Hasty Briefsbeta

All tags

#privacy

903 stories total

Bilingual

Escaping Enshittification: We're All Digital Migrants
a year ago
- Growing discomfort with Google's ecosystem led to a decision to reclaim digital sovereignty.
- Initial migration involved replacing Google services with alternatives like Mega.nz, ProtonMail, and LibreOffice.
- Transition from cloud-based to local solutions, such as moving from Bitwarden to KeepassXC.
- Social media exodus included leaving Facebook, LinkedIn, and Twitter for platforms like Mastodon.
- Self-hosting services like email and storage on AWS and USBs for greater control.
- Ongoing refinement focuses on FLOSS/open-sourced software and reducing dependency on US providers.
- Digital independence is a continuous journey, requiring patience, research, and incremental improvements.
- Benefits include diversified digital footprint, reduced vulnerability, and finding like-minded communities.
- Encouragement to others: start small, avoid perfectionism, and align digital life with personal values.
AI is not our future – Procreate
a year ago
- Respect for user skills and ownership of their work.
- Commitment to privacy with no tracking in apps.
- Criticism of generative AI for its impact on humanity and creativity.
- Support for human creativity over generative AI technology.
- Choosing a less common path for community benefit.
Show HN: Changefly – Rebuilding the foundation of privacy and authentication
a year ago
- Changefly ID is a next-gen authentication system for various uses like logins, payments, and user verification.
- Developers can integrate Changefly ID in 3 steps: generate a private key, generate a connection key, and start authenticating users.
- The system uses cURL commands for API interactions, with JSON responses indicating success or failure.
- Changefly ID includes security measures like requiring a PIN for suspicious activities (e.g., IP mismatch).
- The service is free for personal projects, but users must back up their API keys.
- Changefly offers commercial licensing, dedicated support, and partner commissions for businesses.
- The mission of Changefly is to build a safer internet with privacy-focused, advanced security features.
Personal Ambient Computing
a year ago
- The next evolution of personal computing, Personal Ambient Computing (PAC), aims to free computing from any single device, inspired by Star Trek's vision of wearables and mesh networks.
- PAC is envisioned as a modular, disc-shaped computing unit with processing power, storage, connectivity, and sensors, adaptable to various enclosures like jewelry, watches, phones, and household appliances.
- The approach emphasizes a standardized form factor with magnetic edges for easy integration into different devices, promoting modularity, open-source hardware/software, and repairability.
- PAC addresses power efficiency by allowing the core disc to operate at lower power, with additional capabilities provided by larger enclosures, creating a hierarchy of computing power based on context.
- Privacy is a cornerstone of PAC, advocating for personal control over data and sensors, rejecting corporate surveillance models in favor of user-controlled, personal mesh networks.
- The concept challenges the current trajectory of ambient computing dominated by major corporations, proposing a future where computing is distributed, contextual, and enhances rather than replaces existing interaction modes.
- PAC represents a shift towards computing that adapts to human needs and contexts, promoting a future of technology that is more humane, integrated, and personal.
Oniux: Kernel-level Tor isolation for any Linux app
a year ago
- oniux is a command-line utility for Tor network isolation on Linux using kernel-level namespaces.
- It ensures privacy-critical apps route all traffic through Tor, preventing data leaks.
- Linux namespaces isolate system resources like network interfaces, enhancing security.
- oniux differs from torsocks by using kernel features instead of SOCKS proxies, offering better isolation.
- It supports all applications, including static binaries and those not using libc.
- Installation requires a Linux system with Rust; usage is straightforward with commands like 'oniux curl'.
- Internally, oniux uses clone(2), mounts, and TUN interfaces to isolate processes.
- The tool is experimental but aims to match the reliability of long-standing tools like torsocks.
- Credits include smoltcp developers and contributors who helped implement user namespaces properly.
- The Tor Project encourages donations to support privacy and human rights initiatives.
