Hasty Briefsbeta

All tags

#privacy

903 stories total

Bilingual

Trump dismantles surveillance watchdog, triggering Europe's privacy PTSD
a year ago
- Donald Trump aims to remove three Democratic-selected members of the Privacy and Civil Liberties Oversight Board.
- The board plays a crucial role in overseeing U.S. surveillance practices and handling European privacy complaints.
- This move could jeopardize the U.S.-EU data transfer agreement established in 2023 after lengthy negotiations.
- The board's stability is vital for thousands of U.S. companies transferring personal data from Europe.
- Meta previously threatened to withdraw Facebook and Instagram from Europe over data flow disputes.
RethinkDNS Resolver That Deploys to CF Workers, Deno Deploy, Fastly, Fly.io
a year ago
- serverless-dns is a serverless, stub DNS resolver supporting DoH and DoT, similar to Pi-Hole.
- It runs on Cloudflare Workers, Deno Deploy, Fastly Compute@Edge, and Fly.io, with free tiers supporting 10-20 devices.
- RethinkDNS operates serverless-dns with endpoints across multiple cloud platforms.
- Performance metrics include server-side processing (0-2ms median) and end-to-end latency (10-30ms median).
- Setup difficulty varies by platform: Cloudflare (Easy), Deno (Moderate), Fastly (Easy), Fly.io (Hard).
- Supports authentication via alpha-numeric bearer tokens for DoH and DoT.
- Logging can be configured via Cloudflare Logpush, with logs stored in R2.
- Blocklists are compressed in a Succinct Radix Trie, updated weekly, and hosted on Cloudflare R2.
- Supports 190+ blocklists with ~13M entries as of Jan 2023.
Source code for the unofficial Signal app used by Trump officials
a year ago
- Analysis of TM SGNL, an unofficial Signal app used by Trump officials, reveals its source code is publicly available.
- Source code for both Android and iOS versions of TM SGNL was found on TeleMessage's website, licensed under GPLv3.
- The Android source includes a full Git history, revealing contributors and their emails, while the iOS version lacks Git history.
- Hardcoded credentials and vulnerabilities were discovered in the source code.
- The app's use by high-ranking officials for discussing classified information and planning war crimes is highlighted as newsworthy.
- Mirrors of the source code have been published on GitHub for public access and analysis.
Presidio – Data Protection and De-Identification SDK (2019)
a year ago
- Presidio is a PII de-identification service for text and images.
- It helps manage sensitive data like credit card numbers, names, and locations.
- Supports multiple languages and offers predefined or custom PII recognizers.
- Extensible and customizable for specific business needs.
- Works with Python, PySpark, Docker, and Kubernetes.
- Includes a module for redacting PII in standard and DICOM medical images.
- Offers options for connecting to external PII detection models.
- Encourages contributions under a Contributor License Agreement (CLA).
- Follows Microsoft Open Source Code of Conduct.
FB told advertisers it can identify teens feeling 'insecure', 'worthless' (2017)
a year ago
- Facebook can identify teenagers' emotions like 'insecure' and 'worthless' using real-time monitoring of posts and photos.
- The company has a database of 1.9 million high schoolers, 1.5 million tertiary students, and 3 million young workers.
- Facebook gathers psychological insights on young users, including mood shifts, based on internal data not available to the public.
- The company faced criticism for past research altering users' emotions without consent and provided contradictory statements in response to the leak.
- Facebook initially apologized and promised an investigation but later called the report 'misleading' and denied targeting based on emotional states.
- Advertisers can access data on users' relationship status, location, friend count, and site access frequency, as well as topics like body confidence.
- Facebook analyzes how emotions are communicated visually and varies by day, with anticipatory emotions early in the week and reflective emotions on weekends.
- The revelations follow a 2014 backlash over Facebook's 'emotional contagion' experiment manipulating users' home pages.
- Facebook stated the recent research was based on anonymous, aggregated data and did not follow its review process.
The Beauty of Having a Pi-Hole
a year ago
- Pi-hole is a DNS proxy that blocks unwanted domains, improving privacy and reducing unnecessary network traffic.
- Setting up Pi-hole requires a Raspberry Pi, minimal hardware, and some time to configure network settings.
- Pi-hole can block up to 66.6% of network traffic without impacting functionality.
- Community blocklists, like those from Firebog, can be used to block known trackers and malicious domains.
