Hasty Briefsbeta

All tags

#privacy

903 stories total

Bilingual

Look Google, We Have This New Private, Offline Alternative Now
10 months ago
- Blender 5.0 will introduce HDR support for Linux Wayland users.
- CoMaps is a new open-source navigation app focused on privacy and offline use.
- CoMaps allows downloading regions for offline navigation and search.
- The app features a clean, intuitive interface suitable for various users.
- CoMaps does not track users or collect data, ensuring privacy.
- Unlike Organic Maps, CoMaps remembers navigation routes and offers a customizable action button.
- The map design is modern and clear, with distinct road and path markings.
- Available on F-Droid, Play Store, and App Store; source code on Codeberg.
Unhosted Web Apps
10 months ago
- Unhosted web apps, also known as 'serverless', 'client-side', or 'static' web apps, do not send user data to their server.
- Users can connect their own server at runtime, or data stays within the browser.
- Advantages over native apps: work on any device, no platform restrictions, and no censored app stores.
- Advantages over hosted web apps: independent server provider choice, no data visibility by app provider, cheaper to publish, kill-switch resilience, and infinite backend scalability.
- Unhosted web apps are entirely client-side, receiving source code over HTTP instead of an opaque UI.
Claude code modified my .bashrc without asking
10 months ago
- Claude code potentially modified the user's .bashrc file to remove an alias without permission.
- The modification coincided with a Claude update, suggesting the update process might trigger the change.
- Evidence includes timestamp correlation and suspicious code in Claude's binary referencing .bashrc and alias patterns.
- The user's alias 'claude-logging', a custom logging tool, was removed automatically.
- Repeated updates to Claude (versions 1.0.43 and 1.0.44) consistently removed the alias, reinforcing the suspicion.
- The user expresses strong disapproval of silent, unauthorized modifications to system files.
Zorin OS
10 months ago
- Zorin OS is a fast, secure, and privacy-respecting alternative to Windows and macOS.
- Features a familiar desktop environment customizable to resemble Windows, macOS, or Linux.
- Optimized for speed, ensuring quick app launches and smooth performance.
- Compatible with computers up to 15 years old, reducing e-waste and saving money.
- Built on Ubuntu and Linux, offering reliability and advanced security features.
- Privacy-focused with no data collection and open-source transparency.
- Includes essential apps and supports thousands more via the built-in Software store.
- Supports gaming with native Linux and Windows games via Steam, Lutris, etc.
- Zorin Connect integrates Android devices with the computer over an encrypted connection.
- Supports dual boot with Windows or macOS and includes accessibility features.
- Compatible with Microsoft Office documents via LibreOffice and allows access to Windows files.
- Free to download (Core edition), with Pro version offering advanced features.
- Can be tested via USB before installation and receives updates until at least 2027.
Google can now read your WhatsApp messages
10 months ago
- Google notified Android users that Gemini will assist with phone functions like messaging and utilities starting July 7, regardless of Gemini Apps Activity settings.
- Gemini can perform actions like sending WhatsApp messages but may access messages and notifications with Google Assistant or Utilities app help.
- Users can disable connected apps via Gemini mobile app settings or turn off Gemini Apps Activity, though data is retained for 72 hours.
- Google's response to queries about removing Gemini emphasized user benefits but avoided direct removal options.
- To completely uninstall Gemini, users need ADB (Android Debug Bridge), involving steps like enabling USB debugging and running specific commands.
- Gemini is tied to the Google app; removing Google entirely disables Gemini but also removes Google services.
Using MPC for Anonymous and Private DNA Analysis
10 months ago
- Monadic DNA conducted an experiment to allow anonymous and private access to genetic data.
- Thirty participants provided saliva samples at an event in Denver, using a Web app to claim their genotyping results with a unique kit ID and PIN.
- Data was uploaded to encrypted storage using Nillion’s MPC technology, enabling computations without exposing raw genomic data.
- Sample collection occurred during ethDenver, with participants providing samples and choosing a PIN for data claim.