Show HN: Open-source P2P file transfer
a year ago
- Berb is a lightweight, privacy-first web app for direct file transfers between devices using WebRTC.
- Files never touch a server; transfers are direct, secure, and fast via WebRTC Data Channels.
- Simple setup: `npm install` followed by `npm run start`.
- Features include auto-reconnect on network loss, multi-file support, and saving streams on supported browsers.
- Encourages discussion before coding by suggesting to open an issue first.
Browser extension (Firefox, Chrome, Opera, Edge) to redirect URLs based on regex
a year ago
- Web browser extension for redirecting URLs using regex or wildcard patterns.
- Examples include redirecting mobile sites to desktop versions, removing AMP links, and bypassing tracking links.
- Special features for DuckDuckGo bangs to directly access search results without intermediary requests.
- Customizable CSS for Firefox users to improve visibility of the Redirector button in dark themes.
- Honors Einar Egilsson, the original creator of Redirector, for his contributions.
Illinois Cops Gave ICE Access to More Than 5k Surveillance Cameras Nationwide
a year ago
- Illinois police provided ICE access to over 5,000 surveillance cameras nationwide, despite state laws prohibiting such use.
- Flock Safety, the ALPR technology provider, has 40,000 cameras across the U.S., recording vehicle details and storing data for 30 days.
- Records show 4,000 searches by local and state police for immigration-related reasons, often informally assisting ICE without formal contracts.
- Flock's system allows law enforcement to access nationwide camera data, including from private entities like homeowner associations.
- The system enables real-time tracking of vehicles without warrants, raising Fourth Amendment concerns.
- ICE's informal access to ALPR data bypasses public oversight, sparking privacy and constitutional debates.
- Illinois officials deny violating state laws, but evidence suggests ALPR data is being shared with federal agencies for immigration enforcement.
- Civil liberties advocates warn of unchecked surveillance and the lack of public discussion on federal data access limits.
Breaking down why Apple TVs are privacy advocates' go-to streaming device
a year ago
- Apple TV boxes are considered a privacy-safe option compared to other streaming devices.
- They do not use automatic content recognition (ACR), a common tracking technology in smart TVs.
- During setup, users can disable Siri, location tracking, and analytics data sharing.
- Apple TV provides clear privacy policies and disables voice input data sharing by default.
- Other streaming devices often require manual disabling of tracking features, which many users skip.
- The article questions whether Apple TV's current privacy features will remain in the long term.
Kagi status update: First three years
a year ago
- Kagi launched three years ago with a focus on providing a superior, ad-free search experience.
- Initial success was driven by niche, technical searches where Kagi outperformed Google.
- Kagi's mission is to combat the degradation of search quality caused by ad-based monetization.
- The company has grown to 50,000 customers and achieved break-even profitability.
- Key milestones include the launch of Kagi Search, Orion Browser, Small Web, Summarizer, and Kagi Assistant.
- Recent product updates include smarter video search, improved image search, and AI-generated image detection.
- Kagi is expanding its ecosystem with upcoming products like Kagi Mail, Kagi Maps, and enhanced Kagi Assistant features.
- The company is committed to privacy and security, with zero security incidents since inception.
- Kagi is exploring partnerships and bundling opportunities to expand its reach.
- Future plans include launching Kagi Search API, Orion Browser v1.0, and Kagi for Education.
Meta and Yandex are de-anonymizing Android users' web browsing identifiers
a year ago
- Meta and Yandex embed tracking code into websites, de-anonymizing visitors by abusing Internet protocols.
- Chrome and other browsers send unique identifiers to native apps, allowing conversion of web IDs into persistent mobile app user identities.
- Meta Pixel and Yandex Metrica trackers bypass Android and browser security protections like sandboxing and storage partitioning.
- The tracking breaks the sandbox principle, allowing interaction between mobile and web contexts.
- Yandex started this bypass in 2017, Meta in September 2023, linking browsing history to app account holders.
Covert Web-to-App Tracking via Localhost on Android
