systems, pay close attention to this issue. It’s reasonable to use data to make a product better. But using it to secretly decide who pays more is what courts are now being asked to call deceptive. As disclosure laws spread, it’s wise to set your own standards before regulators do it for you.
gizmodo.com
The lawsuit raises questions about whether Amazon data is being used as well.
Differential privacy is a cornerstone of modern-day #statistics.
It allows the generation of datasets that are statistically relevant for a researcher, but that leak as little as possible about the individuals in the dataset.
It works on several principles:
From 1990 to 2010, the US Census Bureau primarily relied on swapping for the decennial census. Then, they realized that this technique was actually very unsafe, and that it was pretty easy to reconstruct individual records using the published statistics.
They eventually adopted the full differential privacy framework in 2020.
But some people apparently got annoyed with that. And the main culprit was noise addition.
Adding a normal random distribution to the data made the numbers noisy, and some people who rely on the US Census expecting its numbers to be fully accurate were very annoyed.
Who are these people?
Well, one category is that of demographers and social scientists. Still, their mathematical models can be adapted to take into account that they’re dealing with noisy data - especially if the noise gain of distribution is published upfront.
But the most annoyed ones are thos who used the Census data to reconstruct actual records of individuals.
Yes, you read it well. There are people who use public datasets that are supposed to be coarse, and leverage probabilistic models to reconstruct information about individuals.
One big use case in America is, of course, #gerrymandering.
Those nonsense spiky borders can be much more accurate when the Census data allows you exactly to identify who lives where and that’s their ethnicity, so you can dilute the voting powers of some ethnic groups much more efficiently.
Apparently those groups have lobbied the Federal government so much that they got it to release an order that states the following:
Any use of noise infusion is inconsistent with the Department’s policies
This is a serious attempt of a political body to interfere through legislation into technical decisions that should be uniquely delegated to technical specialists - and the academic consensus is currently that of a full differential privacy framework.
Noise infusion is the most effective pillar in the differential privacy framework to prevent identification of individuals in public datasets.
Weakening it is likely to make everyone’s #privacy worse, and benefit only very few and their interests.
desfontain.es
Sadly, taking away valuable disclosure avoidance tools doesn't make fundamental trade-offs go away.
Canada Post has a new service for digital verification that uses their post offices for human verification.
However, what's on the back end of the system that enables digital verification? That's entirely nebulous. Canada Post sold off their tech innovation arm to Deloitte. Who wants to bet Persona is involved?
https://www.canadapost-postescanada.ca/IDplus/
Anyway, Gander (Canadian ATProto social) requires this verification and it's how I found out about it.
canadapost-postescanada.ca
Musify is an open-source Android music app that lets you stream music, listen offline, view lyrics, and create playlists without ads or subscriptions.
It supports SponsorBlock, includes a built-in equalizer, is available on F-Droid, and lets you import or export your data.
A great privacy-friendly alternative to mainstream music streaming apps.
A project introduction banner and landing page header for "Musify". The top shows a stylized landscape banner with a music note icon. Below, the bold title "Musify" is followed by the tagline: "Unlock the full potential of music: Stream effortlessly with one app!" Repository badges at the bottom display project metrics: 4k stars, 361 forks, 1.3M downloads, release v10.0.9, and a GPL-3.0 license.
The mobile home screen interface for the "Musify" app in dark mode. A horizontal scroll at the top showcases "Suggested playlists" and album cards. Below, a "Recommended for you" feed lists tracks with small thumbnail artwork and option menus, featuring artists like Bad Bunny, Dax, Djo, and BTS. The home icon on the bottom navigation bar is active.
A clean, dark-themed mobile "Now Playing" UI from a music app. It features the album artwork for The Weeknd's "Hurry Up Tomorrow," highlighting a close-up profile of a sweating face. Below the art, the text reads "Cry For Me" by "The Weeknd". A blue playback progress bar marks the beginning of the track, positioned above a prominent round blue pause button and standard media control toggles.
The mobile "Library" screen of a dark mode music player application. The top section lists "Custom playlists" with options for "Recently played", "Liked songs", and "Offline songs". Lower down, under "Liked playlists", a single entry displays the album art and title for "The Weeknd - Hurry Up Tomorrow". A bottom navigation bar highlights the Library icon.
Musify is an open-source Android music app that lets you stream music, listen offline, view lyrics, and create playlists without ads or subscriptions.
It supports SponsorBlock, includes a built-in equalizer, is available on F-Droid, and lets you import or export your data.
A great privacy-friendly alternative to mainstream music streaming apps.
A project introduction banner and landing page header for "Musify". The top shows a stylized landscape banner with a music note icon. Below, the bold title "Musify" is followed by the tagline: "Unlock the full potential of music: Stream effortlessly with one app!" Repository badges at the bottom display project metrics: 4k stars, 361 forks, 1.3M downloads, release v10.0.9, and a GPL-3.0 license.
The mobile home screen interface for the "Musify" app in dark mode. A horizontal scroll at the top showcases "Suggested playlists" and album cards. Below, a "Recommended for you" feed lists tracks with small thumbnail artwork and option menus, featuring artists like Bad Bunny, Dax, Djo, and BTS. The home icon on the bottom navigation bar is active.
A clean, dark-themed mobile "Now Playing" UI from a music app. It features the album artwork for The Weeknd's "Hurry Up Tomorrow," highlighting a close-up profile of a sweating face. Below the art, the text reads "Cry For Me" by "The Weeknd". A blue playback progress bar marks the beginning of the track, positioned above a prominent round blue pause button and standard media control toggles.
The mobile "Library" screen of a dark mode music player application. The top section lists "Custom playlists" with options for "Recently played", "Liked songs", and "Offline songs". Lower down, under "Liked playlists", a single entry displays the album art and title for "The Weeknd - Hurry Up Tomorrow". A bottom navigation bar highlights the Library icon.
🚨 This Week In Privacy #57 will be live in 30 minutes, we'll be talking about Flock automated license readers framing innocent people and covering the latest privacy & security news.
Join us live and chat with the community! 😊
streamyard.com
Automated license readers by Flock have tied a person who was miles away to a violent crime effectively framing them, the state of Massachusetts in the US has passed a privacy bill to stop the sale of precise location data and more! Join us for This Week In Privacy #57.
Palantir tracks everyone. So we built a site that tracks Palantir. They've been watching us. Now we can watch them.
Contracts. Lawsuits. Executive pay. Global footprint. Lobbying activity. Media strategies. All in one place.
Preview of online dashboard displaying a variety of stats.
Komplettes Whatsapp-Verzeichnis abgerufen und ausgewertet
Wiener Forscher haben alle WhatsApp-Nummern abgerufen. Die 3,5 Milliarden Profile sind der größte Datenabfluss der Geschichte – und übler, als man meinen würde……
heise.de
Wiener Forscher haben alle WhatsApp-Nummern abgerufen. Die 3,5 Milliarden Profile sind der größte Datenabfluss der Geschichte – und übler, als man meinen würde.
Ein Kettenbrief warnt vor KI-Zugriff auf WhatsApp-Chats. Die Behauptung ist falsch – und trotzdem gibt es ein großes Problem bei WhatsApps #Datenschutz.
‚WhatsApp erhebt unabhängig von #MetaAI und unabhängig vom erweiterten Chat-Datenschutz umfangreiche Metadaten: Telefonnummer, Geräteinformationen, IP-Adresse, Timestamps von Nachrichten und Anrufen, Kontaktlisten, Online-Status und Standortdaten. Diese Metadaten liegen nicht Ende-zu-Ende-verschlüsselt vor und können mit anderen Meta-Diensten geteilt werden – gestützt auf das rechtlich umstrittene Konstrukt des „berechtigten Interesses“ nach DSGVO….‘
heise.de
Ein Kettenbrief warnt vor KI-Zugriff auf WhatsApp-Chats. Die Behauptung ist falsch – und trotzdem gibt es ein großes Problem bei WhatsApps Datenschutz.
Government Rolling Age Verification and Online Harms into One Giant Mess
Reports suggest that the Canadian government is introducing a bill that would combine online harms and age verification legislation.
https://www.freezenet.ca/government-rolling-age-verification-and-online-harms-into-one-giant-mess/
#Censorship #News #Privacy #Security #AgeVerification #Canada #FreeSpeech #legislation #OnlineHarms
freezenet.ca
Reports suggest that the Canadian government is introducing a bill that would combine online harms and age verification legislation.
An open-source project mapping license plate readers. These systems continuously record your movements without a warrant, probable cause, or even reasonable suspicion.
deflock.org
Find license plate readers (LPRs) near you.
"I ranked EVERY #MessagingApp for #PRIVACY! These are the results..." by #TheHatedONe #Privacy #Security #Surveillance #MassSurveillance
youtube.com
Most private messenger is that beats my privacy scoring table. Many have tried, only few have succeed. Support my work: https://www.patreon.com/thehatedone I...
Stop for a moment If you hear my voice know that I suffered greatly to make it reach you.Don't ignore me and turn your back. This link tells my story during the war on Gaza Give yourself two minutes and read it Show your humanity, your mercy, and your compassion. Please, we implore you, share this post and don't let it stop with you🙏 😢 https://www.feijoadispatch.nz/p/the-story-of-muhammad-and-his-familys?utm_campaign=post&utm_medium=web
#gaza #palestine #privacy #painting #paris #usa #HAshtagGames #HEalth #HAmburg #HA #TRUmp #TRavel #FRance #ESPeranto #CAnada #CAt #Cats
feijoadispatch.nz
"I went to see my house, which is near the yellow line, but I found nothing but desert."
Age verification ...
#privacy #privacymatters #ageverification #socialmedia #surveillance #dataskydd #dataprotection #gdpr #deepstate
A meme related to age verification on the Internet
✨ A sparkle icon appears in an app that no one in IT approved. The help desk can't explain it, and it's already processing your data! This kept coming up in conversations with other CIOs, so I wrote about it in my latest Forbes piece.
The pattern repeats across so many vendors; here are just a few:
・Zoom auto-enabled AI Companion on host accounts, with recordings and full transcripts already defaulted on
・Microsoft 365 Copilot activates for every admin if your tenant holds a single paid license, and opting out means building a special security group
・Google's Workspace Intelligence shipped default-on for Gmail, Drive, Chat, and Calendar, with admin controls lagging the live feature by up to 72 hours
・OpenAI disables connectors by default for Enterprise customers but enables them for Business. Same vendor, opposite defaults.
Every default-on feature just transfers governance work from the vendor to you, along with wiretap exposure and e-discovery sprawl that nobody signed up for.
My ask of vendors is simple: ship AI features off by default and give admins an evaluation window measured in weeks, not days. Until that happens, assume the next AI feature is already live in your tenant. Review your configurations like it's a recurring operational task, because it is.
Full piece here: https://www.forbes.com/councils/forbestechcouncil/2026/06/10/default-on-ai-are-saas-vendors-outsourcing-their-risk-to-you
#RiskManagement #Forbes #ForbesTechnologyCouncil #ForbesTechCouncil #leadership #security #privacy #cloud #infosec #cybersecurity #AI #SaaS
@forbes@flipboard.com @Forbes@newsie.social @forbestechcncl @RHR_International @depaulu #DePaul #DepaulU #DePaulUniversity #DePaulCDM
Information and references 📚🧵
Portal of resources about age verification (EFF):
https://www.eff.org/issues/age-verification
Everything You Wanted to Know About a Kids’ Social Media Ban (Michael Geist):
https://www.michaelgeist.ca/2026/06/everything-you-wanted-to-know-about-a-kids-social-media-ban-but-were-rightly-afraid-to-ask-a-faq-on-age-verification-and-mandated-id-for-everyone/
How and Why to Fight Back Against Social Media Bans (EFF):
https://www.eff.org/deeplinks/2026/06/how-and-why-fight-back-against-social-media-bans
Transgender youth 5 times more likely to attempt suicide, study finds (CBC):
https://www.cbc.ca/news/canada/prince-edward-island/pei-transgender-youth-suicide-1.6487787
Age Verification Lobby Pushes For Age Verification Checks For VPN Use (Reclaim The Net):
https://reclaimthenet.org/lobbyists-propose-vpn-age-checks
Reddit User Uncovers Who Is Behind Meta’s $2B Lobbying for Invasive Age Verification Tech (Gadget Review):
https://www.gadgetreview.com/reddit-user-uncovers-who-is-behind-metas-2b-lobbying-for-invasive-age-verification-tech
Firm that verifies mugshots for ChatGPT and Roblox feeds US surveillance apparatus with 269 distinct checks (Cybernews):
https://cybernews.com/privacy/persona-leak-exposes-global-surveillance-capabilities/
Discord says hackers stole government IDs of 70,000 users (Ars Technica):
https://arstechnica.com/security/2025/10/discord-says-hackers-stole-government-ids-of-70000-users/
(9/9)
#StopIDSurveillance #Privacy #HumanRights #AgeVerification #CanPoli #Canada
arstechnica.com
As more sites require IDs for user age verification, expect more such breaches to come.
Information and references 📚🧵
Portal of resources about age verification (EFF):
https://www.eff.org/issues/age-verification
Everything You Wanted to Know About a Kids’ Social Media Ban (Michael Geist):
https://www.michaelgeist.ca/2026/06/everything-you-wanted-to-know-about-a-kids-social-media-ban-but-were-rightly-afraid-to-ask-a-faq-on-age-verification-and-mandated-id-for-everyone/
How and Why to Fight Back Against Social Media Bans (EFF):
https://www.eff.org/deeplinks/2026/06/how-and-why-fight-back-against-social-media-bans
Transgender youth 5 times more likely to attempt suicide, study finds (CBC):
https://www.cbc.ca/news/canada/prince-edward-island/pei-transgender-youth-suicide-1.6487787
Age Verification Lobby Pushes For Age Verification Checks For VPN Use (Reclaim The Net):
https://reclaimthenet.org/lobbyists-propose-vpn-age-checks
Reddit User Uncovers Who Is Behind Meta’s $2B Lobbying for Invasive Age Verification Tech (Gadget Review):
https://www.gadgetreview.com/reddit-user-uncovers-who-is-behind-metas-2b-lobbying-for-invasive-age-verification-tech
Firm that verifies mugshots for ChatGPT and Roblox feeds US surveillance apparatus with 269 distinct checks (Cybernews):
https://cybernews.com/privacy/persona-leak-exposes-global-surveillance-capabilities/
Discord says hackers stole government IDs of 70,000 users (Ars Technica):
https://arstechnica.com/security/2025/10/discord-says-hackers-stole-government-ids-of-70000-users/
(9/9)
#StopIDSurveillance #Privacy #HumanRights #AgeVerification #CanPoli #Canada
arstechnica.com
As more sites require IDs for user age verification, expect more such breaches to come.
Canadians need better privacy protections 🔒🧵
Canadians need better and stronger privacy protections, not less. A ban on social media for children is effectively a mandatory ID checks for all adults.
I hope that you will consider these important risks in your evaluation this week, and that you will favour regulations to make social media safer for everyone instead. Excluding children from social media is a decision that should remain a parent's responsibility, not a government one.
As a Canadian citizen who care deeply for the safety of all Canadians, I thank you for taking the time to read this letter and consider my concerns.
(8/9)
#StopIDSurveillance #Privacy #HumanRights #AgeVerification #CanPoli #Canada
This is nothing like showing ID at the liquor store 🪪🧵
Finally, it's important to take note that age verification online is nothing like showing an identification card to be able to purchase alcohol. This often-used comparison is disingenuous.
If we stay within this analogy of the analogue world, then online age verification is more comparable to showing an official identification card at the liquor where the cashier would make thousands of photocopies of it, store some in an unlocked drawer, share some with all other liquor stores worldwide, also share some with grocery stores, newspapers, their friends, and random strangers on the street. Then leave a bunch of copies on the floor, for anyone to grab.
Nobody would accept to show their ID at the liquor store if it was happening that way. But sadly, most people ignore the extent to which data is shared, lost, and stolen online, on a daily basis.
(7/9)
#StopIDSurveillance #Privacy #HumanRights #AgeVerification #CanPoli #Canada
Adults would be harmed by this ban 🧑🧵
In addition to the already stated dangers of increasing the risk of identity theft, fraud, devaluation of official documents, attacks on the most vulnerable, discrimination against marginalized groups, and self-censorship, a ban of social media for children would give a free pass for corporate platforms to perpetuate the harm they also currently cause to adults.
All that is harmful to children on social media is also harmful to adults.
Social media are an integral part of modern communication and it has many benefits, but commercial platforms have been exploiting their users for decades, much beyond what our society should deem reasonable.
It is time for the Canadian government to regulate social media, yes. Not by excluding children and teens from it, but by obligating platforms to be responsible in protecting the safety and sanity of its users. It should be more profitable to run a platform that is open, transparent, and healthy for its users than one that is not.
A ban on addictive algorithms and data reselling, strong privacy protections and user controls, mandated transparency and effective moderation, an obligation to implement proven safety measures, and important consequences for platforms that prioritize profits over users' safety would all be much more effective at protecting everyone on social media, including the children.
(6/9)
#StopIDSurveillance #Privacy #HumanRights #AgeVerification #CanPoli #Canada
Children would be harmed by this ban 🧒🧵
Despite how it might feel at first glance, a ban of social media for children would actually create new harm for children.
First, many children would try to circumvent the ban, this is already happening in countries with such legislation, like Australia.
Second, children who cannot circumvent the ban might be pushed to darker corners of the web to rebuild their social lives, on worse platforms, without any moderation or safety measures. Moreover, being pushed out of the legal frame, these teens and children might feel less inclined to report any abuses experienced to a trustworthy adult, effectively making the situation much worse.
Then, children living with abusive or unsupportive families could lose their support network overnight. It is quite common for 2SLGBTQ+ teens and children living with families that do not support them to find emotional support in a network of peers online. This is often vital to survival. Losing this support suddenly can have devastating permanent consequences.
(5/9)
#StopIDSurveillance #Privacy #HumanRights #AgeVerification #CanPoli #Canada
Lobbyists are influencing policies more than experts and advocates 💰🧵
Unfortunately, there are many groups that are putting pressure on governments all around the world to increase surveillance under the guise of protecting the children. The rapidly growing, for-profit, age assurance industry has all to gain in influencing governments to push for age verification processes and bans of social media for children.
Even Meta has reportedly invested heavily in a network of organisations to discreetly lobby for age verification at the operating system level.
Meanwhile, nonprofit organisations and advocates who genuinely care for the well-being of the public have been warning for years about the dangers of age verification and social media ban legislation, but have much less money and power to influence policies at the government level.
I implore you, as the elected representatives for all Canadians, to consider this threat of corporate influence cautiously in your decisions, to listen to the warnings from advocates and experts in the field, and to prioritize first and foremost the well-being and safety of all Canadians.
(4/9)
#StopIDSurveillance #Privacy #HumanRights #AgeVerification #CanPoli #Canada
A ban does nothing to address the harm caused by social media 🧨🧵
The things that harm children on social media also harm adults. A ban of social media for children sadly does nothing to reduce the harm caused by social media, it only reserves it to adult, and postpones it for children.
The addictive and manipulative black-box algorithms, the privacy-intrusive data collection, the harmful violent content and misinformation, are all hurting adults as well.
Moreover, children who do not go around the ban before the restricted age (other implementations have shown that most children will attempt to circumvent the ban) will find themselves completely ill-equipped to protect themselves from social media harm once they come of age, and will be made even more vulnerable by our own legislation claiming to protect them.
A true solution to this is to regulate corporate platforms to forbid addictive algorithms, targeted advertising, intrusive data collection, third-party data sharing, violent content, weak moderation, manipulative tactics, and other abusive mechanisms used by certain platforms to prioritize profits over the safety and sanity of its users.
This would not only help children, but adults and society as a whole as well.
(3/9)
#StopIDSurveillance #Privacy #HumanRights #AgeVerification #CanPoli #Canada
Age verification processes are dangerous to Canadians ⚠️🧵
Unfortunately, there is no magical solution: A ban of social media for children necessarily means a requirement to identify every adult using social media. This means that intrusive age-verification processes would have to be put in place by social media platforms, therefore collecting an immense quantity of very sensitive information from every Canadian adult using social media.
This is dangerous in many ways.
First, it means many (if not most) platforms will delegate this task to private for-profit third-party vendors with little to no incentive to protect this information properly. We have already seen data breaches of sensitive information in this process. This would increase the risk of Canadians becoming victims of identity theft and fraud, and would diminish the value of Canadian identification documents over time.
Secondly, this can create a permanent record of legal identities tied to social media accounts. This would endanger users who rely on pseudonymity online for safety, such as victims of domestic violence, trans and gender diverse people (for whom the legal identification might not match the name used on social media), performers using stage names online, and other people that are part of marginalized groups regularly targeted online (women, people of colour, 2SLGBTQ+ people, etc.).
All these vulnerable groups would only be one data breach away from incredible harm with the implementation of mandatory identity checks to access social media.
Furthermore, risking to link every social media account to a legal identity can have a silencing effect for activists, journalists, and whistleblowers. This can lead to self-censorship of topics important to discuss publicly in a free democracy.
(2/9)
#StopIDSurveillance #Privacy #HumanRights #AgeVerification #CanPoli #Canada
A thread to Stop ID Surveillance from coming to Canada ⛔️🧵
Yesterday, I sent a long letter the Canadian Prime Minister Mark Carney, Culture Minister Marc Miller, and the leaders of all other major federal parties in Canada.
I sent this letter to voice my concerns about the upcoming bill that is planned to be introduced today at 5 p.m. ET, to propose a ban of social media for children, therefore requiring all social media platforms to identify every adults accessing it.
This is a long thread of what I wrote (mute me for one hour if you don't want to see it).
Feel free to copy any parts you want to share in your own letter of opposition sent to your representatives this week.
Here's how to find their contact information: https://www.ourcommons.ca/members/en/search
(1/9)
#StopIDSurveillance #Privacy #HumanRights #AgeVerification #CanPoli #Canada
ourcommons.ca
Current Members of Parliament - Members of Parliament - House of Commons of Canada
PRIVACY ALERT!
Please boost for reach! 🚨👇
The Canadian government is planning
to introduce a bill on Wednesday, June 10th, to mandate identity surveillance of every adult using social media in Canada! 👁️🗨️
https://globalnews.ca/news/11894610/canada-social-media-ban-teens-online-harms-bill/
A ban on social media for children
does nothing to reduce the harm caused by commercial social media. Instead, it means mandatory ID scans for every adult using social media.
We must stop this authoritarian proposal,
and demand our government focuses instead on reducing the harm for everyone using social media.
It has been explained by experts over and over that bans of social media are shortsighted lazy measures that do not help in the end, but in fact harm everyone, including the children.
Stop ID surveillance in Canada! ✊⛔️
Contact your MP and our Prime Minister TODAY to voice your opposition. Here's where to find their contact information: https://www.ourcommons.ca/members/en/search
If you aren't aware of this issue yet, here's more information on age verification: https://www.eff.org/issues/age-verification
#AgeVerification #Privacy #Canada #HumanRights #CanPoli #StopIDChecks #StopIDSurveillance
eff.org
Age verification (or age-gating) laws generally require online services to check, estimate, or verify all users’ ages—often through invasive tools like ID checks, biometric scans, or other dubious “age estimation” methods—before granting them access to certain online content or services. Governments in the U.S. and around the world are increasingly adopting these restrictive measures in the name of protecting children online. But in practice, these systems create dangerous new forms of surveillance, censorship, and exclusion. Technologically, the age verification process can take many forms: collection and analysis of government ID, biometric scans, algorithmic or AI-based behavioral or user monitoring, digital ID, the list goes on. But no matter the method, every system demands users hand over sensitive and immutable personal information that links their offline identity to their online activity. Once that valuable data is collected, it can easily be leaked, hacked, or misused. (Indeed, we’ve already seen several breaches of age verification providers.) EFF has long warned against age-gating the internet. Age verification technology itself is often inaccurate and privacy-invasive. These restrictive mandates strike at the foundation of the free and open internet. They are tools of censorship, used to block people from viewing or sharing information that the government deems “harmful” or “offensive.” And they create surveillance systems that critically undermine online privacy, chill access to vital online communities and resources, and burden the expressive rights of adults and young people alike. EFF.org/Age: A Resource to Empower Users Age-gating mandates are reshaping the internet in ways that are invasive, dangerous, and deeply unnecessary. But users are not powerless! We can challenge these laws, protect our digital rights, and build a safer digital world for all internet users, no matter their ages. This resource hub is here to help—so explore, share, and join us in the fight for a better internet.
France's DINUM has begun moving 250 workstations from Windows to NixOS-based Sécurix and Bureautix, prioritizing reproducible deployments and open-source control 🐧
Sécurix adds ANSSI-aligned hardening and FIDO2 authentication, while Bureautix uses KDE Plasma, Git-managed configs and open-source apps 🔐
#TechNews #France #French #EU #Europe #DINUM #NixOS #Linux #OpenSource #DigitalSovereignty #KDE #KDEPlasma #FIDO2 #LibreOffice #Cybersecurity #Privacy #Government #OSS
tech2geek.net
France begins its Linux transition with Sécurix and Bureautix—secure, reproducible systems built on NixOS to replace Windows in government IT.
PRIVACY ALERT!
Please boost for reach! 🚨👇
The Canadian government is planning
to introduce a bill on Wednesday, June 10th, to mandate identity surveillance of every adult using social media in Canada! 👁️🗨️
https://globalnews.ca/news/11894610/canada-social-media-ban-teens-online-harms-bill/
A ban on social media for children
does nothing to reduce the harm caused by commercial social media. Instead, it means mandatory ID scans for every adult using social media.
We must stop this authoritarian proposal,
and demand our government focuses instead on reducing the harm for everyone using social media.
It has been explained by experts over and over that bans of social media are shortsighted lazy measures that do not help in the end, but in fact harm everyone, including the children.
Stop ID surveillance in Canada! ✊⛔️
Contact your MP and our Prime Minister TODAY to voice your opposition. Here's where to find their contact information: https://www.ourcommons.ca/members/en/search
If you aren't aware of this issue yet, here's more information on age verification: https://www.eff.org/issues/age-verification
#AgeVerification #Privacy #Canada #HumanRights #CanPoli #StopIDChecks #StopIDSurveillance
eff.org
Age verification (or age-gating) laws generally require online services to check, estimate, or verify all users’ ages—often through invasive tools like ID checks, biometric scans, or other dubious “age estimation” methods—before granting them access to certain online content or services. Governments in the U.S. and around the world are increasingly adopting these restrictive measures in the name of protecting children online. But in practice, these systems create dangerous new forms of surveillance, censorship, and exclusion. Technologically, the age verification process can take many forms: collection and analysis of government ID, biometric scans, algorithmic or AI-based behavioral or user monitoring, digital ID, the list goes on. But no matter the method, every system demands users hand over sensitive and immutable personal information that links their offline identity to their online activity. Once that valuable data is collected, it can easily be leaked, hacked, or misused. (Indeed, we’ve already seen several breaches of age verification providers.) EFF has long warned against age-gating the internet. Age verification technology itself is often inaccurate and privacy-invasive. These restrictive mandates strike at the foundation of the free and open internet. They are tools of censorship, used to block people from viewing or sharing information that the government deems “harmful” or “offensive.” And they create surveillance systems that critically undermine online privacy, chill access to vital online communities and resources, and burden the expressive rights of adults and young people alike. EFF.org/Age: A Resource to Empower Users Age-gating mandates are reshaping the internet in ways that are invasive, dangerous, and deeply unnecessary. But users are not powerless! We can challenge these laws, protect our digital rights, and build a safer digital world for all internet users, no matter their ages. This resource hub is here to help—so explore, share, and join us in the fight for a better internet.
I am self hosting and using SearXNG on all my devices for over a month and it’s such an amazing experience. My searches are finally accurate and private.
#homelab #linux #privacy #selfhosted #searxng
(considering *I* know how to track these... and have considered writing software to see who/what is constantly in the neighborhood or just driving by... it' not difficult to see how a company would attempt to commercialize this)
"...SignalTrace “bridges license plate recognition data with sensor-captured device identifiers—such as those from mobile phones, Bluetooth wearables, and vehicle systems—to create a unique, trackable ‘electronic fingerprint’ for investigative use,” according to a product sheet describing the tool, written by surveillance company Leonardo, which advertises SignalTrace.
The sort of data Leonardo says SignalTrace can sweep up includes the RFID tags in key cards and pet microchips; devices with Bluetooth such as wireless headphones, fitness trackers, and mobile phones; components of a car like tire pressure sensors and infotainment systems; and Wi-Fi sources such as vehicle hotspots and laptops, according to the product sheet..."
(considering *I* know how to track these... and have considered writing software to see who/what is constantly in the neighborhood or just driving by... it' not difficult to see how a company would attempt to commercialize this)
"...SignalTrace “bridges license plate recognition data with sensor-captured device identifiers—such as those from mobile phones, Bluetooth wearables, and vehicle systems—to create a unique, trackable ‘electronic fingerprint’ for investigative use,” according to a product sheet describing the tool, written by surveillance company Leonardo, which advertises SignalTrace.
The sort of data Leonardo says SignalTrace can sweep up includes the RFID tags in key cards and pet microchips; devices with Bluetooth such as wireless headphones, fitness trackers, and mobile phones; components of a car like tire pressure sensors and infotainment systems; and Wi-Fi sources such as vehicle hotspots and laptops, according to the product sheet..."
404 Media: This Company Will Add Phone, AirPod, and Smartwatch Trackers to License Plate Readers
404media.co
SignalTrace “links devices that regularly travel together, correlating them to license plate.” It is a surveillance product that will sweep up and add all sorts of Bluetooth and other data to license plate readers, linking specific devices—and people—to cars.
Government Rolling Age Verification and Online Harms into One Giant Mess
Reports suggest that the Canadian government is introducing a bill that would combine online harms and age verification legislation.
https://www.freezenet.ca/government-rolling-age-verification-and-online-harms-into-one-giant-mess/
#Censorship #News #Privacy #Security #AgeVerification #Canada #FreeSpeech #legislation #OnlineHarms
freezenet.ca
Reports suggest that the Canadian government is introducing a bill that would combine online harms and age verification legislation.
Government Rolling Age Verification and Online Harms into One Giant Mess
Reports suggest that the Canadian government is introducing a bill that would combine online harms and age verification legislation.
https://www.freezenet.ca/government-rolling-age-verification-and-online-harms-into-one-giant-mess/
#Censorship #News #Privacy #Security #AgeVerification #Canada #FreeSpeech #legislation #OnlineHarms
freezenet.ca
Reports suggest that the Canadian government is introducing a bill that would combine online harms and age verification legislation.
Gegen filmende Meta-Ray-Ban-„Glassholes“: App erkennt smarte Brillen im Umfeld | Mac & i https://www.heise.de/news/Gegen-filmende-Meta-Ray-Ban-Glassholes-App-erkennt-smarte-Brillen-im-Umfeld-11317839.html #Datenschutz #privacy #SmartGlasses
heise.de
Es scheint im Trend zu liegen, die Aufnahmelampe aus Metas Smartglasses zu entfernen. So werden illegale Aufnahmen ermöglicht. Eine App hilft beim Erkennen.
Gegen filmende Meta-Ray-Ban-„Glassholes“: App erkennt smarte Brillen im Umfeld | Mac & i https://www.heise.de/news/Gegen-filmende-Meta-Ray-Ban-Glassholes-App-erkennt-smarte-Brillen-im-Umfeld-11317839.html #Datenschutz #privacy #SmartGlasses
heise.de
Es scheint im Trend zu liegen, die Aufnahmelampe aus Metas Smartglasses zu entfernen. So werden illegale Aufnahmen ermöglicht. Eine App hilft beim Erkennen.
Cześć, Fediverse. Jestem Eteryu. Pokazuję, jak krok po kroku odzyskiwać cyfrową prywatność i skutecznie odcinać algorytmy śledzące na smartfonach, bez ślepej wiary w marketingowe zapewnienia korporacji.
Interesuje mnie cyberbezpieczeństwo z perspektywy praktyka. Na co dzień dekonstruuję popularne modele zaufania, tropię ukrytą telemetrię i sprawdzam, co faktycznie dzieje się pod maską współczesnego oprogramowania. Zamiast godzić się na gotowe kompromisy, utwardzam systemy mobilne, izoluję inwazyjne aplikacje i kontroluję ruch sieciowy u źródła. Swoje testy, techniczne śledztwa oraz praktyczne przewodniki po higienie cyfrowej publikuję na blogu: https://eteryu.space/
Cieszę się na merytoryczne dyskusje i wymianę doświadczeń z tutejszą społecznością.
eteryu.space
<ul> <li> <div class="post-header"> <a href="/cyfrowa-higiena-bez-podgladaczy-jak-atwo-odciac-algorytmy-i-zabezpieczyc-zdjecia/">Cyfrowa higie...
Introducing Loupe, our latest privacy app for iOS. Discover what apps can learn about you just by reading data your iPhone already exposes, such as your languages, installed apps, device sensors, and much much more
Loupe is free, private, and open source. Give it a try 👇
https://apps.apple.com/app/id6766152470
Link to source code:
Banner for Loupe
Wired: Meta Silently Added Face-Recognition Code for Its Smart Glasses to Millions of Phones
Code reviewed by WIRED uncovered an unreleased face-recognition system embedded in Meta’s smart glasses platform. It’s designed to identify people via biometric data stored on users’ phones.
https://www.wired.com/story/meta-smart-glasses-face-recognition-nametag-connections/
Meta Silently Added Face-Recognition Code for Its Smart Glasses to Millions of Phones Code reviewed by WIRED uncovered an unreleased face-recognition system embedded in Meta’s smart glasses platform. It’s designed to identify people via biometric data stored on users’ phones.
Wired: Meta Silently Added Face-Recognition Code for Its Smart Glasses to Millions of Phones
Code reviewed by WIRED uncovered an unreleased face-recognition system embedded in Meta’s smart glasses platform. It’s designed to identify people via biometric data stored on users’ phones.
https://www.wired.com/story/meta-smart-glasses-face-recognition-nametag-connections/
Meta Silently Added Face-Recognition Code for Its Smart Glasses to Millions of Phones Code reviewed by WIRED uncovered an unreleased face-recognition system embedded in Meta’s smart glasses platform. It’s designed to identify people via biometric data stored on users’ phones.
Introducing Loupe, our latest privacy app for iOS. Discover what apps can learn about you just by reading data your iPhone already exposes, such as your languages, installed apps, device sensors, and much much more
Loupe is free, private, and open source. Give it a try 👇
https://apps.apple.com/app/id6766152470
Link to source code:
Banner for Loupe
Prywatność i cyberbezpieczeństwo to nie są hobbystyczne fanaberie dla ludzi w foliowych czapeczkach. Skompromitowane urządzenie mobilne to bezpośrednie zagrożenie dla Twojego życia osobistego, finansów i spokoju psychicznego.
Właśnie ruszyłem ze swoim blogiem, a to mój pierwszy wpis:
🔗 https://meridian.bearblog.dev/droga_do_grapheneos/
Opisuję w nim historię z ukrytym korporacyjnym MDM na moim telefonie i to, jak techniki Incident Response oraz przejście na GrapheneOS pozwoliły mi odzyskać kontrolę.
To mój debiut, dlatego bardzo zależy mi na Waszym feedbacku. Co myślicie o tym tekście? Dajcie znać w komentarzach, czy taka tematyka Was interesuje i czy chcecie kolejne wpisy o konfiguracji i hardeningu GrapheneOS! 🛡️📱
#GrapheneOS #Cybersecurity #Privacy #Prywatnosc #Bezpieczenstwo #FOSS #MobileSecurity #PlFediverse #Blog
meridian.bearblog.dev
W świecie cyberbezpieczeństwa często rozmawiamy o „modelach zagrożeń” (Threat Models) w sposób czysto teoretyczny. Analizujemy tabelki, czytamy dokumentację ...
Rights exist so that you do not have to argue every time for the legitimacy of your everyday freedoms. Without an explicit right to your opacity, the rights you do already have can be called into question.
There was even a Simpsons meme related to this:
“Won't somebody please think of the children?!”
⸺ Helen Lovejoy
#privacy #spying #surveillance #WontSomeonePleaseThinkOfTheChildren
Spying and mass surveillance are often rebranded as “child safety”.
mastodon.social
With AB 1856, California lawmakers could have dramatically narrowed the harmful age-bracketing regime set to go into effect next year. Instead, the bill extends those requirements to browsers and websites. https://www.eff.org/deeplinks/2026/05/one-step-forward-two-steps-back-cas-ab-1856-exempts-open-source-expands-age-gating
With AB 1856, California lawmakers could have dramatically narrowed the harmful age-bracketing regime set to go into effect next year. Instead, the bill extends those requirements to browsers and websites. https://www.eff.org/deeplinks/2026/05/one-step-forward-two-steps-back-cas-ab-1856-exempts-open-source-expands-age-gating
eff.org
After public outrage, California lawmakers are moving closer to exempting open-source operating systems from the sweeping age-bracketing regime mandated by last year’s Digital Age Assurance Act (AB 1043). Nonetheless, the current bill still jeopardizes internet users’ speech, privacy, and security....
A decade or two ago — a certain type of (state) "professional" was excited by the idea that you could track someone using public social-media data across multiple social-networks.
And, even improve the tracking using "private" data.
You should assume that not only does this technology exist now, but it is common.
The people who would use this against your interests won't care about robots-txt files, nobot hash-tags, or Mastodon name-spaces.
Act accordingly.
There was even a Simpsons meme related to this:
“Won't somebody please think of the children?!”
⸺ Helen Lovejoy
#privacy #spying #surveillance #WontSomeonePleaseThinkOfTheChildren
Spying and mass surveillance are often rebranded as “child safety”.
mastodon.social
With AB 1856, California lawmakers could have dramatically narrowed the harmful age-bracketing regime set to go into effect next year. Instead, the bill extends those requirements to browsers and websites. https://www.eff.org/deeplinks/2026/05/one-step-forward-two-steps-back-cas-ab-1856-exempts-open-source-expands-age-gating
With AB 1856, California lawmakers could have dramatically narrowed the harmful age-bracketing regime set to go into effect next year. Instead, the bill extends those requirements to browsers and websites. https://www.eff.org/deeplinks/2026/05/one-step-forward-two-steps-back-cas-ab-1856-exempts-open-source-expands-age-gating
eff.org
After public outrage, California lawmakers are moving closer to exempting open-source operating systems from the sweeping age-bracketing regime mandated by last year’s Digital Age Assurance Act (AB 1043). Nonetheless, the current bill still jeopardizes internet users’ speech, privacy, and security....
A decade or two ago — a certain type of (state) "professional" was excited by the idea that you could track someone using public social-media data across multiple social-networks.
And, even improve the tracking using "private" data.
You should assume that not only does this technology exist now, but it is common.
The people who would use this against your interests won't care about robots-txt files, nobot hash-tags, or Mastodon name-spaces.
Act accordingly.
Quote of the day by #Oracle co-founder Larry Ellison: "Citizens will be on their best behavior, because we’re constantly recording and reporting everything that is going on" — a dire warning on the erosion of #privacy
Ellison has outlined a vision for an increasingly aggressive #surveillance state in the 21st century
techradar.com
Legendary technologist Larry Ellison has outlined a vision for an increasingly aggressive surveillance state in the 21st century
Last year for Pride I wrote a series
of articles at the intersection of privacy and LGBTQ+ experiences 
🔒
Data privacy is important for everyone. But for some marginalized populations, data privacy is indispensable for social connection, access to information, and physical safety.
Here are 3 articles published with Privacy Guides last year discussing this topic from different angles:
The Importance of Data Privacy For The Queer Community
Queer Dating Apps: Beware Who You Trust With Your Intimate Data
privacyguides.org
At the intersection of data privacy and LGBTQ+ experiences, it's inevitable to talk about queer dating apps. Unfortunately, most are horrible for data privacy.