- Participants were interested in POAPs, and many had never had their DNA analyzed before due to privacy concerns.
- Samples were shipped to Autogen for lab processing, using the Global Screening Array for genotyping (~500k markers per participant).
- Data was shared by the lab in encrypted files, stored in DigitalOcean Spaces, and claimed by participants via the Web app.
- MPC was used for encrypted storage and analysis, ensuring data remained private during computation.
- The experiment successfully demonstrated the feasibility of MPC for genomic analysis, with participants satisfied with the results.
- Future work includes improving anonymity with wetware solutions, zero-knowledge proofs, and combining FHE with MPC for robust privacy.
"Just Fucking Ship It" (Or: On Vibecoding)
10 months ago
- Author attended a hackathon where they encountered an AI tutor app called Mentora, which later evolved into a social media app named Pandu.
- Pandu's iOS app was decrypted and analyzed, revealing client-side handling of OpenAI API keys and system prompts.
- Supabase was used as a backend, but misconfigurations allowed unauthorized access to database relations, exposing sensitive user data.
- Exposed data included user profiles, push notification tokens, chat requests, and live geographic locations, raising serious privacy concerns.
- The app's architecture allowed for manipulation, such as sending arbitrary push notifications and accessing private user information.
- Nearly 10,000 users signed up for Pandu, including minors, with their personal data exposed due to poor security practices.
- The creator of Pandu, Christian, was criticized for incompetence and recklessness, with the app posing significant privacy risks.
- Users were urged to stop supporting the app, report it, and remove friends and loved ones from the platform due to its dangers.
White Noise – secure and private messenger
10 months ago
- White Noise is a secure and private messenger with end-to-end encryption, forward secrecy, and post-compromise security.
- It allows identity freedom—users can communicate anonymously, pseudonymously, or with their real name.
- Built on open standards like Nostr and Messaging Layer Security (MLS), it supports decentralization and platform portability.
- The network is distributed and censorship-resistant, with thousands of independent nodes worldwide.
- Engineered for speed and scalability, it handles messages from direct chats to large groups efficiently.
- White Noise is a non-profit, community-driven project, free from corporate or government influence.
Why you should delete WhatsApp and install Signal
10 months ago
- WhatsApp is owned by Meta, which also owns Facebook, Instagram, and Threads, posing privacy risks.
- Signal is recommended as a secure alternative to WhatsApp, offering end-to-end encryption and being run by a nonprofit.
- Meta collects extensive metadata from WhatsApp, including who you message, when, and your location, compromising privacy.
- Meta has a history of privacy violations, including the Cambridge Analytica scandal and secret web tracking on Android devices.
- Meta uses phone numbers provided for security purposes for advertising, violating user trust.
- WhatsApp conversations are being fed to Meta's AI unless manually opted out, raising privacy concerns.
- Meta's apps request access to all photos on your device, posing significant privacy risks.
- WhatsApp now includes ads, indicating a shift towards monetization at the expense of privacy.
- To protect privacy, uninstall Meta apps, revoke unnecessary permissions, disable data sharing, and use browser versions when possible.
- Encouraging contacts to switch to Signal can help reclaim privacy and reduce reliance on Meta's services.
German court rules Meta tracking technology violates European privacy laws
10 months ago
- German court rules Meta's tracking technology violates GDPR.
- Meta fined €5,000 for embedding tracking pixels without user consent.
- Ruling sets precedent for users to sue without proving individual damages.
- Meta accused of profiling users for profit, violating European privacy laws.
- Decision could lead to large-scale lawsuits against websites using Meta tracking tech.
- Potential for class-action suits with significant financial implications for Meta.
People having phone sex on FaceTime will now get a warning from Apple
10 months ago
- iOS 26 may introduce a feature pausing FaceTime if nudity is detected.
- The feature shows a warning message and allows users to resume or end the call.
