Databroker Files: Im Dschungel der Datenhändler
netzpolitik.org/2025/databroke…

Wie #Apps uns ausspionieren, und "Datenreichtum" geschaffen wird (halt nicht bei uns)

#privacy

Databroker Files: Im Dschungel der Datenhändler

In Massen verkaufen Databroker Handy-Daten von Millionen Menschen, darunter genaue Standorte. Warum sprudeln die Daten immer weiter? Mit internationalen Recherche-Partnern decken wir ein raffiniertes System auf, in dem die Beteiligten die Verantwortu…

^{netzpolitik.org}

Il Garante della #privacy ha sanzionato E.ON per trattamento illecito dei #dati personali. In un caso "è stato dimostrato che l’azienda non verificava la legittimità della provenienza dei dati usati per le sue campagne pubblicitarie".

ilpost.it/2025/01/31/garante-p…

Il Garante della privacy ha multato di 890mila euro l’azienda energetica E.ON per trattamento illecito dei dati personali dei clienti

^{Il Post}

Encryption backdoors must never be allowed. To prove that Tuta is #free from any #backdoor, the entire client code is published as #opensource.

Let's fight against mass surveillance! ✊

tuta.com/blog/why-a-backdoor-i…

#privacy #encryption #surveillance

🚨 Welke gegevens van je zou #Meta nog meer allemaal gebruiken om #AI te trainen? 🤔

tweakers.net/nieuws/231648/met…

#WhatsApp heeft al AI in de app...🤷 faq.whatsapp.com/1002544104126…

Zeker zijn dat je privégesprekken en data niet en nooit worden gebruikt? Kies #Signal: signal.org/install

#privacy

Quoting a Mastodon post by GrapheneOS:
"The app doesn't provide client-side scanning used to report things to Google or anyone else. It provides on-device machine learning models usable by applications to classify content as being spam, scams, malware, etc. This allows apps to check content locally without sharing it with a service and mark it with warnings for users."

grapheneos.social/@GrapheneOS/…

#AndroidSystemSafetyCore #Android #Privacy #GrapheneOS

: it was already installed on my Google Pixel 6 Pro - without anybody asking whether I agree with this shit.

Just uninstalled it.

#CameraInYourBathroom #ClientSideScanning #AndroidSystemSafetyCore #CSS #ChatControl #Privacy #BigBrother #BigTechIsEvil #GoogleIsEvil #WhatAreTheySmoking

🚨BREAKING: Google will soon install an app called #AndroidSystemSafetyCore

They say it's a "safety measure" to protect your #privacy, but in fact it's client-side scanning.

Yet, we all know that client-side scanning is bad: tuta.com/blog/eu-client-side-s…

Deinstall the app on your #Android: System -> Apps

"There is no prosecution at any cost." | Tuta

Germany opposes client-side scanning planned by EU - it would create an unprecedented surveillance monster that violates fundamental rights.

^Tuta

🌍📱 Looking for a smartphone that lasts for years and protects your privacy at a great price?

Meet the Murena Fairphone 4.

🔹 Replaceable parts = less waste
🔹 No data tracking and more privacy with @e_mydata
🔹 Ethical & affordable = smart choice

It’s not just a phone—it’s a statement.

Available in Europe & the USA! 🌍

🔗 Get yours today: murena.com/

#Privacy #OpenSource #Smartphone #Ethical #USA #Fairphone #Fairphone4
@gael

If Apple complies with this, the UK government will gain access to all iCloud data globally. The only way Apple comes out of this with any integrity is to leave the UK market. If they give in to this, every regime in the world will demand the same thing. And that’s before we even get to the fact that there’s no such thing as a “backdoor” for just so-and-so. Either there is a door or there isn’t and if there is, anyone who obtains the key can use it.

theguardian.com/technology/202…

#apple #backdoor #UK #encryption #privacy #security #personhood #data #democracy #humanRights #iCloud

UK demands ability to access Apple users’ encrypted data

Expert says government has ‘lit the blue touch paper on a truly enormous fight’ as it challenges firm’s privacy stance

^{Dan Milmo (The Guardian)}

You remember #Apple scanning all images on your #mobile device?

If you have an #Android #phone, a new app that doesn't appear in your menu has been automatically and silently installed (or soon will be) by #Google. It is called #AndroidSystemSafetyCore and does exactly the same - scan all images on your device as well as all incoming ones (via messaging). The new spin is that it does so "to protect your #privacy".