a year ago
- Meta and Yandex use localhost sockets on Android to track users by linking web browsing data with app identifiers.
- This tracking method bypasses privacy protections like Incognito Mode, clearing cookies, and Android permission controls.
- Meta's Pixel script sends the _fbp cookie via WebRTC to native apps like Facebook and Instagram, linking web visits to user accounts.
- Yandex Metrica uses HTTP/HTTPS requests to localhost ports to share device identifiers like the Android Advertising ID (AAID).
- Both methods operate without user consent and can potentially expose browsing history to malicious apps.
- Meta Pixel is embedded on over 5.8 million websites, while Yandex Metrica is present on close to 3 million sites.
- Browser vendors like Chrome, Firefox, and Edge are implementing mitigations, but broader platform-level fixes are needed.
- No public documentation from Meta or Yandex explains this tracking method, raising transparency concerns.
- The tracking works even if users are not logged in, use Incognito Mode, or clear cookies.
- iOS users are not currently affected, but similar tracking could technically occur on other platforms.
Meta and Yandex are de-anonymizing Android users' web browsing identifiers
a year ago
- Meta and Yandex embed tracking code into websites, de-anonymizing visitors by abusing Internet protocols.
- Chrome and other browsers send unique identifiers to native apps, allowing conversion of web identifiers into persistent mobile app user identities.
- The tracking bypasses Android and browser security protections like sandboxing and state/storage partitioning.
- Researchers highlight this as a violation of fundamental security principles, breaking the sandbox between mobile and web contexts.
- Yandex started this bypass in 2017, Meta in September last year, linking browsing history to app account holders.
New research highlights privacy abuse involving Meta and Yandex
a year ago
- International research collaboration uncovers privacy abuse by Meta and Yandex on Android devices.
- Native Android apps like Facebook, Instagram, and Yandex apps listen on local ports to de-anonymize browsing habits without consent.
- Meta’s Pixel and Yandex Metrica bypass Android's privacy protections and Incognito Mode by mapping users' browsing habits to their accounts.
- Tracking has been ongoing since 2017 (Yandex) and September 2024 (Meta), affecting millions of sites.
- Meta uses localhost channels to share browser identifiers with native apps, while Yandex passively captures and aggregates data.
- Yandex apps delay activation of localhost listeners by up to three days, potentially to evade detection.
- Researchers suggest mobile platforms and browsers need to overhaul local port access to prevent such abuses.
- No evidence that Meta or Yandex disclosed these tracking capabilities to website operators or end users.
- Browser vendors like Chrome and DuckDuckGo are implementing fixes based on the research disclosures.
- The only current protection is avoiding apps like Facebook, Instagram, and Yandex apps.
ODNI Wants to Make It Easier for the Government to Buy Your Data Without Warrant
a year ago
- The Office of the Director of National Intelligence (ODNI) is creating a centralized online marketplace for law enforcement and spy agencies to buy personal data from data brokers.
- This marketplace allows agencies to bypass the need for warrants, accessing data like contacts, financial information, and geolocation without justification.
- States like Montana are taking steps to close the data broker loophole, making it illegal for police to purchase such data.
- At the federal level, the Fourth Amendment is Not for Sale Act aims to close this loophole, but it was rejected by the Senate.
- The ODNI's move is seen as an escalation of surveillance practices, undermining privacy and civil liberties.
- Advocates are calling for the ODNI to scrap the Data Consortium and for lawmakers to pass the Fourth Amendment is Not for Sale Act.
Meta found 'covertly tracking' Android users through Instagram and Facebook
a year ago
- Meta and Yandex were found covertly tracking Android users' browser activity without consent.
- The tracking bypassed Android's security measures, even in incognito mode, affecting major browsers.
- Google confirmed the activity violated its security and privacy principles.
- Meta paused the feature and is in discussions with Google, while Yandex denied collecting sensitive data.
- Firefox, Microsoft Edge, and DuckDuckGo browsers were also affected, with Mozilla and DuckDuckGo taking action.