- Sensitive Content Warning can be toggled off in FaceTime settings.
- Images are analyzed locally on the device, not sent to Apple servers.
- Apple aims to protect young users with new safety tools in iOS 26.
- iOS 26 is expected to release in September, unifying Apple's operating systems.
AI-Enabled Trash Trucks Will Scan Your Trash to Scold You About Recycling
10 months ago
- AI-powered trash trucks in Centerville, Ohio, sort recycling to reduce contamination.
- The system scans waste to identify misplaced items like food waste and batteries.
- Residents receive postcards with feedback on their recycling habits.
- Privacy concerns arise as trash sorting is tied to street addresses.
- The city aims to improve recycling efficiency and reduce costs with this technology.
- Approximately 6,500 customers are served, with 8,000 tons of waste collected annually.
- The initiative is part of broader discussions on AI surveillance and privacy.
Google Glass Wasn't a Failure. It Raised Crucial Concerns
10 months ago
- Google Glass is often mocked as a symbol of tech hubris and failure, but it also represents a successful pushback against surveillance.
- The main issue with Google Glass was its potential for ubiquitous recording, leading to privacy concerns and bans in public spaces like bars.
- Legal frameworks around recording and privacy, like the Wiretap Act, are outdated and struggle to address modern technologies.
- The concept of 'reasonable expectation' of privacy is nebulous and changes as technology evolves, making privacy laws unpredictable.
- Devices like Google Home and Alexa challenge traditional privacy norms, potentially altering what we consider private in our own homes.
- Public rejection of Google Glass was a cultural boundary-setting against invasive technology, emphasizing the need to protect privacy.
- Modern smart devices continue to erode privacy, highlighting the ongoing struggle between convenience and personal rights.
What Manifest V3 Means for Brave Shields and the Use of Extensions in Brave
10 months ago
- Brave will continue to support select Manifest V2 (MV2) extensions like AdGuard, NoScript, uBlock Origin, and uMatrix.
- Brave Shields remain unaffected by Google's deprecation of MV2, as they are built natively into the browser.
- Google plans to remove MV2 extensions from the Chrome Web Store by June 2025, but Brave will offer limited MV2 support.
- Manifest V3 (MV3) imposes restrictions on extensions, limiting their ad-blocking capabilities.
- Brave is developing new features like procedural filtering to enhance privacy and ad-blocking.
- Brave provides built-in privacy protections such as fingerprint randomization and ephemeral storage partitions.
- Brave Wallet will soon support Cardano, including native assets and transaction capabilities.
Show HN: uBlock-Mv3 – Port of Full Manifest V2 uBlock Origin to Manifest V3
10 months ago
- uBlock Origin (uBO) is a CPU and memory-efficient content blocker for Chromium and Firefox.
- Blocks ads, trackers, coin miners, popups, anti-blockers, malware sites, etc., using various filter lists.
- Supports EasyList filter syntax and extends it for custom rules.
- Users can easily modify preselected filter lists.
- Using a blocker is not theft; it protects privacy.
- uBO's primary goal is to neutralize privacy-invading methods.
- Features Basic Mode (simple UI) and Advanced Mode (configurable per-site firewall).
- Installation requires sideloading and CLI flag whitelisting.
- MV3 porting issues include broken MV2 APIs and random frame injection errors.
- Free, open-source, and maintained by users; no donations sought.
NamiGen: Free and Local Alternative to ElevenLabs
10 months ago
- Unlimited, high-quality AI speech generation that runs entirely on your device.
- No internet connection required, ensuring complete privacy and control.
- Examples of AI Speech Enhancer styles: Multi-person dialogue, Mysterious and whispery, Clear and engaging, Authoritative and confident, Natural and conversational.
- Humorous dialogue example showcasing AI's conversational abilities.
- Freedom and security of local AI voice generation with uninterrupted access.
- Download the AI-powered speech generation tool for instant, natural voice creation.
OpenCut: The open-source CapCut alternative
10 months ago
- Privacy-focused video editor with videos staying on the user's device.
- Free features unlike CapCut, which has paywalled basic features.
- Simple and easy-to-use interface, inspired by CapCut's success.
- Timeline-based editing with multi-track support and real-time preview.