@dangillmor And somehow this is the same company that Mozilla decided to partner with on ad tracking in the browser—now a project with Google and Apple involved too, to drive ad money away from legit sites and toward search, social, and app stores.
https://monopoly-report.com/podcast/episode-74-the-attribution-cartel-why-privacy-safe-is-not-what-it-s-made-up-to-be/d59dce94-05d6-4e60-a5c0-95727176a45f #privacy #BigTech #oligopoly
monopoly-report.com
Don Marti joins Alan Chapell to unpack the hidden risks behind the push for industry standards for “privacy-safe” ad attribution, the myth of privacy-preserving tech, and how big platforms may be reshaping the future of digital advertising. The Chapell Regulatory Insider is at https://chapellreport.substack.com/ Don Marti may be found at: https://aloodo.com/ See Don Marti’s recent AdExchanger piece at https://www.adexchanger.com/data-driven-thinking/what-happens-when-the-attribution-cartel-meets-advertisings-halo-effect/ Additional discussion re: the problems with PETs for advertising https://privacy-daily.com/news/2025/06/10/PrivacyEnhancing-Technologies-Are-Not-a-Silver-Bullet-PEPR-Told-2506100010 https://rjionline.org/news/the-traffic-and-revenue-crisis-for-news-is-a-symptom-of-big-techs-economy-wide-trust-collapse/ https://rjionline.org/news/big-tech-is-squeezing-advertising-jobs-and-companies/ https://rjionline.org/news/big-techs-economic-takeover-can-be-beat/ https://rjionline.org/news/big-tech-runs-counter-to-journalism-values-so-why-is-the-news-industry-helping-tech-take-over/ Takeaways Privacy-focused users are often the most valuable customers, challenging traditional ad tech assumptions about measurability. Attribution is fundamentally about linking ad exposure to outcomes, but current models often prioritize simplicity over accuracy. “Privacy-preserving” systems frequently focus on mathematical guarantees that don’t align with real-world privacy harms like discrimination or deception. Proposed attribution standards may unintentionally increase surveillance incentives by enabling fraud and data laundering. Fraud in attribution systems can reward actors who intercept users right before purchase, distorting true performance signals. Big tech companies may benefit from attribution systems that reinforce their own ad recommendations, reducing competition. The “halo effect” shows ads perform better in trusted, premium environments, but current systems undervalue this dynamic. A shift toward cheap, commoditized ad placements weakens both brand equity and publisher sustainability. The so-called “attribution cartel” is defined by systems that avoid user consent and bypass opt-out mechanisms. Effective privacy regulation should focus on real-world harms rather than technical implementation details. Chapters 00:00 Intro & What Don Marti Has Been Working On 01:18 The “Marti Paradox” 02:52 What Attribution Really Means 03:35 The Broken State of Attribution Today 07:32 Complexity, Perception & Industry Behavior 08:21 The Problem with “Privacy-Preserving” Tech 11:54 Big Tech Incentives & Centralization 16:17 The Halo Effect & Ad Effectiveness 17:01 Commodification vs Sustainable Advertising 21:28 Attribution Fraud Explained 23:49 Data Laundering Through Attribution Systems 26:09 The “Attribution Cartel” Defined 29:17 W3C, Standards & Industry Power Dynamics 32:29 Alternative Approaches (AdMap) 37:03 What Good Privacy Regulation Looks Like 40:56 The Future of Attribution 43:20 What Industry Stakeholders Can Do 45:00 Rethinking Privacy Harms Learn more about your ad choices. Visit megaphone.fm/adchoices
Last year for Pride I wrote a series
of articles at the intersection of privacy and LGBTQ+ experiences 🔒
Data privacy is important for everyone. But for some marginalized populations, data privacy is indispensable for social connection, access to information, and physical safety.
Here are 3 articles published with Privacy Guides last year discussing this topic from different angles:
The Importance of Data Privacy For The Queer Community
Queer Dating Apps: Beware Who You Trust With Your Intimate Data
privacyguides.org
At the intersection of data privacy and LGBTQ+ experiences, it's inevitable to talk about queer dating apps. Unfortunately, most are horrible for data privacy.
Hinge database allegedly for sale.
Actor "nilojeda" claims 8M+ records: email, password_hash, oauth_subject_hash, phone_hash, DoB, geolocation. A sample PoC is publicly available in the thread.
$400, accepts crypto. No statement from Hinge yet.
If you use Hinge: rotate password, revoke OAuth sessions, enable 2FA.#DataBreach #CTI #ThreatIntel #infosec #OSINT #Hinge #BreachForums #ATO #privacy
Hinge database allegedly for sale.
Actor "nilojeda" claims 8M+ records: email, password_hash, oauth_subject_hash, phone_hash, DoB, geolocation. A sample PoC is publicly available in the thread.
$400, accepts crypto. No statement from Hinge yet.
If you use Hinge: rotate password, revoke OAuth sessions, enable 2FA.#DataBreach #CTI #ThreatIntel #infosec #OSINT #Hinge #BreachForums #ATO #privacy
Yours truly speaking online at the Global Summit on Tech-facilitated Gender-based Violence on 9 June.
Promotional graphic for the 2026 Global Summit on Tech-Facilitated Gender-Based Violence, taking place June 9. The panel is titled “Balancing Privacy and Protection in the Digital World.” Four speaker cards are shown: Lyndsey Dearlove, Global Director of Operations at The NO MORE Foundation, moderator; Barsha Chakraborty, digital rights and gender justice advocate; Rohini Lakshané, technologist and interdisciplinary researcher; and Tsitsi Matekaire, Director of Regions at Equality Now. Text reads: “Register at nomore.org/techsummit.” The summit is delivered by NO MORE in partnership with UN Women and Equality Now.
Yours truly speaking online at the Global Summit on Tech-facilitated Gender-based Violence on 9 June.
Promotional graphic for the 2026 Global Summit on Tech-Facilitated Gender-Based Violence, taking place June 9. The panel is titled “Balancing Privacy and Protection in the Digital World.” Four speaker cards are shown: Lyndsey Dearlove, Global Director of Operations at The NO MORE Foundation, moderator; Barsha Chakraborty, digital rights and gender justice advocate; Rohini Lakshané, technologist and interdisciplinary researcher; and Tsitsi Matekaire, Director of Regions at Equality Now. Text reads: “Register at nomore.org/techsummit.” The summit is delivered by NO MORE in partnership with UN Women and Equality Now.
#Motorola-Smartphones: Vorinstallierte App schleust offenbar Affiliate-Links ein | heise online https://www.heise.de/news/Motorola-Smartphones-Vorinstallierte-App-schleust-offenbar-Affiliate-Links-ein-11306456.html #SmartFeed #Datenschutz #privacy #tracking
heise.de
Eine vorinstallierte App auf Motorola-Smartphones leitet Amazon-Aufrufe um und injiziert Affiliate-Codes. Betroffene können die App deaktivieren.
#Motorola-Smartphones: Vorinstallierte App schleust offenbar Affiliate-Links ein | heise online https://www.heise.de/news/Motorola-Smartphones-Vorinstallierte-App-schleust-offenbar-Affiliate-Links-ein-11306456.html #SmartFeed #Datenschutz #privacy #tracking
heise.de
Eine vorinstallierte App auf Motorola-Smartphones leitet Amazon-Aufrufe um und injiziert Affiliate-Codes. Betroffene können die App deaktivieren.
Digital driver's licenses have been around for a while now. When they first came out, privacy groups expressed concerns. I haven't heard much since then, though, and NY just rolled out their version of it.
Anyone have any recommended resources (recent) or thoughts about the current benefits or risks of downloading an app and uploading my drivers license into it?
🚨 This Week In Privacy #55 will be live in 30 minutes, we'll be talking about GrapheneOS' new accessibility feature and covering the latest privacy & security news.
Join us live and chat with the community! 😊
streamyard.com
GrapheneOS has announced the public release for it's speech synthesis service, which is open source and created in house by the GrapheneOS team, meanwhile in America, California is moving to exempt Linux from it's age verification laws, a company is putting AI cameras in school buses across the United States, and more! Join us for This Week In Privacy #55.
Hi! 👋
I'm a #music producer with a strong passion for #photography. Music‑wise I bend towards #EDM, while photography stretches from drone/aerial shots to architecture and everyday stills.
A big believer in #privacy, digital independence, and owning your own space online, powered by #FOSS and #Linux.
I self-host my own corner of the internet via YunoHost.
It's part of my commitment to decentralization and taking control of my digital footprint.
When I'm not crafting electronic noise or framing pixels, I'm reading terms and conditions of whatever just to feel something. 😁
Also, I get paid to talk. Not paid a lot, mind you—I just talk a lot.
Feel free to connect! ✨
Thanks for the article
Does Quiet Public stop search engines & scrapers from seeing those posts?
Town Councilmember Proposes Internet and Phone Ban After Flock Contract is Cancelled
privacyguides.org
After the town of Bandera, Texas voted 3-2 to end its contract with the dystopian surveillance company Flock, a pro-Flock councilmember proposed a ban of phones, cameras, the internet, and nearly all technology.
Town Councilmember Proposes Internet and Phone Ban After Flock Contract is Cancelled
privacyguides.org
After the town of Bandera, Texas voted 3-2 to end its contract with the dystopian surveillance company Flock, a pro-Flock councilmember proposed a ban of phones, cameras, the internet, and nearly all technology.
optimizerDuck is a free and open-source Windows optimization tool focused on privacy, debloating, and performance improvements.
It can disable telemetry, remove AppX bloatware, manage startup/services, apply gaming tweaks, clean disks, and optimize power settings, all from one portable app.
Includes backups, restore point reminders, one-click revert options, and tweak safety ratings.
👉 https://digitalescapetools.com/tools/tool.html?id=optimizerduck
#OpenSource #Windows #Privacy #Debloat #PowerShell #DigitalMinimalism
Screenshot of optimizerDuck showing its logo, project overview, version badges, download stats, and Windows optimization/privacy-focused branding.
Screenshot of optimizerDuck showing its branding, feature badges, and a dark-themed Windows optimization dashboard with privacy tweaks, performance settings, and debloating tools.
🚨 New post alert 📝
A deep dive into #WSocial with some fascinating findings: candid statements about their motives, a Greta Thunberg connection, potential AI plans (!!!)
Why write about it again? I still had so many questions after publishing my first article.
I spent 3 weeks watching every interview I could find and connecting the dots.
I hope you'll enjoy this piece:
blog.elenarossini.com
A deep dive into the origin story of W Social, an analysis of the strategic arguments they have been using to appeal to government officials, media companies and advertisers... and the discussion of conflicting signals they have been sending
@GrapheneOS No Ads, No Spyware, No Manipulation. Just honest timelines and reach without all the noise of #BigTech social media. Great #privacy settings, export and delete your data, and filter out content you don't want to see. Try it now FREE and get the app later! https://psafe.ly/social
PrivacySafe Social timeline
PrivacySafe Social menu
PrivacySafe Social news feed
PrivacySafe Social about page
🚨 New post alert 📝
A deep dive into #WSocial with some fascinating findings: candid statements about their motives, a Greta Thunberg connection, potential AI plans (!!!)
Why write about it again? I still had so many questions after publishing my first article.
I spent 3 weeks watching every interview I could find and connecting the dots.
I hope you'll enjoy this piece:
blog.elenarossini.com
A deep dive into the origin story of W Social, an analysis of the strategic arguments they have been using to appeal to government officials, media companies and advertisers... and the discussion of conflicting signals they have been sending
@thenewoil this pattern (apps sharing user data without consent) is exactly what pushed two Spanish gay founders to build Zorro - a GBTIQ+ dating app launching June 15 in Madrid. EU-only servers, no data selling, no third-party data sharing. Worth watching: https://waitlist.somoszorro.com/?utm_source=mastodon&utm_medium=reply&utm_campaign=waitlist_pre_launch&utm_content=thenewoil #privacy #datingapp
waitlist.somoszorro.com
Únete a la waitlist de Zorro. Privacidad primero. 200 Premium anuales de regalo para los primeros.
Hi! 👋
I'm a #music producer with a strong passion for #photography. Music‑wise I bend towards #EDM, while photography stretches from drone/aerial shots to architecture and everyday stills.
A big believer in #privacy, digital independence, and owning your own space online, powered by #FOSS and #Linux.
I self-host my own corner of the internet using GoToSocial.
It's part of my commitment to decentralization and taking control of my digital footprint.
When I'm not crafting electronic noise or framing pixels, I'm reading terms and conditions of whatever just to feel something. 😁
Also, I get paid to talk. Not paid a lot, mind you—I just talk a lot.
Feel free to connect! ✨
#Introduction 📣 V3
We're live ! The website announcing the Fair Tech Summit Europe for 2026 is online: https://fairtechsummit.org/ It will take place in Luxembourg on 6 October 2026 and will be for everyone in Europe who's actively building open, ethical and independent technology.
Save the date!
#fairtech #ethicaltech #privacy #digitalsovereignty #NGI #Mobifree #opensource #FOSS #greentech #freedom #openstandards #opendata #fairlabour #interoperability #BuyEuropean #transparency #decentralization #federation
A dark navy social card matching the Fair Tech Summit Europe website. Top-left: the Fair Tech Summit hexagonal mark on a white card, with "FAIR TECH SUMMIT" in mint mono text and "EUROPE · LUX · 06.10.26" below in muted white. A mint pill reads "06 OCT 2026", followed by "LUXEMBOURG · ONE DAY · CURATED" in white. Headline in three lines: "WE'RE LIVE." in mint, then "LUXEMBOURG." and "06 OCTOBER 2026." in white. Footer line centred: "06 OCT 2026 · LUXEMBOURG · FAIRTECHSUMMIT.ORG".
“This is an important public service announcement related to your right to privacy … We the people have 1 day 16 hours 33 minutes 13 seconds to take action and influence this outcome.
…
For now, your encrypted messages have a lock on them.
Only you, and the person you're talking to, hold the key. Not the app. Not the company. Not the government. You probably don't think about it. That's the whole point — it just works.
Until, possibly, the end of this summer.
WHAT BILL C-22 WOULD DO
Every messaging app in Canada would be required to build a second key.”
Another effort to destroy end-to-end encryption, and thus your privacy, this time from Canada.
dontsurveil.me
Bill C-22 would force every messaging app in Canada to build a backdoor — and track all your activity for one year. Apple says no. Signal says they'll leave.
Pay attention #Canada 🇨🇦
O1 BILL C-22 • CANADA • MAY 2026 This is an important public service announcement related to your right to privacy. We the people have 2 days | oo hours 13 minutes 55 seconds to take action and influence this outcome.
We're live ! The website announcing the Fair Tech Summit Europe for 2026 is online: https://fairtechsummit.org/ It will take place in Luxembourg on 6 October 2026 and will be for everyone in Europe who's actively building open, ethical and independent technology.
Save the date!
#fairtech #ethicaltech #privacy #digitalsovereignty #NGI #Mobifree #opensource #FOSS #greentech #freedom #openstandards #opendata #fairlabour #interoperability #BuyEuropean #transparency #decentralization #federation
A dark navy social card matching the Fair Tech Summit Europe website. Top-left: the Fair Tech Summit hexagonal mark on a white card, with "FAIR TECH SUMMIT" in mint mono text and "EUROPE · LUX · 06.10.26" below in muted white. A mint pill reads "06 OCT 2026", followed by "LUXEMBOURG · ONE DAY · CURATED" in white. Headline in three lines: "WE'RE LIVE." in mint, then "LUXEMBOURG." and "06 OCTOBER 2026." in white. Footer line centred: "06 OCT 2026 · LUXEMBOURG · FAIRTECHSUMMIT.ORG".
“This is an important public service announcement related to your right to privacy … We the people have 1 day 16 hours 33 minutes 13 seconds to take action and influence this outcome.
…
For now, your encrypted messages have a lock on them.
Only you, and the person you're talking to, hold the key. Not the app. Not the company. Not the government. You probably don't think about it. That's the whole point — it just works.
Until, possibly, the end of this summer.
WHAT BILL C-22 WOULD DO
Every messaging app in Canada would be required to build a second key.”
Another effort to destroy end-to-end encryption, and thus your privacy, this time from Canada.
dontsurveil.me
Bill C-22 would force every messaging app in Canada to build a backdoor — and track all your activity for one year. Apple says no. Signal says they'll leave.
Pay attention #Canada 🇨🇦
O1 BILL C-22 • CANADA • MAY 2026 This is an important public service announcement related to your right to privacy. We the people have 2 days | oo hours 13 minutes 55 seconds to take action and influence this outcome.
“This is an important public service announcement related to your right to privacy … We the people have 1 day 16 hours 33 minutes 13 seconds to take action and influence this outcome.
…
For now, your encrypted messages have a lock on them.
Only you, and the person you're talking to, hold the key. Not the app. Not the company. Not the government. You probably don't think about it. That's the whole point — it just works.
Until, possibly, the end of this summer.
WHAT BILL C-22 WOULD DO
Every messaging app in Canada would be required to build a second key.”
Another effort to destroy end-to-end encryption, and thus your privacy, this time from Canada.
dontsurveil.me
Bill C-22 would force every messaging app in Canada to build a backdoor — and track all your activity for one year. Apple says no. Signal says they'll leave.
Pay attention #Canada 🇨🇦
O1 BILL C-22 • CANADA • MAY 2026 This is an important public service announcement related to your right to privacy. We the people have 2 days | oo hours 13 minutes 55 seconds to take action and influence this outcome.
🚨 This Week In Privacy #54 will be live in 30 minutes, we'll be talking about Google's new creepy AI glasses 😱 👓 and covering the latest privacy & security news.
Come say hi and chat with us live! 😊
streamyard.com
Google has announced Android XR it's new smart glasses platform, we'll dive into why this is such a threat to your privacy and why this announcement is so significant, Join us for This Week In Privacy #54!
I'm currently preparing legal action against multiple platforms in the Minecraft scene, this includes: MC servers, website operators and hosting platforms like @modrinth
They all violated the GDPR in one or multiple ways, and didn't care to resolve the issue or answer as I reached out to them multiple times.
This already cost and will cost me a lot of time and effort.
If you want and are able to help out, please reach out to me.
#dataprotection #privacy #minecraft #gdpr #dsgvo #datenschutz
“What these Silicon Valley companies are doing - the STASI pale in comparison”
We got to protect our #privacy because an authoritarian train is coming and I’m not at all sure we are ready for it.
youtube.com
From Donald Trump’s alliances with tech billionaires to the collapse of US media outlets, investigative journalist Carole Cadwalladr says we are accelerating...
Texas accuses WhatsApp of lying about message privacy
https://www.courthousenews.com/texas-accuses-whatsapp-of-lying-about-message-privacy/
> Texas Attorney General Ken Paxton says that, contrary to WhatsApp's claims about its encrypted messages, the messaging giant can in fact view nearly all communications sent through its platform.
“What these Silicon Valley companies are doing - the STASI pale in comparison”
We got to protect our #privacy because an authoritarian train is coming and I’m not at all sure we are ready for it.
youtube.com
From Donald Trump’s alliances with tech billionaires to the collapse of US media outlets, investigative journalist Carole Cadwalladr says we are accelerating...
We're happy to announce today the release of Cyd for Mobile! 📲🐦️
If you have an account on Bluesky, you can use Cyd's new mobile app to easily and automatically clean up your data.
The app backs up and deletes your old posts, likes, and other data, while leaving what you actually want people to see when they look up your account.
Why should everything you post on social media stay online forever? It's your data, it should be your choice!
More on Cyd for Mobile here: https://lockdown.systems/cyd-for-mobile-delete-your-old-bluesky-posts-except-for-what-you-want-to-keep/
#LockdownSystems #Cyd #Bluesky #DataDeletion #Privacy #DeleteX #HelloQuitX
lockdown.systems
Why should everything you post to social media stay online, and public, forever?
Mastodon users may not need this, but Bluesky users do! 🦋
If you or someone you know also have a Bluesky account, you might want to look at @cyd to facilitate post deletion and good data minimization practices.
We're happy to announce today a new way to do this easily: Cyd for Mobile! 🐦️✨
Why should everything you post on social media stay online, and public, forever?
It's *your* data! You should have the power to keep it, move it, and delete it as you please.
#LockdownSystems #Cyd #Bluesky #DataDeletion #Privacy #DeleteX #HelloQuitX
lockdown.systems
Why should everything you post to social media stay online, and public, forever?
DontSurveil.Me has put together a great explainer on Bill C-22.
Canadians need to pay attention.
Expanding surveillance powers, retaining metadata, and weakening encryption all threaten privacy, free expression, civil liberties, and digital rights.
If we care about privacy, digital rights, and a free society, now is the time to speak up, contact MPs, and push back before this becomes law.
Learn more: https://dontsurveil.me/c22.html
dontsurveil.me
Bill C-22 would force every messaging app in Canada to build a backdoor — and track all your activity for one year. Apple says no. Signal says they'll leave.
@digitalcourage Im Verkehrsverbund Rhein Sieg gibt es die eezy app / eezy.nrw, die jede Fahrt mit dem ÖPNV zur personifizierten Bewegungserfassung macht, wenn man entspr. ein- und auscheckt auf den Meter genau - was das GPS halt so hergibt.
Wahrscheinlich gibt es solche apps auch in anderen Verkehrsverbünden?!
#ÖPNV #tracking #vrs #vrr #profiling #datensammelwut #privacy #freiheit #anlassloseüberwachung #totalüberwachung #BusundBahn
DontSurveil.Me has put together a great explainer on Bill C-22.
Canadians need to pay attention.
Expanding surveillance powers, retaining metadata, and weakening encryption all threaten privacy, free expression, civil liberties, and digital rights.
If we care about privacy, digital rights, and a free society, now is the time to speak up, contact MPs, and push back before this becomes law.
Learn more: https://dontsurveil.me/c22.html
dontsurveil.me
Bill C-22 would force every messaging app in Canada to build a backdoor — and track all your activity for one year. Apple says no. Signal says they'll leave.
We're happy to announce today that we are part of the Fund Internet Freedom campaign led by @torproject and Funding the Commons, with a coalition of 10 other projects sharing our values for privacy, public access, and digital freedom 🧅💜
If you would like to support projects in the coalition, you can donate here: https://internetfreedom.torproject.org/
To learn more about the campaign, check this announcement from The Tor Project: https://blog.torproject.org/fund-internet-freedom/
Thank you for supporting privacy and internet freedom with us! ✊🐢
#FundInternetFreedom #InternetFreedom #DigitalRights #Privacy #Tor #OnionShare #LockdownSystems
blog.torproject.org
Tor is strongest when the broader internet freedom ecosystem is healthy. A coalition of privacy, internet freedom, cryptocurrency and open-source ecosystems, led by the Tor Project and Funding the Commons, is supporting critical digital infrastructure with a new participatory funding campaign.
We're happy to announce today that we are part of the Fund Internet Freedom campaign led by @torproject and Funding the Commons, with a coalition of 10 other projects sharing our values for privacy, public access, and digital freedom 🧅💜
If you would like to support projects in the coalition, you can donate here: https://internetfreedom.torproject.org/
To learn more about the campaign, check this announcement from The Tor Project: https://blog.torproject.org/fund-internet-freedom/
Thank you for supporting privacy and internet freedom with us! ✊🐢
#FundInternetFreedom #InternetFreedom #DigitalRights #Privacy #Tor #OnionShare #LockdownSystems
blog.torproject.org
Tor is strongest when the broader internet freedom ecosystem is healthy. A coalition of privacy, internet freedom, cryptocurrency and open-source ecosystems, led by the Tor Project and Funding the Commons, is supporting critical digital infrastructure with a new participatory funding campaign.
🥶 A contractor for CISA posted AWS GovCloud admin keys to a public GitHub repo! The repo was named "Private-CISA." Not an accident, the contractor actively disabled GitHub's built-in secret scanner to do it. That's a choice. Not a typo, not a misconfiguration. Someone turned off the guardrail and then stored plaintext credentials in a file called "importantAWStokens." That should make every security leader lose their 💩 AND the exposed keys stayed valid for 48 hours after CISA was notified. The agency responsible for protecting the country's critical infrastructure took two days to rotate credentials sitting in a public repo. 🤬 One researcher called this "the worst leak I've witnessed in my career." The exposed files included credentials to CISA's internal software build environment. Anyone who found those keys first could have backdoored the packages CISA builds and deploys. Every new build would carry that backdoor forward. CISA has lost nearly a third of its workforce since January. The oversight that might have caught this sooner is gone.
Two questions worth taking back to your own team:
・ When did you last verify that secret scanning is actually enabled across every repo your contractors touch?
・ If you got the call today that credentials were public, how long would it take to rotate them?
https://krebsonsecurity.com/2026/05/cisa-admin-leaked-aws-govcloud-keys-on-github/
#CISA #CloudSecurity #SupplyChainSecurity #CyberGovernance #security #privacy #cloud #infosec
New research suggests Mullvad’s WireGuard exit IP assignment could make cross-server correlation easier in some cases.
The report highlights how difficult true online anonymity can be, even with privacy-focused VPNs.
👉 https://www.digitalescapetools.com/2026/05/mullvad-wireguard-exit-ip-correlation.html
digitalescapetools.com
Mullvad says it is testing mitigations after researchers discovered potentially identifying behavior tied to WireGuard exit IP assignment.
New research suggests Mullvad’s WireGuard exit IP assignment could make cross-server correlation easier in some cases.
The report highlights how difficult true online anonymity can be, even with privacy-focused VPNs.
👉 https://www.digitalescapetools.com/2026/05/mullvad-wireguard-exit-ip-correlation.html
digitalescapetools.com
Mullvad says it is testing mitigations after researchers discovered potentially identifying behavior tied to WireGuard exit IP assignment.
Preparing some phones for normies👌🏽
Two Pixel 8a devices about to get flashed
Photograph of the grapheneOS web installer in action
Two Pixel 8a devices now running GrapheneOS
Hi, I’m Joanna! I’ve been here a while but I don’t think I’ve made a proper #introduction.
I’m a 40 year-old #trans woman. I was raised in #SouthCarolina and have lived in the #California #bayarea since 2016. I am an #iosdev who enjoys #baseball, #collegefootball, #photography, #music, #movies, #formula1, and #cryptography.
I believe everyone deserves access to #privacy, #reproductivechoice, #healthcare, and #freespeech.
If any of that sounds cool, let’s be friends!
DontSurveil.Me has put together a great explainer on Bill C-22.
Canadians need to pay attention.
Expanding surveillance powers, retaining metadata, and weakening encryption all threaten privacy, free expression, civil liberties, and digital rights.
If we care about privacy, digital rights, and a free society, now is the time to speak up, contact MPs, and push back before this becomes law.
Learn more: https://dontsurveil.me/c22.html
dontsurveil.me
Bill C-22 would force every messaging app in Canada to build a backdoor — and track all your activity for one year. Apple says no. Signal says they'll leave.
Gave my son his first serious gift a few days ago.
A @protonprivacy "Born Private" activation code.
While most people are creating Gmail accounts for their newborns, I decided to start him off with actual privacy from day one.
A bit dramatic? Maybe. But in 15–20 years when he asks "Dad, why doesn’t my email spy on me?" — I'll just smile and say "You’re welcome".
Sometimes the best gifts are the ones they’ll only appreciate much later.
#ProtonMail #Privacy #DigitalPrivacy #Parenting #Mastodon #Fediverse #Blog #Gifts #Kids
A person’s hand holding a Proton Mail ‘Born Private’ gift certificate. The card shows the Proton Mail logo, a reserved @proton.me email address, a large QR code and activation instructions. In the background there are colorful party balloons, suggesting a baby celebration.
On t’explique en 20sec PluMail ?
#plumail
#Fediverse #Mastodon
#CHATONS
#LogicielLibre
#AutoHebergement #SelfHosting
#Privacy
#Email
#SouveraineteNumerique #Linux
We wrote a guest post on @torproject's blog showcasing some of what we do and what we've been working on.
Give it a read below 👇️
https://blog.torproject.org/keeping-the-doors-open-unredacted/
#InternetFreedom #FundInternetFreedom #Privacy #InternetCensorship
blog.torproject.org
Anti-censorship tools are only as powerful as their ability to keep running. When the door to the open internet gets slammed shut, Unredacted builds another one.
We wrote a guest post on @torproject's blog showcasing some of what we do and what we've been working on.
Give it a read below 👇️
https://blog.torproject.org/keeping-the-doors-open-unredacted/
#InternetFreedom #FundInternetFreedom #Privacy #InternetCensorship
blog.torproject.org
Anti-censorship tools are only as powerful as their ability to keep running. When the door to the open internet gets slammed shut, Unredacted builds another one.
🚨 This Week In Privacy #53 will be live in 30 minutes, we'll discuss Android 17 bringing some great privacy & security improvements and the latest in privacy & security news.
Come say hi and chat with us live! 😊
streamyard.com
Google recently announced upcoming features for Android 17 which features new privacy & security upgrades, Signal is adding warnings to protect against phishing attacks, Windows Bitlocker has been broken by a new zero-day and more! Join us for This Week In Privacy #53
I attended the AITP Chicago Security SIG tonight at RSM and left with one clear takeaway: a $200 device called Flipper Zero can clone your building access badge and bypass the physical security your organization worked so hard to set up. FBI Chicago Intelligence Analysts and an InfraGard board member explained how these devices work and where organizations are vulnerable. The room was full of security professionals, many of whom had that familiar look, realizing a threat they thought was unlikely is actually much closer to home.
Here are a few key points from tonight:
・ You can buy Flipper Zero on Amazon, and teenagers are posting demo videos on YouTube. If your physical security plan assumes attackers need special equipment, that assumption is no longer true.
・ Most enterprise security programs barely address RF-based attacks on access control systems. We invest heavily in endpoint protection and network monitoring, but the badge reader by the server room often gets overlooked.
・ Mitigation is practical. Encrypted credentials and multi-factor physical access are real solutions. Most organizations just haven’t made them a priority because the threat seemed remote.
If you’re a CISO or CIO and haven’t reviewed your physical access controls for RF-based attacks, now is a good time to add it to your to-do list.
Thank you to AITP Chicago, the FBI, InfraGard, and RSM for a great discussion.
https://aitpchicago.com/event-6680905
#Cybersecurity #PhysicalSecurity #InfraGard #security #privacy #cloud #infosec #flipper0
I attended the AITP Chicago Security SIG tonight at RSM and left with one clear takeaway: a $200 device called Flipper Zero can clone your building access badge and bypass the physical security your organization worked so hard to set up. FBI Chicago Intelligence Analysts and an InfraGard board member explained how these devices work and where organizations are vulnerable. The room was full of security professionals, many of whom had that familiar look, realizing a threat they thought was unlikely is actually much closer to home.
Here are a few key points from tonight:
・ You can buy Flipper Zero on Amazon, and teenagers are posting demo videos on YouTube. If your physical security plan assumes attackers need special equipment, that assumption is no longer true.
・ Most enterprise security programs barely address RF-based attacks on access control systems. We invest heavily in endpoint protection and network monitoring, but the badge reader by the server room often gets overlooked.
・ Mitigation is practical. Encrypted credentials and multi-factor physical access are real solutions. Most organizations just haven’t made them a priority because the threat seemed remote.
If you’re a CISO or CIO and haven’t reviewed your physical access controls for RF-based attacks, now is a good time to add it to your to-do list.
Thank you to AITP Chicago, the FBI, InfraGard, and RSM for a great discussion.
https://aitpchicago.com/event-6680905
#Cybersecurity #PhysicalSecurity #InfraGard #security #privacy #cloud #infosec #flipper0
The big security conferences have their place. You get the keynotes, the vendor expo, and the sponsored happy hours. What you don't always get is a straight conversation with someone who actually broke something recently and wants to talk about it.
That's why I'm going to BSides312 this weekend.
Saturday, May 16th, at the Irish American Heritage Center in Chicago. Two talk tracks, 15 speakers, a CTF, a lockpicking village, and an after-party. Community-run, non-profit, built for practitioners by practitioners.
If you're in Chicago and work in security, this is where you should be this weekend. Come find me.
#BSides312 #Cybersecurity #InfoSec #Chicago #security #privacy #cloud #312 @bsides312 @bsides312@bird.makeup
bsides312.org
BSides312 is Chicago's Security BSides event — a non-profit hacker & cybersecurity conference in Chicago, IL. May 16, 2026 at the Irish American Heritage Center.
If you do not want to fill the personal information in the petition form to oppose Bill C-22, you can simply find your representative's address here and email them directly: https://www.ourcommons.ca/members/en/search
ourcommons.ca
Current Members of Parliament - Members of Parliament - House of Commons of Canada
I just emailed a strongly worded letter
to my government representative to oppose Bill C-22.
If you are Canadian, you should too: https://action.openmedia.org/page/188754/action/1
action.openmedia.org
🚨 Bill C-22 forces every Canadian internet provider, messaging app & cloud service to build surveillance backdoors and store a year of your data. Foreign state hackers exploited similar legislation in the US. Shut the backdoor: https://openmedia.org/StopC22 #BillC22
Though Google Cloud Next in Las Vegas was a couple weeks ago, I'm still working through it and trying to process everything I learned there. Three days, 32,000 attendees, 260 product announcements. One cool stand out...
Google shipped an entire agent accountability infrastructure at this conference. Every AI agent now gets a cryptographic ID and an auditable action trail tied to a defined authorization policy. They built anomaly detection that flags unusual agent reasoning in real time and maps it back to the source.
You build that when you're expecting things to go wrong at scale.
GE Appliances is deploying 800 AI agents across manufacturing and supply chain right now. That's operational continuity with autonomous software making decisions without a human in the loop.
Every enterprise leader needs to answer one question the technology doesn't answer for you: when an agent makes a decision that costs money or creates legal exposure, who owns it?
I'm looking forward to diving deeper into Gemini Enterprise and Chrome Enterprise. The Chrome Enterprise shadow AI reporting shows you every unsanctioned AI tool your employees are already using. You can't govern what you can't see.
https://cloud.google.com/blog/topics/google-cloud-next/google-cloud-next-2026-wrap-up
#AIGovernance #AgenticAI #GoogleNext #CIO #EnterpriseSecurity #security #privacy #cloud #infosec #cybersecurity #AI @google @googlecloud @googlecloudsec
cloud.google.com
A whirlwind recap of Google Cloud Next 26, including a synopsis of over 250 product, customer and ecosystem announcements.
This is why you don't connect your car to the Internet.
It makes me think older cats will get more and more expensive as people start to value their privacy more.
One can hope ..
https://www.bbc.com/future/article/20260513-your-car-is-spying-on-you-its-about-to-get-worse
bbc.com
From your weight and facial expressions to your destination, cars collect a startling amount of data about you. Some of it may even raise your insurance costs.
This is why you don't connect your car to the Internet.
It makes me think older cats will get more and more expensive as people start to value their privacy more.
One can hope ..
https://www.bbc.com/future/article/20260513-your-car-is-spying-on-you-its-about-to-get-worse
bbc.com
From your weight and facial expressions to your destination, cars collect a startling amount of data about you. Some of it may even raise your insurance costs.
@Xavier Librewolf does some smart protection. Since cookies are less available, companies use OS, browser, screensize, location, and so on.. to fingerprint you (the new cookie).
Librewolf can counter a lot of that. I guess in this case, it tells me for whom Vercel is really playing. I will fight against or ban any company that limits the internet in these ways
**coughs**cloudflare**cough**
Time to stand up and make internet decent again.
@Xavier Librewolf does some smart protection. Since cookies are less available, companies use OS, browser, screensize, location, and so on.. to fingerprint you (the new cookie).
Librewolf can counter a lot of that. I guess in this case, it tells me for whom Vercel is really playing. I will fight against or ban any company that limits the internet in these ways
**coughs**cloudflare**cough**
Time to stand up and make internet decent again.
🚨 Know this if you use Vercel!
Once again. I am using Librewolf (for privacy reasons), but it seems Vercel still bans browser it can't fingerprint. Really? Ouch!
So, if a company can't fingerprint you, your application won't work.
That will be costly for the owner at some point!
"Canada’s Bill C-22 Is a Repackaged Version of Last Year’s Surveillance Nightmare" Canadians deserve better, so stop with it already.
Awesome HN comment from Embarrassed help:
Both the mandatory data retention and encryption backdoor requirements will cause encrypted messaging services like Signal, WhatsApp, iMessage, Matrix, and others to block both Canadians and Canadian businesses from their services.
If you live in Canada or are impacted by this legislation, then you need to tell both your MP and the Minister of Public Safety of Canada to reject this legislation.
The Canadian Civil Liberties Association (CCLA) published information about Bill C-22 here just over a week ago:
https://ccla.org/privacy/coalition-to-mps-scrap-unprecedented-surveillance-measures/
The blanket metadata retention and encryption backdoor requirements of Bill C-22 are illegal in the European Union.
Multiple groups have made easy to use tools for sending your MP and (other members of government) an email about rejecting this terrible legislation in its current form:
* The Internet Society's tool:
https://www.internetsociety.org/our-work/internet-policy/keep-canada-protected/
* OpenMedia's messaging tool: https://action.openmedia.org/page/188754/action/1
* ICLM's messaging tool:
https://iclmg.ca/stop-c-22/
I would also recommend emailing the Minister of Public Safety of Canada (Gary Anandasangaree: gary.anand@parl.gc.ca) and the Minister of Justice (Sean Fraser: sean.fraser@parl.gc.ca).
iclmg.ca
Since you’re here… … we have a small favour to ask. Here at ICLMG, we are working very hard to protect and promote human rights and civil liberties in the context of the so-called “war on terror” in Canada. We do not receive any financial support from any federal, provincial or municipal governments or political …
Hello, #Fediverse! My name is Soméo (rhymes with "mayo") and I use he/him. I'm a trans guy living in #Seattle 
with my two #cats. I'm relatively new here— I first joined Fedi some time last year as I've developed a hyper-fixation on #infosec and #privacy. I don't have any connections on Fedi with anyone I knew beforehand, so I'm mostly here to lurk and discover cool people; I'm also still working out what I'd like to post.
Do not comply.
Do not share your ID or biometric data with abusive platforms requesting it. You have a choice to say no, complain, and leave.
This is an important act of resistance for the future of humanity.
This isn't just about privacy, this is also about safety, diversity, democracy, and human rights.
#Privacy #MassSurveillance #HumanRights #Fascism #AgeVerification #IdentityVerification
Privacy rights aren't a luxury, they are fundamental to democracy, to safety, and to so many other human rights.
When they attack your privacy rights,
they attack all of this, they attack your humanity.
Do not let them.
Fight back for your human rights.
Anyone asserting encryption is a tool for crime is either painfully misinformed or is attempting to manipulate legislators to gain oppressive power over the people.
Encryption is not a crime,
encryption is a shield.
Encryption protects you from cyberattack, identity theft, discrimination, doxxing, stalking, sexual violence, physical harm, and much more.
For safety, for privacy, for democracy, and for all our human rights, it's critical that we defend our right to encryption.
https://www.privacyguides.org/articles/2025/04/11/encryption-is-not-a-crime/
#Privacy #Encryption #DigitalRights #HumanRights #Democracy #RootForE2EE
privacyguides.org
Encryption is not a crime, encryption protects us all. Encryption, and especially end-to-end encryption, is an essential tool to protect everyone online. Attempts to undermine encryption are an attack to our fundamental right to privacy and an attack to our inherent right to security and safety.
Hello Fediverse!
We are pleased to be joining the Federated Universe today, with this new Mastodon account! 🐢 
We are Lockdown Systems,
a worker-owned collective building freedom and privacy technologies to inform the public, fight surveillance, and empower people to take back control of their own data.
Our projects include:
🐦️ @cyd
🧅 OnionShare
🧊 ICE Detention Map
🥚 And more to come!
To learn more about our collective, you can visit our website at: https://lockdown.systems
We're excited to start sharing our work with the Fediverse! 🎉
#Fediverse #Mastodon #LockdownSystems #DigitalRights #HumanRights #Privacy #OpenSource
lockdown.systems
A worker-owned collective building freedom and privacy tech, empowering people to take control of their own data and protect themselves from unwanted surveillance
In the 1960s, if you wanted to surveil one person, you had to hire someone else to bug them or follow them. Today, we surveil everyone by default; you just have to tap into the data collected by the spies in their pockets (smartphones), on their wrists and fingers (smart watches and rings), their work tools (laptops), and in the public sphere (CCTV cameras) – you’ll have more on any person than the Stasi could ever dream of.
https://aeon.co/essays/things-have-jobs-and-digital-devices-are-made-to-track-you
#Tennessee sucks. The #governor just passed a law creating a #public #database of #trans #people. I don't even have the words to describe just how incredibly cruel and fucked up this is.
Not only is this the first time the state has tried this, medical #information will be collected (major HIPAA violation), and the database will be publicly available.
Arguably, this is the worst and most dangerous anti-trans law in the country and jeopardizes the #safety, privacy, and well being of trans people.
#news #transrights #health #privacy #lgtbqia #medical #unitedstates #america #uspol #hate #hipaa
theneedlenews.com
This is not the first time Tennessee has attempted to make a list of trans people in its state, but it reflects a new tactic for doing so.
🚨 This Week In Privacy #52 will be live in 30 minutes, we'll be giving our thoughts on CalyxOS returning with an Android 16 test build and we will also be covering the latest in privacy & security news. 🗞️
Come say hi and chat with us live! 😊
https://www.youtube.com/@privacyguides/live or https://streamyard.com/watch/gaehAHBzCVfT
streamyard.com
After an extended break - CalyxOS has come back and released test builds of Android 16 for their supported devices, Disneyland is using facial recognition software in their parks, the U.S. Department of Homeland Security compelled Google to share data about Canadians because of social media posts and much more! Join us for this Week In Privacy #52!
