https://archive.ph/d8NmT#selection-1899.0-1899.127

Most businesses use #Outlook or Google #Workspace - even doctors and lawyers. Though they should know better!

Today we're comparing Gmail, Outlook, Zoho Mail & Tuta Mail so you don't have to. 🔐✨

If you know any business still not encrypting your data, share this link: tuta.com/blog/best-email-for-b…

#privacy #digitalsovereignty

Samsung is shipping spyware on Galaxy A and M series smartphones.

“This isn’t just bloatware, it’s a surveillance enabler baked into the hardware,” said a SMEX spokesperson.

cybersecuritynews.com/spyware-…

#privacy #android

Unremovable Spyware on Samsung Devices Comes Pre-installed on Galaxy Series Devices

Samsung has been accused of shipping budget Galaxy A and M series smartphones with pre-installed spyware that users can't easily remove.

^{Guru Baran (CybersecurityNews)}

This is beyond horrifying: taking public pictures of women, including yearbook photos and then inserting them without consent into hard-core pornographic AI videos.
404media.co/ai-porn-secret-des…

#ai #privacy #cybercrime #pornography

Massive Leak Shows Erotic Chatbot Users Turned Women’s Yearbook Pictures Into AI Porn

Chatbot roleplay and image generator platform SecretDesires.ai left cloud storage containers of nearly two million of images and videos exposed, including photos and full names of women from social media, at their workplaces, graduating from universi…

^{Samantha Cole (404 Media)}

cross-posted from: lemmy.ml/post/39190924

Despite heavy criticism from civil society and large parts of the EU Parliament, the EU Commission has now published its proposal for the “Digital Omnibus”. Contrary to the Commission's official press release, these changes are not “maintaining the highest level of personal data protection”, but massively lower protections for Europeans. While having basically no real benefit for average European small and medium businesses, the proposed changes are a gift to US big tech as they open up many new loopholes for their law departments to exploit. Schrems: “This is the biggest attack on European’s digital rights in years. When the Commission states that it ‘maintains the highest standards’, it clearly is incorrect. It proposes to undermine these standards.”

Digital Omnibus: EU Commission wants to wreck core GDPR principles

The EU Commission has published its proposal for the "Digital Omnibus". The planned changes to the GDPR would lower protections for Europeans

^noyb.eu

A surprising amount can be read from the data, and for some users, it can be life-threatening.

The entire WhatsApp profile database (including correlatable phone numbers and face photos) leaked.

heise.de/en/news/3-5-Billion-A…

#Privacy #WhatsApp #Databreach

https://www.windowscentral.com/microsoft/windows-11/microsoft-warns-security-risks-agentic-os-windows-11-xpia-malware

Crossposted from lemmy.dbzer0.com/post/57854507

I believe Europeans need to worry more about Chat Control / ProtectEU.

It is absolutely dystopian & can not be allowed to be implemented!

After all, it can't be any good if the politicians want to be exempt from it ;)

youtube.com/watch?v=fPzvUW8qaW…

They also provide a nice summary here: mullvad.net/en/blog/mullvad-vp…

(I didn't know Ashton Kutcher was that in love with mass #surveillance 🕺)

⏯️ by @mullvadnet

#ChatControl #ProtectEU #Privacy #eu #europe #europeanunion #it #europa #tech #news #digital

Chrome now wants to store and autofill your driver’s license and other ID info.

From a cybersecurity perspective, that is a hard no from me. Info-stealer malware already targets browser autofill, and you cannot rotate a driver’s license number like a password. Putting high value IDs in the most targeted consumer app on the planet is a bad trade for a little convenience.

I wrote up why this feature is such a risky idea and what I recommend instead:

🔗 kylereddoch.me/blog/chromes-ne…

#Infosec #Privacy #Chrome #Cybersecurity

Chrome’s New Driver’s License Autofill Is a Terrible Idea

Chrome can now store and autofill driver’s licenses, passports, and vehicle IDs. From a cybersecurity and privacy standpoint, putting government ID numbers into the world’s most-targeted browser is a bad trade, no matter how convenient it feels.

