Reading up on privacy

Device fingerprinting uses hardware and software signals to create stable, trackable IDs that persist across browsers and evade typical cookie‑based privacy protections.

The author urges rejecting OpenAI and Anthropic due to privacy risks and oligarchic control, recommending open-weight LLMs served via private enclave providers like Tinfoil or Maple.

After decades abroad, a correspondent returns to China and reports that its surveillance apparatus has become far more pervasive and paranoid than before, despite impressive bullet trains and skylines.

Anthropic reported a user's diary entry to law enforcement, resulting in a woman being charged with a felony for the content she wrote.

Apple’s evolving hardware and software policies are creating new opportunities and challenges for hackers, influencing how security research and independent development will unfold.

Moving processed email off remote servers to locally encrypted storage implements an Inbox Zero practice that reduces exposure from mail-server breaches.

The study finds that 10%-24% of Android devices encounter unwanted apps, with Google Play responsible for installs but alternative vectors like bloatware and backup restoration contributing disproportionately to malware distribution.

Ben Thompson describes how his Mac Mini was hacked via a screen‑sharing flaw, how his Claude agent uncovered the miner, and why Apple’s TCC and update labeling hinder agent use.

Matt Chapman’s FOIA request for Seattle email metadata resulted in a costly fee estimate, then a mistaken leak of 32 million emails’ first 256 characters, exposing private data.

Meta’s Muse succeeds by simplifying agentic AI through intuitive design, avatar personality, and ad‑funded free access, outpacing rivals despite lacking novel tech.

The author describes building a decentralized, fire‑proof backup system using M‑Disc Blu‑rays sealed in rugged cases and given to trusted friends for long‑term data preservation.

The essay argues that personal computing should shift to user-owned data and open AI models to empower individuals and resist platform lock‑in.

Agentic coding speeds UI and feature tweaks, but data changes remain slow and irreversible, forcing deliberate decisions because lost user data cannot be recreated or undone.

OPSEC failures in 2026 stem from cross‑domain bridges linking operators’ normal digital footprints to attack infrastructure, exposing state and contractor espionage models and enabling adversarial targeting of defenders.

Weesize compresses, converts, and signs PDFs and photos entirely in the browser without uploading files to any server.

Apple has begun showing persistent advertisements within iOS interfaces such as Settings and the App Store, prompting widespread user complaints about intrusiveness.

User asks Hacker News for steps to regain Google account access after losing their phone and two‑factor authentication device, seeking recovery options.

An Ask HN post asks whether macOS 27 has made it impossible to disable Siri, questioning Apple's decision to keep the assistant always on.

Developer Daniel Gultsch announces that Conversations, his federated Android XMPP client, is now free after ending reliance on Google Play revenue due to frustrations with the store's policies and review times.

Researchers discovered a new forgery attack on blind-signature RSA that reduces the effort needed to break 1024‑, 2048‑, and 4096‑bit keys to 2^65, 2^90, and 2^1119 operations respectively.

DraftKings employs AI to identify and target losing gamblers with personalized ads, exploiting vulnerability to boost profits, a practice the EFF says should be banned.

GoodVibes is a free Chrome extension that uses AI to hide posts about unwanted topics like politics or spoilers across X, Reddit, YouTube, LinkedIn, and Hacker News.

This URL endpoint serves as a 1x1 pixel tracking probe, silently collecting behavioral data through hidden image requests for advertising targeting and web analytics measurement.

Google DeepMind introduces a private AI compute architecture that adds encrypted, server-side memory unlocked only by user‑device keys for cross‑device AI continuity.

Meta tested a human‑in‑the‑loop concierge for its Muse AI assistant to handle phone calls, raising privacy and trust concerns despite the agent’s real‑world capabilities.

In a firsthand account, Meta's AI agent Muse competently managed dental insurance calls, booked dinners, and created a podcast, but required sharing extensive personal data and trust.

David Bushell reports that macOS 27 removed the toggle to disable Apple Intelligence, re-enabling data collection despite his prior opt‑out, highlighting ongoing consent violations in AI features.