You can uninstall this app safely via System -> Apps.

developers.google.com/android/…

Google System APK Transparency

^{Google for Developers}

Just a reminder, especially in this wild time we live in. DO NOT INSTALL WORK MDM ON YOUR PERSONAL DEVICE.
If your work requires Microsoft Intune or similar MDM, to get email/teams/slack. don't accept it. It opens your device up for them to access private data and disable/delete your phone (even if they say they wont, they can)

blog.cdemi.io/never-accept-an-…

#privacy #android #iphone #work #email #outlook #microsoft

Never accept an MDM policy on your personal phone

In this new age of BYOD (Bring Your Own Device), employees can bring personally owned devices (laptops, tablets, smartphones, etc...) to their workplace, and to use those devices to access privileged company information and applications.

^{Christopher Demicoli (blog.cdemi.io)}

E-Brieftasche: EU-Kommission will ständige Personenkennung durch die Hintertür
heise.de/news/E-Brieftasche-EU…

Traurig, dass das nicht einmal überrascht...

#privacy #datenschutz

E-Brieftasche: EU-Kommission will ständige Personenkennung durch die Hintertür

Bürgerrechtler beklagen Foulspiel der EU-Kommission bei der europäischen digitalen Identität: Firmen dürften verifizierte Ausweisdaten abfragen.

^{Stefan Krempl (heise online)}

#SpreadLoveNotHate ❤️

Ready to join the #privacy revolution or even become a #Legend? 🤩

The whole Tuta Team fights for your right to

✅ Privacy
✅ Freedom of speech
✅ Freedom to be who you are
✅ Fairness and equality

Plus, the paid plans offer a lot:

⚡️ 20 / 500 GB storage
⚡️ 15 / 30 Tuta email addresses
⚡️ 3 custom domains
⚡️ Unlimited labels
⚡️ Smart filters
⚡️ Sharing calendars & invites
⚡️ Family option
⚡️ Shared mailboxes

Switch now! app.tuta.com/signup

This is what I think about whenever infosec wonks on here start telling people they should use matrix or xmpp+omemo or whatnot instead of signal

To be fair, I understand the arguments and to a large extent I agree with the critiques. However, I think anyone making these recommendations is vastly underestimating the capacity or appetite for most people to deal with the user experiences presented by these alternatives.

User experience is the ultimate force multiplier. For anything that requires network effects to function (ie most anything involving communication), if it doesn't *just work* then you've lost 90% of your audience.

xkcd.com/2501/

#matrix #xmpp #infosec #cybersecurity #signal #ux #design #ui #encryption #privacy #crypto

Average Familiarity

^xkcd

Everyone knows your location: tracking myself down through in-app ads

timsh.org/tracking-myself-down…

#privacy #tracking #linuxmobile #surveillance

Everyone knows your location

Recently I read about a massive geolocation data leak from Gravy Analytics, which exposed more than 2000 apps, both in AppStore and Google Play, that secretly collect geolocation data without user consent.

^{tim (tim.sh)}

Nice. How to leave #X / #Twitter and #Instagram? In the edition of tomorrow‘s newspaper Augsburger Allgemeine offers valuable tips and highlights alternatives in the #Fediverse, such as #Mastodon and #Pixelfed.

A must-read especially for @Gargron from @Mastodon and @dansup from @PixelFed and of course @helpers / @admins

📖 Read more here in german language: augsburger-allgemeine.de/geld-…

#SocialMedia #Privacy #Alternatives #Mastodon #Pixelfed #Fediverse

Social-Media-Alternativen: Bluesky, Signal & Co: Neustart ohne X und Meta

Sie hadern mit Elon Musks Kurznachrichtendienst X und sind auch nicht mehr glücklich mit all dem, was Mark Zuckerbergs Meta-Konzern anbietet? Kein Problem. Es gibt Alternativen.

^{Von Dirk Averesch, dpa (Augsburger Allgemeine)}

There's no end to corporate manipulation of people's privacy.
#CVS #privacy

gizmodo.com/cvs-is-turning-loc…

CVS Is Turning Locked Shelves Into an Excuse to Make You Download Its App

The store is trialing a feature to let customers unlock cabinets with their phone.