^{Kyle Reddoch}

I promote encryption in my union, association and workplace. Currently, not every computer run linux, and some still run windows.

However, I succeed in making everyone use thunderbird; I try now to make every email encrypted. It work pretty well until I try to encrypt a shared address (let say "contact@org") :

The RSA key work well on thunderbird on linux, but fail to decrypt email on thunderbird on windows.

What am I missing ? Thunderbird seems to support ECC encryption; is it more suited ?

I'm thinking about adding JavaScript and CryptoJS to my personal website, airikr.me, despite stating the following on the privacy page:

Sending the IP address with end-to-end encryption to the server, is not planned as this requires JavaScript. airikr.me is a hobby project where the challenge is to never use JavaScript (except for Plausible).

The solution: if JavaScript is enabled, use CryptoJS instead of Halite.

Still thinking if this is needed, though. Well, E2EE should always be needed everywhere regarding personal data. But since it's "only" the IP address that will be encrypted... I don't know. But what I do know is that the IP address is personal data and should be encrypted with CryptoJS.

I'm conflicted Please, tell me if I need to add E2EE to my personal website for only storing the IP address with E2EE or not.

EDIT I removed the poll after knowing that you can't get the IP address with JavaScript.

#e2ee #privacy #askfedi #askfediverse #encryption #cryptojs

Airikr

Read the privacy policy for airikr.me.

^Airikr

The Cameras Tracking You Are A Security Nightmare
Benn Jordan

youtube.com/watch?v=uB0gr7Fh6l…

#flock #privacy #bigbrother #surveillance

Why do I get the feeling that lately, in so many countries, new regulations are popping up with only one purpose - to erode privacy 🔓? It feels like a bad joke. I can't keep up anymore.

I wish I could fight them all at once, put pressure everywhere 🌍, no matter where I live. But I don't have the time. I'm already drowning in an endless to-do list.

Why couldn't the government set a different deadline? Why are they so determined to push this through? My mind can't wrap around it I just hope they come to their senses and never implement it 🙏

#Privacy #HumanRights #Switzerland #SwissPrivacy #EU #ChatControl #FightChatControl #UK #OnlineSafetyAct #AgeVerification #Surveillance #StopSurveillance

Swiss surveillance could become worse than US

If passed, chat, email & VPN providers from #Switzerland must:

🚨 Log IP addresses
🚨 Ask for ID upon sign up
🚨 Decrypt data upon request

Swiss Bundesrat is still discussing this draft bill, decision will likely be made in 2026.

Let's fight for #privacy! 👉 tuta.com/blog/switzerland-surv…

🚨🇪🇺 The #EU Commission has secretly set in motion a potentially massive #GDPR reform. This could have significant impact on your fundamental right to #privacy.

🤝 noyb is doing everything it can to prevent this outcome. You can support us by becoming a Supporting Member! Learn more 👉 noyb.eu/en/support-us

#MakePrivacyReality

We've integrated with Surveillance Watch, an interactive database that documents surveillance and spyware entities.

When searching for an entity that appears on their list, we'll display a banner on its domain to alert you that it's a known surveillance tech provider.

#Kagi #Search #Surveillance #Spyware #Privacy

Mozilla announces more AI in Firefox, still failing to understand that at this point their market share is made of tech savvy people who do not want that.

Mozilla, please. Stop chasing the fads. Get your own values.

People use Firefox to get access to an open web, use a sturdy browser, and not to be tracked. Build in that direction and that direction only.

Nobody from your current user base will recommend Firefox with AI to their friends.

blog.mozilla.org/en/firefox/ai…

#firefox #ai #privacy

Introducing AI, the Firefox way: A look at what we're working on and how you can help shape it

AI Window is a user-controlled space we’re building in Firefox that lets you chat with an AI assistant and get help while you browse.