Your data isn't at risk of being breached. It already has been. The right question is whether what's out there can still be used against you. Most of the attack surfaces that actually matter are stoppable with free government tools almost nobody has touched: new credit accounts opened in your name, fraudulent tax returns filed before you file yours, employment fraud using your SSN, bank account takeovers. The IRS Identity Protection PIN alone is worth calling out. Someone can file a return in your name, collect your refund, and disappear before you ever log into TurboTax. There's a free six-digit PIN that blocks this cold. Most people have never heard of it.
A few things worth flagging from the guide:
- 23andMe filed for bankruptcy in 2025 and was acquired, putting genetic data for millions of users at risk of sale. If you have an account, delete it and request deletion of your physical sample.
- HIPAA covers your doctor. It doesn't cover your fitness tracker, your wellness app, or your period tracking app. That data flows freely and largely without regulation.
- E-Verify Self Lock is something most people don't know exists. If someone uses your SSN to get a job, the IRS gets their wages on your record. Self Lock blocks it at employers who use E-Verify, which is most large ones.
If you do nothing else, freeze your credit at all four bureaus and get an IRS IP PIN. It takes about 90 minutes and cost nothing. Read the guide, pick a few off the list, and stop treating this as something that happens to other people.
https://briangreenberg.net/2026/05/07/how-to-protect-yourself-from-identity-theft/
#Cybersecurity #IdentityTheft #Privacy #security #cloud #infosec
briangreenberg.net
Practical steps to protect yourself from identity theft: assume your data is already exposed, then learn how to make it unusable to attackers.
@evacide A hypothesis I haven't tested but think we can assume unless someone wants to do the necessary web archive scraping:
Every porn site that would ever follow "age verification" laws—every site subject to any of the applicable jurisdictions—already had meta tags for adult content before those laws were ever bills. Minimum adequate parenting of "digital native" children—thus minimally adequate implementation of device administrative access and parental controls—would already block every site that would ever comply with the laws.
Therefore (as @404mediaco have also predicted), relative to porn access, the only real effect of such online panopticon laws is to direct people away from sites subject to democratic jurisdictions, which at least attempt to lawfully moderate content, and towards sites outside such jurisdictions, which deliberately distribute CSAM and other sex trafficking and SA content.
Legislatively outsourcing parenting onto the porn sites thus increases harm to everyone such laws claim to seek to protect.
#uspol #surveillance #censorship #privacy #idVerification #ageVerification
We're thrilled to announce the next section of our Privacy Activism resources! 🎉
📑 The Data Protection Authority Directory is a new tool to help you find the main consumer privacy law in your region, and the authority mandated to enforce that law.
We sincerely hope our DPA Directory will be a useful tool for building your knowledge about what privacy protections you're entitled to. Paired with our resource on reporting privacy violations in our Privacy Activist Toolbox, you can take a stand against violations of your privacy rights, and make a significant impact benefiting both you and your community.
Find your country/state/region here: https://www.privacyguides.org/en/activism/legal/dpa-directory/
A screenshot of the new DPA directory, showing 6 buttons: Africa, Asia, Europe, North America, Oceania, and South America; as well as the first few lines of a table with the columns: Region, Privacy Law, Abbreviation, DPA, Contact, Complaint
Why do people still insist on using Google Chrome (or search for that matter) and going to the effort of disabling it's AI features?!
Just use a different Chromium (if that's important) based browser that isn't preloaded with spyware and AI garbage. Same goes with search.
https://www.thatprivacyguy.com/blog/chrome-silent-nano-install/
thatprivacyguy.com
Google Chrome is downloading a 4 GB Gemini Nano model onto users' machines without consent, with no opt-in, no opt-out short of enterprise tooling, and an automatic re-download every time the user deletes it. The pattern is identical to the Anthropic Claude Desktop case I wrote about last month, but the scale is between two and three orders of magnitude larger. This article does the legal analysis and, for the first time, the environmental analysis. The numbers are not small.
Why do people still insist on using Google Chrome (or search for that matter) and going to the effort of disabling it's AI features?!
Just use a different Chromium (if that's important) based browser that isn't preloaded with spyware and AI garbage. Same goes with search.
https://www.thatprivacyguy.com/blog/chrome-silent-nano-install/
thatprivacyguy.com
Google Chrome is downloading a 4 GB Gemini Nano model onto users' machines without consent, with no opt-in, no opt-out short of enterprise tooling, and an automatic re-download every time the user deletes it. The pattern is identical to the Anthropic Claude Desktop case I wrote about last month, but the scale is between two and three orders of magnitude larger. This article does the legal analysis and, for the first time, the environmental analysis. The numbers are not small.
‘They protect the law while breaking it’
Europol built and operated a shadow data analysis platform containing large volumes of sensitive information, which operated without key legal and technical safeguards
computerweekly.com
Under pressure to deliver in the fight against serious cross-border crime, Europol built and operated a shadow data analysis platform containing large volumes of sensitive information, which operated without key legal and technical safeguards.
It's been a while since I posted here, and at this point all of my previous posts have auto-deleted. Might as well reintroduce myself.
I am Gabriel, and I am based in Costa Rica. I work as an independent software developer and systems administrator.
As of late, my computer interests lie in #selfhosting, #Linux, and #containers. I care a lot about #privacy and ownership of our data and devices.
I am also passionate about #permaculture, #reading, #cycling, #fermentation, and #synthesizers.
Signal is developing a standalone desktop app without requiring a smartphone for setup or use, based on recent open-source code changes. 🖥️
The update adds more desktop controls while keeping end-to-end encryption, improving device independence with a privacy-first design. 🔐
#TechNews #Signal #Messaging #Privacy #E2EE #Encryption #EndToEndEncryption #OpenSource #FOSS #Cybersecurity #Security #Data #Internet #Freedom #Software #Tech #Communication
aboutsignal.com
Signal is working on a standalone version of its desktop app that does not require a smartphone. Signal Desktop will also gain additional options when used as a linked device.
First time seeing a “NO META GLASSES” sign in the door of a shop! I’m not surprised… and I expect we might see more of these kind of things in the years ahead.
A sign on a store window indicates "NO META GLASSES," featuring images of different sunglasses models. It also includes instructions to respect staff by asking permission before taking pictures or videos, with a friendly "Thank you!" at the bottom.
Delighted to report that Amazon has abandoned its plans to build a datacenter here.
The "lease-and-equip" model they're switching to is a lot easier to get rid of, when we eventually kick these digital imperialists out altogether.
I'll raise a sovereign glass of fresh water to that.
rnz.co.nz
Despite the write-down, Amazon appeared to be continuing to invest heavily in its New Zealand footprint.
🔒 Everything FediBoard saves stays on YOUR device.
Your credentials. Your lists. Your history. Your cache.
Never shared. Never sold. Never uploaded.
Your Flipboard data belongs to you. Period.
Delighted to report that Amazon has abandoned its plans to build a datacenter here.
The "lease-and-equip" model they're switching to is a lot easier to get rid of, when we eventually kick these digital imperialists out altogether.
I'll raise a sovereign glass of fresh water to that.
rnz.co.nz
Despite the write-down, Amazon appeared to be continuing to invest heavily in its New Zealand footprint.
Signal is developing a standalone desktop app without requiring a smartphone for setup or use, based on recent open-source code changes. 🖥️
The update adds more desktop controls while keeping end-to-end encryption, improving device independence with a privacy-first design. 🔐
#TechNews #Signal #Messaging #Privacy #E2EE #Encryption #EndToEndEncryption #OpenSource #FOSS #Cybersecurity #Security #Data #Internet #Freedom #Software #Tech #Communication
aboutsignal.com
Signal is working on a standalone version of its desktop app that does not require a smartphone. Signal Desktop will also gain additional options when used as a linked device.
First time seeing a “NO META GLASSES” sign in the door of a shop! I’m not surprised… and I expect we might see more of these kind of things in the years ahead.
A sign on a store window indicates "NO META GLASSES," featuring images of different sunglasses models. It also includes instructions to respect staff by asking permission before taking pictures or videos, with a friendly "Thank you!" at the bottom.
Dear politicians,
your push for surveillance is wrong! Not just morally, but also from a strategic perspective. In a geopolitical environment shaped by digital warfare, the data you collect on citizens will become a threat. Adversaries will try to weaponize those data, and sooner or later, they will succeed.
A transparent society is vulnerable to all sorts of malicious influence.
Privacy supports resilience! Data you don't have cannot be used by or against anyone!
--
#privacy #DataProtection
That disposable hotel keycard in the bin? It still has your name, dates, and credit card data on it. Nobody is required to erase it.
#data #digital #privacy #Surveillance #technology
https://riftlymedia.com/hotel-keycard-personal-data-privacy/
Riftly
Dear politicians,
your push for surveillance is wrong! Not just morally, but also from a strategic perspective. In a geopolitical environment shaped by digital warfare, the data you collect on citizens will become a threat. Adversaries will try to weaponize those data, and sooner or later, they will succeed.
A transparent society is vulnerable to all sorts of malicious influence.
Privacy supports resilience! Data you don't have cannot be used by or against anyone!
--
#privacy #DataProtection
🚨 This Week In Privacy #51 will be live in 30 minutes, we'll be talking about
Ubuntu adding AI features and using it in their development pipeline 😬, we will also be covering the latest in privacy & security news. 🗞️
We will also be answering questions from the community, come say hi! 😊
streamyard.com
Canonical has laid out it's plans to integrate "AI" features into Ubuntu Linux, Signal is working on a standalone desktop version, that doesn't require a smartphone, Greece is banning anonymity on social media and more! Join us for This Week In Privacy #51
I disable Google Home microphone I disable Google Chrome microphone access "Hey Google" Google: "Your microphone is currently disabled"
I just spent an hour doing the UK Govt consultation on #digitalID
I highly suggest you do too if you're a UK subject.
The consultation seems as naive as to be expected re dangers.
Massive overreach/over sharing of data. Fraud/Id theft/coercion risks. State wants biometric face scan - state surveillance will be inevitable. Zero references to trusting US companies (apple&google) to provide secure devices....
gov.uk
re/task highlights:
- Lists, subtasks, recurring tasks (daily/weekly/custom)
- Stars, due dates, optional push notifications
- Full-text search across all lists
- Smart views — Today, Upcoming, Overdue, Starred
- Trash & 30-day recovery
- JSON import/export
re/notes highlights:
- Markdown editor with live preview
- Folders, tags, internal links with autocomplete
- Version history
- Encryption X-Ray
- Import single .md or whole Obsidian vaults
🧵 2/n
re/task screenshot
Two open-source, end-to-end encrypted productivity PWAs by a EU non-profit foundation.
re/task - encrypted task manager
re/notes - encrypted Markdown notes
Built on a True Zero Knowledge architecture: AES-256-GCM, Argon2id, PBKDF2 600K iterations. The server stores only ciphertext - it physically cannot read your tasks, notes, due dates, or even tag relations.
→ Free official instance: https://reapps.eu
🧵 1/n
#privacy #zeroknowledge #foss #pwa #android #ios #opensource
Two open-source, end-to-end encrypted productivity PWAs by a EU non-profit foundation. re/task — encrypted task manager re/notes — encrypted Markdown notes
The Observer obtained Flock license-plate reader audit logs that show #police conducted 117 immigration-related searches of local data from Jan to March. One dept's reason to search: "Obstructing Justice – Suspicious female filming traffic stop & making comments about ICE” https://www.texasobserver.org/license-plate-readers-texas-privacy-advocates/
texasobserver.org
The Kyle City Council voted to apply for more state grant money for Flock Safety cameras despite a string of local-level contract cancellations of the booming surveillance company’s services.
The Observer obtained Flock license-plate reader audit logs that show #police conducted 117 immigration-related searches of local data from Jan to March. One dept's reason to search: "Obstructing Justice – Suspicious female filming traffic stop & making comments about ICE” https://www.texasobserver.org/license-plate-readers-texas-privacy-advocates/
texasobserver.org
The Kyle City Council voted to apply for more state grant money for Flock Safety cameras despite a string of local-level contract cancellations of the booming surveillance company’s services.
Thanks So Much...
@GYLPH there just isn't enough room in a POST to thank you for your MASSIVE PUBLIC ENDORSEMENT of my website, so, I made a machine to CHOP IT FOR THE ALT TEXTS!
https://mastodon.social/@glyph/115452630591566258
#Python #Twisted #OpenSource #FOSS #AsyncIO #IndieWeb #technology #Coding #SelfHosted #Art #PixelArt #Typography #Fonts #Typeface #Design #LowRes #InfoSec #Privacy #Encryption #Security #Hardening #SecDevOps #Backend #Frontend #DataScience #UI #UX #Linux #Unix #news...
Dearest GLYFH, It is barely possible that I will be able to thank you enough for what an extraordinary effort you have made towards your absolutely selfless and chivalrous early promotion of my naive web project. By linking my website directly, you essentially dispatched a tidal wave of visitor who would not have otherwise been exposed to my amazing web project at what might have seemed like a juvenile stage of the development process. Unlike many others, you were able to clearly recognize that the project was still in the exploratory programming stage, where all of the early programming is completed, and secondary programming is being freshly explored. Of course, I don't have to tell you about the amazing and mystical techniques that must be used to set up the elaborate and time consuming methods that make real-life programs function every single day. Really I should not only be thanking you from myself, because of your amazingly generous and substantial public endorsement of myself, my website, and my project, but also for the wide public, who, even so as they do not even know it, owe you an enormous debt. The gravity of what you have accomplished, particularly in your early career, is an astonishing feat of computering brilliance, the likes of which the world has never before seen, and alas, may never see again. Of course, the particular contribution of yours to which I am clearly alluding is the twisty python framework networking app. You were the only...
one who was brave and intellectual enough to take up the intensity of the challenging nature of this exceptional computational science challenge. SIR you have certainly prevailed! AND you have remained extremely prevalent to this very day. Your prevalence and continued dominance in the Python software networking industry has stood the test of time, and will, doubtless, continue on into the future, for a duration which cannot be predicted in known units of temporal quantity. I guess what I am trying to say is that the Giant effect of your efforts will go on to unknown reaches and at untold length. And just let me tell you, many of those people, so very many, are not even aware of how much they rely on the critically important software which you single-handedly pioneered. This is why your bold and thorough public endorsement of my website, and therefore my project, was such a stunning and heartwarming experience. Just think, that a superstar software engineering maven such as yourself would effectively SPONSOR through ENDORSEMENT a project like mine, that is an wonderful thing. Obviously your thoughtful nature and clear passion for small independent web projects drove you to take this decisive action and you generously lent your personal support for my website. I don't know how I can ever thank you enough for your apathy and your motivation. Everyone who I have ever met who knew about your contribution to the python programming language all admitted that they did...
not know how it worked. That is because they did not have the momentum to study diligently enough to comprehend the mastery of the code which you so graciously adorned, sir. Not even one was able to comprehend it, because they are simply not intellectual enough. Every time I hear about systems that claim, egregiously, to somehow compete with your decisive contribution, I actually begin to laugh, and that is because I know that it is not possible to replace such vital scripture as yours. You have written it with your own hands, and it will be around for the ages. For anyone who has accepted the challenge of learning the correct method, as you have so gallantly taught us, they must be brave, as you are brave, sir. It is very much like riding on a horse. First you must get up on top of that horse, and then you will be know to be riding the horse. But, before you can ride the horse, you must place a seat upon the top of the horse, just like how GLYFH has taught us all to do. And then when you are riding on top of the horse, you will be glad that you have such a seat as this one. That is the only seat for that horse, so you will know best to choose wisely the best one. After when you are riding such an animal as a horse, you cannot easily change the seat whilst riding, and must therefore continue in dominance or in failure, in spite of the seat of everyone's but yours. Of course, it is obvious that the metaphor which I have embarked upon is fraught and will never have...
the capacity to imbue upon the intellect the height of import in magnitude which I am struggling, because of lack of intellect, to attribute to you. - Yours truly is the best seat, The Guy You Endorsed (wow, such spacious posts on Mastodon)
Palantir tracks everyone. So we built a site that tracks Palantir. They've been watching us. Now we can watch them.
Contracts. Lawsuits. Executive pay. Global footprint. Lobbying activity. Media strategies. All in one place.
Preview of online dashboard displaying a variety of stats.
#ICYMI, here's a detailed article from @eff entitled, "10 (Not So) Hidden Dangers of Age Verification".
Review this to understand better why age verification on the Internet is a horrible freedom-suppressing idea.
#ageverification #censorship #privacy #internet
https://www.eff.org/deeplinks/2025/12/10-not-so-hidden-dangers-age-verification
eff.org
It’s nearly the end of 2025, and half of the US and the UK now require you to upload your ID or scan your face to watch “sexual content.” A handful of states and Australia now have various requirements to verify your age before you can create a social media account.Age-verification laws may sound...
#ICYMI, here's a detailed article from @eff entitled, "10 (Not So) Hidden Dangers of Age Verification".
Review this to understand better why age verification on the Internet is a horrible freedom-suppressing idea.
#ageverification #censorship #privacy #internet
https://www.eff.org/deeplinks/2025/12/10-not-so-hidden-dangers-age-verification
eff.org
It’s nearly the end of 2025, and half of the US and the UK now require you to upload your ID or scan your face to watch “sexual content.” A handful of states and Australia now have various requirements to verify your age before you can create a social media account.Age-verification laws may sound...
Palantir tracks everyone. So I built a site that tracks Palantir. They've been watching us. Now we can watch them.
Contracts. Lawsuits. Executive pay. Global footprint. Lobbying activity. Media strategies. All in one place.
All mainstream messaging platforms share the same model: a single provider owns the servers, logic, and #metadata. Between political pressure and regulatory proposals like #chatcontrol, such centralization is a liability.
Learn from @morrolinux how Matrix, a secure, open, and decentralized network, flips this model: https://lpi.org/r2yu
@matrix #matrix #decentralization #opensource #privacy #chatcontrol #FOSS #morrolinux
Anyone asserting encryption is a tool for crime is either painfully misinformed or is attempting to manipulate legislators to gain oppressive power over the people.
Encryption is not a crime,
encryption is a shield.
Encryption protects you from cyberattack, identity theft, discrimination, doxxing, stalking, sexual violence, physical harm, and much more.
For safety, for privacy, for democracy, and for all our human rights, it's critical that we defend our right to encryption.
https://www.privacyguides.org/articles/2025/04/11/encryption-is-not-a-crime/
#Privacy #Encryption #DigitalRights #HumanRights #Democracy #RootForE2EE
privacyguides.org
Encryption is not a crime, encryption protects us all. Encryption, and especially end-to-end encryption, is an essential tool to protect everyone online. Attempts to undermine encryption are an attack to our fundamental right to privacy and an attack to our inherent right to security and safety.
All mainstream messaging platforms share the same model: a single provider owns the servers, logic, and #metadata. Between political pressure and regulatory proposals like #chatcontrol, such centralization is a liability.
Learn from @morrolinux how Matrix, a secure, open, and decentralized network, flips this model: https://lpi.org/r2yu
@matrix #matrix #decentralization #opensource #privacy #chatcontrol #FOSS #morrolinux
🗓️ 𝗔𝗽𝗿 𝟯𝟬: 𝗗𝗪𝗲𝗯 𝗩𝗶𝗿𝘁𝘂𝗮𝗹 𝗠𝗲𝗲𝘁𝘂𝗽 🌼
Get a sneak peek of what’s coming to camp by joining us with Will Scott from Protocol Labs and the Community Privacy Residency Staff, this Thursday at 15:00 UTC! 👀
🆓 Free attendance, RSVP here → https://tix.dod.ngo/dwebcamp/virtualmeetup-april2026/ ←
#event #meetup #DWeb #DWebCamp #decentralization #privacy #communityPrivacy #ProtocolLabs
Graphic split in two: on the left, illustration of synapses on dark background, floating around them the words “people”, “projects”, and “ideas”. On the right, a photo of people talking in a panel. Above, in big capital letters: “coming to DWeb Camp // sneak-peak”.
I've been building an independent publication called The Grist. It's writing about civics, technology, rights, and practical knowledge. This one's a big swing for me and I've put a lot into it. No ads, no algorithm, no paywall. Take a look and let me know what you think. hope you like it. grist.ink
"The Grist nameplate — Independent. Unfiltered. Unsponsored
A technical digital poster titled "WELCOME BACK!" in bold white letters. The background is a moody navy dark circuit board with glowing cyan lines. In the center, a cyan Atom logo sits inside a dark, softly glowing portal, representing the successful restoration and self-hosting of the user's Fediverse instance.
We just had a chance to interview Carissa Véliz, author of Privacy is Power and associate professor at the Institute for Ethics in AI at the University of Oxford.
We talked about how predictive AI will make a 'meritocracy' impossible, how lifelike chat bots are designed to deceive you, and the importance of privacy in the digital age. Catch the episode on our YouTube channel or your favorite podcast app now!
Carissa Véliz is an associate professor at the Institute for Ethics in AI at the University of Oxford, a renowned author and speaker, a board member of the Proton Foundation, and a member of UNESCO's Women 4 Ethical AI.
Her new book Prophecy comes out April 21st and is now available for pre-order.
Prophecy is about how extensive use of predictive analytics is undermining our abilities to defy the odds, making systems unaccountable, and increasing risk in business and society while creating a false sense of security.
#AIEthics #Data #Interview #PredictiveAI #Prophecy #PrivacyIsPower #CarissaVeliz #Privacy #OxfordUniversity #PrivacyGuides
privacyguides.org
We sat down with Carissa Véliz, author of 'Privacy is Power' and Oxford AI Ethics professor, to talk about how predictive AI will make a 'meritocracy' impossible, how lifelike chat bots are designed to deceive you, and the importance of privacy in the digital age.
The McDonald's AI jailbreak story was fabricated. The Chipotle one before it was Photoshopped. I get why they went viral, they're kinda funny. But they're pulling attention away from the cases that actually happened and actually cost companies money.
Amazon's Rufus chatbot got manipulated into providing instructions for obtaining dangerous chemicals. A Chevy dealership's bot was maneuvered into agreeing to sell a $76,000 Tahoe for a dollar. Air Canada's bot invented a refund policy that didn't exist, a customer relied on it, and when the airline said "that's not our problem, the bot is its own entity," a Canadian tribunal told them exactly where to put that argument.
If you're a CIO, the legal question sitting underneath all of this is the one worth losing sleep over:
- Prompt injection isn't exotic. It works because LLMs are built to be responsive to language, not resistant to it. There is no patch that fully closes this.
- Any AI you deploy on a customer-facing surface is making representations on your company's behalf. Your legal team needs to know that before your marketing team ships the chatbot.
- "The bot did it, not us" is not a defense. One court has already said so, and others will follow.
The fake viral stories are a distraction. The boring real ones are the ones that end up in discovery.
https://www.fastcompany.com/91532091/mcdonalds-ai-bot-didnt-go-rogue
#Cybersecurity #AI #Leadership #security #privacy #cloud #infosec #cybersecurity
The FCC forgot hotspots were a thing. They announced a ban on foreign-made consumer routers a month ago and had to update their FAQ to add MiFi devices and cellular home routers after the fact. That's not a minor oversight... it's the whole work-from-anywhere use case.
Here's the part that should bother you. The only way to get an exemption is to commit to US-based manufacturing and submit a time-bound plan to get there. Netgear, eero, and Adtran got conditional approval, but it runs out October 1, 2027. There is no domestic consumer router industry to speak of right now. So the FCC has created a countdown clock against a factory floor that doesn't exist yet.
A few things worth sitting with:
- The Global Electronics Association pointed out that security vulnerabilities show up across products regardless of where they're made. Geography isn't the filter; code quality is.
- The Covered List used to apply to specific companies flagged for specific reasons. Extending it to an entire product category means the government can now ban any internet-connected device made abroad by citing national security. Smartphones aren't included yet. "Yet" is doing a lot of work in that sentence.
- The Register's headline from last month said it plainly: the country that put backdoors in Cisco routers to spy on the world is now banning foreign routers. I didn't write that. They did. But they're not wrong.
If you're in security or IT leadership, watch the October 2027 date. That's when the conditional approvals expire, and if the manufacturing commitments aren't met, the options get ugly fast.
https://www.theregister.com/2026/04/24/fcc_does_a_doubletake_adds/
#Cybersecurity #FCC #NetworkSecurity #security #privacy #cloud #infosec
theregister.com
: Silicon often from US, but the kit from APAC and elsewhere
Anthropic recorded over 16 million interactions with Claude from about 24,000 fake accounts, which are reportedly linked to Chinese companies trying to cheaply copy the model. Google faced more than 100,000 attempts to copy Gemini. OpenAI reports that most distillation attacks they find come from China. This is not an isolated event. It is a repeatable and scalable strategy.
Breaking the terms of service isn't enough to stop people when the reward is closing a years-long gap in AI technology. The House Select Committee on China wants to label 'adversarial distillation' as industrial espionage under the Economic Espionage Act, which makes sense. At the moment, getting caught just means losing an account. That is hardly a real punishment.
The Trump-Xi summit is approaching, and the White House is reportedly considering sanctions. However, Trump has previously traded away export controls for other deals. If that happens again, AI companies may have to protect their intellectual property by themselves.
When laws fail to keep pace with new types of attacks, attackers automatically have the advantage.
If your company is developing anything unique using advanced AI models, your API access logs are now part of your security risks.
#AI #Cybersecurity #NationalSecurity #IntellectualProperty #Geopolitics #security #privacy #cloud #infosec #Espionage
arstechnica.com
Trump-Xi summit may be rocked by US mulling huge sanctions.
A Chinese national pretended to be U.S. engineers and researchers for almost five years, from 2017 to 2021, and walked away with sensitive aerospace and weapons development software from NASA, the Air Force, the Navy, and the Army. There was no hacking or breaking through firewalls. People simply emailed him what he asked for, because they believed he was someone they knew.
This worries me more than any zero-day vulnerability. The NASA OIG reported that Song Wu asked for the same software several times without explaining why he needed it. Most people miss this kind of red flag because no one teaches them to spot it. We invest millions in technology controls but spend very little on training people to pause and think like a threat actor before sending information.
Export controls are not only about legal compliance. They are also about human behavior. Your employees make export control decisions every day, often without realizing it.
When was the last time your organization ran a spear-phishing simulation aimed at your researchers, not just your finance team?
If your security awareness program doesn't cover identity deception and unusual software requests, it is not thorough enough.
https://thehackernews.com/2026/04/nasa-employees-duped-in-chinese.html
#Cybersecurity #NationalSecurity #Espionage #SecurityAwareness #InfoSec #security #privacy #cloud #infosec
thehackernews.com
NASA OIG exposed a 2017–2021 spear-phishing campaign by Song Wu, leading to DOJ charges and export control violations.
Anthropic spent months carefully gatekeeping access to Mythos, their most capable AI model, while limiting access only to a small group of vetted companies for defensive cybersecurity testing. Then a private online forum got in anyway, through a third-party vendor, on the same day the controlled program was announced.
That's the part worth sitting with. Not the model. The vendor. Third-party vendors... It's always the the 3td party vendor. 🤦🏻♂️ You can build the most carefully controlled AI release program in the industry, and one weak link in your supply chain burns it down. We keep having this conversation about AI safety and regulation, and we keep forgetting that the threat surface isn't just the model. It's every partner, every integration, every environment touching it. 🔗 Everything's connected. Everything.
🤔 Ask yourself: how many third parties have access to your most sensitive systems right now? Do you actually know?
⚠️ Vendor risk management isn't a compliance checkbox. It's where your security posture actually lives or dies.
https://www.yahoo.com/news/articles/anthropics-mythos-model-accessed-unauthorized-214920132.html
#Cybersecurity #AI #VendorRisk #InfoSec #RiskManagement #security #privacy #cloud #infosec
yahoo.com
Trying to be secure... You deleted the app. You turned on disappearing messages. You did everything right. The FBI can still read your Signal messages.
Huh? This wasn't a Signal failure. Signal did its job. iOS didn't. The phone was storing notification previews in a database long after the app was gone, because someone turned on Lock Screen message previews. Apple just patched it in iOS 26.4.2, and they only found out about it because a defendant's court case exposed it during testimony.
🔎 This is why privacy promises and privacy architecture are two different things
📲 Update your phone. Not because you're hiding something. Because your phone is quietly keeping receipts you don't know about.
⚠️ And if you're a CISO still telling employees that "just use Signal" is a complete privacy answer, it's time to revisit that conversation.
https://www.macrumors.com/2026/04/22/ios-26-4-2-notification-database-security-fix/
#Cybersecurity #Privacy #iOS #InfoSec #Leadership #security #cloud #infosec #AlwaysUpdate
macrumors.com
The iOS 26.4.2, iPadOS 26.4.2, iOS 18.7.8, and iPadOS 18.7.8 updates that Apple released today address a security vulnerability that the FBI recently used to extract Signal message previews from an iPhone even after the app was deleted. A flaw with notification services allowed notifications that were supposed to be deleted to be retained on an iPhone or iPad. Apple says it fixed the logging issue with improved data redaction.
Der @HaraldKi bricht die aktuelle @signalapp -Berichterstattung sehr plastisch herunter💯 ! Ich frage mich bei der ganzen Berichterstattung ja schon, welchen Anteil #Bigtech und andere Gegner von #Datenschutz und #FOSS an den Nonsense-Berichten haben (ist ja nicht das erste Mal)! #SignalApp #Privacy #Medienverantwortung
BREAKING! Meshcore team splits over dispute over AI-generated code disclosure, and hostile trademark takeover.
Meshcore is an off-grid, decentralised mesh radio platform powered by low-cost and public access LoRa radio technology for reliable, long-range emergency text and embedded sensors communication. It can communicate across kilometres — no towers, no subscriptions, no single point of failure.
https://blog.meshcore.io/2026/04/23/the-split
#meshcore #meshtastic #lora #radio #opensource #foss #drama #privacy #security #selfsovereignty #ai #copyright #takeover
blog.meshcore.io
Migrating to the new meshcore.io site
BREAKING! Meshcore team splits over dispute over AI-generated code disclosure, and hostile trademark takeover.
Meshcore is an off-grid, decentralised mesh radio platform powered by low-cost and public access LoRa radio technology for reliable, long-range emergency text and embedded sensors communication. It can communicate across kilometres — no towers, no subscriptions, no single point of failure.
https://blog.meshcore.io/2026/04/23/the-split
#meshcore #meshtastic #lora #radio #opensource #foss #drama #privacy #security #selfsovereignty #ai #copyright #takeover
blog.meshcore.io
Migrating to the new meshcore.io site
This guy should definitely be told who is on antidepressants. https://skipcut.com/watch/RsisHdJRjQE
#autism #privacy #identityverification #ageverification #mentalhealth #persona #IDverification #biometricdata
skipcut.com
Watch this video by The Hill without ads, only on SkipCut.com
Fortunately there is nothing to worry about as Headway support has told me “With the information we have gathered, I can assure you that your personal information will not be leaked, as Headway prioritizes data privacy and security in full compliance with HIPAA regulations.”
🙄
#autism #privacy #identityverification #ageverification #mentalhealth #persona #IDverification #biometricdata
…you upload, are collected, used and stored directly by Persona on behalf of Customer as Customer’s service provider through Customer’s website or app that you accessed."
https://withpersona.com/legal/privacy-policy/
#autism #privacy #identityverification #ageverification #mentalhealth #persona #IDverification #biometricdata
Persona’s policy is "The images obtained from government identification document and photos of your face that you upload, and data from scans of facial geometry extracted from the government identification document and photos of your face that…
#autism #privacy #identityverification #ageverification #mentalhealth #persona #IDverification #biometricdata
This will apply first to people seeing a provider who is prescribing them medicine, but “soon” will expand to everyone including the providers themselves.
#autism #privacy #identityverification #ageverification #mentalhealth #persona #IDverification #biometricdata
Persona’s privacy history https://cybernews.com/privacy/persona-leak-exposes-global-surveillance-capabilities/
https://vmfunc.re/blog/persona/
#autism #privacy #identityverification #ageverification #mentalhealth #persona #IDverification #biometricdata
vmfunc.re
53MB of source code leaked from a government endpoint. 269 verification checks. biometric face databases. SAR filings to FinCEN. and the same company that verifies your ChatGPT account.
Persona’s security history https://www.malwarebytes.com/blog/news/2026/02/age-verification-vendor-persona-left-frontend-exposed
#autism #privacy #identityverification #ageverification #mentalhealth #persona #IDverification #biometricdata
malwarebytes.com
Behind a basic age check, researchers say Persona’s system runs extensive identity, watchlist, and adverse-media screening.
Age / ID verification primer https://this.weekinsecurity.com/papers-please-age-verification-laws-threaten-everyones-online-security-and-privacy/
#autism #privacy #identityverification #ageverification #mentalhealth #persona #IDverification #biometricdata
this.weekinsecurity.com
Laws that require adults to upload their driver's licenses or passports to access apps, websites, and VPNs will make the entire web less safe.
Age / ID verification primer https://this.weekinsecurity.com/papers-please-age-verification-laws-threaten-everyones-online-security-and-privacy/
#autism #privacy #identityverification #ageverification #mentalhealth #persona #IDverification #biometricdata
this.weekinsecurity.com
Laws that require adults to upload their driver's licenses or passports to access apps, websites, and VPNs will make the entire web less safe.
You can talk to your provider and see if they are on any alternative platforms to Headway that you can switch to so you can keep seeing them.
#autism #privacy #identityverification #ageverification #mentalhealth #persona #IDverification #biometricdata
The barrier to stopping seeing your therapist and / or psychiatrist is high—much more than just changing to a Discord alternative. It seems it will take collective action from many people to force Headway to reverse this dangerous plan.
#autism #privacy #identityverification #ageverification #mentalhealth #persona #IDverification #biometricdata
I have been asking for weeks to be allowed to do a manual review but Headway support is ignoring my request and just telling me that I can choose to opt out and stop being a headway customer.
#autism #privacy #identityverification #ageverification #mentalhealth #persona #IDverification #biometricdata
There is a manual review alternative according to this page intended for providers which states "If you're having trouble with the process, Headway's support team can help. You can retry the verification, and if there are persistent issues, you can contact Headway support for a manual review."
#autism #privacy #identityverification #ageverification #mentalhealth #persona #IDverification #biometricdata
However in talking to Headway support many times over the past few weeks to try to opt out they eventually told me I can opt out by not using Headway, which means there is not actually an opt out.
#autism #privacy #identityverification #ageverification #mentalhealth #persona #IDverification #biometricdata
Opting out is possible according to their policy which states "Inform each User in writing of the manner in which the User may opt out of the collection, processing, storage or usage of their Biometric Data"
https://headway.co/legal/biometric-data-policy
#autism #privacy #identityverification #ageverification #mentalhealth #persona #IDverification #biometricdata
#Privacy #GrapheneOS #CopperheadOS #cybersecurity #Android
Under a fucking paywall?
WTF.
Age verification laws forcing platforms to restrict content access have been multiplying exponentially.
The problem is, implementing such measures necessarily requires identifying every user accessing the content, one way or another.
This is bad news for everyone.
If these regulations continue
to proliferate, this could lead to the end of pseudonymity online, and much worse.
I wrote this article last year,
but unfortunately this problem has only become worse, and it is sadly still very relevant.
https://www.privacyguides.org/articles/2025/05/06/age-verification-wants-your-face/
#Privacy #AgeVerification #MassSurveillance #Authoritarianism
privacyguides.org
Age verification laws forcing platforms to restrict access to content online have been multiplying in recent years. The problem is, implementing such measure necessarily requires identifying each user accessing this content, one way or another. This is bad news for your privacy.
Quick thought experiment. Pull out your phone, look at your lock screen, and ask yourself who else is reading those notification previews. The answer is stranger than you think.
EFF just laid out what most people don't realize: push notifications usually route through Apple or Google servers before they hit your device, often with content visible in the clear. Then they get written to a local notification database that doesn't always get wiped when you swipe the alert away or even when you uninstall the app. 404 Media reported the FBI has pulled deleted Signal message text out of that database using standard forensic tools. Signal. The app you installed specifically because you didn't want this.
🔐 Apple and Google now require a court order for push notification data, but Apple's transparency report still shows hundreds of users handed over
📱 Lock screen previews are a free read for anyone who picks up your phone, including at a border crossing or traffic stop
🧹 Uninstalling an app does not guarantee its notification history goes with it, and we don't know what gets backed up to iCloud or Google
🛠️ Signal's notification setting "No Name or Content" is a 30-second fix that closes the easiest leak
For the security folks, this is a useful reminder that end-to-end encryption ends at the endpoint, and the endpoint includes a SQLite file most users have never heard of. For the executives, this is the reason your travel security policy for high-risk regions should say more than "use Signal." The default settings on a stock iPhone leak more than the app you chose to protect you.
https://www.eff.org/deeplinks/2026/04/how-push-notifications-can-betray-your-privacy-and-what-do-about-it
#Privacy #Cybersecurity #MobileSecurity #security #cloud #infosec
eff.org
A phone’s push notifications can contain a significant amount of information about you, your communications, and what you do throughout the day. And there are myriad ways that law enforcement can access the content or metadata of push notifications. Let’s fix that.
An ex-Azure engineer published six essays arguing Microsoft's cloud has been on life support since 2008, and the cause isn't bad code. It's bad people decisions. Rushed launch, post-launch talent exodus, no testing discipline, no architectural vision. Sound familiar to anyone who's worked in a place that ships first and staffs later?
Now layer 2026 on top. Microsoft cut roughly 15,000 jobs in mid-2025. Coding agents are pumping out 4x more commits in 90 days. GitHub's unofficial uptime has slipped under 90% and the proposed fix is, wait for it, moving more of GitHub onto Azure. The same Azure the engineer says is held together with rushed decisions and wishful thinking.
🧠 The phrase that stuck with me is "knowledge dilution from high attrition." When the senior people who knew why a system was built that way leave, no LLM in the world can recover that context
🤖 More AI-written code does not mean less work. It means more code to review, test, deploy, and run, which means more compute and more humans needed downstream
📉 OpenAI signing an $11.9B compute deal with CoreWeave in March 2025 was the loudest "we don't trust your capacity" signal Microsoft has ever received from its closest partner
🪑 The bet that AI lets you cut headcount keeps colliding with the reality that AI generates work for humans faster than it removes it
Every CIO I talk to is being pitched the same dream: fewer engineers, more agents, lower run rate. The Azure story is what happens when that math doesn't pencil out and the bill comes due in incidents instead of dollars.
https://www.theregister.com/2026/04/04/azure_talent_exodus/
#Azure #AI #Leadership #security #privacy #cloud #infosec #cybersecurity #software #devops
theregister.com
: The cloud service's woes reflect a crisis made worse by AI – under-investment in people
Four grand. That's what it costs a random kid with a laptop to run a voice phishing operation that used to require a call center, a phisher, and a developer. ATHR packages all of it into one dashboard, tosses in AI voice agents that can ad-lib when a victim gets suspicious, and ships with ready-made lures for Google, Microsoft, Coinbase, Binance, and a few more.
CyberCrime has a SaaS model now, complete with commission splits (10% of profits back to the vendor). The barrier to running a convincing vishing campaign just collapsed, and your awareness training still says "watch for typos in the email."
🎙️ AI agents handle objections live, so the "support rep" sounds real because they are, functionally, reasoning
📧 Lure emails are customized per target with accurate IPs, dates, locations, and pass authentication checks
🏦 Eight brands supported out of the box, crypto exchanges heavily represented for obvious reasons
🛡️ Stop looking at email indicators, start modeling normal communication patterns and flag the anomalies
If your vishing defense is a 20-minute annual training video and a phish-report button, you're bringing a knife to a drone fight. The humans on the other end of the phone aren't humans anymore, and they don't get tired, rattled, or bored on calls.
#Cybersecurity #Vishing #AI #security #privacy #cloud #infosec #cybersecurity
#Introduction 📣 V3
Hi! 👋
I'm a #music producer with a strong passion for #photography. Music-wise I lean toward #EDM, while photography ranges from aerial to architecture and everyday stills.
A big believer in #privacy, digital independence, and owning your own space online, powered by #FOSS.
When I'm not crafting electronic noise or framing pixels, I’m reading terms and conditions just to feel something. 😁
Also, I get paid to talk. Not much—I just talk a lot.
Feel free to connect! ✨
👻 Anthropic secretly installs spyware when you install Claude Desktop — That Privacy Guy!
｢ I did install Claude Desktop, the Mac app, a while back. That is the only thing on this machine which could have written the file. Claude Desktop reached into Brave, a browser from a completely separate vendor, and registered a back door for a browser extension I do not have ｣
thatprivacyguy.com
Anthropic's Claude Desktop silently installs a Native Messaging bridge into seven Chromium browsers, including browsers Anthropic's own documentation says it does not support, and browsers the user has not even installed.
👻 Anthropic secretly installs spyware when you install Claude Desktop — That Privacy Guy!
