526
29
submitted 4 months ago by cm0002@infosec.pub to c/privacy@programming.dev

Reason number 5,386 to delete your Reddit account and encourage your friends & loved ones to do the same.

527
51

The European parliament has blocked the extension of a law that permits big tech firms to scan for child sexual exploitation on their platforms, creating a legal gap that child safety experts say will lead to crimes going undetected.

The regulatory gap has created uncertainty for big tech companies, because while scanning for harms on their platforms is now illegal, they still remain liable to remove any illegal content hosted on their platforms under a different law, the Digital Services Act. Google, Meta, Snap and Microsoft said they would continue to voluntarily scan their platforms for CSAM, in a joint statement posted on a Google blog.

Privacy advocates argue that big tech scanning messages for child abuse threatens fundamental privacy rights and data security for EU citizens, equating these measures to “chat control” that could lead to mass surveillance and false positives.

“There are claims of surveillance or infringement of privacy,” Swirsky said. “Blocking CSAM is not an evasion of privacy. Free speech does not include sexual abuse of children.”

528
32
submitted 4 months ago by Sunshine@piefed.ca to c/privacy@programming.dev
529
52
submitted 4 months ago* (last edited 4 months ago) by who@feddit.org to c/privacy@programming.dev
530
65

I never cared that much about it, but it is a shame that another alternative is going down.

531
52
submitted 4 months ago by Blaze@piefed.zip to c/privacy@programming.dev

The EU’s so-called Chat Control plan, which would mandate mass scanning and other encryption breaking measures, has had some good news lately. The most controversial idea, the forced requirement to scan encrypted messages, was given up by EU member states. And now, another win for privacy: the EU Parliament has dealt a real blow to voluntary mass-scanning of chats by voting to

532
11
submitted 4 months ago by cm0002@lemy.lol to c/privacy@programming.dev
533
47
534
35
submitted 4 months ago by cm0002@lemy.lol to c/privacy@programming.dev

Read the whole thread

However, we don't have a "hardened security" approach, we aren't developing a phone for pedo(censored) so they can evade justice.

535
28
536
14
537
-4
submitted 4 months ago by cm0002@lemy.lol to c/privacy@programming.dev

This is a shoutout to the app QuickTiles and the developer and contributors thereof.

While at first glance it may not seem like a privacy focused app, however, ultimately, improving digital privacy is more often than not a balance between convenience/ease of use and, well, privacy^[There will always be know-it-alls and above-it-alls in the privacy community who trashtalk normies and/or beginners, acting like this and that is never a tradeoff. If you happen to be one of those, think about whether your attitude helps or hampers our efforts.]

I was almost about to let out a big sigh, thinking do I have to learn kotlin and java for this...? and then I found this app. It has some neat "add-ons" for the quick tiles panel on Android systems. Personally, I was looking for a quick setting to enable/disable data saver. This app had a "data usage" tile, which reduces the amount of requires "clicks" from 5 to 2.

538
18
submitted 4 months ago by cm0002@lemy.lol to c/privacy@programming.dev

EU will require all member states to have digital profiles of citizens with birth certs and IDs

Ireland is getting a new, universal 'Digital Wallet' app that will collect info, including birth certs, driving licences and PPS numbers for individual citizens - as per European Union requirements for 2027.

And the Government is asking for volunteers to take part in testing and trial runs. The Digital wallet will be used to access a range of public services, including welfare support, such as the Working Family Payment. It could also store data such as health profiles, along the lines of the so called 'vaccine passports' that were in use during the Pandemic.

The digital wallet aims to allow people to securely access documents such as birth certificates or driving licences and register for key welfare support, such as the working family payment. It has also been suggested as an age-verification tool by Tanaiste Simon Harris, who has said children under the age of 16 should not be on social media in the wake of the Grok AI controversy. The Government is legally obliged, under EU regulations, to ensure there is a digital wallet for accessing public services by the end of the year, and for private services by the end of 2027. The public testing phase of the wallet is to begin in early April and is seen as “critical” to ensure it is designed “to satisfy user needs and expectations”, the Department said. The first stage, for which people can opt in, gives people the chance to view the design of the wallet, understand its proposed features, provide feedback and sign up for further testing. The second stage allows people aged 16 or older to download the wallet and test limited functions. People can register to be part of the testing phase at gov.ie/DigitalWallet.