^{Kristina Bravo (The Mozilla Blog)}

As you know, GrapheneOS is a privacy‑ and security‑focused, independent Android‑based distribution for smartphones. With the mobile market dominated by just two major advertising giants—Apple increasingly joining the ranks—we urgently need genuine alternatives. GrapheneOS stands out as the sole platform that lets users enjoy modern features without compromising their freedom, privacy and security.

Please consider supporting the GrapheneOS project in this year’s Proton fundraiser.

Proton Lifetime Fundraiser 2025

Nominate a project or organization you believe in and help us the 10 beneficiaries of this year's Proton Lifetime Account Charity Fundraiser.

^{form.typeform.com}

I just stumbled across chasing-your-tail-ng and wigle.net. I previously didn't know anything like this existed.

Looks like you could run Chasing Your Tail, and log all the WIFI SSIDs that devices (e.g. peoples' cell phones) around you are looking for, then search for the SSIDs on wigle.net, and possibly find the work/school/home locations of the people around you.

Looks like Chasing Your Tail also logs bluetooth, so could be used to find BT beacons that may be in your car, etc. And also SDR for other types of radios. Pretty interesting.

I'm not really familiar with security/OSINT type stuff, but it is interesting. Anybody know of any other projects related to this? What the best ways to mitigate this? I suppose naming your home SSID to a very common SSID would help.

GitHub - ArgeliusLabs/Chasing-Your-Tail-NG: MUCH Improved version of the Python Chasing Your Tail Tool to help you determine if you're being followed

MUCH Improved version of the Python Chasing Your Tail Tool to help you determine if you're being followed - ArgeliusLabs/Chasing-Your-Tail-NG

^GitHub

No thank you.

Sorry, I won’t even use #FaceID or that #fingerprint shite, #tech knows far too much about me as it is.

#iPhone users can now add #US #passport info to their #digital wallets

#InfoSec #privacy #BigTech #surveillance #law
apnews.com/article/apple-iphon…

cross-posted from: lemmy.zip/post/53013464

The EU countries have no fundamental problem with US law enforcement agencies accessing their national databases to search for threats.

Many EU states want to allow the US access to biometric police data

^{Stefan Krempl (heise online)}

#California’s state agency CalPrivacy is building a new Delete Request and Opt-out Platform (DROP 😂).

Starting Jan 1, 2026, you’ll be able to submit a request through DROP, asking data brokers to delete your data.

Starting Aug 1, 2026, data brokers are required to start regularly processing consumer deletion requests, reducing how many times your data can be bought, sold, and pop-up on sketchy websites. 😎

This is exciting, as it’s a FREE service for California residents, similar to existing, paid services like Optery, Incogni, Privacy Bee, DeleteMe, and EasyOptOuts.

#privacy #data #government

privacy.ca.gov/data-brokers/

Data brokers - privacy.ca.gov

State of California

^{privacy.ca.gov}

If you are wondering why Chat Control
is being brought back so relentlessly,
despite a clear and strong opposition from citizens, human rights advocates, and child protection organizations alike,

I recommend you read this enlightening article from 2023 (alas still relevant):

Spoiler: It's lobbyists who want lots of your tax money, and don't care about the children.

"'Who Benefits?’ Inside the EU’s Fight over Scanning for Child Sex Content"
balkaninsight.com/2023/09/25/w…

• ❓More on Chat Control by Privacy Guides
• 🚨 Recent news of where Chat Control is at this week by Patrick Breyer
• 🇪🇺 Europeans: keep contacting your representatives (yes, again, I'm sorry)

#ChatControl #Privacy #HumanRights #Democracy #MassSurveillance #EUpol

‘Who Benefits?’ Inside the EU’s Fight over Scanning for Child Sex Content | Balkan Insight

An investigation uncovers a web of influence in the powerful coalition aligned behind the European Commission’s proposal to scan for child sexual abuse material online, a proposal leading experts say puts rights at risk and will introduce new vulnera…

^{Luděk Stavinoha (BIRN)}