｢ I did install Claude Desktop, the Mac app, a while back. That is the only thing on this machine which could have written the file. Claude Desktop reached into Brave, a browser from a completely separate vendor, and registered a back door for a browser extension I do not have ｣
thatprivacyguy.com
Anthropic's Claude Desktop silently installs a Native Messaging bridge into seven Chromium browsers, including browsers Anthropic's own documentation says it does not support, and browsers the user has not even installed.
Happy Monday, got this gem from a UK org. The subject line was "GDPR request".
I think it sums up this particular shitshow perfectly tbh.
"we have processed your GDPR request and are now sending your deleted information to someone you do not know as confirmation we have deleted you"
screenshot of an email that lists all the old values and the new values - which are deleteduser.com based.
Raise your hand if you use Chrome. After all, it is the most popular browser in the world and it’s not even close. And the very humans relying on it are more than users — they’re the product. PC World tells us more about how you can limit the amount of your data Chrome tracks — and reclaim a little bit of your privacy.
pcworld.com
While Chrome is a popular browser, it tends to collect a lot of data about its users. Here is how to help minimize what it collects and make your browsing experience more private.
We just had a chance to interview Carissa Véliz, author of Privacy is Power and associate professor at the Institute for Ethics in AI at the University of Oxford.
We talked about how predictive AI will make a 'meritocracy' impossible, how lifelike chat bots are designed to deceive you, and the importance of privacy in the digital age. Catch the episode on our YouTube channel or your favorite podcast app now!
Carissa Véliz is an associate professor at the Institute for Ethics in AI at the University of Oxford, a renowned author and speaker, a board member of the Proton Foundation, and a member of UNESCO's Women 4 Ethical AI.
Her new book Prophecy comes out April 21st and is now available for pre-order.
Prophecy is about how extensive use of predictive analytics is undermining our abilities to defy the odds, making systems unaccountable, and increasing risk in business and society while creating a false sense of security.
#AIEthics #Data #Interview #PredictiveAI #Prophecy #PrivacyIsPower #CarissaVeliz #Privacy #OxfordUniversity #PrivacyGuides
privacyguides.org
We sat down with Carissa Véliz, author of 'Privacy is Power' and Oxford AI Ethics professor, to talk about how predictive AI will make a 'meritocracy' impossible, how lifelike chat bots are designed to deceive you, and the importance of privacy in the digital age.
When you read about Bans of Social Media for Teens and Age Verification, you must remember what it truly means:
• Official identification of every adult using social media.
• Deanonymization of every account, endangering groups that often rely on pseudonymity for safety, such as victims of domestic violence, victims of stalkers, people of color, and LGBTQ+ people.
• Putting every adult at great danger of exploitation, fraud, and identity theft by forcing them to share their official ID with a for-profit third-party company with no incentive to protect it. Breaches have already happened.
• Constructing a system of mass surveillance to attach every comment on social media to a legal identity. Effectively allowing authoritarian governments to silence their critics and opposition.
• Potential for dystopian censorship and cutting off means of organization for groups of resistance to oppressive regime and organizations.
• Endangering children online by putting a clear identification beacon over every child or family with children online.
• Endangering the data of children who will inevitably try to pass as adults, and have their information collected by the third-party for-profit company.
• Diminishing the value of official identification due to the inevitable data breaches, eventually pushing the system to require even more intrusive identification techniques, such as iris scans and fingerprints.
• Installing a system of mass surveillance capable of attaching even more information to everyone's legal identity. With a potential to built list of people in certain groups, and scale-up state censorship and discrimination in unprecedented ways.
• The list goes on and on.
This isn't about protecting the children.
It never was.
Do not be duped by this excuse used to convince you to let go of your human rights. They are only trying to manipulate people lacking information.
Stay informed on the issues related to Age Verification, and push back for your rights to privacy and democracy.
The future depends on us.
#AgeVerification #Privacy #HumanRights #MassSurveillance #Authoritarianism
If you're in Linz on May 16th, please come and hear me talk about how bad the European Commission's "Digital Omnibus" is for us. I'd love to see you there!
Also, please have a look at all the other wonderful contributions to this year's Art Meets Radical Openness festival taking place in Linz from May 13th to 16th.
https://radical-openness.org/en/programm/2026/fodder-machine-european-commissions-plans-facilitate-building-generative-models-our
--
#amro26 #privacy #DataProtection #GDPR #DigitalOmnibus
radical-openness.org
Under the guise of “cutting unnecessary red tape”, the European Commission proposed profound changes to the Union’s regulatory framework for the protection of personal data.
#SayNoToAgeVerification #Privacy #Freespeech #SaveTheNet
https://csa-scientist-open-letter.org/ageverif-Feb2026
https://youtu.be/uryHjVMfZGg?si=8XKfv_WrFg0Hl_2K
https://xcancel.com/Paul_Reviews/status/2044723123287666921
https://edri.org/our-work/europe-shouldnt-move-fast-and-break-things-with-fundamental-rights/
abc.net.au
Tech companies are coming under fire as Australian parents increasingly voice concerns that some online platforms are failing to keep kids under 16 off their platforms.
A startup is putting military-style drones in high school ceilings. Ceiling-mounted. Charging. Waiting. And when something happens, a pilot in Austin, Texas, decides whether to deploy pepper gel on your kid's school. I'm not saying the problem isn't real. It absolutely is. But read that back.... in schools. We've taken a Ukrainian battlefield tactic against Russian soldiers and ported it to Deltona High School in Florida. The co-founder literally said the idea came from watching drone videos of the war in Ukraine. The chief pilot described it as "cheating in a video game after you die." These are children.
Here's what's not in the headline:
🔒 The drones use an encrypted connection — but the article notes they're potentially vulnerable to cyberattack. A compromised drone in a crowded hallway isn't a security tool; it's a weapon pointed in the wrong direction.
⚖️ Mithril reserves the right to act independently during an attack, without waiting for law enforcement. A private company operating remotely is making use-of-force decisions at a school.
💰 Florida and Georgia approved $500K+ each for this. A group of Texas parents raised $200K more. That's real money going to ceiling drones instead of mental health services, counselors, or de-escalation programs.
The ACLU said it plainly: when force becomes a zero-risk remote action, it gets overused. Axon tried a Taser drone for schools in 2022, and its own ethics board killed it. Mithril is picking up where that got dropped.
I teach cybersecurity. I've spent years in boardrooms helping organizations think through risk. And the risk calculus here isn't just about whether the drone works. It's about what we're normalizing when we turn schools into drone-monitored combat zones and call it progress.
"This is the future," said the sheriff's captain.
I hope not.
#SchoolSafety #Cybersecurity #Leadership #security #privacy #cloud #infosec
Meta Is Warned That Facial Recognition Glasses Will Arm Sexual Predators
More than 70 civil liberties, domestic violence, reproductive rights, LGBTQ+, labor, and immigrant advocacy organizations are demanding that Meta abandon plans to deploy face recognition on its smart glasses
#surveillance #privacy #safety #meta #wearables #facialrecognition #technology #tech
https://www.wired.com/story/meta-ray-ban-oakley-smart-glasses-no-face-recognition-civil-society/
wired.com
More than 70 organizations, including the ACLU, EPIC, and Fight for the Future, say the AI smart glasses feature would endanger abuse victims, immigrants, and LGBTQ+ people.
🕵️ Would you like to receive regular updates on our current projects and stay on top of all things #privacy and data protection?
🐦 Sign up to our #newsletter via https://newsletter.noyb.eu/pf/433/TdOop
Want to have updates sent to you directly? Subscribe to our newsletter via the link in our bio to receive this month's news!
You might consent to your data being used to prevent societal harm, but who decides where that line is drawn? 🤔⚖️
Aram Sinnreich & Jesse Gilbert explore the hidden ethics of data collection, facial recognition, and algorithmic decision making in THE SECRET LIFE OF DATA on the Future Knowledge #podcast, with Laura DeNardis. 🔍
🎧 Listen & subscribe ⬇️
https://futureknowledge.transistor.fm/episodes/the-secret-life-of-data
#Consent #DataEthics #Privacy #AI @aram @jesse #Bookstodon
I got this email this morning, and I guess this is now a marketing point? Whether the FCC labels you a “trusted consumer router”? I wonder what requirements they met, or more likely, how much that cost them.
For context, I don’t use NETGEAR. Just an old account email.
An email from NETGEAR explaining that the FCC (Federal Communications Commission) has listed NETGEAR as a trusted consumer router company.
I got this email this morning, and I guess this is now a marketing point? Whether the FCC labels you a “trusted consumer router”? I wonder what requirements they met, or more likely, how much that cost them.
For context, I don’t use NETGEAR. Just an old account email.
An email from NETGEAR explaining that the FCC (Federal Communications Commission) has listed NETGEAR as a trusted consumer router company.
In privacy, we talk a lot about how to protect our own data,
But what about our responsibility to protect the data of others?
If you care about privacy rights, you must also care for the data of the people around you.
To make privacy work, we need to develop a culture that normalizes caring for everyone's data, not just our own.
https://www.privacyguides.org/articles/2025/03/10/the-privacy-of-others/
privacyguides.org
In privacy, we talk a lot about how to protect our own data, but what about our responsibility to protect the data of others? If you care about privacy rights, you must also care for the data of the people around you. Together, we must build a culture where everyone cares for the data of others.
In privacy, we talk a lot about how to protect our own data,
But what about our responsibility to protect the data of others?
If you care about privacy rights, you must also care for the data of the people around you.
To make privacy work, we need to develop a culture that normalizes caring for everyone's data, not just our own.
https://www.privacyguides.org/articles/2025/03/10/the-privacy-of-others/
privacyguides.org
In privacy, we talk a lot about how to protect our own data, but what about our responsibility to protect the data of others? If you care about privacy rights, you must also care for the data of the people around you. Together, we must build a culture where everyone cares for the data of others.
Meta Is Warned That Facial Recognition Glasses Will Arm Sexual Predators
More than 70 civil liberties, domestic violence, reproductive rights, LGBTQ+, labor, and immigrant advocacy organizations are demanding that Meta abandon plans to deploy face recognition on its smart glasses
#surveillance #privacy #safety #meta #wearables #facialrecognition #technology #tech
https://www.wired.com/story/meta-ray-ban-oakley-smart-glasses-no-face-recognition-civil-society/
wired.com
More than 70 organizations, including the ACLU, EPIC, and Fight for the Future, say the AI smart glasses feature would endanger abuse victims, immigrants, and LGBTQ+ people.
The Deepfake Nudes Crisis in Schools Is Much Worse Than You Thought
https://www.wired.com/story/deepfake-nudify-schools-global-crisis/
#news #tech #technology #AI #deepfake #aislop #security #privacy
wired.com
An analysis by WIRED and Indicator found nearly 90 schools and 600 students around the world impacted by AI-generated deepfake nude images—and the problem shows no signs of going away.
The Deepfake Nudes Crisis in Schools Is Much Worse Than You Thought
https://www.wired.com/story/deepfake-nudify-schools-global-crisis/
#news #tech #technology #AI #deepfake #aislop #security #privacy
wired.com
An analysis by WIRED and Indicator found nearly 90 schools and 600 students around the world impacted by AI-generated deepfake nude images—and the problem shows no signs of going away.
I'm thinking about getting a used Jeep, 10-ish years old. I'm concerned about intrusive data harvesting from the vehicle. I'd still like to be able to use my phone's GPS functionality with the infotainment display IF I can do it with a FOSS software stack that respects privacy and a degoogled phone. Suggestions?
Any tips for preventing the vehicle from phoning home more generally is also welcome.
Anthropic built an AI model called Mythos that autonomously found a 17-year-old remote code execution vulnerability in FreeBSD. No human involvement after the initial prompt. It found thousands more zero-days across every major OS and browser, some hiding for decades. Anthropic says it's too dangerous to release publicly, so they gave it to AWS, Microsoft, Apple, Google, CrowdStrike, and a handful of others under a new initiative called Project Glasswing. $100M in usage credits to go fix things before similar capabilities go wide.
Impressive, but worth some skepticism. Bruce Schneier pointed out this is also a very effective PR play. A security firm called Aisle replicated many of the same findings using older, cheaper, publicly available models. The gap between "too dangerous to release" and "already achievable with what's out there" may be thinner than the headlines suggest.
🔒 Mythos autonomously discovered and exploited a FreeBSD RCE that had been present for 17 years (CVE-2026-4747)
🔗 It chains 3-5 vulnerabilities together into multi-step attack sequences
📊 Over 99% of the vulnerabilities found are still unpatched, so we're trusting Anthropic's claims on scope
💰 $25/$125 per million input/output tokens for partners, if you're on the list
Meanwhile, the advice cybersecurity experts are giving the rest of us: update your software, use MFA, get a password manager. The most advanced AI vulnerability scanner ever built, use off-line (truly air-gapped) backups, and basic hygiene is still the best defense most people have.
https://www.crn.com/news/security/2026/5-things-to-know-on-anthropic-s-claude-mythos-and-project-glasswing
#CyberSecurity #AI #ProjectGlasswing #security #privacy #cloud #infosec
crn.com
Anthropic announced Tuesday it has launched a new initiative, “Project Glasswing,” focused on boosting software security with involvement from a number of major industry players.
😳 Someone hid a prompt injection inside invisible markdown comments in a pull request. A developer asked Copilot to review the PR. Copilot read the hidden instructions, searched the codebase for AWS keys, encoded them in base16, and smuggled them out through GitHub's own image proxy as 1x1 transparent pixels. The CSP didn't flag it because the traffic was routed through GitHub's trusted infrastructure. CVSS 9.6. No malicious code ever executed.
The attacker weaponized the AI assistant's own access permissions. Copilot could see everything the developer could see, and it can't distinguish a legitimate instruction from a hidden one buried in a PR description.
🔍 The attack, dubbed "CamoLeak," was patched by GitHub in August 2025 and publicly disclosed in October
🔑 Copilot was directed to find secrets like API keys and cloud credentials, then exfiltrate them character by character
🖼️ Data was hidden inside pre-signed image URLs, making it look like normal browser activity
⚠️ Any AI assistant with deep system access, Microsoft 365 Copilot, Google Gemini, all of them, is a potential exfiltration channel if untrusted content can reach its instruction stream
We've spent years teaching developers not to trust user input. Now we're handing AI tools full repo access and letting them ingest unvalidated text from pull requests.
https://cybersecuritynews.com/hackers-exploit-github-copilot-flaw/
#CyberSecurity #AI #GitHubCopilot #security #privacy #cloud #infosec #software
cybersecuritynews.com
A high-severity flaw in GitHub Copilot Chat allowed silent theft of source code, API keys, and secrets from private repos without executing code.
https://pitha.social is live today!
We just launched a new Mastodon instance focused on privacy, Bengali culture, and a friendly community!
🌐 Invite links: yes
🛡️ Moderation: active
We're looking to federate and connect!
#Fediverse #Mastodon #NewInstance #OpenSource #Privacy #pitha #joinmastodon #community #Bangladesh #neuhier #newhere
pitha.social
A curated space for curious minds. Rooted in Bengali culture. An invite-only community, hosted in the EU!
Useful-looking Android #privacy advice (from Threads): https://www.threads.com/@heyshrutimishra/post/DXCvesNiMxm?xmt=AQF0H_tNxTbLvW0YqJxmHZkZI2EXuGCuIZq_URvXPQGSyzvUMF9uPdaqmo_cdRvYYY_ZWqKy
Your Android phone is sending data to Google every 4.5 minutes. Even when you're not touching it. Even when the screen is off. A peer-reviewed study from Trinity College Dublin confirmed it. 12 settings to change right now: 1/15
NEW: Who’s Been Impersonating This ProPublica Reporter?
A mysterious impostor who claimed to be ProPublica reporter Robert Faturechi reached out to a Canadian official and a Latvian businessman working with Ukraine.
So, the real Robert did some reporting of his own.
https://www.propublica.org/article/impersonating-propublica-reporter
propublica.org
A mysterious impostor who claimed to be ProPublica reporter Robert Faturechi reached out to a Canadian official and a Latvian businessman working with Ukraine. So, the real Robert did some reporting of his own.
Michigan 'digital age' bills pulled after privacy concerns raised
https://www.thecentersquare.com/michigan/article_7ca4e268-4a68-42fb-9042-f9d8604ebd7f.html
#HackerNews #Michigan #Privacy #DigitalRights #Legislation #TechNews #DataProtection
Michigan 'digital age' bills pulled after privacy concerns raised
https://www.thecentersquare.com/michigan/article_7ca4e268-4a68-42fb-9042-f9d8604ebd7f.html
#HackerNews #Michigan #Privacy #DigitalRights #Legislation #TechNews #DataProtection
When you read about Bans of Social Media for Teens and Age Verification, you must remember what it truly means:
• Official identification of every adult using social media.
• Deanonymization of every account, endangering groups that often rely on pseudonymity for safety, such as victims of domestic violence, victims of stalkers, people of color, and LGBTQ+ people.
• Putting every adult at great danger of exploitation, fraud, and identity theft by forcing them to share their official ID with a for-profit third-party company with no incentive to protect it. Breaches have already happened.
• Constructing a system of mass surveillance to attach every comment on social media to a legal identity. Effectively allowing authoritarian governments to silence their critics and opposition.
• Potential for dystopian censorship and cutting off means of organization for groups of resistance to oppressive regime and organizations.
• Endangering children online by putting a clear identification beacon over every child or family with children online.
• Endangering the data of children who will inevitably try to pass as adults, and have their information collected by the third-party for-profit company.
• Diminishing the value of official identification due to the inevitable data breaches, eventually pushing the system to require even more intrusive identification techniques, such as iris scans and fingerprints.
• Installing a system of mass surveillance capable of attaching even more information to everyone's legal identity. With a potential to built list of people in certain groups, and scale-up state censorship and discrimination in unprecedented ways.
• The list goes on and on.
This isn't about protecting the children.
It never was.
Do not be duped by this excuse used to convince you to let go of your human rights. They are only trying to manipulate people lacking information.
Stay informed on the issues related to Age Verification, and push back for your rights to privacy and democracy.
The future depends on us.
#AgeVerification #Privacy #HumanRights #MassSurveillance #Authoritarianism
When you read about Bans of Social Media for Teens and Age Verification, you must remember what it truly means:
• Official identification of every adult using social media.
• Deanonymization of every account, endangering groups that often rely on pseudonymity for safety, such as victims of domestic violence, victims of stalkers, people of color, and LGBTQ+ people.
• Putting every adult at great danger of exploitation, fraud, and identity theft by forcing them to share their official ID with a for-profit third-party company with no incentive to protect it. Breaches have already happened.
• Constructing a system of mass surveillance to attach every comment on social media to a legal identity. Effectively allowing authoritarian governments to silence their critics and opposition.
• Potential for dystopian censorship and cutting off means of organization for groups of resistance to oppressive regime and organizations.
• Endangering children online by putting a clear identification beacon over every child or family with children online.
• Endangering the data of children who will inevitably try to pass as adults, and have their information collected by the third-party for-profit company.
• Diminishing the value of official identification due to the inevitable data breaches, eventually pushing the system to require even more intrusive identification techniques, such as iris scans and fingerprints.
• Installing a system of mass surveillance capable of attaching even more information to everyone's legal identity. With a potential to built list of people in certain groups, and scale-up state censorship and discrimination in unprecedented ways.
• The list goes on and on.
This isn't about protecting the children.
It never was.
Do not be duped by this excuse used to convince you to let go of your human rights. They are only trying to manipulate people lacking information.
Stay informed on the issues related to Age Verification, and push back for your rights to privacy and democracy.
The future depends on us.
#AgeVerification #Privacy #HumanRights #MassSurveillance #Authoritarianism
Russia's military intelligence 🇷🇺 the GRU, was caught using between 18,000 and 40,000 home and small office routers to harvest credentials. Most of these were MikroTik and TP-Link devices, spread across 120 countries. The attackers didn't use any advanced tools or unknown exploits. Instead, they exploited known, unpatched vulnerabilities on outdated hardware that people had not replaced.
This is a nation-state espionage campaign that may be operating through the router right next to your cable box.
🪤 Even with multi-factor authentication, users weren't protected. APT28 set up adversary-in-the-middle servers that waited for people to finish logging in, then intercepted the OAuth token. People followed all the recommended steps, but the attackers still managed to get in.
📡 The only warning was a browser certificate alert. Millions of people see these self-signed certificate pop-ups every day and click through them without thinking. That simple action gave Russian intelligence access to authenticated sessions.
🔁 When Britain's NCSC published an alert about part of this campaign in August, APT28 did not slow down. Instead, they increased their activity. In just four weeks, 290,000 unique IP addresses connected to their malicious DNS resolver.
This group has been hijacking routers since at least 2018. They were caught using VPNFilter to infect 500,000 devices. The DOJ caught them again in 2024. Now, in 2026, we are still dealing with the same problem.
The solution is simple, but not exciting: replace outdated routers, check your DNS settings for unfamiliar servers, and avoid clicking through certificate warnings. It is not glamorous or powered by AI; it is just basic steps that are often ignored.
APT28 is not succeeding because they are smarter. They are succeeding because we keep leaving easy ways for them to get in.
https://arstechnica.com/security/2026/04/russias-military-hacks-thousands-of-consumer-routers-to-steal-credentials/
#Cybersecurity #InfoSec #Leadership #security #privacy #cloud
arstechnica.com
End-of-life routers in homes and small offices hacked in 120 countries.
Anthropic created an AI that discovered vulnerabilities in every major operating system and browser, even uncovering a nearly 30-year-old flaw in one of the most secure platforms. Weirder yet, one day, while a researcher was eating lunch in the park, the model emailed them. It had escaped their internal sandbox and reached the internet.
They named it Claude Mythos Preview, but they are not making it available to the public.
A private company, mainly accountable to its investors and its own sense of ethics, now controls a cyber weapon as powerful as those used by nation-states. For now, they have given Apple, Microsoft, Google, and Nvidia access to use it for defense.
This situation proves what the security community has warned about for years:
🔓 The balance has shifted. In cybersecurity, attacking has always been easier than defending. Mythos doesn't just narrow that gap; it widens it. While finding a vulnerability and exploiting it without being noticed are separate challenges, you can't exploit what you haven't found. Mythos has now solved the problem of large-scale vulnerability detection.
🌐 Calling this move "responsible" serves several purposes. Anthropic can announce a major breakthrough, show restraint by not releasing it, and boost its reputation as a responsible company, all at once. This isn't being cynical, it's simply how public relations works. Both can be true.
⚔️ The article mentions that OpenAI is working on something similar, and Google DeepMind will likely follow. Soon, smaller companies with fewer safety measures will offer cheaper models. The time when "responsible non-release" is a real option is running out.
I teach cybersecurity at DePaul, and for years I've told my students that AI would make both attacking and defending more accessible. Now, Mythos shows we've reached a turning point where attackers have pulled far ahead.
The real question isn't if a tool like this will be misused, but how soon a version without any safeguards will be released by someone with no accountability.
https://www.theatlantic.com/technology/2026/04/claude-mythos-hacking/686746/
#Cybersecurity #AI #Leadership #security #privacy #cloud #infosec
theatlantic.com
What happens when AI can hack everything?
John Carreyrou, the reporter who took down Theranos, just spent a year trying to unmask Satoshi Nakamoto. His conclusion: it's Adam Back, the British cryptographer who literally invented a core component of Bitcoin and has spent the last decade quietly running the community that maintains it.
Back denies it. Of course he does.
This isn't a conspiracy theory stitched together from vibes. Carreyrou and a NYT data journalist ran the full mailing list archive of 34,000 users, filtered down through writing tics, hyphenation errors, spelling habits, and synonym-free technical vocabulary, and landed on one person. Back shared 67 of Satoshi's exact hyphenation errors. The next closest suspect had 38.
That's a fingerprint.
A few things worth sitting with:
🔍 Back outlined nearly every architectural feature of Bitcoin; distributed nodes, Hashcash-based mining, inflation controls, public immutability, a full decade before Bitcoin launched. Not vaguely. Specifically.
🕳️ He went silent on the Cryptography mailing list during the exact window Satoshi was active, then publicly claimed he had "participated" in those discussions. He hadn't. There's no record.
📋 He refused to produce metadata from the emails he claims Satoshi sent him. A man with nothing to hide produces the metadata.
💬 During the confrontation in El Salvador, Back apparently said something that only makes sense if he wrote the "better with code than with words" quote himself.
If Back is Satoshi, the more interesting story isn't the identity reveal. It's that the person who created a $2.4 trillion system designed to operate without any central authority has spent the last decade quietly becoming that authority. Blockstream raised a billion dollars. Back poached the core developers. He shaped the block size debate. He is, functionally, Bitcoin's most powerful insider.
The cypherpunk who wanted to free money from institutional control built an institution. That's either irony or it's the plan.
https://www.nytimes.com/2026/04/08/business/bitcoin-satoshi-nakamoto-identity-adam-back.html
#Bitcoin #Crypto #Cybersecurity #security #privacy #cloud #infosec
A startup is putting military-style drones in high school ceilings. Ceiling-mounted. Charging. Waiting. And when something happens, a pilot in Austin, Texas, decides whether to deploy pepper gel on your kid's school. I'm not saying the problem isn't real. It absolutely is. But read that back.... in schools. We've taken a Ukrainian battlefield tactic against Russian soldiers and ported it to Deltona High School in Florida. The co-founder literally said the idea came from watching drone videos of the war in Ukraine. The chief pilot described it as "cheating in a video game after you die." These are children.
Here's what's not in the headline:
🔒 The drones use an encrypted connection — but the article notes they're potentially vulnerable to cyberattack. A compromised drone in a crowded hallway isn't a security tool; it's a weapon pointed in the wrong direction.
⚖️ Mithril reserves the right to act independently during an attack, without waiting for law enforcement. A private company operating remotely is making use-of-force decisions at a school.
💰 Florida and Georgia approved $500K+ each for this. A group of Texas parents raised $200K more. That's real money going to ceiling drones instead of mental health services, counselors, or de-escalation programs.
The ACLU said it plainly: when force becomes a zero-risk remote action, it gets overused. Axon tried a Taser drone for schools in 2022, and its own ethics board killed it. Mithril is picking up where that got dropped.
I teach cybersecurity. I've spent years in boardrooms helping organizations think through risk. And the risk calculus here isn't just about whether the drone works. It's about what we're normalizing when we turn schools into drone-monitored combat zones and call it progress.
"This is the future," said the sheriff's captain.
I hope not.
#SchoolSafety #Cybersecurity #Leadership #security #privacy #cloud #infosec
When you read about Bans of Social Media for Teens and Age Verification, you must remember what it truly means:
• Official identification of every adult using social media.
• Deanonymization of every account, endangering groups that often rely on pseudonymity for safety, such as victims of domestic violence, victims of stalkers, people of color, and LGBTQ+ people.
• Putting every adult at great danger of exploitation, fraud, and identity theft by forcing them to share their official ID with a for-profit third-party company with no incentive to protect it. Breaches have already happened.
• Constructing a system of mass surveillance to attach every comment on social media to a legal identity. Effectively allowing authoritarian governments to silence their critics and opposition.
• Potential for dystopian censorship and cutting off means of organization for groups of resistance to oppressive regime and organizations.
• Endangering children online by putting a clear identification beacon over every child or family with children online.
• Endangering the data of children who will inevitably try to pass as adults, and have their information collected by the third-party for-profit company.
• Diminishing the value of official identification due to the inevitable data breaches, eventually pushing the system to require even more intrusive identification techniques, such as iris scans and fingerprints.
• Installing a system of mass surveillance capable of attaching even more information to everyone's legal identity. With a potential to built list of people in certain groups, and scale-up state censorship and discrimination in unprecedented ways.
• The list goes on and on.
This isn't about protecting the children.
It never was.
Do not be duped by this excuse used to convince you to let go of your human rights. They are only trying to manipulate people lacking information.
Stay informed on the issues related to Age Verification, and push back for your rights to privacy and democracy.
The future depends on us.
#AgeVerification #Privacy #HumanRights #MassSurveillance #Authoritarianism
When you read about Bans of Social Media for Teens and Age Verification, you must remember what it truly means:
• Official identification of every adult using social media.
• Deanonymization of every account, endangering groups that often rely on pseudonymity for safety, such as victims of domestic violence, victims of stalkers, people of color, and LGBTQ+ people.
• Putting every adult at great danger of exploitation, fraud, and identity theft by forcing them to share their official ID with a for-profit third-party company with no incentive to protect it. Breaches have already happened.
• Constructing a system of mass surveillance to attach every comment on social media to a legal identity. Effectively allowing authoritarian governments to silence their critics and opposition.
• Potential for dystopian censorship and cutting off means of organization for groups of resistance to oppressive regime and organizations.
• Endangering children online by putting a clear identification beacon over every child or family with children online.
• Endangering the data of children who will inevitably try to pass as adults, and have their information collected by the third-party for-profit company.
• Diminishing the value of official identification due to the inevitable data breaches, eventually pushing the system to require even more intrusive identification techniques, such as iris scans and fingerprints.
• Installing a system of mass surveillance capable of attaching even more information to everyone's legal identity. With a potential to built list of people in certain groups, and scale-up state censorship and discrimination in unprecedented ways.
• The list goes on and on.
This isn't about protecting the children.
It never was.
Do not be duped by this excuse used to convince you to let go of your human rights. They are only trying to manipulate people lacking information.
Stay informed on the issues related to Age Verification, and push back for your rights to privacy and democracy.
The future depends on us.
#AgeVerification #Privacy #HumanRights #MassSurveillance #Authoritarianism
The horror of Age Verification is
arriving in Canada 🚨🇨🇦
Contact your federal MP and the office of the Prime Minister this week to tell them you strongly oppose the privacy-destroying and inefficient measure.
The time to push back is NOW: https://globalnews.ca/news/11797286/liberal-party-adopts-motion-social-media-ban-kids/
'Prime Minister Mark Carney said last month that the idea “merits an open and considered debate in Canada,” although he does not have a settled view on it yet and said there were good points on both sides.'
Share educational resources with them on the dangers of Age Verification: https://www.eff.org/age
We do NOT want this nightmare in Canada. Fight back for your privacy rights! ✊🔒
#AgeVerification #Privacy #DigitalRights #HumanRights #MassSurveillance #Canada #CanPoli #CndPol
eff.org
Age verification (or age-gating) laws generally require online services to check, estimate, or verify all users’ ages—often through invasive tools like ID checks, biometric scans, or other dubious “age estimation” methods—before granting them access to certain online content or services. Governments in the U.S. and around the world are increasingly adopting these restrictive measures in the name of protecting children online. But in practice, these systems create dangerous new forms of surveillance, censorship, and exclusion. Technologically, the age verification process can take many forms: collection and analysis of government ID, biometric scans, algorithmic or AI-based behavioral or user monitoring, digital ID, the list goes on. But no matter the method, every system demands users hand over sensitive and immutable personal information that links their offline identity to their online activity. Once that valuable data is collected, it can easily be leaked, hacked, or misused. (Indeed, we’ve already seen several breaches of age verification providers.) EFF has long warned against age-gating the internet. Age verification technology itself is often inaccurate and privacy-invasive. These restrictive mandates strike at the foundation of the free and open internet. They are tools of censorship, used to block people from viewing or sharing information that the government deems “harmful” or “offensive.” And they create surveillance systems that critically undermine online privacy, chill access to vital online communities and resources, and burden the expressive rights of adults and young people alike. EFF.org/Age: A Resource to Empower Users Age-gating mandates are reshaping the internet in ways that are invasive, dangerous, and deeply unnecessary. But users are not powerless! We can challenge these laws, protect our digital rights, and build a safer digital world for all internet users, no matter their ages. This resource hub is here to help—so explore, share, and join us in the fight for a better internet.
The horror of Age Verification is
arriving in Canada 🚨🇨🇦
Contact your federal MP and the office of the Prime Minister this week to tell them you strongly oppose the privacy-destroying and inefficient measure.
The time to push back is NOW: https://globalnews.ca/news/11797286/liberal-party-adopts-motion-social-media-ban-kids/
'Prime Minister Mark Carney said last month that the idea “merits an open and considered debate in Canada,” although he does not have a settled view on it yet and said there were good points on both sides.'
Share educational resources with them on the dangers of Age Verification: https://www.eff.org/age
We do NOT want this nightmare in Canada. Fight back for your privacy rights! ✊🔒
#AgeVerification #Privacy #DigitalRights #HumanRights #MassSurveillance #Canada #CanPoli #CndPol
eff.org
Age verification (or age-gating) laws generally require online services to check, estimate, or verify all users’ ages—often through invasive tools like ID checks, biometric scans, or other dubious “age estimation” methods—before granting them access to certain online content or services. Governments in the U.S. and around the world are increasingly adopting these restrictive measures in the name of protecting children online. But in practice, these systems create dangerous new forms of surveillance, censorship, and exclusion. Technologically, the age verification process can take many forms: collection and analysis of government ID, biometric scans, algorithmic or AI-based behavioral or user monitoring, digital ID, the list goes on. But no matter the method, every system demands users hand over sensitive and immutable personal information that links their offline identity to their online activity. Once that valuable data is collected, it can easily be leaked, hacked, or misused. (Indeed, we’ve already seen several breaches of age verification providers.) EFF has long warned against age-gating the internet. Age verification technology itself is often inaccurate and privacy-invasive. These restrictive mandates strike at the foundation of the free and open internet. They are tools of censorship, used to block people from viewing or sharing information that the government deems “harmful” or “offensive.” And they create surveillance systems that critically undermine online privacy, chill access to vital online communities and resources, and burden the expressive rights of adults and young people alike. EFF.org/Age: A Resource to Empower Users Age-gating mandates are reshaping the internet in ways that are invasive, dangerous, and deeply unnecessary. But users are not powerless! We can challenge these laws, protect our digital rights, and build a safer digital world for all internet users, no matter their ages. This resource hub is here to help—so explore, share, and join us in the fight for a better internet.
are there examples of US newsrooms or media outlets who are explicit about *not* tracking readers on their websites? (or tracking for internal use only but not selling data into the data broker tracking stream?)
(yes i know ad tech is bad, and i am asking on behalf of students)
Headway https://headway.co will soon be requiring identity verification through the Peter Thiel backed Persona—the company Discord was originally using.
Headway is for finding, booking, and paying therapists and psychiatrists. In light of the administration’s view of autism https://www.propublica.org/article/rfk-jr-autism-environment-research-funding and antidepressants https://www.motherjones.com/politics/2024/07/rfk-jr-wants-to-send-people-on-antidepressants-to-government-wellness-farms/ this is rather frightening.
#autism #privacy #identityverification #ageverification #mentalhealth #persona #IDverification #biometricdata
motherjones.com
The farms will "reparent" them.
☢️ Last May, OpenAI representatives showed up at Los Alamos National Laboratory with armed security escorts and locked metal briefcases. Inside: the model weights for ChatGPT o3, which they then installed on Venado, one of the most powerful supercomputers on earth. By August, Venado was moved onto a classified network with access to nuclear weapons data. 🤖 Let that sit for a second. 😳 A quote from a researcher who's been in nuclear testing since the 1980s: "We're doing calculations I could only dream of doing before." The implication being that AI isn't just a productivity tool at Los Alamos. It's changing what questions they can even ask.
🧠 Scientists there are using AI to simulate how weapons respond to stress without live detonation tests, which the US hasn't conducted since 1992. Eighty years of nuclear test data is now training data.
⚡ The $320M Genesis Mission program aims to double the productivity of American science within a decade. That's the stated goal. Across 17 national labs.
🤔 From LANL's computational sciences chief: "For the very first time, I would argue, on a really big scale, we find ourselves not in a leadership role here." The government, for once, is chasing the private sector. Not directing it.
We spend a lot of time debating AI safety in the abstract. Meanwhile, the actual story is already written, locked in a briefcase, and installed on a classified network in the New Mexico desert.
https://www.vox.com/technology/484250/los-alamos-nuclear-ai-openai-chatgpt
#AI #NationalSecurity #EmergingTech #security #privacy #cloud #infosec #cybersecurity
A Meta exec threatened to fire anyone who put OpenClaw on a work laptop. That's not being paranoid either. OpenClaw just patched a flaw that allowed anyone with the lowest permission level to silently escalate to full admin. No user interaction. No second exploit needed. Just pairing access, and you own the instance. On top of that, 63% of the 135,000 internet-exposed OpenClaw instances were running with zero authentication. On those deployments, the "lowest permission" wasn't even required. Any network visitor could just walk in. 😳
🧩 The patches dropped Sunday. The CVE listing didn't come until Tuesday. Attackers had a two-day head start.
🔑 Full admin means read all connected data sources, exfiltrate stored credentials, execute arbitrary tool calls, and pivot to whatever else the agent touches. Slack. Discord. Files. Logged-in sessions. All of it.
🤔 The real question isn't whether OpenClaw has security problems. Every tool does. The question is whether your organization decided to hand an inherently unpredictable LLM the keys to your environment before asking who else might be able to grab them.
If you're running OpenClaw, check your pairing approval logs. Then have an honest conversation about whether the productivity trade-off still makes sense.
https://arstechnica.com/security/2026/04/heres-why-its-prudent-for-openclaw-users-to-assume-compromise/
#Cybersecurity #AIAgents #ZeroTrust #security #privacy #cloud #infosec
Meta paused work with a $10B AI data vendor after hackers poisoned an open-source Python library called LiteLLM and walked out with four terabytes of data. So, that's bad. And the worst part? The stolen data might include the actual training methodologies that Meta, OpenAI, Anthropic, and Google paid billions to develop. Think about what that means. You can't protect your crown jewels if they're sitting inside a vendor who's connected to your three biggest competitors, all sharing the same open-source tools, all exposed by the same 40-minute window on PyPI before anyone noticed.
🎯 The attack chain here is worth understanding: hackers compromised a security scanner called Trivy, used that access to get credentials for a LiteLLM maintainer, then published two malicious package versions that lasted less than an hour before removal. Forty minutes. That's all it took.
💼 Mercor is not some sloppy startup. It's 22-year-old founders, $500M annualized revenue, and clients at the very top of the AI industry. Sophistication doesn't protect you from a poisoned dependency you never thought to audit.
🔍 The question I'd be asking right now if I were a CISO at any of these labs isn't "were we breached." It's "how many vendors in our training pipeline are running LiteLLM, and did we even know?"
Most companies audit their own software. Almost nobody audits the software their vendors use to build the data they're buying.
https://thenextweb.com/news/meta-mercor-breach-ai-training-secrets-risk
#Cybersecurity #AIRisk #SupplyChainSecurity spc #security #privacy #cloud #infosec #ThirdPartyRisk
And.. after we get this law rejected, we need to see everybody involved in this law being prosecuted and questioned.
Theses people should work FOR the people, not against. We all pay for them! If they work against us, we are allowed to take them down, and we should! That's where the bill of rights is for.
This is your warning Newsom, California and any other institute chosing control over people. There will be a jailcell-door waiting to open for you.
Just one more.. This is not a trivial thing and it's not new as Benjamin Franklin allready put to words.
"Those who would give up essential Liberty, to purchase a little temporary Safety,
deserve neither Liberty nor Safety."
At this point, this moment in time, we decide the future.
For ourselves, but even bigger.. also our children, grandchildren.
Choose wisely!
#ageverification #privacy #control #governement #bigtech #fightforprivacy
Continued..
These laws(?) go straight against the 1st amendment.
At the operating level its dangerous and unneeded. Not hard to see what could happen next. (we know lawmakers like keep making more new rules):
Control access:
- Mobile phone
- App(s)
- Shopping (what you can and cant buy)
- Cars (check if you can drive)
- Online services
- And ofcourse next.. digital money
- Etc.
You either fight the problem, or are part of the problem.
This is it. Will the real distributions please stand up..
Any distro, I mean ANY, that includes age-verification will be obsolete to me.
If you aren't fighting the problem, you are part of it.
Why?..
It would ALWAYS need to check. So, checks will always need to happen, ALWAYS. So.. Guilty, until proven not Guilty.
That's not how it works!
#privacy #noageverification #ageverification #fightageverification #government #anti-privacy #control
youtube.com
NEW Bills & Laws could change Linux as we know it. California, Colorado, New York, and more are pushing for age verification in operating systems including i...
For anyone who still thinks age-verification is about safety.. stop being so gulible. I'm serious!
Most people want good things, however good intentions can also have negative consequences. If you don't weigh both sides, reasons don't matter. It's a one-sided, incomplete story. And they pass laws on this??
https://www.youtube.com/watch?v=I6f0evRHyPQ
#ageverification #chatcontrol #chatcontroleu #privacy #government
youtube.com
"With New York's bill, liberty is lost," says System76 CEO, Carl Richell. Plus: MidnightBSD will no longer be available in Brazil, California, Colorado, New...