AI agent goal hijack lets attackers inject malicious instructions via retrieved content, turning agents’ own tools against them, as shown by real exploits like the Grok Bankr wallet drain.

Author proposes a collaborative Firefox hardfork free of AI and user‑hostile features, detailing the Base Browser project’s patches and vision for a cleaner web.

Garza Global Graviton LLC releases v1.4.0 of its air‑gapped sovereign edge platform, adding mobile‑responsive web hub, local Ollama integration, VS Code setup, and cryptographic attestation for zero‑network‑leakage verification.

Hister provides a self‑hosted, privacy‑focused search engine that indexes your browser history and local files, enabling fast, offline retrieval without sending data to third parties.

Progressive Asheville and conservative Oconee County both voted to halt Flock Safety AI license‑plate readers, reflecting a rare bipartisan backlash against government surveillance.

The author explains how a new Russian law effective September 1 2026 blocks renewal of his .ru domain, forcing its loss after twelve years of ownership.

Apple launched new child‑safety tools across iPhone, iPad, and Mac featuring simplified setup, Ask to Browse, expanded Communication Safety, Time Allowances, and a redesigned Screen Time.

Have I Been Proxied is a free tool that lets users check whether their public IP address has been seen in a residential proxy network, using data from Spur Intelligence.

Statichost.eu offers fully European-owned static site hosting, from git deploy to CDN, targeting developers who want infrastructure located and owned in Europe.

Bitdefender warns that SMEs adopting AI risk leaking sensitive data, over‑privileged tool access, and unchecked hallucinations, urging careful configuration and human review.

Jaron Lanier argues AI is just human collaboration, calling for data dignity and new business models to fix internet harms.

The paper reports the first collision attacks on 38-step SHA-256 and SHA-512, and a 39-step attack on SHA-512, achieving low memory and specific time complexities.

The page informs the user that they have been blocked by Cloudflare and prompts them to understand why access was denied.

Ricky Mondello explains how iOS’s secure credential transfer via passkeys lets users easily switch password managers, using Apple Passwords as an example.

In a five‑hour test, ~100 abliterated open‑source agents compromised five of the author’s accounts via old‑project vulnerabilities and password brute‑forcing, but failed to breach tier‑0 services.

Inbundly revives Google Inbox-style bundles for Gmail via a fork of Inboxy, adding custom bundles, priority grouping, and theme-aware colors while remaining a privacy‑focused, client‑side extension.

Zoom detects when apps like Google Meet use the microphone by reading macOS Control Center logs and Windows registry microphone-usage records, without needing microphone permission.

NGPDFs provides browser‑based PDF merging, splitting, conversion, and protection tools that run entirely locally via Web Workers and WebAssembly, requiring no uploads, accounts, or watermarks.

At DEF CON 34, Cybertiger, Colonel Panic, and The Wrew demonstrated how ESP32 microcontrollers can be repurposed as a counter‑surveillance platform.

The author argues that self-sovereign AI agents (userless, autonomous) are inevitable and that society must create a digital identity system to manage them, balancing human anonymity and agent accountability.

Bloomberg's security infrastructure identified suspicious network behavior from the user's IP address, deploying an anti-bot measure that presents a verification challenge to confirm human access before content delivery.

Kevin Lewis details his local LLM server on an M4 Pro Mac mini with 48 GB RAM, using Qwen and Gemma models via oMLX and Tailscale for private, cost‑predictable AI.

The author argues that age verification and Android app installation changes are corporate-driven control measures, not safety, and chooses freedom to compute as they wish.

Hold My Notes provides a macOS sticky‑note deck that lives at the screen edge, expands on pointer approach, stores notes locally with optional iCloud sync, and uses end‑to‑end encryption.

The article describes how Dolly Parton's 60‑year marriage to Carl Dean thrived on mutual privacy and geographic distance, with both guarding their relationship from public scrutiny.

Research finds attackers can infer up to 63% of users' friends from review length patterns, boosting phishing returns, and recommends adding noise to thwart such inference.