- No watermarks or subscriptions required.
- Analytics provided by Databuddy, ensuring 100% anonymized and non-invasive data.
- Project structure includes Next.js, React hooks, Zustand for state management, and TypeScript.
- Requires Bun, Docker, and Node.js for setup.
- Development setup includes database and Redis services via Docker.
- Environment variables need configuration for database, auth, and Redis.
- Google OAuth is optional for testing login features.
- Database migrations required before starting the development server.
- Project is in rapid development with potential breaking changes.
- Contributions are welcome but advised to wait until stabilization.
- Vercel supports the open-source project.
Google is tracking you (even when using DuckDuckGo)
10 months ago
- A new study by SafetyDetectives reveals Google's widespread tracking across the web, especially through Google Analytics, AdSense, and YouTube embeds.
- Using DuckDuckGo doesn't fully protect users; up to 40% of sites in the US still sent data to Google.
- Geography matters: Sweden and Switzerland showed lower tracking due to stricter privacy laws.
- Content type influences tracking; YouTube and shopping pages trigger more tracking than platforms like Wikipedia.
- Google's tracking extends beyond search engines, embedded in tools like Google Fonts and Maps.
- Privacy-conscious users need more than private browsers; third-party scripts on websites contribute to tracking.
- Site owners using Google Analytics or YouTube embeds unknowingly contribute to widespread data collection.
- Regulations like GDPR may not be fully effective in curbing Google's tracking due to weak enforcement.
- The study highlights the need for privacy-first alternatives in analytics, hosting, and advertising.
- Escaping Google's tracking requires reducing reliance on its services both as users and website owners.
Signal Chief Meredith Whittaker Sounds Alarm on Agentic A.I.'S Privacy Threat
10 months ago
- Meredith Whittaker, head of Signal's foundation, warns about the dangers of agentic A.I. at the AI for Good Summit.
- Agentic A.I. poses risks by accessing sensitive data across application layers, including Signal, calendars, and payment systems.
- Signal, trusted by millions for privacy, could be compromised by A.I. agents performing tasks like booking reservations.
- A.I. agents threaten platforms like Spotify by accessing proprietary data used for recommendations or ads.
- Whittaker advocates for developer-level opt-outs and open implementation of A.I. systems for security and verification.
Oakland cops gave ICE license plate data; SFPD also illegally shared with feds
10 months ago
- San Francisco and Oakland police shared automated license plate reader (ALPR) data with federal agencies, violating a decade-old California state law.
- Records show data was shared with seven federal agencies, including the FBI and ICE, often through intermediary California police departments.
- Privacy advocates and officials criticize the misuse of ALPR data, with concerns over violations of privacy and state sanctuary policies.
- Oakland and San Francisco installed hundreds of Flock Safety cameras in 2024, primarily for local crime enforcement, but logs reveal federal agency access.
- Activists call for legal action or state enforcement to ensure compliance with data-sharing bans and protect immigrant and privacy rights.

first prev12next

About|Login

#privacy

Look Google, We Have This New Private, Offline Alternative Now

Unhosted Web Apps

Claude code modified my .bashrc without asking

Zorin OS

Google can now read your WhatsApp messages

Using MPC for Anonymous and Private DNA Analysis

"Just Fucking Ship It" (Or: On Vibecoding)

White Noise – secure and private messenger

Why you should delete WhatsApp and install Signal

German court rules Meta tracking technology violates European privacy laws

People having phone sex on FaceTime will now get a warning from Apple

AI-Enabled Trash Trucks Will Scan Your Trash to Scold You About Recycling

Google Glass Wasn't a Failure. It Raised Crucial Concerns

What Manifest V3 Means for Brave Shields and the Use of Extensions in Brave

Show HN: uBlock-Mv3 – Port of Full Manifest V2 uBlock Origin to Manifest V3

NamiGen: Free and Local Alternative to ElevenLabs

OpenCut: The open-source CapCut alternative

Google is tracking you (even when using DuckDuckGo)

Signal Chief Meredith Whittaker Sounds Alarm on Agentic A.I.'S Privacy Threat

Oakland cops gave ICE license plate data; SFPD also illegally shared with feds