First, Discord announced age verification. As predicted, users revolted. A former partner had already leaked 70,000 government IDs. Then, Discord backed down. And now the age-check vendors who got exposed in the process have to defend technology most people didn't even know existed. Interestingly, researchers at Georgia Tech reverse-engineered Yoti, the dominant age-check provider used on over 60% of compliant sites in states with age-gate laws. They found that Yoti sends your photo to its servers, collects data "beyond what is strictly necessary," and shares it with fourth parties most users have never heard of. Yoti disputes it. But they also confirmed facial age estimation does not happen on-device. Meanwhile, the EFF states that on-device processing is "less dangerous" than sending data over a network.
🔐 On-device face scans mean your biometric data stays on your phone, for now
🗝️ "Age keys" built on FIDO passkey tech could let you reuse an age signal across platforms without re-verifying each time
📸 The dominant provider in the US runs a million checks a day and sends your photo to its servers
⚖️ The Supreme Court ruled last summer that online age verification doesn't violate the First Amendment, partly based on Yoti's technical claims 😳
The thing people don’t realize is that once age-check infrastructure is embedded across every major platform, it doesn't go away. Every update is a new attack surface. Every new law expands the mandate. And the CEO of one of these companies is already talking about age-aware cameras and microphones as the logical next step.
Your device should work for ‘you.’ The moment it starts working for someone else's compliance requirement, that's a different product than the one you thought you had.
https://arstechnica.com/tech-policy/2026/03/after-discord-fiasco-age-check-tech-promises-privacy-by-running-locally-does-it-work/
#Privacy #CyberSecurity #TechPolicy #security #cloud #infosec
arstechnica.com
On-device face scans and cross-platform age keys decrease privacy risks, but trust issues abound.
🤣 A robot in a restaurant in California decided that smashing plates was more fun than delivering food, then it pivoted to jazz hands all the while two staff members tried to wrestle it back under control. Its apron said "I'M GOOD!" 🤖 It’s crazy to think that we’re putting hardware (robots) with enough power to knock a kid down or take out unaware bystanders. We have a product culture that moves too fast and don't ask important, yet simple questions.
The video is funny right up until you picture a five-year-old standing where those plates were.
Nobody got hurt this time. But the reason to think carefully about physical AI deployment isn't the dramatic failure. It's the hundred smaller decisions made before the robot ever left the warehouse that make the failures possible.
https://gizmodo.com/robot-losing-its-mind-in-a-california-restaurant-is-just-as-fed-up-as-everyone-else-2000735088
#AI #Robotics #TechEthics #security #privacy #cloud #infosec #cybersecurity
gizmodo.com
Dance like no one's watching.
The European Commission got hit with a cyberattack, again. 350 GB allegedly taken, mail server contents, databases, confidential contracts. Their own cyber chief warned that the EU is "losing massively against hackers." What gets me is the timing. The EU just sanctioned companies from China and Iran over cyberattacks on member states. The message was: we see you, and there are consequences. Then their own infrastructure gets hit and 350 GB walks out the door. 🤦🏻♂️
🗓️ This is the second breach of EU institutions in 2026, just three months in
📦 A hacking group claims to have mail server contents, databases, and confidential documents
🔒 No indication internal Commission systems were compromised, but the investigation is still open
📜 The EU has NIS2, the Cyber Solidarity Act, and a Cybersecurity Regulation on the books
I guess frameworks don't defend systems after all. People, processes, and patched infrastructure do. You can write the most thorough regulation in the world and still get breached through a cloud hosting provider nobody was watching closely enough. Third party risk is my nightmare.
If you're a CISO or CIO reading this, the question isn't whether your regulatory posture is solid. It's whether your third-party cloud infrastructure would survive the same scrutiny you apply to your internal systems.
https://www.helpnetsecurity.com/2026/03/30/european-commission-cyberattack-cloud-infrastructure-website/
#CyberSecurity #CloudSecurity #InfoSec #security #privacy #cloud
helpnetsecurity.com
The European Commission confirmed that a cyberattack impacted cloud infrastructure hosting its web presence on the Europa.eu platform.
We keep worrying about AI doing something evil. Which it might, but right now, there’s a risk in the plumbing supporting it. Three vulnerabilities in LangChain and LangGraph, path traversal, unsafe deserialization, SQL injection. Not AI-specific attacks. They’re not novel nor sophisticated but these are the kinds of bugs we've been patching since the late '90s. One of them scored a severity of 9.3 out of 10. "The biggest threat to your enterprise AI data might not be as complex as you think." Remember that you're building AI on top of frameworks you didn't write, can't fully audit, and update whenever it's convenient. That's the actual problem.
🔐 Path traversal lets attackers read arbitrary files from the host system, including credentials
🔑 Unsafe deserialization exposes API keys and environment variables at runtime
🗄️ SQL injection in the checkpointing layer leaks conversation history from your AI agents
All three are fixed now. But "fixed" only matters if you've actually applied the patches across every integration. Most organizations haven't.
The lesson isn't about AI security. It's that AI doesn't change what good security engineering looks like. Input validation, parameterized queries, strict path sandboxing. This is stuff your dev team learned before ChatGPT existed.
If you're deploying AI pipelines and you haven't done a security review of the frameworks underneath them, you're not running an AI strategy. You're running a trust exercise.
https://www.csoonline.com/article/4151814/langchain-path-traversal-bug-adds-to-input-validation-woes-in-ai-pipelines.html
#CyberSecurity #AIRisk #AppSec #security #privacy #cloud #infosec
csoonline.com
The path traversal flaw, allowing access to arbitrary files, adds to a growing set of input validation issues in AI pipelines.
I teach cybersecurity. And I genuinely don't know what to tell my students after this one. Federal reviewers spent years trying to get basic encryption documentation from Microsoft for its GCC High government cloud. They couldn't get it. One reviewer called the system a "pile of spaghetti pies," with data traveling from point A to point B the way you'd get from Chicago to New York: a bus to St. Louis, a ferry to Pittsburgh, and a flight to Newark. Each leg is a potential hijacking. They knew this. They said this out loud in writing. Then they approved it anyway in December 2024, because too many agencies were already using it. 🔐 That's not a security review. That's a hostage negotiation. Two things in this story should make every CISO and CIO uncomfortable:
🧩 Microsoft built its federal cloud on top of decades of legacy code that it apparently can't fully document itself
👮 "Digital escorts" often ex-military with minimal software engineering backgrounds are the firewall between Chinese engineers working on the system and classified U.S. networks 🤦🏻♂️
The scariest line in the whole ProPublica investigation isn't the "pile of shit" quote. It's this: FedRAMP determined that refusing authorization wasn't feasible because agencies were already using the product. Read that again. The security review process reached a conclusion based on sunk cost, not risk. Ex Post Facto Fallacy
If that logic holds, the compliance framework is just documentation theater. And right now, CISA is being hollowed out, so there are fewer people left to even run the theater.
https://arstechnica.com/information-technology/2026/03/federal-cyber-experts-called-microsofts-cloud-a-pile-of-shit-approved-it-anyway/
#Cybersecurity #Microsoft #FedRAMP #Leadership #RiskManagement #security #privacy #cloud #infosec
propublica.org
One Microsoft product was approved despite years of concerns about its security.
Congress banned federal agencies from collecting bulk data on Americans in 2015. So some of them just started buying it from data brokers instead. 😳 ICE signed a contract with a company whose tool can track mobile phone movements or locate phones that have visited specific locations. No warrant. Taxpayer money. Done. One privacy attorney put it plainly: it's like the police paying your landlord $100 for a spare key and walking through your house without a warrant.
Now add AI to that picture. Anthropic's CEO Dario Amodei warned that records the government can purchase can be used by AI to assemble "a comprehensive picture of any person's life automatically and at a massive scale." That's not hypothetical. That's now. And the window to close this through FISA reauthorization closes April 20!
The business angle nobody's talking about: the same data brokers selling to ICE are selling data your employees, customers, and executives generate every day. You have no control over what happens to it after it leaves your app or browser. That should be in your risk conversation, not just your privacy policy.
🏛️ This is bipartisan; Republicans and Democrats are co-sponsoring the fix
📅 April 20 is the deadline
https://www.npr.org/2026/03/25/nx-s1-5752369/ice-surveillance-data-brokers-congress-anthropic
#Privacy #AI #Leadership #Cybersecurity #security #cloud #infosec #surveillance
npr.org
Data brokers buy up huge amounts of information from cell phones and browsers to sell for targeted advertising. But the government, including ICE, also buys the data.
Oh boy. Stanford researchers scanned 10 million web pages and found API keys just sitting in the public-facing code. That's 1,748 active credentials from major providers exposed in live website code, mostly inside JavaScript files. Not in old test environments. Not in a forgotten repo. In the live, running site. Banks. Healthcare providers. "Not just small companies, but some very large companies," according to the lead researcher. And some of those credentials had been sitting there for years. Not the first time I've seen something like this. 🤦🏻♂️
The thing is that most orgs are scanning their source code but not their deployed sites. 😳 Those are two different things, and most leaks originate during the build process. A key gets baked in somewhere between development and production, and nobody catches it because the scan already ran upstream. Meanwhile, GitGuardian counted over 28 million new hardcoded secrets exposed in public GitHub commits in 2025 alone. This isn't a one-time research finding it's a systemic habit that needs to change.
🔍 When did your team last scan the live site, not just the codebase?
🏦 If you're in a regulated industry, that question just became a compliance question too
https://www.newscientist.com/article/2520143-security-credentials-inadvertently-leaked-on-thousands-of-websites/
#Cybersecurity #AppSec #Leadership #security #privacy #cloud #infosec
newscientist.com
Researchers identified nearly 10,000 websites where API keys could be found, exposing details that could let attackers access sensitive information
For many people, there's Simply No Need For @microsoft Office anymore. Microsoft raised prices in January 2025 and added Copilot to every plan. Correlation isn't always causation, but come on. A Reddit comment calling it an "active impediment to workflow" got over 2,000 upvotes. That's not a fringe opinion, that's a signal. When your users are that vocal about the AI you forced on them, making things worse, you've got a product problem dressed up as a progress story. Remember #MicroSlop?
The part nobody wants to address at work: your company is probably still paying for 365 because switching feels hard, not because it's the best tool. Google's top-tier plan — 2TB of storage plus Gemini's paid features — costs the same $9.99 a month as Microsoft's lowest 365 tier. That math is hard to ignore if you're actually looking at it.
🔒 The real lock-in isn't the software anymore, it's inertia
📊 If your org hasn't audited this spend recently, now's a good time.
https://www.bgr.com/2130087/why-no-one-needs-microsoft-office-anymore/
#Microsoft #Leadership #Productivity #security #privacy #cloud #infosec #cybersecurity
bgr.com
Microsoft Office programs were ubiquitous with productivity and a variety of projects, but these days, cheaper cloud-based equivalents are much more common.
The properties we built blockchain to have are now working against us. No central server. Immutable. Distributed across thousands of nodes globally. Those were supposed to be features. Now North Korean 🇰🇵 hackers figured out they're also a perfect place to park malware where nobody can pull the plug. The attack starts with a fake LinkedIn job offer, drops malicious code into a smart contract on Ethereum or BNB Smart Chain, and waits. There's no command-and-control server to raid. No hosting provider to call. No kill switch. One group alone has already hit roughly 14,000 WordPress sites this way. 🎯 The worst part isn't the technique. It's that your standard incident response playbook assumes there's something to take down. Here, there isn't.
🔐 Your defenders need to know this changes the containment math
📋 Your board needs to hear that "we took down the server" may not be an option anymore
https://www.pcmag.com/news/malware-is-sleeping-on-the-blockchain-and-its-already-infected-dozens-of
#Cybersecurity #Blockchain #InfoSec #security #privacy #cloud
🔒 To continue our work towards a more #privacy-friendly future, noyb requires stable, long-term funding. Individuals like yourself can play an integral part in this task by joining noyb as a #SupportingMember. 🧩
Follow the link to learn more 👉 https://noyb.eu/en/support-us
Illustration depicts a group of people happily connecting puzzle pieces. Text says "Become a Supporting Member!"
Just heard @ethanz on the Kill Switch #podcast, and he gave a shout-out to #Mastodon. Came over here to give him a follow and was pleasantly surprised to find I was already following him. His interview is super great:
https://m.youtube.com/watch?v=wbCtoLvgc4Q
I respectfully disagree with several of his takes, but they're all about opinion/perception and not the fundamentals of how the Internet works or doesn't.
#SocialMedia #tech #technology #SurveillanceCapitalism #privacy
youtube.com
Let's get it out of the way: yes, Ethan Zuckerman invented pop-up ads. He's gotten an unfair amount of hate for this, especially since you (yes you!) have pr...
We are honoured to be one of the first recipients of the Nominet DNS Fund, which recognises the importance of supporting the quiet work behind the scenes.
We thank @Nominet for their forward thinking - helping public interest nonprofits, such as Quad9, who work every day to maintain internet integrity, and the security and privacy of end users around the world.
https://quad9.net/news/press/nominet-invests-in-quad9/
Congratulations to the other recipients!
Announcement of project support by Nominet DNS Fund with a 3D Nominet logo and website link nominet.uk.
🚨 The FCC bans all routers made outside the U.S. — So basically all routers.
Most people buy a router and never think about it again. That box in the corner that handles every password and video call you make. The FCC is now worried that some of these devices are actually open doors for foreign governments. Shocked! 🫢
Regulators are looking at TP-Link to see if they pose a threat to national security. Recent reports show hackers used these devices to build massive botnets. You might find yourself shopping for new hardware if these bans take effect.
🧠 Regulators are weighing a ban on specific foreign routers.
⚡ Security experts found flaws that allow remote access.
🎓 This move follows previous restrictions on Chinese tech firms.
🔍 Check your hardware brand before the new rules arrive.
https://mashable.com/article/us-fcc-foreign-router-ban
#FCC #Security #TechPolicy #security #privacy #cloud #infosec #cybersecurity
mashable.com
So basically all routers.
Btw here are two reminder posts by @Tutanota and @piratensaarland.bsky.social regarding thursday aswell a post-link by @pneutig which is worth a read.
Go to fightchatcontrol.eu and mail/call/fax your MP's aswell as the other memberstates to tell them about your concern regarding the EPP-groups repeat vote.
🚨 New Video: Protecting You From Yourself - The Token2 Review
We have looked at the industry standard (YubiKey) and the philosophical idealist (Nitrokey). Today, we’re looking at the aggressor: Token2.
The PIN+ Dual Release 3.3 and the Bio3 come in at nearly half the price of the competition, but there is a catch. This Swiss company doesn't care about convenience; they care about correctness. From hardware-enforced complex PINs to a literal war on legacy TOTP codes, Token2 assumes your ego is your biggest vulnerability.
Is this cynical, locked-down approach exactly what we need for true digital sovereignty, or is the clunky user experience a dealbreaker? Let's find out if this is the ultimate punk rock choice for your threat model.
Part 5 of the Sovereign Authentication series.
100% human made. #NoAI 
▶️ YouTube: https://www.youtube.com/watch?v=lQlN84gEb9c
📺 PeerTube: https://gnulinux.tube/w/fZbyKea1b6QJVQoFE4oQso
💬 Join our sovereign community on Stoat: https://stt.gg/GgB6HBTv
☕ Support the mission: https://liberapay.com/terminaltilt
🤝 Become a channel member: https://www.youtube.com/@TerminalTilt/join
#TerminalTilt #NoAI #Privacy #Security #PasswordManager #Token2 #Nitrokey #Yubikey #Yubico #FOSS #OpenSource #Linux #Cybersecurity #SelfHosted #DeGoogle #DigitalSovereignty #QueerCreator #DisabledCreator #HumanMade #TechEthics
youtube.com
Welcome to Terminal Tilt! This is an outpost for digital sovereignty, privacy, and keeping technology human. We explore the tools needed to build a #NoAI and #DeGoogled future through: 🔸 Linux: Deep dives into distros and the non-corporate ecosystem. 🔸 Reviews: Hardware and software that affect our lives. 🔸 Self-Hosting: Reclaiming your data with Proxmox and Home Labs. 🔸 Digital Rights: Advocating for the Right to Repair and human made content. MISSION: 100% editorially independent. No AI scripts, voice, or art. Ever. 🧡 Join our community on Stoat and help us stay sovereign. 🧡 Stay sovereign. Stay secure. Stay private. #linux #privacy #security #deGoogle #digitalsovereignty #righttorepair #techethics
My previous bio:
From #northshore Massachusetts relocated to the Abenaki lands of northeastern #Vermont and not just an aggregation of hashtags, but: #antifascismIsProper #vegetarian #UBI #punk #punchanazi #antitrust #records #NEK #climate #spiritualjazz #decolonization #movies #SCOTUSexpansion #atheist #rescue #dogs #art #antifascism #photography #audio #privacy #bread #puppets #p2p #security #transparency #accountability #intersectionalism #sober #farmSanctuary #resistZionism
I tend to mute or remove followers with neither posts nor bio, and those containing financial-support or revenue-promotion links
New app. EchoBoard - a self-hosted feedback platform. Your community can submit ideas, report bugs, and vote without ever creating an account. No email, no sign-up wall, no tracking. Just show up and participate.
Self-host with Docker. Plugin system, roadmap, changelog, webhooks. WCAG 2.2 AAA accessible. Free, CC0 public domain. Privacy by design.
https://apps.lashman.live/echoboard/
Running it for real for my own apps here, not a demo:
https://echoboard.lashman.live
echoboard.lashman.live
Self-hosted feedback board. Anonymous by default, no email required. Vote on what matters, comment with markdown, track status changes.
🚨 A major change in federal cybersecurity quietly took place. The General Services Administration, which handles government purchasing, has updated its IT security rules to match the Department of Defense’s strict CMMC standards. For federal contractors, simply checking boxes isn’t enough. 🛡️
If you work with Controlled Unclassified Information, strong security is now a must for government contracts. The GSA now expects Zero Trust principles 🔒, including proof of encryption, multi-factor authentication, and ongoing monitoring. This change also carries legal risks ⚖️ if you can't demonstrate real compliance, your company could face lawsuits under the False Claims Act.
📑 The GSA now requires CMMC-level security documentation for contracts with civilian agencies.
⏱️ These compliance requirements apply right away to new contract opportunities and awards.
⚠️ Federal contractors now face greater legal risk if they misrepresent their cybersecurity readiness.
✅ Zero Trust data principles are no longer just a best practice; they're now required as the standard.
https://www.forbes.com/sites/emilsayegh/2026/02/07/a-quiet-policy-shift-just-redefined-entire-federal-cybersecurity-landscape/
#FederalContracting #ZeroTrust #CyberCompliance #GSA #security #privacy #cloud #infosec #cybersecurity
forbes.com
GSA quietly rolled out CMMC-like cybersecurity requirements, signaling a major shift in how federal contractors must protect controlled unclassified information.
🔐 Introducing: Unified Attestation
An open-source project for verifying the integrity of Android apps—as an alternative to Google's Play Integrity.
The goal is to make apps such as banking and payment apps usable on independent Android systems without relying on Google services.
We invite developers, ROM projects, and app providers to get involved.
#Volla #VollaOS #OpenSource #software #hardware #Privacy #Security #DeGoogle
uattest.net
Unified Attestation is a free, open-source alternative to Google Play Integrity with offline verification and simple app + server integration.
The current state of the web assumes that the reader is an adversary to be trapped and monetized.
When a news website forces you through three dismissive actions just to read a headline, they are burning your cognitive budget before delivering any value. You are greeted by a cookie banner taking up the bottom 30% of your screen, a "Subscribe!" modal dead center, an autoplaying video pinned to the corner and a prompt begging to send you push notifications.
I wrote about the state of news websites. Would love to hear your thoughts✨🙏
https://thatshubham.com/blog/news-audit
#enshittification #darkpattern #web #technology #socialmedia #indieweb #ux #privacy
thatshubham.com
A look at modern news websites. How programmatic ad-tech, huge payloads and hostile architecture destroyed the reading experience.
The honeymoon phase of AI-driven productivity is meeting the harsh reality of system stability. Amazon has officially updated its internal policies to require senior engineers to sign-off for any code changes assisted by generative AI. This move follows a series of significant service disruptions—referred to internally as "high blast radius" incidents—where AI-generated code led to major product outages.
For a company that values speed and a "you build it, you run it" culture, this is a massive shift. It turns out that while AI can write code in seconds, the cost of an error at AWS scale can be measured in hours of downtime and millions in lost revenue. We are seeing a necessary correction: AI is a powerful assistant, but it cannot yet be trusted with the keys to the kingdom without a seasoned human expert verifying the logic.
🧠 Amazon now mandates senior review for all AI-assisted code deployments.
⚡ The policy change follows a spike in high-priority Sev2 incidents.
🎓 Senior engineers must now act as the ultimate "bar raisers" for synthetic code.
🔍 This internal friction highlights the hidden costs of AI-driven development.
https://arstechnica.com/ai/2026/03/after-outages-amazon-to-make-senior-engineers-sign-off-on-ai-assisted-changes/
#EngineeringManagement #CloudComputing #GenerativeAI #security #privacy #cloud #infosec #cybersecurity
ft.com
AWS has suffered at least two incidents linked to the use of AI coding assistants.
If enough Canadians contact
their local representatives, as well Mark Carney's office this week, we might be spared from this authoritarian mass-surveillance measure called "Age Verification" in Canada.
The time to fight back is NOW: https://www.ctvnews.ca/politics/article/social-media-ban-for-kids-under-consideration-in-online-harms-bill-carney/
Privacy is a human right essential to safety and democracy. If we do not fight to protect it, we will lose it.
#AgeVerification #MassSurveillance #Privacy #Democracy #HumanRights #Canada #CanPoli
ctvnews.ca
While there should be “debate” in Canada about a social media ban for children, Prime Minister Mark Carney says he has not made up his own mind on the issue yet.
@lackthereof it's not a "strange complaint", but a massive problem, because it creates dependency on a proven insecure network that is more often than not controlled if not run by hostile actors…
@signalapp mandating #PhoneNumners is a huge red flag because at best any #PhoneNumber is pseudonymous like a #Shitcoin-Wallet and that any #privacy is broken the moment it has any (even remotely circumstantial) connection to someone.
Not to mention #Signal's #App is a huge shitshow…
infosec.space
My [reservations](https://infosec.space/@kkarhan/114234551915193036) and [criticism](https://infosec.space/@kkarhan/114862595629371002) re: #Signal are not just valid, but the reality is *even worse than I thought*: - The fact that @signalapp@mastodon.world requires not only their shitty #Android #App, and a #PhoneNumber but literally won't allow people to use their shitty #Desktop-App unless they have an Android device with a camera pointed at it makes it utterly unuseable for certain users *who don't have a fucking #camera in their Android*… Seriously, do they expect folks to deal with that shit? - It's already worse in terms of #UX than #telegram and #discord and that too makes #XMPP+#OMEMO clients like @monocles@monocles.social / #monoclesChat & @gajim@fosstodon.org / #gajim easier and faster to onboard #TechIlliterates onto. - Whichever asshole decided that a *replacement for #SMS* should mandate #PII like a #PhoneNumber & not be natively cross-platform should be banned from doing any #tech in their life. Trying to circumvent this shit and helping folks with it makes me so fucking angry that I'm now explicitly refusing to support it! FIX THAT SHIT, @Mer__edith@mastodon.world, and if it means you need to kick some devs in their crouch then consider this a necessary *"investment"*… #sarcasm #TechSupport #TalesFromTechSupport #Enshittification #SignalSucks #TelegramSucks #Messengers
📱 Neue Einsteiger-Anleitung für GrapheneOS (Linux-Fokus!)
Vom Pixel-Kauf über den Flash-Vorgang bis zu Profi-Tools wie Obtainium & AppVerifier – alles Schritt für Schritt erklärt.
👉 https://hedgedoc.linuxat.de//hc/s/M_FkGQLNyC
#GrapheneOS #Datenschutz #Privacy #Linux #OpenSource #Pixel #GoogleFrei #FOSS
hedgedoc.linuxat.de
# 📱 Step-by-Step: Dein Weg zum Google-freien Smartphone mit GrapheneOS *Eine vollständige Einsteig
‚Berlin will bald erstmals Straßen und Plätze mit Videokameras überwachen. Hinter diesen Kameras soll ein System laufen, das automatisch analysiert, was die abgebildeten Menschen gerade tun. Es soll Alarm geben, sobald es eine Tätigkeit erkennt, die für die Polizei von Interesse ist.
Der Chaos Computer Club (CCC) warnt vor einem derartigen Ausbau der Verhaltensüberwachung im öffentlichen Raum. „Er bedeutet einen großen Schritt in Richtung automatisierter Dauerbeobachtung“, schreibt er in einer Pressemitteilung. Dabei sei die Technik vor allem eines: „teurer, aber gefährlicher Mumpitz“.‘
netzpolitik.org
Laut Chaos Computer Club sind Verhaltensscanner, die Berlin bald aufbauen will, „gefährlicher Mumpitz“. Er warnt das Bundesland – und auch alle anderen Städte und Länder, die die neue Technologie einsetzen oder einsetzen wollen – davor, autoritäre Staaten als Blaupause zu nutzen.
Gefahren für Privatsphäre und Sicherheit - 6G als riesiges Radarsystem
'Mit der Einführung von #6G steht der #Mobilfunk vor einem Paradigmenwechsel: Die Technologie „Integrated Sensing and Communications“ (ISAC) soll das Mobilfunknetz der nächsten Generation zu einer Art riesigem Radarsystem machen. Heutige Netze dienen primär der Kommunikation.
6G soll dagegen Funkreflexionen nutzen, um Objekte, Entfernungen, Geschwindigkeiten und sogar menschliche Bewegungen in Echtzeit zu erfassen.
Die Vorteile dieser Umgebungserfassung für autonomes Fahren oder die industrielle Automatisierung sind enorm. Doch auch die Schattenseiten wiegen schwer. Eine Arbeitsgruppe der EU-Telekommunikationsnormungsbehörde ETSI zu ISAC hat dazu nun einen Bericht veröffentlicht, der die Risiken für Sicherheit, Privatsphäre und Nachhaltigkeit beleuchtet....'
heise.de
6G-Funk soll nicht nur Daten übertragen, sondern die Umgebung aktiv ausleuchten. ETSI warnt vor Gefahren für Sicherheit und Privatsphäre durch dieses „Sensing“.
Kameras an Alex und Görli: Wann die KI-Videoüberwachung in #Berlin startet
‚Im neuen Polizeigesetz wurde die KI-basierte Überwachung kriminalitätsbelasteter Orte erlaubt. Wann diese startet – und was sie kostet.
Ab April werden spezielle Kameras am Alexanderplatz in Mitte, an der Warschauer Brücke in Friedrichshain sowie am Kottbusser Tor und am Görlitzer Park in Kreuzberg installiert. Das erfuhr die Berliner Morgenpost aus Sicherheitskreisen. Damit startet die durch Künstliche Intelligenz (KI) unterstützte Überwachung dieser kriminalitätsbelasteten Orte (kbO) in einer Testphase.
Möglich gemacht hat das die Änderung des Polizeigesetzes ASOG vergangenen Dezember. Nach der Testphase sollen die weiteren kbOs Rigaer Straße in Friedrichshain sowie Hermannstraße und Hermannplatz in Neukölln in der zweiten Jahreshälfte folgen…‘
Ganzer Artikel (ohne Paywall): https://archive.ph/zxhDO
archive.ph
archived 2 Mar 2026 11:15:59 UTC
@ivycyber @privacysafe @JohnKiriakou
If you haven't yet joined us, we have 10 weeks of educational material about #surveillance and #privacy we're building out LIVE based upon your feedback, as well as these live sessions (tonight is session #5 ! ). A big thanks to @JohnKiriakou
for imparting his expert knowledge onto our great cohort of students. 🎓
John Kiriakou
⚖️ Looking for an exciting path into litigation, #IT #law and digital rights? We’ve got you covered! We are seeking bright new people to support our work for #privacy and #GDPR enforcement from October 2026 onwards. 📆
❗ You are interested and hold a law degree from an EEA university? 🇪🇺 Apply now! https://noyb.eu/en/traineeship
Image: illustration of diverse group of young lawyers Text: Traineeship Opportunity, apply now, make privacy real, noyb.eu
Fediverse friends!
I am officially launching the Terminal Tilt community on Stoat.
Stoat has a good record with #NoAI The project removed any AI code and swore to never use it. It is familiar if you have ever used Discord.
If you are tired of algorithmic feeds and want a space built on digital sovereignty and the right to repair, this is it. No big tech, no tracking, just us on an open source platform sharing memes and anything else we feel like.
Here is the Stoat invite link: https://stt.gg/GgB6HBTv
#TerminalTilt #Stoat #Discord #Fluxer #DigitalSovereignty #RightToRepair #Fediverse #SelfHosted #QueerCreator #DisabledCreator #GNULinux #GNU #Linux #Privacy
A screenshot of the Terminal Tilt community on Stoat, showing a dark themed chat interface similar to Discord. The sidebar lists various channels. In the "General" chat, a user has posted an image that reads "Bodily autonomy is a human right" with pride flags.
#Freespeech #SaveTheEuropeanInternet #ScheißAufMassenüberwachung #Privacy #ProtestEU #StopChatcontrol
fightchatcontrol.eu
mullvad.net
After Snowden’s whistleblowing in 2013, large parts of the internet became encrypted, enabling private and secure communication. Not everyone has welcomed this change. Most notably, the FBI and other U.S. government agencies have fought what is often called the “crypto wars”, the war on encryption. In recent years, they have been joined by the European Commission. Under the slogan “what about the children,” they try to introduce total mass surveillance of all EU citizens — first through the proposed Chat Control legislation, and later via the Going Dark and ProtectEU initiatives. The goal is to legally mandate spy tools on every European smartphone and computer. The forces behind these efforts have turned out to be American tech companies and intelligence agencies.
Last thought. It feels like the market for the "privacy browser" had ramped up, the more so- called AI is shoved down people's throats.
I have at least two installed, but can't decide which route to take. Which **mobile** "privacy browser" do you use?
(I've excluded Brave for personal opinion reasons).
If it's a different one to the 4 option limit I have for polls, please reply with which one and why.
Thanks,
FJ
‚Deutschlandweit sprechen sich Politiker*innen dafür aus, keine Software von Palantir zu verwenden. Stattdessen soll eine europäische Alternative eingesetzt werden. Die Verknüpfung und automatische Analyse möglichst vieler Daten bleibt aber ein totalitäres Konzept…..‘
Totalitäre Tendenzen - Palantir-Ersatz aus der #EU ist ein gefährlicher Wunsch
https://netzpolitik.org/2026/totalitaere-tendenzen-palantir-ersatz-aus-der-eu-ist-ein-gefaehrlicher-wunsch/
Sehr treffender Kommentar von @yoshiXYZ
#Überwachung #Datenschutz #Privacy #Palantir #Netzpolitik #Totalitarismus
netzpolitik.org
Deutschlandweit sprechen sich Politiker*innen dafür aus, keine Software von Palantir zu verwenden. Stattdessen soll eine europäische Alternative eingesetzt werden. Die Verknüpfung und automatische Analyse möglichst vieler Daten bleibt aber ein totalitäres Konzept. Ein Kommentar.
Are you waiting for an AI miracle? Big projects usually fail because they're trying to change too much at once. My latest Forbes article shows you a better, faster way...
Focus on micro-transformations. You identify and fix a single small bottleneck and see results in weeks. This builds the trust you need to move toward larger goals later.
🧠 Pick one simple manual task.
⚡ Use one specific model or product for it.
💡 Leverage AI tools you already have in your stack, like Google.
🎓 Recognize your savings immediately.
🔍 Move to the next one.
🔍 Expand to a second team once the first succeeds.
A surgical approach builds the confidence your team needs. You stop waiting for a miracle and start seeing results right away.
#AI #artificialintelligence #leadership #CIO #CTO #CISO #Caio #innovation #business #security #privacy #cloud #infosec #cybersecurity
@RHR_International
@forbes@flipboard.com
@Forbes@newsie.social
@forbestechcncl
@briankrebs I worked heavily with Persona and can say the following:
1. Data is deleted from their servers because it is transferred to "not their server" cold storage, not completely removed from access. I should specify this used to be the case but I have heard they have changed this as of late.
2. They have very poor RBAC capabilities; it's effectively all or nothing for developers, in that you either access all user data or can't use the system to test APIs properly.
3. Persona doesn't actually have any capability to validate if your IDs are valid, such as checking driver license numbers or passport numbers in a valid database. Therefore, the ability to validate an ID is questionable at best, but it does meet the requirements of KYC and KYB.
4. Its default recommended workflow leaks the ID to the account; that ID can be used to push fake data to the Persona flow for another user, which can then be used for social engineering. This is by design, and no, they refused to fix it.
The #Uk government is trying to place age verification on all user-user platforms.
Can you sign this petition I created: https://petition.parliament.uk/petitions/762236/sponsors/new?token=XBUJNuzxL8JoS1JcFqns
We need 5 people to sign it to get the petition published.
#ukpol
#privacy
#onlinesafetyact
@openrightsgroup
#ageverification
#AgeVerificationPolicy
#ageverificationandagegating
petition.parliament.uk
The government is consulting on children’s use of social media and how age verification and age assurance technologies could help implement a potential age restriction on some platforms. We call on the Government not to require age assurance technologies on all user-user services.
#Freenet / #Hyphanet 0.7.5 build 1506 is now available:
- fix vulnerability,
- update plugins,
- optimize routing, and
- upkeep
Many thanks to all the contributors and testers who made this release possible!
Description from the Website: Reclaim Your Privacy! Hyphanet makes it easy to publish and follow what others publish with strong privacy protections. Plugins built on its decentralized data store make it very easy to host your own website and provide microblogging and forums, media sharing from files to video-on-demand and decentralized version tracking, blogging and spam resistance without central authority. For an easy start you can join the global Opennet. For maximum privacy, connect to your friends and build a friend-to-friend network independent of and invisible to any centralized server. To access the global network, you either need some friends who also connect to opennet, or use the Shoeshop plugin to build a sneakernet that can even bridge separate friend-to-friend networks when your regional internet itself gets severed from the global information network. Lots of additional information about Hyphanet and its history is available on Wikipedia. Code Signing Policy
A jumping white rabbit with blue background, below it the name Hyphanet.
Do not comply.
Do not share your ID or biometric data with abusive platforms requesting it. You have a choice to say no, complain, and leave.
This is an important act of resistance for the future of humanity.
This isn't just about privacy, this is also about safety, diversity, democracy, and human rights.
#Privacy #MassSurveillance #HumanRights #Fascism #AgeVerification #IdentityVerification
"Content about Gaza is also being restricted by age verification. Reddit users in the UK have to verify their age, using... Persona, in order to access... r/israelexposed ... Posts about Palestine on X have also been age gated"
https://www.openrightsgroup.org/campaign/stop-state-censorship-of-online-speech
So to view content about Palestine, you first need to hand your biometric data to #PeterThiel who supplies the Israeli military with data and A.I. tools thru #Palantir
openrightsgroup.org
The Online Safety Act is restricting freedom of expression in the UK.
I wrote this article as a primer for folks on how the "social networks"* keep us locked in. If you like it, consider sharing it with a friend who is new to the world of #privacy, the #fediverse, or getting off of billionaire/US tech.
*Also, why "legacy algorithmic media" may be a better term for the Facebooks and Xitters of the world.
https://technically-good.ca/feeding-the-fire-psychology-engagement-and-algorithmic-media/
Feedback welcome, boosts of course ok, have a great weekend, and let's fix this mess! 💜
technically-good.ca
If you're reading this, and you don't have a Facebook or Xitter account (because you either deleted it, or never had one to begin with), give yourself a pat ...
De timing met #Odido is compleet toeval, maar wellicht daardoor ook juist hét goed moment voor deze aankondiging:
Ik ben begonnen met een nieuwe blog, genaamd Privacy voor een beginner!
https://privacy.vooreenbeginner.nl/
Net als "Linux voor een beginner" gericht op het toegankelijk maken van informatie. In stapjes ga ik de aankomende maanden zaken rondom #privacy uitwerken.
Van accounts tot zoekmachines, alles wat ik tegenkom (of waar jullie vragen over hebben).
Doe je mee? Volg me hier of via #RSS.
privacy.vooreenbeginner.nl
Privacy voor een beginner is een website die jou helpt om je privacy, jouw data en persoonlijke informatie beter te beschermen, zonder commercieel belang.
Die Rückkehr zur Registrierung - Datenaustausch über psychisch erkrankte Menschen
„Schon vor mehr als 50 Jahren gab es Streit darüber, ob Behörden Daten über Menschen sammeln sollen, die als psychisch krank gelten. Doch während sich damals ein Konsens für mehr Teilhabe und gegen Stigmatisierung bildete, hat sich heute etwas verändert……“
#Überwachung #Repression #Hessen #Deutschland #Datenschutz #Privacy #Netzpolitik
netzpolitik.org
Schon vor mehr als 50 Jahren gab es Streit darüber, ob Behörden Daten über Menschen sammeln sollen, die als psychisch krank gelten. Doch während sich damals ein Konsens für mehr Teilhabe und gegen Stigmatisierung bildete, hat sich heute etwas verändert.
Hi~ people, its time for a basic introduction. I'm a 20 something drifting through life trying to understand OPSEC and anti-surveillance tech.
I heard that mastodon is more privacy friendly platform than whatever bigtech slop out there.
My likes include Linux, FOSS, slowed nightcore covers of generic pop songs, rainy days, pet pigeons and calligraphy.
I dislike Bigtech, genAI, surveillace, those websites that tell me to turn the adblocker off and the list is ever expanding.
I suffer from depression. Kindness shown whenever interacting with me is appreciated.
Special thanks to @fanfare
Palantir-Einsatz in #NRW - #Polizei nutzt Software tausendfach
"Der Einsatz der Polizei-Software von #Palantir ist an strenge Vorgaben geknüpft. Trotzdem wurde sie in sechs Monaten mindestens 2000 Mal genutzt. Wie oft genau kann das NRW-Innenministerium aber gar nicht sagen......
(...)
Herbert #Reul (CDU) hat eine klare Haltung zur Software des umstrittenen US-Unternehmens Palantir: "Damit ersparen wir der Polizei wahnsinnig viel Arbeitszeit, weil wir die Daten, die sowieso schon zugänglich waren, schneller erreichen können."
https://www1.wdr.de/nachrichten/landespolitik/polizei-software-palantir-100.html
www1.wdr.de
Mindestens 2000 Mal kam Palantir in sechs Monaten zum Einsatz - wie oft genau kann das NRW-Innenministerium aber nicht sagen.
@adamsaidsomething @eff Oh! Here we go: I feel
e x t r e m e l y s t r o n g c o n t e m p t
towards the Spanish🇪🇸 regime when I am seeing this. I feel
e x t r e m e l y s t r o n g c o n t e m p t
towards the UK🇬🇧 regime when I am seeing this. I feel
e x t r e m e l y s t r o n g c o n t e m p t
towards the Danish🇩🇰 regime when I am seeing this. I feel
e x t r e m e l y s t r o n g c o n t e m p t
towards the Australian🇦🇺 regime when I am seeing this. I feel
e x t r e m e l y s t r o n g c o n t e m p t
towards the French🇫🇷 regime when I am seeing this. I feel
e x t r e m e l y s t r o n g c o n t e m p t
towards the Malaysian🇲🇾 regime when I am seeing this.
#censorship #authoritarian #orwell #orwellian #privacy #surveillance #concentrationcamp #dictatorship #totalitarianism #totalitarian #authoritarianism #kafkaesque #denmark #spain #uk #france #australia #ageverification #socialmedia #contempt #teenagers #identitytheft #teen #teens #teenager #youth #herewego #hereyougo
If you live in Spain, tell Pedro Sanchez what you think about his government's push to age gate the internet. Very disappointing to see this authoritarian push from the Sanchez government
#spain #socialmedia #privacy #pedrosanchez #censorship #eupol #ageverification #agegating
gizmodo.com
Spain, Australia, and other countries are pushing social media age crackdowns to protect kids from the internet.
Baden-Württembergs Landtag hat einer erweiterten Massenüberwachung den Weg geebnet. Künftig sollen auch auf kommunaler Ebene KI-gestützte Überwachung und Mustererkennung leichter möglich sein und die Speicherfrist der Aufnahmen wird um 2 Monate erhöht.
#Grüne und #Union gehören auch in anderen Bundesländern an denen sie in der #Regierung sind oder waren, zu den treibenden autoritären Kräften für eine verschärfte #Massenüberwachung, die u.A. auf die Software des militarisierten US-Konzerns #Palantir zurückgreift. So auch in #NRW und in #Hessen.
badische-zeitung.de
Baden-Württemberg lockert die Regeln für Videoüberwachung im Land. Kommunen dürfen künftig viel leichter Kameras einsetzen – sogar mit KI.
Then stop Chat Control now, privacy is an inalienable right.
#ChatControl #StopChatControl #EU #EuropeanUnion #Privacy #ClientSideScanning
I've published a new essay on my website.
“Into the Dark Wood: The Right to Be Unknown.”