Minister for Public Expenditure and Public Service Reform Jack Chambers said the app would “make it simpler” for people to verify their identity, apply for support and access entitlements, as he launched the public consultation on Friday.

He said: “The wallet is designed so that all personal data is fully protected, and the user stays in control of what information they put in the wallet and choose to share,” he said. "Only the details needed for a service will be shared, and nothing more. Big life events, such as having a baby, moving home, or starting a new job often require dealing with several different public service providers. The digital wallet aims to reduce that administrative burden, making it easier, faster and more secure to access the supports people need. This testing and consultation phase is an important step in building a digital wallet that genuinely works for people. We want to hear the public’s ideas, concerns and expectations. The public’s feedback will directly shape how the wallet looks, how it works, and how it supports everyday life.”

539
79
submitted 4 months ago by Blaze@piefed.zip to c/privacy@programming.dev

LinkedIn is using hidden JS to scan your browser for over 6,000 specific extension IDs via a known Chromium vulnerability. By inventorying your local software, they can infer highly sensitive "Special Category" data like health status, religion, and political advocacy without consent.

I’ve joined the dots on why Chromium-based "Shields" fail here and how to harden your home lab/network to stop the leak.

540
48

From Devuan themselves, as follows:

"Groundbreaking OSINT investigation shows how three decisions by individuals with undisclosed financial interests permanently altered the identity infrastructure of every major GNU/Linux distribution running systemd"

They provide two links:

https://tboteproject.com/systemdfindings/

Mirror: https://isoc-sig.freifunk.net/systemd/systemd%20birthDate%20Merge_%20Corporate%20Filings%20&%20Governance%20Failure%20-%20TBOTE%20Project.html

541
141
542
30
543
25
submitted 5 months ago by Blaze@piefed.zip to c/privacy@programming.dev

The UK is moving forward with its efforts to ban social media for young people. Ahead of this week’s House of Lords debate on the topic, we’re getting you situated with a primer on what’s been happening and what it all means.

544
2

LLM-generated passwords (generated directly by the LLM, rather than by an agent using a tool) appear strong, but are fundamentally insecure, because LLMs are designed to predict tokens – the opposite of securely and uniformly sampling random characters.

545
103
submitted 5 months ago by floofloof@lemmy.ca to c/privacy@programming.dev
546
65
submitted 5 months ago by cm0002@toast.ooo to c/privacy@programming.dev
547
5
submitted 5 months ago by cm0002@toast.ooo to c/privacy@programming.dev

UKHSA will explore options to work with ‘big tech’ to use live location data and artificial intelligence (AI) for a more rapid, large-scale detection and alert system during pandemics. These services will adopt a whole-of-society approach with accessible and multilingual formats, and UKHSA will work to consider and build the equivalent tools needed for digitally excluded communities.

https://www.gov.uk/government/publications/pandemic-preparedness-strategy-building-our-capabilities/uk-government-approach-to-implementing-the-strategy-england-only

548
22
submitted 5 months ago by Sunshine@piefed.ca to c/privacy@programming.dev
549
38
submitted 5 months ago by cm0002@toast.ooo to c/privacy@programming.dev

Google is tightening control over Android under the guise of 'security,' but this crackdown on sideloading is a direct hit to digital sovereignty and FOSS. I've written about why this matters for our privacy and the future of open platforms. What do you think—is this the end of Android's 'open' era?

550
8
submitted 5 months ago by Sunshine@piefed.ca to c/privacy@programming.dev
view more: ‹ prev next ›

Privacy

5085 readers
363 users here now

Icon base by Lorc under CC BY 3.0 with modifications to add a gradient

founded 3 years ago
MODERATORS