- Advanced configurations, such as blocking specific TLDs (e.g., .cn, .ru, .hk), enhance security.
- Devices may bypass DNS settings; iptables rules can force all DNS traffic through Pi-hole.
- Combining Pi-hole with browser ad-blockers (e.g., uBlock Origin) provides additional layers of ad and tracker blocking.
- Pi-hole significantly improves online quality of life by reducing ads, trackers, and malicious scripts.
No Instagram, No Privacy
a year ago
- The author does not have an Instagram account and feels blessed to avoid the pressures of social media.
- Despite not being on Instagram, the author's life is still broadcasted through posts by friends, leading to mixed feelings.
- Living a dynamic social life, the author's friend circle changes frequently, making social interactions complex.
- The author is uneasy about friends learning about their activities through others' social media posts, fearing misinterpretation.
- Social media lacks the nuance of real-life interactions, making it hard to cater to diverse audiences and sensitivities.
- The author recalls a legal definition of privacy as 'being in control of what other people know about you' and feels this is violated by social media.
- The author suggests a social etiquette where posting about gatherings is limited to attendees, though this contradicts social media's purpose.
- The author concludes by appreciating their ignorance of social media posts, avoiding potential social disappointments.
Show HN: Journelly for iOS: like tweeting but for your eyes only (in plain text)
a year ago
- Journelly is a new note-taking app available on the App Store, combining elements from note-taking, journaling, and social media apps.
- The app is designed to minimize friction, making it easy to add and search for notes, with a social-media-like feed for browsing.
- Privacy is a priority; Journelly is offline by default, described as 'tweeting but for your eyes only'.
- It supports various use-cases, from journaling to grocery lists, without forcing users to choose between different apps.
- Journelly uses Org markup for entries (with Markdown support coming soon) and stores notes in plain text for longevity.
- Optional iCloud sync is available, though third-party syncing methods like Working Copy can also be used.
- Entries can be categorized using hashtags, which are actionable for quick searches.
- The app avoids ads, tracking, and bloat, focusing on user privacy and open formats.
- Nearly 300 TestFlight testers contributed feedback, with many feature requests deferred for future updates.
- Journelly is part of the LMNO.lol ecosystem, which also includes a Markdown-powered blogging service.
Google Has Most of My Email Because It Has All of Yours (2014)
a year ago
- The author runs their own email server to maintain autonomy, control, and privacy over personal emails.
- A friend, despite being privacy-conscious, uses Gmail because Google already has access to emails exchanged with Gmail users.
- The author wrote a program to analyze emails since 2004 and found that about a third of their inbox emails come from Google.
- For replied emails, Google's share is even higher, around 57% last year, indicating a significant portion of personal communication goes through Google.
- The analysis highlights the complexity of maintaining privacy in digital communication, especially when many contacts use services like Gmail.
- Encourages others to consider the implications of using services like Gmail in light of privacy concerns.
- Mentions the lack of widespread adoption of PGP/GPG for email encryption and suggests making such technologies more user-friendly.
FUTO
a year ago
- FUTO Keyboard: A privacy-respecting Android keyboard.
- GrayJay: A universal video app focused on creators rather than platforms.
- immich: High-performance self-hosted photo and video management.
- FUTO Voice: A privacy-respecting voice input app for Android.
- Polycentric: A distributed text-based social network centered around communities.
- Harbor: An app designed to preserve identity on the internet.
- FCast: An open-source protocol for wireless audio and video streaming.
- Live Captions: Provides accessible and private live captions.
- FUBS: A frictionless and modifiable software development system.
- FUTOcore: A commercial open-source software store.
NSA spied through Angry Birds, other apps: report (2014)
a year ago
- Leaked documents reveal NSA and GCHQ collect personal data from smartphone apps like Angry Birds and Google Maps.
- Data collected includes location, political affiliation, sexual orientation, and other personal details.
- Intelligence agencies have routine access to app-generated data, often without much effort.