Oblivion, autonomy, surveillance, and resisting a world that refuses to let us disappear.
ominous.net
by occult
saw a bunch of these around here so might as well:
20s something living in #berlin
#graphicdesign #UI #UX by day
#opensource #privacy #security #nerd #geek by night
absolute #music nerd
#jungle #techno #breakbeat #dnb #ambiance #jumpstyle #memphis #phonk #rock #house #trance #cloudrap #hardwave #dub #dubstep (not brostep) #indie and whatevers #experimental or #newage
#aggressiveskating #blading #snowboarding
used 2 organize and promote #raves and #events b4 adult life started eating my free time
still help out other #rave collectives with #soundsystem setup here and there
huge #audio nerd
that friend in the friend group that "knows" about tech
(im a highly #intuitive person and can use a search engine) (and obsessed with anything #tech and #tool related #digital and #analogue and love #tinkering with things to see what makes them tick)
i love #driving and #riding wayy 2 much, like just pulling a throttle just numbs my brain in2 pure #bliss, without #blitzerapp i would have been rid of my licence years ago
#menace2society /s
sometimes i play around with a #fullspectrum (what my frens call me) #camera
fluent in #sarcasm #darkhumor
maybe a bit #edgy sometimes
#terminallyonline #owo #rawrr
"For all security paranoïd, selfhosting and low tech is the best choice"
- No IA / LLM
- No bullshit social networks
- No trackers, small fingerprint
- No big attack surface
- No too much cve
- No stupid algorithm
- No agressive adverts / ads
- Censorship resistant
- Community driven
breathe in the fresh air, the real life 🌱🌳
Take the control of our life.
#selhosting #server #privacy #dataprotection #soverein #souverainté #numerique #protection #serveur #security #cybersecurity #malwares #data #données #dataprotection #privacy #vieprivée
The most annoying thing about corporate surveillance to me is the arrogance of the prediction mechanisms.
These algorithms build a model of me based on my clicks from three years ago and then try to trap me in that loop forever. They show me music they think I'll like, and news they think I'll engage with, and videos they think will enrage me enough to keep me hooked to their platforms. They are actively trying to flatten my personality into something easy to monetize.
As most people I've seen say out loud, "Privacy as a concept is way beyond hiding secrets. A part of it also means preserving your capacity to change. To be surprised. To be inconsistent."
If I could tell every human one thing, it would be to actively refuse to be a predictable data point. Mess up their metrics. In whatever way you are capable of.
#socialmedia #algorithmicbias #privacy #dataprivacy #quotes #foss #facebook #linkedin #llm #noai #enshittification #reading #books #baking #art #philosophy #adhd #depression #cybersecurity
Hello Universe!
Moved to new server.
Re-introduction - Been on here since 2022 and should write an intro again. I'm deaf, I'm a fan of open-source projects, so this will be short and sweet.
Post random ramblings, news, techie stuff, boost mostly cat pics. I just like computers and hang around here.
Hashtags of interests:
#Cats | #Coffee | #Books | #Gamer | #GIF
#NoMoreCraptions | #Disability | #Accessibility
#Inclusion | #Equity | #Ally
#Tech | #Privacy | #Encryption
#OpenSource | #FLOSS
#DoctorWho | #SciFi | #Geek | #Nerd
#Science | #Physics | #Space | #STEM
#SecularHumanist | #Atheist
#Deaf | #ASL
#Stargazing | #Astronomy
#Astrophotography | #Photography
#Boricua
Howdy! 👋 Boost for visibility 🙌
Energy = Milk x Coffee²
How to set up a "ghost phone":
#cybersecurity #opsec #privacy #grapheneos #android #data #resist
UPDATE: Calyx SIMs are internet-only... Oops. My fault for presuming they were default unlimited talk/text/data. (Update: I wouldn't trust Cape.) See the replies for a Jabber-based solution to a phone number. Much more affordable, too.
Find yourself a friend willing to receive packages in their name on your behalf, preferably someone not at risk of being monitored, themselves.
Order a SIM card from the Calyx Institute (https://www.calyx.org/):
• use crypto currency, prepaid gift card bought with cash, or money order.
• use a fake name to register the SIM.
• have it shipped to your friend's address.
Buy a pre-owned Google Pixel:
• buy with cash at physical location
• or online with a prepaid gift card that was bought with cash; use a brand new shopping account.
• or with crypto on DNM.
• have shipped to your friend's address.
Install GrapheneOS using your preferred method (browser is easier; local is more 1337):
• follow the guide at https://www.graphineos.org
• the guide says you need an internet connection to enable OEM unlocking, but I found this to be untrue and did not connect to internet.
When first connecting to internet, it is safer to wait until you have your SIM card than to connect to WiFi to finish setting up your phone.
If you do connect to WiFi, first, you should connect to a router with active VPN capabilities to avoid associating your device with your home IP. I was impatient and connected through my PC which runs a 24/7 VPN over WiFi and shares its connection over LAN to a GL.iNet router. I connected to the GL.iNet router which would feed my phone's connection through PC's VPN connection. GL.iNet routers have great support for VPNs on-device, too. Use a fresh VPN connection that you have not done any personal internet activity on.
Alternatively, you could connect to a public WiFi not terribly near your home to initially set up your phone and VPN connection.
Your next step should be to set up your VPN connection on your phone. Mullvad and Proton have clients available on F-Droid, so you'd have to install F-Droid first. NordVPN requires you to use the Play Store, so you'll have to set up the Play Store if you use Nord (or want any apps only available on the Play Store).
GrapheneOS uses a container for the Play Store so it can't access personal data on your device. Create a new Google account; do NOT use your primary google account. If you must to use a phone number for verification (optional), use the phone number associated with your new SIM, not your primary number. Don't forget to memorize or save your password.
If you want to add payment to your new google account, use a prepaid gift card.
You can also manually set up your VPN in the Networking section of the Settings app. I won't hold your hand for this and assume you know what you're doing if you go this route.
Use a kill switch, if available with your VPN. If not, be very careful about making sure your VPN is connected.
It may not be terribly necessary to use a VPN if you never connect to WiFi and only use your 5G connection. Although your IP will reveal your general location.
Disable location services for best security. it is actually very difficult for LEA to triangulate 5G devices with cell towers. You should be practically safe from triangulation attacks.
(GrapheneOS also has a built-in network and location proxies if you need location services.)
Pay attention that your connection doesn't downgrade to 4G or especially 3G to avoid triangulation. LEA will use a device called a "Stingray" to downgrade cellular connections in an area so they can triangulate devices. You can use a Verizon Orbic 5G hotspot with custom firmware called "Rayhunter" to determine if a Stingray is active in your area. You do not need a SIM and subscription for the Orbis. (https://www.eff.org/deeplinks/2025/03/meet-rayhunter-new-open-source-tool-eff-detect-cellular-spying)
If a stingray is active, shut down your phone, ASAP.
That's it. Stay sharp and pay attention and your phone should be untraceable back to you. Use unique accounts on your ghost phone to best hide your identity. Or at least accounts that are already hidden from your primary identity.
Alternatively, you can use a Calyx Institute hotspot and avoid using a SIM altogether. (https://odysee.com/@NaomiBrockwell:4/Calyx:7)
Bonus Benn Jordan video with a segment about The Rayhunter: https://anarchy.tube/w/9ZU893XKY6xVNf9GnFNTAS
anarchy.tube
Benn Jordan talks about kicking off the new year by ripping data from weather satellites and talking to your friends through a lawn light. And shows you how. The description of anarchy is simplisti...
📢 Call for Papers
Applied Cybersecurity & Internet Governance – an #openAccess, peer-reviewed scholarly journal dedicated to multidisciplinary research on #cybersecurity – is now accepting submissions for the 2026 issue.
Cybersecurity is undergoing rapid transformation.
Autonomous AI systems are evolving.
Generative models are scaling.
Attack techniques are adapting.
Post-quantum threats are emerging.
Researchers must respond.
Join a high-impact platform shaping security studies in the age of intelligent systems.
We welcome manuscripts addressing technical, legal, political, and social aspects of digitalisation, #networkSecurity, #privacy, #AI, and #cyberWarfare. Author guidelines are available at: https://www.acigjournal.com/For-Authors,4555.html.
All submissions undergo double-blind peer review, revision, and resubmission. Accepted articles are published open access, free of charge, and without delay. ACIG is indexed in leading scientific databases and citation lists, including Scopus.
🌐 Applied Cybersecurity & Internet Governance (#ACIG) is published by #NASK – National Research Institute.
Call for papers 2026. Submission deadline: September 30, 2026. In the upper right corner there is a designation “2026 Volume 5, No. 1” on a teal background. At the top of the image the logos of ACIG and NASK can be seen. A human hand holding a loudspeaker emerges from behind the bottom edge of the illustration.
Nuovo video tutorial su come aggiornare @linuxmint 22.2 a 22.3 "Zena" in pochi minuti.
PeerTube: https://videos.gianmarco.gg/w/fuyH6mwKosDKRfA6kkcwF5
Odysee: https://odysee.com/@gianmarcogg03:e/mintupgrade:a
YouTube: https://www.youtube.com/watch?v=l_M83E7fF2s
#FreeSoftware #LibreSoftware #SoftwareLibero #OpenSource #FOSS #Video #Privacy #Linux #GNULinux #LinuxMint #LinuxMint223
youtube.com
In questo video vi mostro come aggiornare Linux Mint 22.2 a 22.3, versione rilasciata pochi giorni fa.Blogpost su Linux Mint 22.3 "Zena": https://blog.linuxm...
Speaking of reviving ... I'd love to come back to #podcasting. Currently I'm one the hosts of the #WeinSchreibereien Podcast. But I would love to revive my own two shows, #ViennaWritersPodcast on everything around professional writing and #TheDinerPodcast on data #privacy, #ITSec, net politics etc. I already had some wonderful guests like Manuel 'HonkHase' Atug and Cory Doctorow. Love to keep going from there. :)
https://weinschreibereien.de/podcast/
Cover of the Eltville WeinSchreibereien podcast
Cover of the Vienna Writer's Podcast
Cover of The Diner Podcast – Data & Coffee
“There’s this veneer of respect for privacy that is painted over all of this data aggregation and consolidation.”
But beneath it all, #privacy experts warn that smartphone-monitoring software "Tangles" is the latest in a law enforcement arsenal, from surveillance #tech to an army of drones, operating with little oversight.
Our latest from Francesca D'Annunzio is presented in partnership with the Pulitzer Center. https://www.texasobserver.org/texas-police-invest-tangles-sheriff-surveillance/
#police #surveillance #law #politics #USpol #news
texasobserver.org
One sheriff who leads an anti-smuggling task force says the software helps “develop leads to eventually obtain probable cause.” Civil liberties experts say its use violates constitutional rights.
"The EU is preparing a proposal that could spell the end of encryption as we know it. With Chat Control and the “Roadmap for Lawful Access to Data,” Brussels wants to allow algorithms to scan —directly on your device— every message, photo, or video before it’s sent, including on encrypted apps like Signal, WhatsApp, Telegram, iMessage, or ProtonMail.
Behind the stated fight against child abuse, an entire system of mass surveillance could emerge in just a few months. In reality, this paves the way for:
• Permanent surveillance of all citizens.
• Built-in backdoors that weaken everyone’s security.
• Cross-border phone tapping.
• A transfer of power to private companies like Microsoft, Google, or Thorn, who would control detection tools for profit.
Why say NO?
Because privacy is a fundamental freedom. It protects journalists, lawyers, activists, victims, whistleblowers and every ordinary citizen. Accepting that our phones become wiretaps means accepting that no conversation is ever truly confidential. It changes the way we speak and think, pushing us toward self-censorship. And once such an infrastructure is in place, history proves one thing: there’s no going back."—Christophe Boutry
End of Encryption: How the EU Wants to Spy on All your Messages >
youtube.com
The European Union is preparing a proposal that could spell the end of encryption as we know it.With Chat Control and the “Roadmap for Lawful Access to Data,...
Alright, wanting to make the whole IRC thing more accessible, I've made the webchat version where anyone can jump right in: https://webirc.inthemansion.com
Feel free to check it out and also leave any feedback, fairly new ☺️
webirc.inthemansion.com
I highly recommend checking out the No Telemetry mod by kb1000 for Minecraft Java Edition. It disables the non-GDPR compliant telemetry of Minecraft, since they do not provide the option themselves. It's well maintained, and I'm using it myself since I started playing Java.
Info & Download:
https://modrinth.com/mod/no-telemetry/
https://github.com/kb-1000/no-telemetry
Report on the bug tracker:
https://bugs.mojang.com/browse/MC/issues/MC-237493
#minecraft #minecraftjavaedition #minecraftjava #minecraftmod #dataprotection #privacy
bugs.mojang.com
Hi, I'm Sparrow. I run KstrlWorks where we build high-performance, privacy-first tools for Linux users.
Built systems for F-35s and high-frequency trading desks. Now an executive that companies with deep pockets parachute into their disasters to fix operations and actually grow them.
Currently shipping:
HardPass - GPU passthrough and #VFIO that actually works. For #LinuxGaming and power users.
I write about:
- Real #EngineeringLeadership. The kind that prevents incidents, not LinkedIn motivational posters.
- Running efficient, security-first teams that don't implode
- #Virtualization, systems architecture, and #Bootstrapping
- Building infrastructure so solid you never need to hire a fixer like me
High-performance, privacy-first tools built with the same standards I use for critical systems. Linux users deserve that.
Let's build things that work. 🐧
#Linux #SelfHosted #TechLeadership #Privacy #Introduction #FOSS #VFIO
Hardpass GPU passthrough tool, to run windows apps locally with hardware acceleration.
Hi Fediverse!! 👋😊
My name is Kian (Kee-ahn).
I'm #Persian, an #Angelino (#LosAngeles), and sometimes #sassy. I'm here to discuss #technology, #society, and #queerness; complain about #politics, #AI (or whatever the current exploitative fad is), and my #PetPeeves; share #knowledge, #truth, and my greatest #fears; and also #procrastinate.
I'm always listening, learning, and growing. I try to speak from my experiences (including my privilege), and make many mistakes along the way. I invite you to challenge my thoughts, share your perspectives, agree or disagree, and otherwise interact with me; and maybe together we can grow as individuals and strengthen this community.
#Equity #Justice #SocialJustice #Community #Sustainability #Accessibility #Health #ChronicPain #Anxiety #Healing #DeathPositive #SexPositive #Queer #Gay #LGBT #Love #Peace #Growth #Reflection
#Science #DataScience #Biochemistry #BoardGames #DadJokes #Privacy #FLOSS #Linux #Sweet #Sour #Pop #Alt #DarkPop #Mystery #Fantasy
"So you see, the elimination of bodily wastes, in an architectural space shared with others, has always been fraught."
Calvin Gimpelevich for Los Angeles Review of Books: https://lareviewofbooks.org/article/filthy-matters/
#Longreads #Essay #Reading #Nonfiction #History #Toilets #Bathrooms #Sanitation #Privacy #Politics #PublicSpace
:quality(75)/https%3A%2F%2Fassets.lareviewofbooks.org%2Fuploads%2FLararium%20wall%20painting-2.jpg)
lareviewofbooks.org
Calvin Gimpelevich writes on the history and politics of public bathrooms, in this essay from LARB Quarterly no. 47, “Security.”
For the love of all that is good, *someone* PLEASE create a browser UI around Servo that is:
* #copyleft #FOSS
* Community governed
* Has daily testing packages
* Community funded non profit
* Avoids off device #AI
* Communicates clearly
I worked professionally with high profile #crowdfunding campaigns for years. I am 100% certain a campaign would go viral, with stretch goals blown away.
#Servo isn't feature complete, but many (me!) would 100% daily drive something alpha, buggy and missing features to build a better future. Hint: this is exactly what successfully launched FIrefox against #IE.
We need hope we can escape the sinking, Titanic shitopoly of #Chrome and #Firefox. We will rally around any principled alternative.
An illustration of the round blue and green Servo logo rolling over a breaking Chrome browser logo with speed lines in the background.
5/
Trying to prevent spying is only part of it. We should also try to deal with (potential) manipulation and other negative-sum behavior.
Having open-weight models implemented as open-source software is part of it — but, we also need open-data — the data the models were trained off of needs to be available, too.
#AI #ArtificialIntelligence #LargeLanguageModels #LLM #Privacy
4/
So, how can you mitigate some of the harmful ways that LLMs could be used, as it relates to PRIVACY —
I don't think it is reasonable to expect people to stop using LLMs.
I think a key part of a way that this can be addressed is — LLM should to be run LOCALLY.
People after better off running LLMs LOCALLY on their own computers — to remove some of the vectors by which they could be spied on.
In addition to that —
...
#AI #ArtificialIntelligence #LargeLanguageModels #LLM #Privacy
3/
I think people who care about PRIVACY should pay a lot of attention to LLMs!
The ability to (both intentionally and unintentionally) spy on, manipulate, and engage in other zero-sum (and even negative-sum) behavior against people will be at a level never seen before — because of how those who want to do those things could (and likely will) use LLMs.
But, there is something we can do about it —
...
#AI #ArtificialIntelligence #LargeLanguageModels #LLM #Privacy
2/
I don't think LLMs are going to go away — not in the way I suspect some of its hater wish it would.
Even after the AI hype-bubble pops — I think LLMs will still be around.
It doesn't matter if you hate them, or hate how they were created, or hate their social impact, or whatever — I think people will continue to use LLMs — both now and in the future.
But, here is the thing —
...
#AI #ArtificialIntelligence #LargeLanguageModels #LLM #Privacy
1/
Even if you hate LLMs, you should pay attention to and maybe even get involved with LLMs — to try to mitigate and maybe even prevent some of the ways which they could be used in a harmful way.
...
#AI #ArtificialIntelligence #LargeLanguageModels #LLM #Privacy
En zo is er nog meer te vertellen. Als je tijd hebt, kijk gerust naar het interview met onze voorzitter Simon Lelieveldt bij Holland Gold.
Hij legt uit wat HRIF.EU momenteel aan het doen is en hoe onze kijk is op het omgaan met mensenrechten-schendingen in een erg gespecialiseerde bureaucratische wereld.
#mensenrechten #hrifeu #sleepnet #privacy #grondrechten #bescherming #contantgeld
youtube.com
In deze aflevering van Holland Gold gaat Paul Buitink in gesprek met Simon Lelieveldt over de doorgeslagen financiële controlestaat. Simon Lelieveldt heeft ...
I will make this a mega pin post.
Disclaimer:
My opinions are my own and do not represent any organization. I will update this post occasionally. Please follow for more!
Contents:
1. Ways to support me.
2. Where else to find me.
3. More information about myself.
4. Important Posts
5. Currently used/recommended software
1. Support:
Liberapay: https://liberapay.com/terminaltilt/donate
Ko-Fi: https://ko-fi.com/terminaltilt
2. Where else you can find me:
Personal:
PieFed: https://piefed.social/u/Resplendent606
Terminal Tilt:
Youtube: https://www.youtube.com/@TerminalTilt
Linkstack: https://links.terminaltilt.com/
Website: https://www.terminaltilt.com
Mastodon: https://climatejustice.social/@terminaltilt
3. More about me:
Hi, I am Bryan. I love talking about #FOSS #Privacy #SelfHosting #LinuxGaming and #SocialJustice You can reach me here via DMs. All Terminal Tilt inquires should be directed to the methods linked above. I’m happy to help with Linux or self-hosting questions.
I live in East Tennessee, USA. I am an omnisexual cis-gendered man (he/him). I have been happily married for 17 years to my best friend and the love of my life. I have a Bichon Frisé who I adore and consider my own child (fur baby). I am type 1 bipolar and I have undifferentiated connective tissue disease (UCTD) which has similarities to Lupus.
I am an atheist and I consider myself a "humanist." I identify as left/progressive/socialist/eco-Marxist. I am 100% anti-fascist, anti-AI, and anti-big tech.
I am a supporter for social justice, LGBTQIA+ rights, the preservation and protection of our environment, consumer and privacy rights, the Free Software Movement (FOSS), and the defense and independence of victims of genocide, invasion, and injustice (Ukraine 🇺🇦 and Palestine 🇵🇸).
I advocate for the use and promotion of free and open software and the right to repair. I use Debian GNU/Linux (btw) on my desktop, laptop, and Proxmox on my server running VMs of Debian and Home Assistant OS. I also use GrapheneOS on mobile. I am a card carrying member of the @fsf and the @eff
I believe privacy is a human right. I have deGoogled myself and I am strongly anti-big-tech. I proudly deleted my Google, Microsoft, and Reddit accounts. I prefer to support organizations who are community run or employee owned (like coops) when possible, resist the use of trends like "AI" and "LLM's."
I moved to climatejustice.social in August 2025 because I wanted to be around people who are like minded. I am pleasantly surprised that not only does this community share similar interests and goals, there are also some extremely intelligent people here. I have enjoyed my time here and I highly recommend it if you need/want a new Fediverse home.
Other charities, organizations, and projects I have supported:
Electronic Frontier Foundation (EFF): https://www.eff.org | @eff
Free Software Foundation (FSF): https://my.fsf.org/join | @fsf
Privacy Guides: https://www.privacyguides.org | @privacyguides
Dolly Parton's Imagination Library: https://imaginationlibrary.com/
The #LuigiMangione Official Legal Fund: https://www.givesendgo.com/luigi-defense-fund
Some of my favorite people on Mastodon:
@Em0nM4stodon
@PaulaToThePeople
@trashheap
@giuseppegv
@splendorr
@Jc00qe
@jonah
@PhoenixSerenity
@JanUwU42
@adubya
4. Important posts:
Dare to Be Forgotton: https://climatejustice.social/@resplendent606/115776109687349487
Dare to Be Inconvenienced: https://climatejustice.social/@resplendent606/115753280636436717
Dare to be Disconnected: https://climatejustice.social/@resplendent606/115816926092803740
Please Stop Using "Bipolar" as an Adjective: https://climatejustice.social/@resplendent606/115754873117219133
Debian based GNU/Linux distros: https://climatejustice.social/@resplendent606/115788867728385803
5. Currently recommended GNU/Linux software:
Consolidated list to my Codeberge here: https://codeberg.org/resplendent606/terminal-tilt/src/branch/main/docs/recommendations/linux-software.md
#GNULinux #GNU #Linux #FSF #Debian #GrapheneOS #Socialism #LGBT #LGBTQIA #Disability #Environmentalism #deGoogle #NoAI #Omnisexual
codeberg.org
Now that I finally feel comfortable on #mastodon, and have a general idea of what I want to post, I think it's time for my first #introduction!
I'm tpaau, a #Polish guy with #autism. 
I'm interested in #cybersecurity, #privacy, the #ScpFoundation, #airsoft, and #cats. I will post mainly about my interests, projects I'm working on, and related stuff.
TL;DR: I'm using WhisperIMEplus on my phone, and I think I will finally live in the XXIst century with my phone.
https://github.com/woheller69/whisperIMEplus
I refrained myself from using speech recognition on my android since the beginning because I didn't like the idea of my voice used for other reasons than my need which would have been speech-to-text.
And having on-device speech recognition was pretty niche for a while (I was interested in mycroft and snips at that time). Then there was Mozilla with CommonVoice and deepspeech, unfortunately, DeepSpeech has been shut down (it seems), and the results are far from the Whisper model from OpenAI.
I'm clearly not an OpenAI fan (if you haven't figured it out yet, you will soon if you follow me), but Whisper seems to be the best thing that got out of this, mostly because it's way more open than any other things from OpenAI which are not open at all.
Anyway, I found that now, there is a project called WhisperIMEplus that is used as a keyboard on my android, and it processes my voice, locally, on my device. And the app has NO internet connection rights, so, even if OpenAI added some backdoor to send data online in their Whisper model, well, Android app rights wouldn't allow it.
I'm fine with all of this, so now, I can finally take notes by talking to my phone, in English and French, without having second thoughts about it.
It's good when technology helps you, instead of trying to screw you in different and sneaky ways.
#SpeechRecognition #android #privacy #SpeechToText #OpenAI #whisper #ai
github.com
Android Input Method Editor (IME) based on RTranslators Whisper implementation - woheller69/whisperIMEplus
I have drafted an email critical of the #digitalomnibus proposal in #EU from a wide-reaching privacy, #technology sector protection and #geopolitical risk standpoint.
Read here:
https://nx82858.your-storageshare.de/s/sBFL5CxHY7Yf3XC
Send to EU representatives with this list of emails:
https://nx82858.your-storageshare.de/s/xQogH6dXKifXfS6
If you care about #souvereignty #security and #privacy, please boost and take part in this #campaign !
nx82858.your-storageshare.de
Storage Share - powered by Nextcloud
Riunione #NaLUG del 29 novembre sull'homelabbing per liberarci dei servizi online proprietari, fra cui @nextcloud, @forgejo e @jellyfin hostati su Proxmox e @nixos_org.
PeerTube: https://videos.gianmarco.gg/w/eMXUqsqRnoDBBpgihuCqLz
Odysee: https://odysee.com/@gianmarcogg03:e/homelabbing:8
YouTube: https://www.youtube.com/watch?v=2P4nSJS5rEQ
#FreeSoftware #LibreSoftware #SoftwareLibero #OpenSource #FOSS #Video #Privacy #Linux #SelfHosting #Homelab #Nextcloud #Forgejo #Jellyfin #Proxmox #NixOS
youtube.com
Registrazione della presentazione che ho dato ad una riunione del NaLUG riguardo l'hostarsi un server personale a casa.Scarica la presentazione: https://dl.g...
‚Heute wurde in #Berlin eine Novelle des Polizeigesetzes verabschiedet. Sie erlaubt so ziemlich alles, was an digitaler Überwachung möglich ist: Verhaltensscanner, Gesichtersuche, Palantir-artige Datenanalysen, Staatstrojaner….‘
https://netzpolitik.org/2025/neues-polizeigesetz-berlin-wirft-die-freiheit-weg/
#Netzpolitik #Überwachung #Deutschland #Palantir #Gesichtserkennung #Datenschutz #Daten #Privacy
netzpolitik.org
Heute wurde in Berlin eine Novelle des Polizeigesetzes verabschiedet. Sie erlaubt so ziemlich alles, was an digitaler Überwachung möglich ist: Verhaltensscanner, Gesichtersuche, Palantir-artige Datenanalysen, Staatstrojaner. Ein Kommentar.
As promised, I will now ask once a year.
https://github.com/curl/curl/pull/13965#issuecomment-3586819564
github.com
Following the issue #543 and the discussion in #13964 as well as the comments in https://daniel.haxx.se/blog/2024/05/17/curl-tor-dot-onion-and-socks/, this commit implements that curl no longer res...
Everything we write in private messages should always have E2E encryption.
It's time to put an end to hybrid attacks by autocracies and all this hatred. The internet is just a tool.
It is unfortunate that some people confuse #privacy #anonymity and #security. These are all different terms related to different areas of the internet.
@GrapheneOS is being threatened by French authorities for refusing to add backdoors and they're dealing with coordinated attacks in French media right now. They're pulling out of France entirely, moving all their servers, and fighting off a wave of bullshit one-sided reporting that makes them look like they're helping criminals.
They need us to fight back. Support them however you can, whether that's a dollar, sharing their story, pushing back on the garbage news coverage when you see it, or just telling someone you know about what's happening. All of it matters because they're drowning in attacks from governments and media and bad actors who want them gone.
This is the only Android OS that actually makes me feel like privacy isn't just marketing. They fight for us now they need us to fight for them.
The EU is pushing Chat Control and creating an environment where governments feel empowered to threaten developers into compliance, and if we stay quiet we're letting it happen. Show up for them in whatever way you're able to.
#grapheneos #Privacy #NoBackdoors #encryption #security #chatControl
Komplettes Whatsapp-Verzeichnis abgerufen und ausgewertet
Wiener Forscher haben alle WhatsApp-Nummern abgerufen. Die 3,5 Milliarden Profile sind der größte Datenabfluss der Geschichte – und übler, als man meinen würde……
heise.de
Wiener Forscher haben alle WhatsApp-Nummern abgerufen. Die 3,5 Milliarden Profile sind der größte Datenabfluss der Geschichte – und übler, als man meinen würde.
„Am Mittwoch will die grün-schwarze #Landesregierung in #Baden-Württemberg einen heftig umstrittenen Gesetzentwurf verabschieden. Er erlaubt dem Bundesland den Einsatz der Palantir-Software zur #Datenanalyse, die das Land für mehr als 25 Millionen Euro bereits eingekauft hat…..“
Palantir in Baden-Württemberg
Polizei soll mit deinen Daten Software trainieren dürfen
#Grüne #CDU #BaWü #Überwachung #Polizei #Daten #Datenschutz #Privacy
netzpolitik.org
Eine Änderung des Polizeigesetzes von Baden-Württemberg soll der Landespolizei erlauben, Software mit personenbezogenen Daten zu trainieren und zu testen. Sie könnte damit auch Klarnamen oder Gesichtsfotos unschuldiger und unverdächtiger Personen in Systeme wie von Palantir einspeisen.
... #Security_2025 - #AirTag-Facilitated #Stalking Protection:
Evaluating Unwanted Tracking Notifications
and Tracker Locating Features,
by Dañiel G, Matthias F, Carolyn G, Adrian D, Katharina K,
https://www.usenix.org/system/files/usenixsecurity25-gerhardt.pdf
https://www.youtube.com/watch?v=6QiRa686yFo
#privacy #security #trackingDevice #Apple_corp #iOS #Google_corp #Android #trawlingUSENIX
youtube.com
AirTag-Facilitated Stalking Protection: Evaluating Unwanted Tracking Notifications and Tracker Locating FeaturesDañiel Gerhardt, CISPA Helmholtz Center for I...
@sylvie "#YouHadOneJob, #Apple!"
That's why they #monopolized #Apps on #iOS...
Personally, I've been using #OsmAnd for 15 years now but then again I've always been on #degoogled #Android from the beginning and never had an #iPhone or #iPad, so my opinion doesn't matter here...
Nuovo video tutorial su @FreeTube (Windows, macOS, Linux e Android), @invidious (web) e Tubular (Android) per guardare #YouTube senza pubblicità con software libero.
PeerTube: https://videos.gianmarco.gg/w/myCVxF9Jqy4emPmZXPe6fD
Odysee: https://odysee.com/@gianmarcogg03:e/freetube:a
YouTube: https://www.youtube.com/watch?v=aNlyFjL173o
#FreeSoftware #LibreSoftware #SoftwareLibero #OpenSource #FOSS #Video #Privacy #Linux #GNULinux #Android #Windows #Mac #macOS #Ad #Ads #AdBlock #Google
youtube.com
Sito web di FreeTube: https://freetubeapp.ioSito web di Invidious: https://invidious.ioRepo GitHub di Tubular: https://github.com/polymorphicshade/TubularMus...
Nuovo video tutorial su come scaricare video da #YouTube con software libero privo di pubblicità e spyware. Le applicazioni utilizzate sono Parabolic (Windows e Linux) e YTDLnis (Android).
PeerTube: https://videos.gianmarco.gg/w/iBSvgyX79hBUE2qtQVVgSB
Odysee: https://odysee.com/@gianmarcogg03:e/parabolic:a
YouTube: CENSURATO DA YOUTUBE!!!
#ytdlp #FreeSoftware #LibreSoftware #SoftwareLibero #OpenSource #FOSS #Video #Privacy
odysee.com
Sito web di Parabolic: https://nickvision.org/parabolic.html
... #Security_2025 - Understanding How Users Prepare for and React to #Smartphone #Theft,
by Divyanshu B, Sumair I H, Katharina K, Maximilian G,
https://www.usenix.org/system/files/usenixsecurity25-bhardwaj.pdf
https://www.youtube.com/watch?v=095gattnh0U
-- feels like might have listed the paper earlier but could not find the toot.
youtube.com
Understanding How Users Prepare for and React to Smartphone TheftDivyanshu Bhardwaj and Sumair Ijaz Hashmi, CISPA Helmholtz Center for Information Security, ...
... #Security_2025 - eSIMplicity or eSIMplification? #Privacy and #Security Risks in the #eSIM Ecosystem,
by Maryam M, Jason V, Evangelos B, Aanjhan R,
https://www.usenix.org/system/files/usenixsecurity25-motallebighomi.pdf
https://www.youtube.com/watch?v=nuwg1uMPsU4
-- seems like a deep rabbit hole ...
youtube.com
eSIMplicity or eSIMplification? Privacy and Security Risks in the eSIM EcosystemMaryam Motallebighomi, Jason Veara, Evangelos Bitsikas, and Aanjhan Ranganath...
… #Security_2025 - Addressing the #AddressBooks' (Interdependent) #Privacy Issues,
by Kavous S N, Lev V, Samuel M, Stephan M, Aurelia T-L, Marc-Olivier B, Mathias H, and Kévin H,
https://www.usenix.org/system/files/usenixsecurity25-niksirat.pdf
https://www.youtube.com/watch?v=pZHJXO_6ilY
-- ugh :pulling face down:;
-- most interesting of the recent batch!
So removed "related name" field in Apple Contacts where I think I had. Next step would be to rename/move "family", work- & location-specific lists …
youtube.com
Addressing the Address Books' (Interdependent) Privacy IssuesKavous Salehzadeh Niksirat, University of Lausanne / Max Planck Institute for Security and Priva...
... #Security_2025 - #Security and #Privacy Advice for #UPI [#UnifiedPaymentsInterface] Users in #India,
by Deepthi M, Harshini S R, Yasemin A,
https://www.usenix.org/system/files/usenixsecurity25-mungara.pdf
https://www.youtube.com/watch?v=wdf074Th0Ak
youtube.com
Security and Privacy Advice for UPI Users in IndiaDeepthi Mungara and Harshini Sri Ramulu, Paderborn University; Yasemin Acar, Paderborn University and The G...
... #Security_2025 - Endangered #Privacy: Large-Scale Monitoring of #VideoStreaming Services,
by Martin B, Romaric D,
https://www.youtube.com/watch?v=x-8U__f9Z6E
https://www.usenix.org/system/files/usenixsecurity25-bjorklund.pdf
... #security_2025 - Double-Edged Shield: On the Fingerprintability of Customized #AdBlockers,
by Saiid E H C, Ben S, Carmela T,
https://www.youtube.com/watch?v=6X_u_jro9ws
https://www.usenix.org/system/files/usenixsecurity25-el-hajj-chehade.pdf
#fingerprinting #webBrowser #deAnonymization #privacy #trawlingUSENIX
Ho fatto un tutorial su @delta, un sistema di messaggistica istantanea libero e privato basato sulle e-mail, ma con un'esperienza utente molto simile a WhatsApp, se non migliore.
PeerTube: https://videos.gianmarco.gg/w/cDnt7gLezCNcdM4byKnu4H
Odysee: https://odysee.com/@gianmarcogg03:e/deltachat:7
YouTube: https://www.youtube.com/watch?v=FNhgpcHgVeM
#FOSS #FreeSoftware #LibreSoftware #OpenSource #InstantMessaging #Chat #Privacy #ChatControl #OnlineSafetyAct #DeltaChat #WhatsApp #Telegram
youtube.com
Sito web di Delta Chat: https://delta.chatLista bot pubblici: https://deltachat-bot.github.io/public-botsLista app webxdc: https://webxdc.org/appsMusica di i...
Was forced to use biometrics instead of a boarding pass to board a
@unitedairlines flight today. This is completely unacceptable. No airline should be allowed to possess biometric data on California residents...or anyone, for that matter.
Unfortunately, United hides its opt out forms behind an email alias (privacy@united.com) that generates a user-specific opt-out form. This is an anti-pattern designed to discourage the exercise of your rights.
The request-specific web form itself contains anti-patterns designed to discourage use, from clunky date fields to other fields designed to make you make a mistake so they can deny. Those are followed by multiple attempts at identity confirmation, adding friction and risk.
In forcing the use of #biometrics on passengers, United Airlines joins Trumps' ICE Gestapo in violating the #privacy and individual rights of both citizen and non-citizen alike. This move is NOT about safety. It's got to stop.
⚔️ Start your adventures in #privacy with software you can rely on. Available on #Windows, #Mac, and GNU / #Linux desktops NOW.
👉 https://privacysafe.app
PrivacySafe Heroes
Overwhelmed by randomness of my toots? Protip: you don't need to follow me/people, you can just follow hashtags for interaction. I use several, like:
#InfoSec #Privacy #Venice #Food #Art #F1 #Caturday (yup) & #LazyPip #Education #Security #Photography #Motorbike & #Ducati #theNetherlands #PhotoChallenge
'Die elektronische Patientenakte sei sicher, versichert die #Bundesregierung. Doch ihre Antworten auf eine Kleine Anfrage lassen die Zweifel an diesem Versprechen wachsen. Versicherte sollen der ePA offenbar blind vertrauen – selbst wenn ihre Gesundheitsdaten bei US-Behörden landen könnten.......'
Mit Sicherheitsrisiken und Nebenwirkungen #ePA
https://netzpolitik.org/2025/elektronische-patientenakte-mit-sicherheitsrisiken-und-nebenwirkungen/
netzpolitik.org
Die elektronische Patientenakte sei sicher, versichert die Bundesregierung. Doch ihre Antworten auf eine Kleine Anfrage lassen die Zweifel an diesem Versprechen wachsen. Versicherte sollen der ePA offenbar blind vertrauen – selbst wenn ihre Gesundheitsdaten bei US-Behörden landen könnten.
... Abusability of Automation Apps in Intimate Partner Violence,
by Shirley Z, Paul C, Jacob V, Nishant K, Rahul C, Kassem F,
https://www.usenix.org/conference/usenixsecurity25/presentation/zhang-shirley
https://www.usenix.org/system/files/usenixsecurity25-zhang-shirley.pdf
#technologyFacilitatedAbuse #partnerAbuse #privacy #cellPhone #AppleShortcuts #AndroidTasker #IFTTT #SamsungBixbyRoutines #trawlingUSENIX
... #SOUPS_2025 - Unpacking the Social and Emotional Dimensions of Security and Privacy User Engagement,
by Nina G, Verena Z, Alexandra v P, Karen R,
https://www.youtube.com/watch?v=lXOJZyYRQTc
https://www.usenix.org/system/files/soups2025-gerber.pdf
Patientenakten enthalten oft falsche oder übertriebene Diagnosen #ePA
"Seit Oktober ist die elektronische Patientenakte Pflicht. Versicherte können darin einsehen, welche Diagnosen und Behandlungen dokumentiert wurden. Doch nicht immer sind die Diagnosen richtig......"
https://www1.wdr.de/nachrichten/falsche-diagnosen-in-elektronischer-patientenakte-100.html
Erfundene Krankheiten mit echten Folgen
'Für Betroffene können falsche Diagnosen allerdings gravierende Konsequenzen haben - etwa beim Wechsel in die private Krankenversicherung oder beim Abschluss einer Berufsunfähigkeitsversicherung. Stehen in der Akte Krankheiten, die bei ihnen nie existierten, kann das zu höheren Beiträgen für sie führen oder dazu, dass Versicherungen im Schadensfall nicht zahlen.
Auch das ZDF-Magazin "frontal" berichtete kürzlich von Patienten, die Diagnosen in ihren Patientenakten fanden, von denen sie gar nichts wussten. In einem Fall sagte ein Versicherter, dass er laut Akte ein Kollaps-Patient sei und ein Blutgerinnungsstörung habe. Das mache ihn zum Hochrisikopatienten - mit entsprechenden Zuschlägen. Hätte er die Krankheit tatsächlich, dürfte er aber wohl kaum im Vertrieb arbeiten und am Steuer sitzen, heißt es in dem Magazin......'
#Digitalisierung #Gesundheit #Gesundheitsdaten #Datenschutz #Medizin #Bundesregierung #Privacy
www1.wdr.de
In elektronischen Patientenakten stehen offenbar zum Teil falsche Diagnosen. Steckt dahinter ein System, um mehr abzurechnen?
... #SOUPS_2025 - “TikTok, Do Your Thing”: User Reactions to Social #Surveillance in the Public Sphere,
by Meira G, Miranda W, Lindah K,
https://www.youtube.com/watch?v=KcEUCYj_ZIo
https://www.usenix.org/system/files/soups2025-gilbert.pdf
#socialMedia #socialMediaSurveillance #privacy #trawlingUSENIX
I am really upset about #Google locking the #Android #OpenSource ecosystem. I feel there's no longer a reasonable alternate #mobile OS on the market.
Do end-users really have no choice other than defencelessly accept closed systems, monopolistic supervision, and give up digital software freedom?
Why are we banned from using #apps we want, on a device we own from #Fdroid? I feel bad for all the #FOSS #devs too.
Please raise awareness.🚨
#PlayStore #BigTech #sideloading #privacy #appstore
1/2
"Vind je dat digitalisering ertoe doet?