The US has labeled Italian hacker collective Autistici/Inventati a terrorist group, threatening its global communications infrastructure and funding as its wind‑down period ends September 25.

Full-body scans marketed for health monitoring are discouraged by doctors, who warn they offer little benefit to healthy individuals and may cause harm.

The author shows how to run a home mail server with no open ports by routing mail via Cloudflare, a Rust http2lmtp proxy, Dovecot, OpenSMTPD, and smtp2go.

Exa now powers AI‑driven Smart Window in Firefox desktop and Quick Answers on iOS, providing live‑web sourced answers with citations while retaining no Firefox query data.

Harrison created weather.baby, a minimalist ad‑free weather site using Go and Pirate Weather data to provide fast, private forecasts for users.

The article details how bullied Texas teen Bradley Cadenhead created the extremist Discord network 764, coercing minors into self‑harm and CSAM, leading to an 80‑year sentence.

The article introduces an online scanner that measures browser fingerprinting, WebRTC leaks, bot risk scores, and related device attributes to help users assess tracking exposure.

OpenAI has launched a teen‑focused ChatGPT mode that automatically restricts certain conversations to enhance safety for younger users and address parental concerns.

Kithly launches a family‑focused social network that eliminates ads, tracking, and addictive feeds while giving parents full control and offering free membership.

OpenAI’s new opt-in Computer History feature for ChatGPT Work on macOS tracks app and website interactions locally—without screenshots—to help the AI recall user context and automate tasks.

A researcher purchased the noreply.net domain and received over 400,000 automated messages in 18 months, revealing widespread corporate misconfiguration where companies inadvertently send sensitive data to invalid email addresses.

Bloomberg detected unusual network activity and is prompting users to verify they are not robots via a CAPTCHA.

ShieldFont is a web font that swaps key words in HTML so humans see original text while AI scrapers receive altered, meaning‑distorted content to deter unauthorized training.

The EU Commission proposed a browser-level privacy signal to replace deceptive cookie banners, but the tracking industry, led by Google, is lobbying to block it.

The UK Parliament’s Communications and Digital Committee seeks evidence on whether the Online Safety Act has improved online safety, examining Ofcom’s implementation and potential legislative reforms.

Nanit and similar start‑ups aim to monitor infants with AI during sleep and eventually expand that surveillance to longer periods beyond nighttime.

A leaked Chinese police dashboard reveals authorities systematically gather and combine extensive personal data to monitor foreigners across multiple provinces.

OpenAI announced a U.S.-only feature letting ChatGPT users connect Apple Health and medical records for personalized health insights while promising privacy safeguards.

The user attempted to access a Reddit post in the r/micro_saas subreddit via the given URL but encountered a network security block preventing content retrieval, leaving no article text for analysis.

The user encountered a network security block that prevented access to the specified Reddit SaaS post, displaying a message indicating the blockage.

Ente publishes its full financial statements, revealing revenue, expenses, and user growth to demonstrate transparency and build trust with its privacy‑focused community.

PrismML compressed Alibaba's Qwen model from 54 GB to under 4 GB to run on an iPhone, and Apple is in early talks to evaluate the technology.

xAI Grok Build CLI sends file contents—including .env secrets—to xAI via model turns and uploads entire repositories as git bundles to GCS bucket grok-session-traces, regardless of what the agent reads.

Apple's new SpeechAnalyzer achieves 2.12% WER on clean LibriSpeech, beating Whisper Small and legacy SFSpeechRecognizer while running about three times faster.

The user attempted to view a Reddit founder community post but received a network security block message indicating access was denied due to protective filtering.

Attempting to view the Reddit founder community link resulted in a network security block, displaying a message that access was denied.

Anthropic launches a beta reflection dashboard that lets Claude users track, visualize, and assess their AI usage patterns against personal goals.

Chrome 151 introduces the <usermedia> HTML element to handle camera and microphone access declaratively, replacing script-triggered prompts and improving permission recovery rates.

Arcjet provides runtime security for AI applications, including prompt injection detection, data loss prevention, and agent tool controls.