- NSA denies targeting everyday Americans, stating they only collect data authorized by law for foreign intelligence.
- GCHQ claims all its activities are 'authorized, necessary and proportionate'.
- Apps like Facebook, Flickr, and Flixster are also listed as sources of data.
- Documents show apps can reveal phone settings, browsing history, downloads, and social connections.
- A censored document briefly exposed an NSA employee's name and operational details.
- Snowden's supporters claim they avoid disclosing names or compromising ongoing surveillance.
Friends with GPS Benefits
a year ago
- The author uses iOS's Find My app to share real-time location with friends and family, valuing the convenience it provides despite privacy concerns.
- They emphasize that location sharing should be voluntary and respect others' privacy, with no expectation for reciprocity.
- Live location sharing benefits the sharer more than the receiver, and social norms around it are unlikely to change soon like read receipts.
- Find My helps notify friends when the author is nearby, facilitating spontaneous meetups without the need for constant communication.
- The technology is especially useful for maintaining connections with friends spread across different locations, making the world feel smaller and more connected.
- The author views location sharing as a tool for enabling happy accidents and serendipitous encounters, not as a substitute for making real plans.
Jury orders NSO to pay $167M for hacking WhatsApp users
a year ago
- WhatsApp awarded $167 million in punitive damages against NSO Group for exploiting a software vulnerability.
- NSO Group exploited a WhatsApp vulnerability to install Pegasus spyware on 1,400 phones without user interaction.
- The attack targeted journalists, activists, diplomats, and government officials across 20 countries.
- Jury also awarded WhatsApp $444 million in compensatory damages.
- NSO used WhatsApp servers to inject malicious code into targeted devices via call exploits.
- The verdict is seen as a major victory for privacy and security advocates.
NSO Group must pay more than $167M in damages to WhatsApp for spyware campaign
a year ago
- NSO Group ordered to pay over $167 million in damages to WhatsApp for a 2019 hacking campaign affecting 1,400+ users.
- The ruling includes $167,254,000 in punitive damages and $444,719 in compensatory damages.
- WhatsApp hailed the verdict as a historic win against illegal spyware, emphasizing privacy and security.
- NSO Group may appeal the decision, with their spokesperson stating they will pursue further legal remedies.
- The lawsuit revealed details about the victims and NSO Group's clients, highlighting the misuse of spyware.
- WhatsApp's head, Will Cathcart, described the case as a wake-up call about the dangers of surveillance technology.
- A jury determined the damages after a judge ruled NSO Group violated hacking laws and WhatsApp's terms of service.
- Citizen Lab researcher John Scott-Railton praised the verdict, noting it exposes NSO Group's business model of aiding dictators.
Open source Google Analytics replacement
a year ago
- Rybbit is an open-source, privacy-friendly alternative to Google Analytics.
- Quick setup and intuitive to use with a live demo available.
- Tracks key metrics like sessions, unique users, pageviews, bounce rate, and session duration.
- GDPR & CCPA compliant with no cookies or user tracking.
- Offers customizable goals, retention, user journeys, and funnels dashboards.
- Advanced filtering across 15+ dimensions and custom events.
- Live sessions dashboard and real-time analytics.
- 3-level location tracking (country, region, city) with map visualizations.
- Supports organizations and unlimited sites.
EU chiefs use controversial Signal app but will not reveal what is said
a year ago
- European top officials use the Signal app for communication, as admitted by the EU diplomatic service (EEAS).
- The EEAS refused to disclose the content of these communications, citing trust, credibility, and effectiveness.
- A Signal group chat involving EU Vice-President Kaja Kallas and ministers was confirmed, but its content remains secret.
- Austria’s foreign minister revealed a private Signal group for EU foreign ministers, prompting further inquiries.
- EU institutions are reluctant to share text messages publicly, as seen in the 'Pfizergate' vaccine deal controversy.
- The EU is pushing legislation like Chat Control to scan encrypted messages, raising privacy concerns.
- Signal's president threatened to withdraw from France over proposed laws allowing government access to private chats.
Mycoria is an open and secure overlay network that connects all participants
a year ago