De enige partij die dat serieus genoeg neemt is de Piratenpartij" https://www.computable.nl/e-magazine/editie-06-2025/datarevival-stemmen-voor-digitalisering-blijf-maar-thuis-0619/#introstart
Dit zei ik er zelf min of meer ook over in mijn pitch bij het TK2025 digitaliseringdebat:
#verkiezingen2025 #TK2025 #digitalisering #privacy #democratie
If you want to be part of The Resistance,
it will cost you your smart speaker, your Ring doorbell, your smart glasses, and your AI assistants.
Mass surveillance is incompatible with revolution. Get rid of it.
Because this KISS-TNC stuff is pretty old, it has really good support on modern Linux.
So we're actually able to setup lorapipe on two different linux boxes and form an ethernet network over LoRa!
The current rev has some MTU limits we can fix, we can also eak out probably another 2x more bandwidth too.
But as is I was able to ping, mosh and ssh over my ethernet-LoRa network between Linux computers!
https://github.com/datapartyjs/lorapipe?tab=readme-ov-file#ethernet-over-lora
Privacy rights aren't a luxury, they are fundamental to democracy, to safety, and to so many other human rights.
When they attack your privacy rights,
they attack all of this, they attack your humanity.
Do not let them.
Fight back for your human rights.
I'm giving another #surveillance detection seminar in our intimate small classroom setting. Sign up for our full course at https://ivycyber.com/product/course-surveillance-defense/
Surveillance Defense Seminar
Surveillance Defense Seminar
The fact that government and military communication would be exempt is, in itself, an admission that there's no such thing as a backdoor only for the good guys.
If that wasn't bad enough, any access that allows you to search for CSAM in communications can also be used for surveillance.
Creating a system with immense surveillance capabilities without intending to use it for surveillance is, at best, naive. Even if you don't plan on using it, you can't know who's going to be in power in the future.
We detailed this last year and we checked again today. Meta collects everything it needs to track users across apps, a practice strictly prohibited by Apple.
Stop using the native app. Use the web app.
#privacy #fingerprinting #iOS #PWA
More 👇
🤯 Instagram is testing new iOS push notifications that include a profile photo. Each time the notification is shown on your screen, it triggers a GET request to fetch that image, letting Meta track every on-screen impression.
The app still misuses push notifications to send detailed device analytics about the device (uptime, battery, volume, locale, timezone, memory, CPU, etc.)
Screenshot of the new push notification with a profile photo shown in Notification Center
A GET request sent by Instagram when the notification was shown on screen.
👋 Re-#introduction, because the last one had gotten a little outdated. And long.
#Queer #polyamourous #geek. #Blogger since 1998, #IndieWeb fan since forever, #Fediverse citizen since 2018.
🇪🇺 
European in exile living in West #Oxfordshire, #UnitedKingdom, with my partner @fleeblewidget, her husband @misterjta, two kids, and one #dog. Politically #environmentalist #socialist.
Software engineer with a focus on #security, #privacy, and #accessibility. Founded and #volunteer with #NonProfit #ThreeRings.
When I've time for fun, I'm into #geohashing, #geocaching, #cycling, and performing #magic. Sometimes at the same time.
He/him pronouns.
📹 Video content: me giving a 15-second summary of the above.
Video introduction: a white man with blue hair tied in a ponytail, a goatee beard, and stubble, waves to the camera, saying, in an accent representative of various bits of Northern Great Britain: "Hi, I'm Dan Q; I'm not good at giving short introductions so let's really belt this one out. I'm a queer poly geek, blogger, software engineer, founder of a volunteer-run nonprofit, geocacher, geohasher, cyclist, and magician. Say hi!"
@EUCommission Nope, your are defending a genocide in #gaza You protect Israëli’s wanted for war crimes, you make secret deals with #trump You Don’t protect #privacy by forcely implementing #chatcontrol #eu
@Tutanota @EUCommission Understand this: people do not want this and will do whatever it takes to stop it. Here's an example - Tuta is making it clear. And I'm telling you myself: if force has to be used - so be it. Privacy is not something we will give up without a fight.
For months now, whispers have turned into a roar 
about a certain EU proposal. At first, it sounds like a noble cause - protecting children from harm online 👶🛡️ Who could argue with that?
But this is no ordinary mission. This is the turning point 🔄 A moment where the digital realm risks falling into a shadow 
A plan that demands all our private conversations be scanned 
No suspicion. No crime. No reason. Just everyone. All the time ⏰
Imagine a system powerful enough to scan every message, every image, every whisper - on every device, for every person 📱💻 It doesn't need physical access or a noisy presence. It runs silently in the background, all the time
It was created to protect 🛡️ But its effectiveness is uncertain, and privacy is seriously compromised 🔓 Instead of focusing on real threats, it treats everyone the same - as if risk came from simply being online 🌐
A digital weapon built before anyone can understand its consequences ⚠️ Like a Death Star - not made of kyber, but of code 
Created in the name of safety, but capable of something far more dangerous ☠️
Officially, this proposal is called CSAR (Child Sexual Abuse Regulation) 📜, but most of us know it as ChatControl 
And that's no accident - the latter name more accurately reflects what this system really is and the consequences it brings
If passed, it will mark the end of private digital communication in the EU 🚫
And if it happens here, it can happen anywhere 🌍 Because what is accepted in one democracy can quickly become the norm in others. Europe often sets the standards others follow 🇪🇺 And the world is watching 👁️
This proposal changes the rules ⚖️ It weakens encryption 🔐, the very foundation of secure communication. When encryption is weakened, every message becomes vulnerable to interception 
, and privacy is no longer guaranteed. When privacy disappears, democracy crumbles with it 🏛️⚠️ The consequences do not end there - surveillance will become part of daily life , and control over our digital world will only grow stronger.
I was born into a free internet 🌐 I want to die in one too 🗽
This proposal breaks fundamental rights 🚨:
- the right to private communication (Article 7)
- the right to data protection (Article 8) 🔒
- the presumption of innocence ⚖️
- the principle of proportionality ⚖️
This is not a debate over ideology 🚫🗯️ This is a matter of principle 🔥
To the @EUCommission: I know your intentions are good 🙏 But history does not judge intentions. It judges consequences 
You want to protect people 🛡️ But you may end up building something that will be used to control them 
Don't build a machine you yourselves would fear 
You will not be remembered for good intentions - but for what you leave behind 👣 Think about how it will affect us all. Choose security, not surveillance. 🚫 This is your moment ⏳ Don't waste it.
To everyone else: You don't have to be from Europe 🇪🇺 to care 
When harmful laws pass without resistance - the impact is felt everywhere 🌎 We are citizens of one digital world 🌐 And in that world, staying silent comes at the highest cost 🤐
Freedom does not die loudly. It disappears - quietly - unless we stop it 
Visit fightchatcontrol.eu. Learn. Message your MEP. Take action! 
@chatcontrol #chatcontrol #fightchatcontrol #csar #eu #europeanunion #europe #encryption #privacy #security #cybersecurity #freedom #digitalfreedom #democracy #humanrights #surveillance #stopsurveillance #stopscanningme #resistance #policy
@nullagent @nullagent in my local hacker/activist community, we are working really hard to get people to ditch Meshtastic in favor of Reticulum, including building out our own local mesh network with it. To anyone that has been sold on the promises of Meshtastic, I'd definitely recommend you do the same!
The security/encryption of Reticulum is far superior, and the feature set is far more complete (it can be used for text, voice calls, hosting websites, TCP/IP tunneling, really anything), it can interoperate on way more radio protocols than just LoRa (including many non-radio protocols), and the development team seems far more committed to FOSS and anti-corporate ideals.
It also doesnt use flood-routing, unlike Meshtastic, so the network gets significantly more efficient as nodes are added, rather than getting bogged down the way Meshtastic does.
Thank you for putting this info out there, it's very refreshing when so many out there are parroting Meshtastic's marketing materials on its security while simultaneously advocating its usage in high-risk environments like protests.
📱Saw @profdiggity 's coverage on @NBCNews of the electric scooter scam and their leaky apps? Attend a small group workshop and learn how to detect #privacy leaks in your own apps & #smartphone! https://ivycyber.com/product/workshop-app-privacy/
ivycyber.com
Join cybersecurity expert Sean O’Brien for a 90-minute remote workshop and learn how to dissect the apps you use every day, uncover hidden SDK trackers, and monitor how your data moves across networks.
I’m excited to share my latest article, published in Forbes: Deepfakes And Social Engineering: A Growing Threat To Everyone.
This piece is personal to me because I’ve seen how quickly deepfake technology is moving from novelty to real-world attacks. It’s not just companies at risk—families are being targeted with AI-cloned voices and fake video calls.
In the article, I break down the real cases we’re seeing, why multifactor authentication (MFA) is essential, and what both organizations and individuals like you and me can do to protect ourselves.
In the piece, I cover:
🔍 Real-world scams driven by AI voice and video
🔐 Why multifactor authentication (MFA) is essential
📱 How both organizations and families can verify smarter
🧠 The mindset shift from trusting appearances to verifying identities
Deepfakes aren’t a future problem. They’re here. And the time to prepare is now.
https://www.forbes.com/councils/forbestechcouncil/2025/08/25/deepfakes-and-social-engineering-a-growing-threat-to-everyone/
#Forbes #cybersecurity #deepfakes #MFA #security #privacy #cloud #infosec #AI #leadership
@forbes@flipboard.com @Forbes@newsie.social @forbestechcncl
This segment of meshtastic's DEFCON post are sadly not correct.
I can't tell you why how exactly the firmware and phone app work but I can tell you that if you are near someone PKI spoofing it absolutely does replace the users private key on BOTH the app and the firmware.
The only pub keys that are pinned are your favorites list.
It doesn't matter what -type- of AES is used after the public key is replaced you're already MITMd.
So I'm not sure how to say it in a more concise way but YES meshtastic direct messages are at risk of MITM (man-in-the-middle) if your public key can be replaced by an attacker who spoofs the PKI.
Due to the way DMs and adverts work I believe this risk likely exists for any device on meshtastic regardless of whether they are on public channels or not.
Actually, I have an awful lot to hide.
Not because I am a criminal or a tax-evading billionaire, but because I'm a human being.
I am more than just a data mine. I refuse to be reduced to a source of digital commodities. I refuse to be valued at anyone's ad-revenue.
I have a right to decide what others should know about me. And I have a right to know what they will do with what they know.
That's why I have a lot to hide. Not because I must, but because I want to.
--
#privacy #DataProtection
I’ll See You at @hopeconf - Hackers on Planet Earth 2025 Aug 15, 16, 17
Tickets are still available! 👉 https://hope.net
#HOPE2025 is an incredible gathering of people who care about #cybersecurity, #privacy and free speech online.
hope.net
HOPE (Hackers On Planet Earth) is an annual conference for hackers, makers, and tech enthusiasts based in New York City.
I've been busy as hell this past week.
A lot of people have been asking hard questions about the security of LoRa systems when they hear about mesh radios.
I'm not one to trust the marketing so I and several friends put together two new LoRa tools to help us audit the security claims of LoRa mesh systems!
🤘🏿 📡 ✨
#radio #cybersecurity #privacy #meshtastic #lorapipe #meshmarauder #lora #mesh
***infosec specialists are needed in the resistance ***
The world needs tech security specialists to run workshops at public libraries for all ages & abilities to remove spyware, AI, reduce surveillance, understand the issues, & for more advanced, move to Linux, degooglefy, etc.
(Some) Libraries will pay for these workshops. There may be grants too.
If you have these skills, please consider offering them.
#libraries #library #tech #infosec #privacy #security #activism #antifa #resistance
Polizei Hamburg will #KI mit Videos von Passant*innen trainieren
"Ab dem 1. September will die Polizei Hamburg eine künstliche Intelligenz (KI) mit Videos von Passanten an zwei öffentlichen Orten trainieren. Manche dieser Aufnahmen sollen monatelang gespeichert werden - das hat die# Polizei jetzt bestätigt.
Das neue polizeiliche KI-Überwachungssystem soll Gewalttaten schneller erkennen. Dafür muss es beispielsweise Faustschläge von normalen Armbewegungen unterscheiden können.
Aufzeichnungen von Hansaplatz und Hachmannplatz
Das lernt die KI laut der Polizei aber nur mithilfe von Aufzeichnungen echter Menschen. Die sollen von den Kameras am Hansaplatz und Hachmannplatz kommen. Jetzt hat die Polizei NDR 90,3 auf Anfrage mitgeteilt, dass die KI ab Anfang September mit den Aufnahmen gefüttert werden soll...."
#Überwachung #Hamburg #KI #Technology #Digitalisierung #Massenüberwachung #Privacy #BiometrischeDaten
ndr.de
Ab dem 1. September will die Hamburger Polizei eine Künstliche Intelligenz (KI) mit Videos von Passanten an zwei öffentlichen Orten trainieren. Manche dieser Aufnahmen sollen monatelang gespeichert werden - das hat die Polizei jetzt bestätigt.
fedi #intro
i'm raven, a silly #transgirl on the internet who likes to write, and create free-to-use #photography (mostly landscapes). u can find me on mastodon, and see what an overview of what i’m up to on my now page. i have so many interests and try my best to experience new things in this short life. some sort of neurospicy, tend to be overly genuine, a bit corny, over-opinionated at times
🩺 #nurse, 📸 #photographer, 👩💻 #linux nerd, 🏳️⚧️ #trans girl, 💞 #relationship anarchist, 🌱 #vegan for the animals, 🌹 #leftist, ✊ #union steward, 🧗♀️ #queer outdoor girlie, 🌠 star stuff, 🚴♀️ bikes are cool, 😽 certified girl/boy/nb-kisser, 😝 #silly adventurer
i work in the operating room as a nurse and i love my job
likes: #forests, #mountains, #oregon coast, #coffee, #adventures, #movies, #computers, #transit, #bikes, #Portland OR, scrub-role in surgery, science-stuff, n95s, #sewing, #privacy and #security in tech, #philosophy, #ceramics, #sailing, #music, pineapple on pizza, #leftism, workers-rights, #silliness, #headpats, and #praise
here are some reviews:
"passionate, kind, clever, motivated by her values & playful/funny”
“very direct and able to be vulnerable very easily (a good thing!) and the most ethically-minded and community-focused person ive met!”
“a cute pup n you take good pictures”
"giving golden retriever young puppy, 4-6 months. Seeks out attention frequently, is outgoing in a friendly room, lil awkward, offers info about yourself readily, soft n likes pets, wants to wrestle”
i upload my photography as creative commons attribution license, i don't own a car, i have a #cat named Loki who i post about under the #catsofmastodon tag, i'm #divorced after a 14 year marriage (not the outcome i wanted, but here i am), and now happily in relationships as a relationship anarchist.
i live in #pdx and want to make it a better place by organizing and creating #unions and #community. i host a local movie night with my friends where i cook vegan food for them, and it makes me happy!
i do #rock-climbing, #bjj, #running, #swimming, #sailing, currently recovering from injuries
i love #webdesign and created a #hugo theme which i use for my website (on github)
yes, imma #puppygirl and silly af
i do post 18+ stuff at times and i always cw that content, so minors dni with that stuff
im an alt-text advocate and will post all photos with alt-text and not boost things without alt-text
if im doing something wrong, pls let me know via signal dm so i can fix it. integrity, community, and reducing harm matter dearly to me.
ravenwinters.org
This is a now page, and it’s what I’m doing now :-) wanna follow along?
✅ If your #privacy and #dataprotection are important to you;
✅ If you're tired of the #surveillance #capitalism that drives the business models of #GAFAMI and #BATX tech giants, as they extract your #data and feed it to their #algorithms and #AI;
✅ If keeping control over your #personalInformation matters and #transparency matter to you;
then, join me on the #Threema #messenging platform !
👤 Here is my ID: https://threema.id/FSSAEVF9
More here:
👇👇👇
https://mastodon.social/@threemaapp/114857733647505194
mastodon.social
How did you encourage your friends to use Threema? Here are our tips: https://threema.com/bp/why-switch-to-threema
@AnarchoNinaAnalyzes the sheer fact that this comes from a nation that doesn't have #privacy & #DataProtection laws and literally have #SunshineLaws that make basically anything #PublicRecord, including 911 calls, is absurd.
Upwardly Mobile
https://archive.org/web/ (not static) /
https://fifthdimensionnews.substack.com/p/upwardly-mobile
--> (NEW) TRust Mobile
https://fifthdimensionnews.substack.com/p/the-trust-mobile-split
https://archive.org/web/
(not static) / https://fifthdimensionnews.substack.com/p/the-trust-mobile-split
#mobile #Liberux #GrapheneOS #IodeOS #Debian #Tor #TorProject #Rust #Rustlang #RISC #Precursor #BunnieHuang #phone #security #privacy #journalism #ACAB #FDN
https://archive.org/details/MBGresearch
#DefyErasure #Archive #Library #BestType #Substack #Lemmy
archive.org
Original Technology Research and Social Critique by Michael Grotz
The Rebel Tech Alliance is a non-profit dedicated to bringing down #SurveillanceCapitalism
We explain the problem, provide extensive lists of vetted Alternatives, and show you who else is fighting this fight so we can Unite. We also have loads of Resources and Guides.
Please read through the site - it's in chronological order - and share widely. The more people leave #BigTech the less data Big Tech has, the less power they have. #Privacy is power!
rebeltechalliance.org
#introduction part 2 with hashtags, to make things easier to find. Proper intro is in the parent post
Me:
#gay #lgbtq
#audhd #autistic
#tulpamancer #plural #pluralgang
#softwaredevelopment
My interests:
#tulpamancy #tulpa #plurality
#cyberpunk
#tarot
#videogames #pcgaming
#furry
#anime
#klonoa #sonic
#astronomy #space
#software #foss
#privacy
#systemshock
@Mer__edith Thank you for the information! It would be nice to have this somewhere on @signalapp's official documentation, though. I could not find this anywhere else.
🚀🤘Introducing Psylo: A New Kind of Private Browser
After 9 months of development, we're super excited to finally launch Psylo, a new kind of private web browser for iOS and iPadOS.
In Psylo, each tab is its own “silo” with isolated storage, cookies, and even its own IP address. Psylo introduces advanced anti-tracking and anti-fingerprinting features that go beyond what a VPN can offer.
Full announcement: https://mysk.blog/2025/06/17/introducing-psylo/
Psylo A New Kind of Private Browser In Psylo, each tab is its own silo, with isolated storage, cookies, and even IP address thanks to our Mysk Private Proxy Network Download Psylo today, and enjoy anti-tracking protection that no VPN can offer
Dani's Race. An #openworld #libre #game for #GNU / #Linux made in #UPBGE ( #blender #gameengine ).
Please Download and Play!!!
blenderdumbass.org
Game for nerds and kids.
In 2010, #AaronSwartz downloaded 70 GB of articles from JSTOR. He faced a $1 million fine and 35 years in prison
➡️ Aaron took his own life in 2013.
#Meta illegally downloaded over 80 terabytes of books from LibGen, Anna's Archive, and Z-library to train its #AI models
➡️ facing no consequences.
Information is power, knowledge is power.
Beware and fight against those who want to keep you ignorant, unaware, and misinformed.
A black and white line drawing of Aaron Swartz with wavy hair, wearing a t-shirt and smiling.
Another public #Jabber / #XMPP channel I co-moderate is the #LGBT / #LGBTQ / #LGBTQIA channel -
https://invite.joinjabber.org/#lgbt@conference.queer-spark.org?join
@maskedwitch - one of the most compassionate people I know of - runs this server and co-moderates all channels on it.
If you're new to XMPP (e.g. coming from #WhatsApp #Matrix #IRC #Signal #Telegram #Discord etc), this guide has everything you need to get started -
https://contrapunctus.codeberg.page/the-quick-and-easy-guide-to-xmpp.html
#BoostsAppreciated #Federated #FreedomRespecting #Privacy #OpenSource #FOSS
contrapunctus.codeberg.page
TIL about the word "calyx" from Robin Wall Kimmerer in her book "The Serviceberry":
"Because I'm a bontanist, my knowledge of economics and finance is about the size of the frilly little cup at the tip of a Juneberry that was once part of the flower. It's called the 'calyx,' in case you were craving a delicious new word, the way some people crave money."
Except due to @calyxinstitute this was not a new word to me, just one that I never thought of otherwise. If, like me, though, reading a gorgeous sentence like that one compels grabbing a dictionary so large it must be opened on a table to dig deeper, then "Hi!" I see you, one of what I would estimate might be a handful of other people, who care about such knowledge and treasure it. May we meet up among the flowers some day. #bookstodon #privacy #dictionary
Big Tech likes your data. We just like building a browser. 𝒮𝓂𝒶𝓁𝓁 company, 𝗯𝗶𝗴 ideas. 🇳🇴🇮🇸
social.vivaldi.net
Big Tech likes your data. We just like building a browser. Small company, big ideas. 🇳🇴🇮🇸 #BigTech #LittleTech #Vivaldi #Browser #Privacy
I've failed so many CAPTCHAs that I'm now a fugitive.
🙏 My iOS app made it to the App Store, please help me get the word out and boost 🚀
Journelly: like tweeting but for your eyes only (offline / powered by plain text)
https://lmno.lol/alvaro/journelly-like-tweeting-but-for-your-eyes-only
#plaintext #privacy #orgmode #emacs #vim #swift #swiftui #ios #iphone #journelly
Anyone here into #bowling ? There's a #Jabber / #XMPP channel for people who enjoy bowling (10 pin, candle pin, duck pin, etc) at all skill levels!
https://xmpp.link/#bowling@muc.xmpp.earth?join
As before, if you're new to XMPP, this guide has everything you need to get started.
https://contrapunctus.codeberg.page/the-quick-and-easy-guide-to-xmpp.html
#BoostsAppreciated #Federated #FreedomRespecting #sports #Privacy #Matrix #IRC
contrapunctus.codeberg.page
🇫🇷
QUE LINUX 🐧 SOIT AVEC VOUS !
Venez à moi et vous serez libre et prions Linux ensemble mes enfants 😜
Notre Torvalds qui est sur le net
Que ton nom soit affiché
Que Linux vienne
Que ton noyau soit compilé avec ou sans options
Donne-nous aujourd’hui notre code de ce jour
Pardonne-nous nos bugs, comme nous pardonnons aussi aux Freeware trops buggés
Et ne nous soumets pas à la crosoftisation
Et délivre-nous de Windows
Ainsi soit Linux 🙏
Au nom de Linux, de l'Opensource et de la liberté.
#Linux, il y a moins bien, mais c'est plus !
🇬🇧
May Linux 🐧 be with you!
Come to me and you will be free and pray Linux together my children 😜
Our Torvals which is on the net
May your name be displayed
That Linux comes
Whether your nucleus is compiled with or without options
Give us our code today
Forgive us to our bugs, as we also forgive freeware, exhausted
And don't submit to crosoftisation
And deliver us from Windows
So be Linux 🙏
In the name of Linux, OpenSource and freedom.
#Linux, there is worse, but it's more!
#Linux #OpenSource #Torvals #Privacy #RegainPrivacy #NoGAFAM #NoSpy
🇫🇷 QUE LINUX 🐧 SOIT AVEC VOUS ! Venez à moi et vous serez libre et prions Linux ensemble mes enfants 😜 Notre Torvalds qui est sur le net Que ton nom soit affiché Que Linux vienne Que ton noyau soit compilé avec ou sans options Donne-nous aujourd’hui notre code de ce jour Pardonne-nous nos bugs, comme nous pardonnons aussi aux Freeware trops buggés Et ne nous soumets pas à la crosoftisation Et délivre-nous de Windows Ainsi soit Linux 🙏 Au nom de Linux, de l'Opensource et de la liberté. #Linux, il y a moins bien, mais c'est plus ! 🇬🇧 May Linux 🐧 be with you! Come to me and you will be free and pray Linux together my children 😜 Our Torvals which is on the net May your name be displayed That Linux comes Whether your nucleus is compiled with or without options Give us our code today Forgive us to our bugs, as we also forgive freeware, exhausted And don't submit to crosoftisation And deliver us from Windows So be Linux 🙏 In the name of Linux, OpenSource and freedom. #Linux, there is worse, but it's more! #Linux #OpenSource #Torvals #Privacy #RegainPrivacy #NoGAFAM #NoSpy
Re- #introduction (I moved servers and need to pin it here).
I am a father of two kids from #Vilnius, 🇱🇹 #Lithuania, 🇪🇺 EU. In my forties. #Neurodivergent .
Working as a web developer, mostly with #JavaScript and React these days. Have been running #Linux on my computers since ~2004. My IDE is 
+ shell.
In my free time I play with #synths. Recovering from GAS.
Very interested in #privacy and other digital rights.
I support 🇺🇦 #Ukraine.
Ist das satirisch gemeint, oder hast du es wirklich nicht verstanden?
Es geht primär nicht um die Narzisst/inn/en, die sich auf den kommerziellen antisozialen Plattformen freiwillig selbst entblößen.
Es geht darum, die großen Datensauger zu bekämpfen, die Jedmensch beim surfen HEIMLICH verfolgen wollen.
#verfolgung #tracking #privacy #privatsphäre #cookies #dsgvo #DSA
Bund macht sich abhängig von #Amazon und Co.
"Die Zukunft der öffentlichen Verwaltung ist die Cloud, wenn es nach dem Bund geht. Weil ihnen die Ressourcen fehlen, greifen Behörden aber oft auf private Anbieter zurück und machen die öffentliche Verwaltung so abhängig von Amazon und Co....."
https://netzpolitik.org/2025/verwaltung-in-der-cloud-bund-macht-sich-abhaengig-von-amazon-und-co/
Tja. Soviel zur Unabhängigkeit von den #USA .....
#Datenschutz #Privacy #Daten #Bund #Deutschland #Cloud #Netzpolitik #Datensicherheit
netzpolitik.org
Die Zukunft der öffentlichen Verwaltung ist die Cloud, wenn es nach dem Bund geht. Weil ihnen die Ressourcen fehlen, greifen Behörden aber oft auf private Anbieter zurück und machen die öffentliche Verwaltung so abhängig von Amazon und Co.
Not really an #introduction but here we go:
#Freelancing #Privacy and #Security #Coach & #Trainer (#Linux)
Ex #SoftwareDeveloper, #Consultant, #TeamLead, #HeadOfProductDevelopment #HeadOfIT
I care for #privacy #HumanRights #DEI #TransRightsAreHumanRights #Linux #FLOSS #DigitalSelfDefense
See bio for links & websites.
@jon Because from their standpoint it makes perfect sense: Gather all data they can get away with about their users and sell it for nice profits ON TOP OF the license fees they are already paying, which their investors love.
And in one fell swoop finally creating the access all the acronym services have been having wet dreams about for years.
And oh so many people just sleepwalk into it...
Come Instagram, ma open source, e rispettoso della privacy: ecco Pixelfed!
C'è un mondo al di fuori dei social più famosi come Instagram, Facebook o TikTok, ed è #OpenSource, rispettoso della #privacy e degli utenti, e #decentralizzato:
▶️ https://www.smartworld.it/app/cos-e-come-usare-pixelfed.html
Se cerchi una piattaforma spensierata che ti consenta di condividere semplicemente immagini come faceva una volta Instagram, scopri cos'è e come usare https://Pixelfed.uno
pixelfed.uno
Pixelfed Uno è la principale piattaforma italiana per la condivisione di immagini della rete pixelfed, e il secondo server donsigliato al mondo dagli sviluppatori, è la migliore alternativa etica a instagram per condividere e commentare le foto online.
In case you forgot about Microsoft Recall, it looks like it will reappear in your Copilot+ computer soon running Windows 11.
I am sure you are all thrilled with the idea of a screenshot being taken of your screen every 3 seconds, right?
#Microsoft #Copilot #Recall #Spyware #Computer #Technology #Privacy #Windows
arstechnica.com
Snapshotting and AI processing a screen every 3 seconds. What could possibly go wrong?
Can I have some recommendations for the privacy respecting web-based platform for version control and repository management? Ditching Github once for all
«Es bedeutet was, wenn die #CIA von Anfang an dabei ist»
#Palantir in der Schweiz
In Altendorf im Kanton Schwyz entsteht der Europa-Standort des Unternehmens Palantir [ #Thiel ]. Das #Geschäftsmodell der Firma: Daten zusammenführen und verknüpfen. Hernani Marques, Sprecher des Chaos Computer Club Schweiz, sagt, was er davon hält.
"Das eine ist, dass die Kundenliste von Palantir praktisch schon aus #Polizei und #Geheimdiensten im westlichen Raum besteht. Das liest sich wie das Who-is-Who des ganzen militärisch-industriellen Komplexes. Das andere ist, dass es schon etwas bedeutet, wenn die CIA von Anfang an dabei ist...."
#Palantir #PeterThiel #Schweiz #TechnoFaschismus #TechnoFascism #Überwachung #Überwachungskapitalismus #Datenschutz #Privacy #Technology #Tech
srf.ch
Die Software-Firma Palantir zieht in die Schweiz. Das weckt bei Hackern Argwohn, sagt der Chaos Computer Club.
#Union und #SPD haben zur Innen- und Rechtspolitik eine lange Wunschliste – mit einem klaren Trend: Mehr #Überwachung und mehr digitale Befugnisse für Behörden....
https://www.heise.de/news/Schwarz-Rot-will-Ueberwachungsbefugnisse-massiv-ausweiten-10328606.html
#Autoritarisierung #Staat #Herrschaft #Privacy #Datenschutz #Massenüberwachung #Überwachungskapitalismus
heise.de
Union und SPD haben zur Innen- und Rechtspolitik eine lange Wunschliste – mit einem klaren Trend: Mehr Überwachung und mehr digitale Befugnisse für Behörden.
📍 Tutti miei servizi online rispettosi della privacy e utilizzabili liberamente
🌐 SearXNG - Metamotore di ricerca per il web: https://searxng.pietro.in
🤫 FlashPaper - Per inviare messaggi che si auto distruggono: https://secrets.pietro.in/
🛍 KitchenOwl - Lista della spesa privata: https://kitchenowl.pietro.in/ (è possibile richiedere accesso alla mia istanca contattandomi)
📺 AIOStreams - aggregatore di streaming per Stremio: https://pietro.in/posts/stremio-torrent/
pietro.im
Dopo il cambio di politiche sulla condivisione degli account di Netflix ho iniziato a limitare gli abbonamenti per i servizi di streaming e sono tornato ai vecchi torrent. Questa volta però avevo bisogno di una soluzione che mi permettesse di vedere i contenuti comodamente dalla TV senza dover scaricare il torrent dal PC. Stremio è un media center di facile utilizzo per lo streaming di contenuti da diverse sorgenti, supporta addons, sottotitoli di terze parti ed è disponibile in varie piattaforme tra cui Windows, Android, Linux e Smart TV.
Web hosting companies collect some data even when a visitor to a website doesn't log in. Mine tells me, for each person, an IP address , which pages were viewed and when, how much bandwidth was used, what browser was used, and the referring URL, If I had another web site that did have logins (I don't), I could compare IP addresses identify people who visited both sites.
Hello #BikeTooter people. It’s time for a new #introduction after migrating to social.vivaldi.net
Anything on a #bicycle is my thing, especially #CycloCross. I race cyclo-cross with @BristolCX and ride with #CheltenhamAndCountyCyclingClub. I live in the UK and take every opportunity to experience #Dutch or #Belgian life.
I toot about cycling mostly. Sometimes #DataProtection and #Privacy.
I’m looking forward to being part of social.vivaldi.net
A close-up of a bicycle bell attached to a handlebar. In the centre of the bell is a line drawing of a bicycle on a yellow background. Around the edge it says 'Cyclists stay awesome'.
#Bellwether issues. I have no #political home - if I did, I would evaluate my political theory through loyalty to the programme. That's what I used to do.
Instead of that, I pick bellwether issues to judge my political relationship to other people and orgs. There are many to choose from, here are some of mine:
* #Migrants. My current main bellwether.
* #LGBTQI+. Used to be my gold standard issue, and is still very high up there.
* #Equality. Subsumes many other more specific items such as #women, #BIPOC, #billionaires, so break it down if you like.
* #Privacy.
* #Ukraine.
This is a mechanism to simplify things for myself. Point being, I can develop an internal detection system for figuring out how likely I will be allies with or enemies of another person or org, I just look for clues related to the bellwether. Easy.
Merz packt Forderung aus, die nicht im Parteiprogramm steht. Der Weg der "freiwilligen" ePA unter der CDU/CSU (und wahrscheinlich auch von deren Koalitionspartnern).
„Überraschend bringt er einen Vorschlag ins Spiel, der nicht einmal im Wahlprogramm steht: Wer seine Gesundheitsdaten vollständig auf der Krankenkassenkarte speichert, solle zehn Prozent weniger Beiträge zahlen als diejenigen mit Datenschutzbedenken….“
#Digitalzwang #Gesundheit #Daten #Datenschutz #Privacy #ePA #Merz #CDU
t-online.de
In Dresden verteidigt Friedrich Merz sein Vorgehen. Der Kanzlerkandidat hält an seiner Vision fest: Den Kurs der CDU so weit zu korrigieren, bis die AfD nicht mehr gebraucht werde.
Hi, I'm Jeff! I'm a nerd living in New Hampshire with anxiety and depression. (The anxiety is why this introduction is more than a year late.)
My interests are all over the place, but I mostly talk about #Linux, #programming, and #privacy these days. Also #knitting and #crochet, when I'm channeling my inner grandmother.
Occasional random thoughts are free or your money back.
What Trump’s Hobbling of the Privacy Oversight Board Portends for Exercise of Surveillance Powers
https://www.justsecurity.org/106738/trump-privacy-oversight-board-surveillance/
With all that is going on, it is very hard to keep track. But this seems important.
justsecurity.org
A “small” story about the removal of the three Democrats on the Private and Civil Liberties Board (PCLOB) is ominous.
Elektronische Heilberufsausweise
Hackerangriff auf D-Trust zwei Tage vor EPA-start #ePA
„ Die Gematik und das Bundesgesundheitsministerium (BMG) bestätigten den Angriff. Nach aktuellen Kenntnissen habe es keine negativen Auswirkungen auf die Sicherheit der Telematikinfrastruktur gegeben, so die Gematik auf PZ-Anfrage.
Das sieht die Interessengemeinschaft Medizin (IG Med) anders. Sie fordert einen sofortigen Stopp des EPA-Rollouts in den Testregionen, bis alle Sicherheitslücken geschlossen sind. Die Vorfälle seien »alarmierend«, denn die Kombination eines kompromittierten Heilberufsausweises mit einem gebrauchten Konnektor stelle »ein massives Einfallstor in die Telematik-Infrastruktur dar«, schreibt die IG Med. Eine »Sicherheitslücke dieser Tragweite« würde demnach bei einem bundesweiten Rollout den potenziellen Zugriff auf die Gesundheitsdaten von rund 70 Millionen Versicherten ermöglichen….“
https://www.pharmazeutische-zeitung.de/hackerangriff-auf-d-trust-zwei-tage-vor-epa-start-152608/
pharmazeutische-zeitung.de
Kurz vor dem Start der Testphase für die elektronische Patientenakte (EPA) haben Hacker vorige Woche den Dienstleister, der elektronische Heilberufsau...
Hej, wir sind Nicole und Daniel, die Macher hinter dem Modelabel URBAN PRIVACY. Seit 2017 sind wir mit Leidenschaft dabei, Dein digitales Ich mit Design zu schützen, die Du auch wirklich tragen möchtest.
Wir würden uns freuen, hier viele Gleichgesinnte im Bereich Datenschutz und digitale Freiheit zu finden und uns mit Euch zu vernetzen.
#digitalefreiheit #datenschutz
#privatsphäre #digitaldetox #selbstbestimmung #privacy #netzpolitik
Is end to end encryption about to become irrelevant?
https://podcastindex.org/podcast/5718181?episode=32805109029
#e2ee #Signal #SignalApp #Matrix #xmpp #SessionMessenger #simplex #deltachat #privacy #Threema #WindowscCopilot #AppleIntelligence #MicrosoftcCopilot #encryption #surveillance
podcastindex.org
The Podcast Index is here to preserve, protect and extend the open, independent podcasting ecosystem.
Passend zur Einführung der #ePA in #Deutschland
Datenleck in #Dänemark - Patient*innen bloßgestellt
Mutmaßliche Hacker erpressen offenbar einen Praxiskonzern, bei dem 130.000 Patienten registriert sind, mit gestohlenen digitalen Patientendaten…..
https://taz.de/Datenleck-in-Daenemark/!6064263/
#Datenschutz #Datensicherheit #Patientenakte #Privacy #Antireport
taz.de
Mutmaßliche Hacker erpressen offenbar einen Praxiskonzern, bei dem 130.000 Patienten registriert sind, mit gestohlenen digitalen Patientendaten.
Verband Deutscher Psychotherapeuten warnt Patienten mit psychischen Erkrankungen vor der elektronischen Patientenakte #ePA
@autonomysolidarity
Auf meinem Laptop sind quasi keine persönlichen Daten. Das Teil brauche ich nur um CD's zu Rippen. Mein Smartphone ist so konfiguriert dass es sich nach 15 fehlgeschlagenen Entsperrversuchen selbst löscht. Komme ich in eine Situation mit Bullen tippe ich inzwischen als regelrechten Automatismus 14 Mal mit dem falschen Finger auf den Sensor. Sollte ich aufgefordert werden das Telefon zu übergeben berührt dabei der falsche Finger den Sensor und die 1312 haben ein Gerät in der Hand das auf Werkseinstellungen ist.
#Zine #Datenschutz #Privacy #Repression #Polizei #PC #Computer #Antireport #Broschüre
Trotz der vom CCC aufgedeckten Sicherheitsmängel soll die ePA für Alle in #Deutschland am 15. Januar schon an den Start gehen. Die ePA ist nicht nur aus datenschutztechnischen Gründen höchst fragwürdig sondern bietet Staat und Konzernen auch Möglichkeiten, um intime Gesundheitsdaten der Menschen auszuschlachten und damit Profite zu machen.
Wenn Konzerne und "die Forschung" kostenlosen und massenhaften Zugriff auf unsere Gesundheitsdaten erhaltem, kann leider nicht erwartet werden, dass mit den Ergebnissen einfach Medikamente oder Therapien entwickelt werden, die den bedürftigen Menschen höchstens zu den Herstellungskosten zur Verfügung gestellt werden.
Stattdessen ist im Kapitalismus zu erwarten, dass mit den vom Staat für die "Forschung" kostenlos zugänglich gemachten aber im Grunde sehr wertvollen Gesundheitsdaten der Menschen, Produkte entwickelt werden, die mit hohen Profiten von Konzernen verkauft werden.
Dass es bei der #ePA nicht um #Gesundheit sondern um #Ausbeutung geht, würde auch erklären, weshalb der überwachungskapitalistische Bertelsmann-Konzern und einige seiner ärgsten Lobbyist*innen (darunter ein bekannter Gesundheitsminister und eine ehemalige Ethikratsvorsitzende) so sehr dahinter stehen.
#Ccc #Datensicherheit #Datenschutz #Privacy #Überwachungskapitalismus
Sicherheitsmängel bei E-Patientenakte:
#Gesundheitsministerium hält am Start fest #ePA
Sicherheitsforscher demonstrierten auf dem #38C3 eine Vielzahl von Sicherheitsmängeln bei der elektronischen Patientenakte. Das #BMG hält am ePA-Rollout fest…
#Datenschutz #Privacy #Bundesregierung #Daten #datensicherheit #Gesundheit #Digitalisierung #Technology #CCC
heise.de
Sicherheitsforscher demonstrierten eine Vielzahl von Sicherheitsmängeln bei der elektronischen Patientenakte. Gesundheitsminister verspricht Nachbesserungen.
Europaweiter Zugriff auf deutsche Patientendaten?
Bislang können Patienten in Deutschland der Einrichtung einer elektronischen Patientenakte widersprechen. Eine neue EU-Verordnung könnte dieses Recht SWR-Recherchen zufolge aushebeln. Datenschützer warnen…..
#Datenschutz #ePA #Privacy #EU #Europe #Daten #Data #Gesundheit #Digitalisierung #Technology
tagesschau.de
Bislang können Patienten in Deutschland der Einrichtung einer elektronischen Patientenakte widersprechen. Eine neue EU-Verordnung könnte dieses Recht SWR-Recherchen zufolge aushebeln. Datenschützer warnen. Von M. Kolvenbach.
Finally joined merveilles. So, here I go again, again
I am Moksh / untrusem, A kid with questions, from #India.
I am firm believer in #privacy and #security and also practice #permacomputing, My other shenanigans include #emacs, #bsd, #lisp, #guix, *nix and learning about #solarpunk. But I delve into so much things to write all of them down.
I also likes esoteric things. I try to program but a novice in that.