Not All Tokens Are Meant to Be Forgotten
a year ago
- Large Language Models (LLMs) exhibit human-level language understanding but memorize unwanted information like private or copyrighted content.
- Existing unlearning methods face over-forgetting issues, suppressing all tokens in forget samples and losing model utility.
- The Targeted Information Forgetting (TIF) framework differentiates unwanted words (UW) from general words (GW) to improve unlearning.
- TIF uses Targeted Preference Optimization with Logit Preference Loss for unlearning UW and Preservation Loss to retain GW.
- Experiments on TOFU and MUSE benchmarks show TIF enhances unlearning effectiveness while preserving model utility.
OpenAI slams court order to save all ChatGPT logs, including deleted chats
a year ago
- OpenAI is fighting a court order to preserve all ChatGPT user logs, including deleted and sensitive chats.
- The order was issued after news organizations accused OpenAI of destroying evidence related to copyright claims.
- OpenAI claims the court rushed the order based on unfounded accusations from The New York Times and other plaintiffs.
- The company argues the order violates user privacy for ChatGPT Free, Plus, Pro, and API users.
- News organizations suspect users delete chats to bypass paywalls, but OpenAI had only shared retained chat samples.
- Judge Ona Wang sided with plaintiffs, ordering OpenAI to preserve all chats to prevent alleged evidence destruction.
- OpenAI seeks to vacate the order, calling it premature and a risk to global user privacy.
DNS4EU for Public Is Available
a year ago
- DNS4EU Public Service is a fast, secure, and privacy-focused DNS resolution service for EU citizens.
- Five resolver options are available: Protective, Child Protection, Ad-Blocking, Child Protection & Ad-Blocking, and Unfiltered.
- The service blocks malicious websites, inappropriate content for children, and ads, with options for unfiltered access.
- DNS4EU ensures GDPR compliance by anonymizing user IP addresses and not collecting private data.
- The service is optimized for performance with servers across the EU and supports DNSSEC for security.
- Users can report incorrectly blocked domains or technical issues via provided forms.
- DNS4EU is free for end-users but not optimized for ISPs, governments, or enterprises due to rate limits.
- The service is backed by the European Union and operated by Whalebone, ensuring compliance with EU laws.
- Threat intelligence includes real-time updates, regional expertise, and collaboration with CERTs.
- Technical infrastructure includes Knot Resolver 6, Kubernetes, and anycast IP addressing for reliability.
Statement on California State Senate Advancing Dangerous Surveillance Bill
a year ago
- California State Senate passed S.B. 690, raising concerns over privacy and safety.
- EFF and other organizations warn the bill enables big tech surveillance, risking sensitive personal data exposure.
- SB 690 lacks restrictions on how businesses use or share collected personal information, including with data brokers or law enforcement.
- Concerns include potential misuse of data related to immigration status, healthcare, political beliefs, and gender-affirming care.
- Critics argue the bill could facilitate federal government access to sensitive information without adequate protections.

first prev7next

About|Login

#privacy

Escaping Enshittification: We're All Digital Migrants

AI is not our future – Procreate

Show HN: Changefly – Rebuilding the foundation of privacy and authentication

Personal Ambient Computing

Oniux: Kernel-level Tor isolation for any Linux app

Show HN: Open-source P2P file transfer

Browser extension (Firefox, Chrome, Opera, Edge) to redirect URLs based on regex

Illinois Cops Gave ICE Access to More Than 5k Surveillance Cameras Nationwide

Breaking down why Apple TVs are privacy advocates' go-to streaming device

Kagi status update: First three years

Meta and Yandex are de-anonymizing Android users' web browsing identifiers

Covert Web-to-App Tracking via Localhost on Android

Meta and Yandex are de-anonymizing Android users' web browsing identifiers

New research highlights privacy abuse involving Meta and Yandex

ODNI Wants to Make It Easier for the Government to Buy Your Data Without Warrant

Meta found 'covertly tracking' Android users through Instagram and Facebook

Not All Tokens Are Meant to Be Forgotten

OpenAI slams court order to save all ChatGPT logs, including deleted chats

DNS4EU for Public Is Available

Statement on California State Senate Advancing Dangerous Surveillance Bill