- Mycoria is an open and secure overlay network promoting freedom of connectivity.
- Core principles: equality (easy connections), openness (no bureaucracy), no spooking (authentication), no surveillance (encryption), no barriers (Internet or mesh).
- Design goals: simplicity, compatibility with existing infrastructure (e.g., DNS), security and privacy by default.
- Features include automatic end-to-end encryption, modern cryptography, scalable routing, a dashboard, .myco DNS resolution, and service discovery.
- Work in progress (WIP): auto-optimization/healing of the network and rotating private addresses.
CryptPad: An Alternative to the Google Suite
a year ago
- CryptPad is an end-to-end encrypted, open-source collaborative office suite.
- Users appreciate CryptPad as a privacy-first alternative to Google Docs, maintaining functionality and usability.
- No account is required for sharing files or folders, enhancing privacy and accessibility.
- Features like folder organization and sharing options are highly valued.
- CryptPad supports multi-OS use and is praised for its ease of use.
- The platform helps users organize their lives securely and privately.
- Real-time collaboration tools are available without tracking or data mining.
- CryptPad is seen as a private version of Google Drive, offering similar functionalities without privacy concerns.
- Open-source nature and E2EE (End-to-End Encryption) are major positives.
- Users highlight the intuitive interface and the ability to work remotely with colleagues securely.
- The service is free, which is appreciated, especially for educational and non-profit uses.
- CryptPad's Kanban boards, spreadsheets, and document editors are frequently mentioned as useful tools.
- The ability to use CryptPad without personal data submission is a significant advantage.
- Self-hosting options and server locations in the EU add to its appeal for privacy-conscious users.
- CryptPad is recommended for its security, ease of sharing, and collaborative features without compromising privacy.
RFK Jr. says autism database will use Medicare and Medicaid info
a year ago
- NIH and CMS to create a 'real-world data platform' using Medicare and Medicaid data to study autism causes.
- Database will include insurance claims, electronic medical records, and wearable device data.
- HHS Secretary RFK Jr. emphasizes uncovering root causes of autism and chronic diseases.
- Initial focus on autism before expanding to other chronic conditions.
- Concerns raised about privacy and potential misuse of sensitive patient data.
- RFK Jr. has made controversial claims linking autism to vaccines and environmental toxins.
- Experts dispute RFK Jr.'s claims and emphasize no single cause for autism.
- Autism prevalence increase likely due to better screening, not an actual rise in cases.
Florida bill requiring encryption backdoors for social media accounts has failed
a year ago
- A Florida bill requiring social media companies to provide encryption backdoors for police access failed to pass.
- The bill, named 'Social Media Use by Minors,' was indefinitely postponed and withdrawn from consideration in the Florida House.
- It had previously advanced in the Florida Senate but required approval from both legislative chambers to become law.
- The proposed legislation would have mandated social media firms to decrypt end-to-end encryption upon receiving a subpoena, often issued without judicial oversight.
- The Electronic Frontier Foundation criticized the bill as 'dangerous and dumb,' citing risks of malicious abuse and data breaches.

first prev4next

About|Login

#privacy

Trump dismantles surveillance watchdog, triggering Europe's privacy PTSD

RethinkDNS Resolver That Deploys to CF Workers, Deno Deploy, Fastly, Fly.io

Source code for the unofficial Signal app used by Trump officials

Presidio – Data Protection and De-Identification SDK (2019)

FB told advertisers it can identify teens feeling 'insecure', 'worthless' (2017)

The Beauty of Having a Pi-Hole

No Instagram, No Privacy

Show HN: Journelly for iOS: like tweeting but for your eyes only (in plain text)

Google Has Most of My Email Because It Has All of Yours (2014)

FUTO

NSA spied through Angry Birds, other apps: report (2014)

Friends with GPS Benefits

Jury orders NSO to pay $167M for hacking WhatsApp users

NSO Group must pay more than $167M in damages to WhatsApp for spyware campaign

Open source Google Analytics replacement

EU chiefs use controversial Signal app but will not reveal what is said

Mycoria is an open and secure overlay network that connects all participants

CryptPad: An Alternative to the Google Suite

RFK Jr. says autism database will use Medicare and Medicaid info

Florida bill requiring encryption backdoors for social media accounts has failed