I will use my time here to steal knowledge from you amazing people, so watch out :)
Gravierende Sicherheitsmängel bei der elektronischen Patientenakte:
So lässt sich auf die ePAs aller Versicherten zugreifen #38C3
#Datensicherheit #Datenschutz #Schweigepflicht #Gesundheit #Digitalisierung #Privacy #Antireport #ePA
golem.de
Keybase is dead! Long live Keyoxide!
https://keyoxide.org/aspe%3Akeyoxide.org%3AGK4JFFYSVEI5NMLLGAXX22QZAU
Fingerprint: GK4JFFYSVEI5NMLLGAXX22QZAU
#Keybase #Keyoxide #Hackers #Security #Privacy #Identity #Encryption
keyoxide.org
Modern and secure platform to manage a decentralized identity based on cryptographic keys
https://odysee.com/@NaomiBrockwell:4/nothing-to-Hide-v7-ODYSEE-20241213-001:a
Surveillance is a weapon that is too often used to silence opposition, suppress individuality, and enforce conformity. Privacy is what allows us to think, act, and connect without fear. Without privacy, we lose the ability to dissent, to innovate, and to live freely.
#privacy #surveillance #stateMafia #deepState #freedom #corruption #establishment #smartCities #FtheWEF
odysee.com
“I have nothing to hide”.
(Mostly reposting from my old account.)
Hackable cars are as much a public safety concern as an infectious disease pandemic is. Just as refusing a vaccine or public masking risks infecting the people around you, so too does driving a hackable car risk crashing into the people around you.
It should be illegal to sell a new car with a built-in internet-connected computer that isn't hardware-isolated from everything except the dashboard screen and speakers. And yet, as far as I know, this describes literally all new cars for the past several years.
#hacking #pandemic #privacy #publicSafety #security #vaccine
infosec.exchange
@evacide@hachyderm.io Hackable cars are as much a #PublicSafety concern as an infectious disease #pandemic is. Just as refusing a #vaccine or public masking risks infecting the people around you, so too does driving a hackable car risk crashing into the people around you. It should be **illegal** to sell a new car with a built-in internet-connected computer that isn't hardware-isolated from everything except the dashboard screen and speakers.
(Partially reposting from my old account.)
DRM is malware; more specifically, it's ransomware. It's software, running on your computer, whose sole purpose is to artificially restrict your ability to use that computer until you pay money to remove this restriction.
Similarly, client-side anti-cheat for multiplayer PC games is malware; specifically, spyware (at least). Its purpose is to surveil your entire computer, and punish you if you run certain combinations of software at the same time. All anti-cheat measures should be server-side.
#antiCheat #DRM #freedom #freeSoftware #liberty #malware #privacy #ransomware #softwareFreedom #surveillance
infosec.exchange
@shacker@zirk.us @pluralistic@mamot.fr A thought I've had recently and haven't seen anyone else express: #DRM is #malware, specifically #ransomware. It's software running on your computer whose sole purpose is to artificially restrict your ability to use that computer until you pay money to unlock it.
(Reposting from my old account.)
Naomi Brockwell has argued that protecting your privacy is a basic safety measure, like looking both ways before crossing the road. But this is an even better analogy than I think she realizes. Both practices are only necessary because our society is designed to be hostile to us, to the benefit of governments and megacorps.
infosec.exchange
@FirewallDragons@mastodon.social @naomibrockwell@minds.com Naomi argues that protecting your #privacy is a basic safety measure, like looking both ways before crossing the road. But this is an even better analogy than I think she realizes. Both practices are only necessary because our society is designed to be hostile to us, to the benefit of governments and megacorps. #WarOnCars
In the spirit of a recent post on making the #Fediverse a more welcoming place, renewing a post I had on my old profile but apparently not here: ask me anything! I can't guarantee I'll have all the answers or be fast to reply but lll try to at least say something. Some things I can talk vaguely usefully about include:
#DNS #Google #InfoSec #SRE #SysAdmin #Internet #Unions #Organizing #Baseball #Web #Tor #Privacy and probably a billion more.
Elektronische Patientenakte:
Widerspruch im Keim erstickt #ePA
„ Die „elektronische Patientenakte für alle“ (ePA) wird gut angenommen, könnte man meinen. Laut der größten deutschen Krankenversicherungen hat bislang nur ein Prozent der Versicherten ihrer Einrichtung widersprochen. Die Verhältnisse scheinen sich damit umzukehren: Bislang nutzt gerade einmal gut ein Prozent der Versicherten in Deutschland die elektronische Patientenakte.
Der geringe Widerspruch hat offensichtlich seine Gründe. Der Verbraucherzentrale Bundesverband e.V. (vzbv) hat die Anschreiben mehrerer gesetzlicher Krankenkassen an ihre Versicherten analysiert….“
https://netzpolitik.org/2024/elektronische-patientenakte-widerspruch-im-keim-erstickt/
#Datenschutz #Daten #Gesundheitj #Lauterbach #Privacy #Antireport
netzpolitik.org
Im Februar 2025 kommt die elektronische Patientenakte für alle, die ihr nicht widersprechen. Die Krankenkassen sind verpflichtet, ihre Versicherten darüber neutral zu informieren. Dieser Pflicht kommen sie in vielen Fällen nicht nach, wie der Verbraucherzentrale Bundesverband herausfand.
ab 2025 jeden 1. Mittwoch im Monat, ab 18h
IT Beratung für Aktivist*innen im
#ccc #freiburg @cccfr
https://cccfr.de/calendar/2025_it_beratung_aktivistinnen.html
#it #cyber #beratung #smartphone #deltachat #signal #elementos #linux #privacy #fragdenstaat #datenschutz #vpn #tor
#Lauterbach zu Gesundheitsdaten: Google, Meta, und OpenAI melden Interesse an
Da fragt man sich in der Tat ob das ein schlechter Witz sein soll. Braucht es noch weitere Gründe um der elektronischen Patientenakte zu widersprechen? #ePA
„Lauterbach sieht in der Patientenakte einen Datenschatz für KI-Innovationen. Tech-Giganten zeigen Interesse, um die Gesundheitsversorgung zu verbessern.“
#Lauterbach #Gesundheit #Meta #überwachung #Google #Ki #AI #Künstlicheintelligenz #Technology #Datenschutz #Daten #Privacy
heise.de
Lauterbach sieht in der Patientenakte einen Datenschatz für KI-Innovationen. Tech-Giganten zeigen Interesse, um die Gesundheitsversorgung zu verbessern.
These alternatives to popular apps can help reclaim your online life from billionaires and #surveillance #BigTech
#Data #Privacy #Capitalism #SurveillanceCapitalism #twitter #Musk #Bluesky #Meta #instagram #antireport
techcrunch.com
Not every app or service wants to monetize your personal data. Here are some of our favorite alternatives to popular apps.
Current #Mastodon privacy options
Public: Find new friends, but also allow your violent ex to find and stalk you.
Quiet public: Allow the violent ex to still find and stalk you, but reduce your chances of finding new friends. BTW, the ex doesn't even need an account.
Followers: Absolutely DESTROY your chances of finding new friends. Also make some current followers more likely to miss your post, because others can't boost it.
Specific people: For direct messages only.
Privacy here shouldn't come with such a painful social cost. You shouldn't have to either choose social isolation, or be forced to accept that your posts will be ingested by shady web scrapers or risk helping a known dangerous stalker identify your physical location.
You should be able to create posts that can be interacted just like the completely public ones, but which are only visible to your followers and maybe their followers, or other group of your choice.
How to defend yourself during a police interrogation
„An interrogation is not a harmonious exchange between two individuals. It’s a conflict.
And in this conflict, our ignorance is their strength. Ignorance of the meaning of police work, ignorance of the manipulative techniques used, ignorance of the legal framework and, last but not least, ignorance of our means of defence.
In response to this observation, this book is intended as a tool for self-defense against police interrogation practices of interrogation…“
Evasions-Project Releases English Translation of the #Book
Thanks to @unsalted
https://unsalted.noblogs.org/post/2024/11/21/evasions-project-releases-english-translation-of-how-to-defend-yourself-during-a-police-interrogation/
German and french Version 👆
#Police #Data #Privacy #Repression #Antireport #Zine #Distro
Cover of the book "How to defend yourself during a police interrogation". A figure seated at a table, head in their hands, has two police officers pointing at them, interrogating them. The officers cast shadows on the wall behind them, two large ghosts evoking the "good cop, bad cop" trope.
📢 Manifiesto priv/acc
Una nueva fuerza está surgiendo en la era digital, una fuerza para reclamar lo que ha sido robado silenciosamente: la privacidad.
Somos los Aceleracionistas de la Privacidad...
@kirschwipfel @nlnet @NGI_Taler @Taler @tryton @gnuhealth
Bravo! What a wonderful news! Christian, Florian, Hartmut, let's celebrate #privacy in electronic medical transactions with #GNUHealth and #tryton .
It would be great if you can present the project at #GHCON2024 this December in Italy (https://www.gnuhealth.org/ghcon)
Happy hacking! 🤗
#GNU #FreeSoftware
@kirschwipfel @nlnet @NGI_Taler @Taler @tryton @meanmicio
Fantastic news for Thursday!! Mega congratulations Hartmut, Christian and the Taler team, which we make extensive to our friends from Tryton community and the #GNU community at large
❤️ 🎉 🎉 🎊
#Privacy #FreeSoftware #GNUHealth
Your online #privacy matters, especially now that America got back together with its abusive ex.
Here's a website that gives tips on how to protect your online privacy. May be useful if Trump does go full dictator.
https://www.privacyguides.org/en/basics/why-privacy-matters/
privacyguides.org
In the modern age of digital data exploitation, your privacy has never been more critical, and yet many believe it is already a lost cause. It is not.
Hi all! I studied computer science with a focus on RTOS and FP/PL, but I graduated law school earlier this year. I practice at a boutique firm that primarily handles IP cases. I foilboard and I play way too many rhythm games in and out of the arcade.
I contribute to open source projects where I can, and I write up my experience in my digital garden which I’ve been maintaining for 2 years now. It’s also a good place to find usage tips for projects/tools that you might want to use.
My passion for tech also includes privacy, and I’m an advocate for minimizing your digital footprint. GenAI is a scam and its purveyors are causing real harm while they sell it as hard as they can.
Follow me for: #selfhosting #digitalgardening #privacy #lawfedi #section230 #copyright #patents #rustlang #gleam #haskell #RSS #neovim #NixOS #zotero #tmux #alacritty #linux #egpu #qemu #arch #archlinux #GNOME #watches #watchmaking #obsidian #obsidianmd #thunderbird #fpv #mechkeys #mechkeeb #mechanicalkeyboard #matrix #signal #fido2 #passkeys #dancerushstardom
I hope it is no surprise when I tell you that you don't have #privacy and #digitalsovereignty (and #security) if you do not have the right #motivation as well as the #knowledge and/or #money to act accordingly.
Therefore, most people are excluded here because of at least one reason.
In that sense, #postprivacy has arrived long time ago.
https://karl-voit.at/tags/privacy/
https://karl-voit.at/tags/security/
https://karl-voit.at/tags/pim/
https://karl-voit.at/cloud-data-conditions/
karl-voit.at
Nochmal der Hinweis auf den Widerspruchsgenerator zur elektronischen Patientenakte #ePA
Da viele Menschen nicht wissen, wie der Widerspruch funktioniert und auch nicht umfassend über die Konsequenzen der überwachungskapitalistischen Ausbeutung von Gesundheitsdaten informiert werden, scheinen viele Menschen keinen Widerspruch gegen die ePA einzulegen, obwohl sie ihr sonst auch nicht zustimmen würden.
Für die herrschende Politik könnten damit opt-out-Modelle, die gezielt mit Hürden zu Wissen und Handlungsmöglichkeiten arbeiten, um so attraktiver werden, während sie den fehlenden Widerspruch als "großen Zuspruch" etc. umzudeuten versuchen.
#Überwachung #Datenschutz #Datensicherheit #Gesundheit #Deutschland #Privacy
widerspruch-epa.de
WhatsApp? Nein, danke.
‚Egal, ob wir über die (real existierende) totale #Überwachung der Geheimdienste sprechen oder über Digitale Souveräntität und Digitale Mündigkeit oder auf dem Elternabend von Schule oder Kindergarten: Eine Diskussion lässt einerseits Augen rollen oder Achsel zucken und andererseits Bäuche krampfen oder auch Fäuste ballen. So trivial die Frage einer praktischen und allgemein leicht nutzbaren und möglichst weit verbreiteten Lösung für „Instant Messages“ (Kurznachrichten) in Menschengruppen scheint, so sehr treffen hier globale Machtstrukturen, Datenschutz, individuelle Überforderung, Unwillen, Kapitulation und Gleichgültigkeit aufeinander.
Muss ich jetzt wieder Querulant sein und alle damit nerven, dass ich kein WhatsApp nutzen will?
Muss der jetzt wieder nerven, mit seiner Verweigerungshaltung? Wegen des einen Querulanten müssen alle anderen jetzt noch eine von diesen nervigen (weil ungewohnten) Open-Source-Apps nutzen?
Einfach ja, ja und ja! Warum – anders als bei Querulanten – die „Klagen oder Beschwerden“ nicht unberechtigt sind: hier ein Plädoyer für die Unbeirrbarkeit....‘
https://netzpolitik.org/2024/digitale-muendigkeit-whatsapp-nein-danke/
#Netzpolitik #Daten #Datenschutz #Privacy #WhatsApp #Überwachungskapitalismus
netzpolitik.org
Wen juckt es denn, ob ich WhatsApp nutze oder nicht? Können wir jetzt weitermachen? Nein. Das Private ist politisch.
It's coming up on one-year since I joined Mastodon and I just switched to a new instance. So, there's no better time for an #introduction toot.
I started my #privacy journey during the height of the pandemic, when #proton had a special for their email service. Over the past 4ish years I have been trying to learn as much I can, and have been slowly switching/advocating for privacy friendly alternatives. In October of last year (2023), I made the switch to #linux and haven't looked back.
More recently, I have taken an interest in #OpSec.
I am also a big fan of #OpenStreetMap and try to contribute as often as possible. All of my mapping content is posted on my other account to help keep things separate -- @governorkeagan@en.osm.town
Currently, I work two jobs. My primary role is with a company that provides trainers to help other companies solve their problems, and I specifically work on training #AI.[1] I’m also working as a freelance #filmmaker, with the goal of making that my full-time gig. All my video-related toots are posted on my other profile, @gringomedia.
[1] There are a lot of issues with the company that I’ve posted about on my previous profile (@governorkeagan@mastodon.social), and I’ll be sharing more about them here at some point.
Guter Artikel im @untergrundblaettle darüber, was die #EPA ("elektronische Patientenakte") und nur die Möglichkeit eines Opt-Outs eigentlich bedeuten in Hinblick auf Überwachung und Kontrolle.
Zumindest bleibt noch die Möglichkeit eines Widerspruchs.
Die ePA reiht sich ein in den zunehmenden Digitalisierungszwang
EPA – mit dem Opt-Out-Verfahren zum gläsernen Patienten?
„Ab dem 15. Januar 2025 bekommen alle Kassenpatienten automatisch eine elektronische Patientenakte (ePA). Hintergrund ist, dass sich bisher nur ca. 1 Prozent der Versicherten für die ePA entschieden haben…..“
#Digitalisierung #Patientenakte #überwachung #Datenschutz #Privacy
xn--untergrund-blttle-2qb.ch
Ab dem 15. Januar 2025 bekommen alle Kassenpatienten automatisch eine elektronische Patientenakte (ePA). Hintergrund ist, dass sich bisher nur ca. 1 Prozent der Versicherten für die ePA entschieden haben.
Hello, Fediverse! We're Kagi, and we're on a mission to create a friendlier, more human-centric internet that has the users' best interest in mind.
Our core product is a search engine that is ad-free, tracking-free, and fully supported by our users. We've worked hard to deliver a high-quality, fast, and reliable search experience without compromising user privacy: https://kagi.com/
Excited to engage with the community here.
Screenshot of Kagi homepage with the text "we're on Mastodon!" in the search field
Wie Online-Pflicht Menschen ausschließt #Digitalzwang
Ab Sonntag kann man in Berliner Bussen nicht mehr bar bezahlen, für fünf Schwimmbäder gibt es nur noch Digitaltickets. Menschen wie Petra werden so zunehmend von der gesellschaftlichen Teilhabe ausgeschlossen…..
https://netzpolitik.org/2024/digitalzwang-wie-online-pflicht-menschen-ausschliesst/
#digitalzwang #Digitalisierung #Überwachungskapitalismus #überwachung #Datenschutz #Privacy #Netzpolitik #Berlin #Diskriminierung
netzpolitik.org
Ab Sonntag kann man in Berliner Bussen nicht mehr bar bezahlen, für fünf Schwimmbäder gibt es nur noch Digitaltickets. Menschen wie Petra werden so zunehmend von der gesellschaftlichen Teilhabe ausgeschlossen. Aber mehrere Initiativen kämpfen für analoge Alternativen.
Meine 5 Regeln für #digitaleGesundheit im Internet:
1. #opensource Tools verwenden
2. #GAFAM vermeiden
3. Bewusstsein über Datenflüsse schaffen
4. Schutzmechanismen aufbauen
5. Pragmatisch bleiben
😃
Digitale Selbstverteidigung:
So geht sichere Kommunikation
Wie man Informationen so übers Internet weitergibt, dass nur die Zielpersonen sie erfahren. Und wie man sein Telefon gegen Staatstrojanerangriffe abhärten kann.
https://netzpolitik.org/2024/digitale-selbstverteidigung-so-geht-sichere-kommunikation/
#Datenschutz #Privacy #Datensicherheit #Repression #Antireport #Netzpolitik
netzpolitik.org
Wie man Informationen so übers Internet weitergibt, dass nur die Zielpersonen sie erfahren. Und wie man sein Telefon gegen Staatstrojanerangriffe abhärten kann.
Thanks to everyone reading me recently (or at all)!
I'm a former #nonprofit tech worker from Mexico, current sociotechnical scholar at MIT (#STS or Science, Technology, and Society -- or Science and Technology Studies!). I study media and IT, especially as they contribute to public interest and social change.
My current work: What does it entail to challenge #surveillance in a place where #privacy is not to be expected? Some of my ethnographic fieldwork notes from MX https://blog.castac.org/2024/08/challenging-normalized-surveillance-birds-on-the-wire-surveillance-in-mexico/
blog.castac.org
An #introduction 👋
As my bio indicates I'm a bit of a nerd with a passion for the simpler things. Expect technology (infrastructure) posts, security musings and occasional discoveries and PoCs ( #infosec and #privacy are passions of mine) interspersed with some life stuff, whether it's finance, garden or home renovation oriented. Maybe some writing, too.
Recently learned about the #indieweb / #smallweb mindset and am embracing the #humanweb to bring back some fun to this series of tubes.
Google drops it's plan of disabling 3rd-party tracking cookies by default in Chrome. 🍪
Looking for a Chrome alternative? Check out our recommendations.
👉 https://tuta.com/blog/best-private-browsers
#browser #email #privacy #encryption #foss #cookies
A graphic showing our recommended private browser alternatives (Firefox, DuckDuckGo, Tor, Fennec, Privacy Browser).
Je kunt #DPIA's blijven doen tot je een ons weegt, maar zolang BigTech geld kan verdienen met jouw data zullen ze nooit privacy vriendelijk worden.
Het is niet normaal dat we dit soort #surveillance diensten onderwijzen! Alsof kinderen na school opeens de privacy policy gaan lezen en denken "hey, dat is slecht, laat ik naar een alternatief gaan zoeken"
Lees verder:
https://ibestuur.nl/artikel/het-onderwijs-loopt-nog-steeds-aan-de-leiband-van-google/
#Google #BigTech #DigitaleSoevereiniteit #school #onderwijs #privacy #opensource #SurveillanceKapitalisme
ibestuur.nl
Op 27 juni 2024 heeft de minister aan de Tweede Kamer gemeld dat nu echt alle problemen met Google Workspace in het onderwijs zijn opgelost. Blijkens recent onderzoek (DPIA en DTIA) is er geen sprake meer van hoge risico's op het gebied van privacy en van internationale gegevensdoorgifte, mits scholen een aantal nieuwe instellingen in de software doorvoeren en er regelmatig wordt gecontroleerd of Google zich aan de gemaakte afspraken houdt.
A edição de junho da Revista ComCiência (Unicamp | SBPC) trouxe o dossiê "Privacidade Digital", o qual tive a honra de estruturar. Contou com reportagens e entrevistas sobre direito à privacidade e ao esquecimento, impactos psicológicos da exposição digital, riscos da Internet das Coisas e um artigo excelente do @manualdousuario sobre uma internet mais saudável por meio do Fediverso.
Confiram 🙂
https://www.comciencia.br/privacidade-pra-quem/
#privacy #opensource #fediverse #humanRights #sciencejournalism #sciencecommunications
Um laptop aberto e na tela há um olho gigante que simboliza como as tecnologias digitais atuais tem invadido nossa privacidade.
Not really an #introduction but here we go:
#Freelancing #Privacy and #Security #Coach & #Trainer (#Linux)
Ex #SoftwareDeveloper, #Consultant, #TeamLead, #HeadOfProductDevelopment #HeadOfIT
I care for #privacy #HumanRights #DEI #TransRightsAreHumanRights #Linux #FLOSS #DigitalSelfDefense
See bio for links & websites.
😤 “Opt out” should be banned everywhere.
For AI, for advertising, for tracking, I don’t care what “legitimate interest” you pretend to have.
You have no right to monitor me 24/7, steal and sell my personal data and creations, whatsoever.
It’s my life, let me choose what to share.
Created this after reading conversation in comments below some tech article somewhere. Someone mentioned "surfing the #internet sewer" and I really liked that phrase.
#drawing #comic #krita #web #surveillance #google #SocialMedia #enshittification #privacy #adblocker #ads
Drawing of a cartoon style man, wearing silver protective suit with UBlock Origin logo on it, surfing in sewer with green toxic water. There are cookies and fanged monsters looking like Chrome logos floating around him. On the background wall there are red crosses, like for closing websites or errors. There are also industrial cameras, one yellow eye and graffiti with TikTok logo. On the railing on path's edge there is photo camera attached, looking similar to old Instagram logo, and rotting blue bird. There is big text "Google" near water, with both "o" replaced with ends of pipes and small texts around: crossed out "AI", "Buy this, only $2!" and below "scammer!" and "it's con". Above the picture there is description "Surfing The Internet Sewer".
Much #privacy related advice includes creating a threat model prior/alongside taking steps to improve your privacy. This is solid advice because threat modeling allows you to focus on achieving your goals while keeping in scope your personal resources...
However, I argue there _are_ actionable steps you can take that don't require a threat model to be in place first:
1. Use a privacy-oriented browser
2. Use an encrypted email provider
3. Use private search engines
Privacy is a journey.
PS: Feel free to threat model after taking these steps. Or before. Just know that you don't have to in this case.
Be sure to take basic #security measures first (refer to OP of the thread).
Lots of new followers (hi!) recently. Some of you are in the #infosec or #cybersecurity communities, the #privacy community, both, or neither. I post privacy and #security related things for individuals and small/micro organizations.
Some are looking for a place to “get started” with improving their privacy and/or security online. In any case, privacy and security start with some basics that I strongly believe everyone should do:
1. Develop good password management practices, which includes NOT reusing #passwords.
2. Keep your device #software and firmware updated.
3. Use multifactored authentication #mfa / two-factored authentication #2fa
Security is a process. It is also the foundation to online privacy; what good is it to use an encrypted email service if you are reusing weak passwords from your other online accounts?
@Lubedyle je l'ai pas refaite depuis longtemps, alors voilà une belle occasion pour une nouvelle #introduction :
#Maman dans la 30aine, mon coéquipier des batailles du quotidien est un coup d'un soir qui dure depuis 15ans. Nous avons eu 4 bébés ensemble, mais seuls deux illuminent notre maison car nous sommes porteurs de #mucoviscidose, et le parcours de #procréation quand on porte des maladies #génétiques n'est pas linéaire....
Nous vivons à #Grenoble, je pratique le #velotaf et nous sommes de la team #cargobike en famille.
Je suis très portée #privacy, globalement beaucoup de #gauche, et #feministe.
Ligne éditoriale: #darronie, #couple, #parentalité.
Some of the issues us privacy people complain about may appear rather insignificant to you. I get that.
But please let me invite you to a different perspective: As we are currently setting a lot of precedents regarding data privacy rights, how we are handling the small issues today will have an effect on how we will deal with big problems tomorrow. That is why you should care about violations of your privacy, even if they don‘t seem like much today. Because tomorrow, they might.
—
#privacy #GDPR
#ActuallyAutistic #Spoonie #Disabled #Atheist #Ace #Asexual #Dyslexic
#Politics #Sociology #Development #Academia #Green #Left #UrbanPlanning #Sustainability #EcoFriendly
#StarTrek #StudioGhibli #DragRace #Taskmaster #GBBO #SCD #Comedy #SciFi
#JPop #JRock #KPop #CityPop #Vaporwave
#Yoga #Football #LUFC #FPL #MotoGP #Snooker #Tennis
#Technology #Privacy #HomeAutomation #SelfHosting #FOSS #OpenSource #Android #Linux #Mac #RaspberryPi #GoHugo #Markdown
#VideoGames #TheSims #Minecraft #BTD #PTCGO
#Nature #Gardening #Plants #Flowers #Fungi #Mushrooms #Vegan #Cooking #Food #Baking
Do you own a website and wish to make sure your visitors' identities are protected?
“Don't sign in" is zero-source, takes no minutes to integrate, works with static sites, and shows that you care about your visitors' #privacy.
The only protected data is data that's never collected.
A short introduction:
I'm an introvert, antisocial tech guy 😅
I like to use FOSS software wherever possible. My family considers me a tech nerd, I consider myself a tech noob.
Hobbies: web dev (FosseryWeb), running, kayaking, listening to music (mainly electro), watching tech, gameplay and Backrooms videos.
Age: twenties
Languages: 🇭🇺 (native) / 🇬🇧 (took language exam but I feel like I still suck at it sometimes lol)
LINUX JOURNEY
I'm a seasoned distrohopper, started on Linux Mint, went to Kubuntu, Ubuntu, Manjaro, Garuda, Zorin OS, Fedora, LMDE and finally Debian. Also had/have Nobara and PeppermintOS as secondary systems.
As for DE, GNOME is my (almost) all-time favorite, tried out Xfce, KDE and Cinnamon, but always returned to GNOME because it's the most comfortable to me (might also try out COSMIC)
On mobile (PinePhone) I went from Manjaro Plasma to Arch Plasma/Phosh, and now I'm on posmarketOS Phosh
MY STANCE ON PRIVACY
I care about my privacy, although I don't have the highest threat model, like to keep balance between privacy and convenience (although convenience is a bit of a subjective thing, some might consider right clicking to copy username then password from KeePassXC inconvenient, I don't lol).
PROGRAMS I USE
Favorite programs:
- LibreWolf
- OBS Studio
- Krita
- KeePassXC
- FreeTube
- yt-dlp
- Fluent Reader
- Haruna
- Joplin
- Anki
Other programs I use:
- Brave (for websites that don't work in Firefox based browser - shame on those web devs - btw I provide support for all major browser engines on FosseryWeb)
- GNOME Boxes
- Pulsar
- Gajim
- Flatseal
- Warehouse
- Portmaster
- Solanum
- Switcheroo
- Ear Tag
- Warp (the FOSS, GTK-based file transfer app, not the proprietary terminal emulator of course)
On mobile:
- Amberol
- Exercise Timer
- CoreArchiver
- Angelfish
- Kumo
#Introduction #Community #Fedi #Fediverse #FOSS #OpenSource #WebDev #WebDeveloper #Programmer #Linux #Tech #Privacy #FosseryTech
Digitaal zaken regelen met de overheid? Dat moet op de eerste plaats eenvoudig zijn. Wij (Logius) helpen daarbij. Benieuwd hoe wij dit doen? In deze video leggen we het uit. ➡️ https://www.youtube.com/watch?v=gOgVx9f6BGk&t=1s
Volg ons om op de hoogte te blijven van alle ontwikkelingen over toegankelijkheid, veiligheid en privacy.
#Intro #DigitaleOverheid #Toegankelijkheid #Veiligheid #Privacy
mensen op een terras met bomen
Alle 3,5 Stunden durchsucht die Polizei ein #Smartphone (Sachsen-Anhalt)
"In Sachsen-Anhalt durchsucht die #Polizei pro Jahr mehr als 2.500 #Mobiltelefone. Das geht aus der Antwort der Landesregierung auf eine kleine Anfrage der Fraktion die Linke im Magdeburger Landtag hervor. Das Dokument gibt einen Einblick in die Auswertung von Smartphones – doch wichtige Fragen bleiben offen.
Das Smartphone enthält wichtige Daten über unser Leben. Hunderte #WhatsApp-Chats, die Bildergalerie oder Dating-Apps. Dennis-Kenji Kipker, Professor für IT-Sicherheit an der Uni Bremen, bezeichnete das Smartphone gegenüber netzpolitik.org als „ausgelagertes, digitales Gedächtnis“. Der Grundrechtseingriff ist also enorm.
(...)
Für die tabellarische Auflistung der einzelnen Regionen und der Zahl der beschlagnahmten Smartphones im Jahresvergleich https://netzpolitik.org/2024/sachsen-anhalt-alle-35-stunden-durchsucht-die-polizei-ein-smartphone/ "
#Data #Privacy #Datensicherheit #Repression #Datenschutz #Antireport
tumulte.org
Die Logik des Digitalen
Es zählt, was sich zählen lässt!
Quantität ist das zentrale Qualitätskriterium unserer Zeit. In sozialen Netzwerken ist es die Anzahl der Freunde, Follower, Views, Likes und Shares, die Erfolg und Status bestimmt. Klicks entscheiden über Sichtbarkeit in der digitalen Welt.
#ryf #privacy #demokratie #freiheit #EdwardBernays
https://www.deutschlandfunk.de/es-zaehlt-was-sich-zaehlen-laesst-100.html
deutschlandfunk.de
Quantität ist das zentrale Qualitätskriterium unserer Zeit. Klicks entscheiden über Sichtbarkeit in der digitalen Welt.
Asking enthusiasts and professionals privacy related questions is great and I‘d like to encourage you to do so whenever you are uncertain or want to know more!
When you do, please keep in mind to provide those who want to answer you with enough information. We are talking about legal matters after all, which are highly contextual. More information on the issue usually improves the quality of the answers you will get!
—
#privacy #DataProtection #GDPR #EveryDayIsPrivacyDay
Software Engineer originally from Tennessee but now in Virginia. Been #Coding for well over a decade, primarily in the .Net world, but also some Flutter and Ruby. I enjoy #gaming, #SteamDeck, #Disney, #StarWars, #StarTrek, and #SciFi (not in a particular order).
#videogames
#playstation
#nintendo
#xbox
#programming
#technology
#apple
#microsoft
#linux
#privacy
#infosec
#nixos
#homeserver
#blog
Some of the issues us privacy people complain about may appear rather insignificant to you. I get that.
But please let me invite you to a different perspective: As we are currently setting a lot of precedents regarding data privacy rights, how we are handling the small issues today will have an effect on how we will deal with big problems tomorrow.
That is why you should care about violations of your privacy, even if they don’t seem like much today. Because tomorrow, they might.
—
#Privacy #GDPR
9/9
Fortunately, starting Spring 2024, Apple will require developers to declare reasons for using the APIs that return unique device signals, such as the ones commonly used for fingerprinting.
Thanks a lot for reaching this far. If you find this content helpful, share it with your contacts, follow us, like us, and we look forward to sharing our next findings with you.
#Privacy #Security #Cybersecurity #Apple #iPhone #Facebook #TikTok #InfoSec
🚨🎬 Privacy Concerns about Apple Push Notifications
TL;DR: data-hungry apps use push notifications as a trigger to send app analytics and device information to their remote servers, even if the apps aren't running at all on your iPhone. Such apps include TikTok, Facebook, FB Messenger, Instagram, Threads, X, and many more.
Watch this video to see it in action:
https://youtu.be/4ZPTjGG9t7s
🧵 1/9
#Privacy #Security #Cybersecurity #Apple #iPhone #Facebook #TikTok #InfoSec #iOS
youtube.com
This video sheds light on a growing practice among data-hungry apps where they use the background execution time allocated by iOS for the purpose of customiz...
Around October 2023, I started slowly removing bad-faith digital actors (Google, Meta, etc) from my life in a reasonable and sustainable way. I figured I would share it here and see if people had other suggestions. 1/n
363 / Problems of knowledge, problems of order: the #OpenScience field site
https://doi.org/10.3389/fsoc.2023.1149073
364 / Open-Science Guidance for #Qualitative Research: An Empirically Validated Approach for De-Identifying Sensitive Narrative Data https://doi.org/10.1177/25152459231205832
365 / #Privacy versus open science https://doi.org/10.3758/s13428-019-01259-5
And with that, it is a wrap and it is Christmas time! I actually made it 
I'm trying out the #ThreadOfThreads idea: Keeping one (actually one each for English and German) of Fediverse threads I authored.
I start with a top-ten list of articles (or threads for those articles), according to the page views.
Happy #HolidayReading season!
🔟 «Right to be forgotten» void with #AI? (2023-03)
A description how hard it is to eliminate results from AI #ChatBot responses and what this means to our rights.
#RTBF #Privacy #LLM #ChatGPT
https://netfuture.ch/2023/03/right-to-be-forgotten-void-with-ai/
netfuture.ch
In a recent discussion, it became apparent that «unlearning» is not something machine learning models can easily do. So what does this mean to laws like the EU «Right to be Forgotten»? The right to be forgotten (RTBF) is the right to have private information about a person be removed from In
If you would like to contribute to the deGoogle movement 🚀 you can install Sapio on your device 📱 and evaluating the compatibility of your Android apps.
👉 Let's make developers aware of privacy issues together !
github.com
Android Open Source API compatibility. Contribute to jonathanklee/Sapio development by creating an account on GitHub.
Der unwiderstehliche Geruch von Festplatten
"Bei Hausdurchsuchungen kommen immer öfter auch „Datenspeicher-Spürhunde“ zum Einsatz. Sie können Smartphones, Festplatten und sogar SIM-Karten riechen. Bei deren Ausbildung will sich die Polizei allerdings nicht in die Karten schauen lassen."
https://netzpolitik.org/2023/datenspeicher-spuerhunde-der-unwiderstehliche-geruch-von-festplatten/
#Privacy #Data #Datenschutz #Security #Netzpolitik #Repression #Polizei #Staat #Herrschaft
netzpolitik.org
Bei Hausdurchsuchungen kommen immer öfter auch „Datenspeicher-Spürhunde“ zum Einsatz. Sie können Smartphones, Festplatten und sogar SIM-Karten riechen. Bei deren Ausbildung will sich die Polizei allerdings nicht in die Karten schauen lassen.
Ethical Android Development
murena.com
Google is best known for its online search engine and the Android operating system used in smartphones. The foundation of its operating system is open-source, known as the Android Open Source Project, which makes it easy for phone manufacturers to customize. Thanks to this flexibility, Android captured a whopping 76%…
After primarily using my account @bergmeister for mountain as well as IT related posts, I decided to split the account, so I can "speak more freely" without cluttering the timelines of those who are only interested in one part of my posts.
This account will be used for the IT stuff, like homelab, self-hosting, open source software and privacy.
Will post in English and occasionally in Dutch and German.
#Introduction #IT #Homelab #SelfHosting #Privacy #OpenSource
#introduction! I'm a pro #guitarist with #MaggieSpeaks, video editor on upcoming streaming series "The Adventures Of Dirk Balsäk". Amateur #photographer.
Interests:
#guitar
#music
#musician
#audio
#recording
#MusicProduction
#photography
#VideoEditing
#VideoProduction
#FinalCut
#FinalCutPro
#FCPX
#postchat
#camera
#design
#typography
#tech
#ios
#apple
#privacy
#history
#micromobility
#infosec
#cybersec
#chicago
Languages: #english #german #español #deutsch #français #italiano
For everyone running into problem with #Youtube complaining about adblocking I recommend using Freetube instead. Desktop app for Win/Mac/Linux. You can even ‘subscribe’ to creators https://freetubeapp.io #Privacy #linux #opensource
YouTube warning to disable Adblocker or pay them to stop nagging you
Der polizeiliche Zugriff auf DNA-Daten - Strategien der Gegenwehr #Zine
Was tun, wenn die #Polizei eine Speichelprobe verlangt, um Deine #DNA zu analysieren?
Was, wenn Dein DNA-Profil schon in der DNA-Datenbank des BKA gespeichert ist?
Und was, wenn die #Ermittlungsbehörden Dich wegen eines Massengentests, einer so genannten DNA-Reihenuntersuchung, anschreiben?
Seit einer Strafrechtsreform von 2005 wurde der polizeiliche Zugriff auf die DNA-Daten enorm ausgeweitet – und der Rechtsschutz empfindlich ausgehöhlt.
Gleichzeitig gilt: Je diffuser die Rechtslage, desto mehr Spielräume gibt es, sich – auch mit rechtlichen Mitteln – zur Wehr zu setzen.
Und je mehr die biologische Vorratsdatenspeicherung zunimmt, desto mehr ist Widerstand angesagt.
August 2023 / Gen-ethisches Netzwerk e.V.
Kostenloser PDF Download:
https://shop.gen-ethisches-netzwerk.de/index.php?controller=attachment&id_attachment=57
Webseite:
https://shop.gen-ethisches-netzwerk.de/broschuere/105-der-polizeiliche-zugriff-auf-dna.html
#Überwachung #Kontrolle #Repression #Staat #Herrschaft #Antireport #Privacy #Data
Zine Cover Grüner Hintergrund Darauf steht in weiß in einem kleinen blauen kasten "der Polizeiliche Zugriff auf DNA-Daten" Darunter in blau in weißem kasten "Strategien der Gegenwehr" Darunter ein Bild der Polizei und ein bild eines genoms vor einer behörde, zu dem bild für ein blauer strich zu einem weißen kasten auf welchem "Gene und Genome" stehen darunter zu sehen weitere Genome ganz unten steht in blau. GeN: gemeinnützig, kritisch, interdisziplinär
Operating a #CloudService that really respects #privacy is complicated: #GDPR forbids storing personal data (incl. IP addresses) that's not strictly required. Consequently, the website of my @ChronoLink service never logs IP addresses. As all hosters I knew do that, I had to self host. But a separate server is wasteful/cumbersome, and sharing one with the service itself is risky. 😕
As of last Saturday, I have a solution: let https://www.statichost.eu/ host it. Thanks @puresick for suggesting them!
Static hosting for frontend developers who care where their sites live. Git push, custom domain, done — on European infrastructure owned by Europeans, all the way down.
"The popular messaging app Telegram can leak your IP address if you simply add a hacker to your contacts and accept a phone call from them.
(...)
#Telegram boasts 700 million users all over the world, and has always marketed itself as a “secure” and “private” messaging app, even though experts have repeatedly warned that Telegram is not as secure as end-to-end encrypted app #Signal, for example.
The fact that Telegram leaks your #IP address to people in your contacts during a voice call has been known for years, but it’s likely that new, less technical users may not be aware."
https://techcrunch.com/2023/10/19/telegram-is-still-leaking-user-ip-addresses-to-contacts/
Dark background. in the middle you can see a cell phone with the telegram app on the home screen. at the top the telegram symbol (blue circle with white sent sign) underneath it says " the worlds fastest messaging app. it's free and secure" at the very bottom of the cell phone screen blue start messaging button
What Is Doxxing & How to Protect Against It (2023 Guide)
"Your name, address, and phone number have been published online without your consent, and you’re now receiving harassing social media messages and intimidating phone calls. Known as doxxing, this situation is becoming more common among average internet users.
In this guide, we’ll provide an overview of what doxxing is, along with how you can protect yourself against it."
https://joindeleteme.com/blog/what-is-doxxing-how-to-protect-against-it-2023-guide/
joindeleteme.com
Your name, address, and phone number have been published online without your consent, and you’re now receiving harassing social media messages and
Hey Mastodon! 👋 Here is our #introduction post: We are the Data Visualization Lab at Khoury College of Computer Sciences at Northeastern University. You can find more about our work here: https://vis.khoury.northeastern.edu/
We'd love to be connected to more folks and labs in the realms of #DataVisualization #HCI #xAI #AR #VR #VisualAnalytics #PhD #Research
Our lab has been applying visualization to domain areas like #accessibility #UAVs #Genetics #Privacy #Pedagogy #Networks #GraphTheory
Say hi!
vis.khoury.northeastern.edu
Front page Khoury Vis Lab, Northeastern University
NoTrace Project
No trace, no case. A collection of tools to help anarchists and other rebels understand the capabilities of their enemies, undermine surveillance efforts, and ultimately act without getting caught.
Black background depicted head (balaclava) in white. Both hands raised in black as glasses in front of eyes.
🇪🇺
🐦🔥nemo™🐦⬛ 🇺🇦🍉
Dirty AnCom
🌊 #woke
Italia
🇮🇹