^{AJ Dellinger (Gizmodo)}

Nice. How to leave #X / #Twitter and #Instagram? In the edition of tomorrow‘s newspaper Augsburger Allgemeine offers valuable tips and highlights alternatives in the #Fediverse, such as #Mastodon and #Pixelfed. A must-read especially for @Gargron from @Mastodon and @dansup from @PixelFed and of course @helpers / @admins

📖 Read more here in german language: augsburger-allgemeine.de/geld-…

#SocialMedia #Privacy #Alternatives #Mastodon #Pixelfed #Fediverse

On this Data Privacy Day, choose a search engine that puts you first. No ads. No tracking. No compromise. Just the results you want, on your terms.

(Illustration by Chaz Hutton for Kagi)

#Kagi #Search #DataPrivacyDay #DataPrivacyWeek #Privacy #AdFree

Let's say China manages to get just a little bit of data about people from just a few of these ... 😑

"China's overlapping tech-industrial ecosystems"

high-capacity.com/p/chinas-ove…

#cybersec #cybersecurity #infosec #itsec #china #privacy #gdpr #dataprotection #dataskydd

China's overlapping tech-industrial ecosystems

EVs, batteries, lidar, drones, robotics, smartphones, AI. China's progress across a range of overlapping industries creates a mutually reinforcing feedback loop.

^{Kyle Chan (High Capacity)}

Earlier today, Google rejected a feature request asking for the option to use DNS-over-HTTPS servers other than Google’s and Cloudflare’s in Android: issuetracker.google.com/issues…

According to Google’s own testing, DoH is more private, secure, and performant than DoT on Android. There is no reason whatsoever to limit it to a handful of Google-approved servers.

Just like with Manifest V3 in Chrome, this arbitrary restriction on what DNS servers can use the most modern technologies in Android is a clear example of Google abusing their position to campaign against blocking invasive trackers. One of the clearest uses for custom DNS servers is the ability to block privacy-invasive services like Google’s at the DNS level.

Further details & discussion on our forum: discuss.privacyguides.net/t/go…

#android #google #privacy #dns

Google rejects feature request for arbitrary DNS-over-HTTPS server support

https://issuetracker.google.com/issues/331250145?pli=1#comment7 Some background, since 2022 Android has used DNS-over-HTTP/3 instead of DNS-over-TLS for its Private DNS setting, but only for two predefined servers (Google and Cloudflare).

^{Privacy Guides Community}

Die Signatur-Problematik bei F-Droid ist offenbar noch immer nicht gelöst: "We find it concerning that F-Droid constantly chooses to move the goalposts and continues to rely on a fundamentally broken approach for certificate pinning, merely patching [15] known vulnerabilities without ever addressing the underlying cause." 😵👇

github.com/obfusk/fdroid-fakes…

#fdroid #security #privacy #certpinning #signature

GitHub - obfusk/fdroid-fakesigner-poc: F-Droid Fake Signer PoC

F-Droid Fake Signer PoC. Contribute to obfusk/fdroid-fakesigner-poc development by creating an account on GitHub.

^GitHub

Microsoft Office 2016 and Office 2019 will no longer receive software updates, technical support, or bug and security fixes after 14.10.2025.

Consider migrating to LibreOffice.

LibreOffice is free to use.
LibreOffice supports Office file formats.

Install LibreOffice and compare it with your version of Office.

Website: libreoffice.org
Mastodon: @libreoffice

1/4

#Microsoft #Office2016 #Office2019 #Office #LibreOffice #CyberSecurity #Privacy #InfoSec #FreeSoftware #OpenSource #FOSS

👋 hi
We heard you moved away from a toxic social media platform?
Congrats! now do Google Docs!

cryptpad.org

#privacy #collaboration #office-suite #googledocs #office365

CryptPad.org

End-to-end encrypted collaborative office suite

^cryptpad.org

This #NewYearsResolution should be about increasing your #privacy. Share now!

❤️ ❤️ ❤️

Looks like #Microsoft appointed the new Data Protection Supervisor of the #EU.

This happened because the “left-liberal camp” did not agree on which candidate to support, if I am reading the news correctly.

I saw outgoing EDPS Wojciech Wiewiórowski at more than one @fnf meeting, and I doubt that his successor will turn up at this grassroots #privacy barcamp.

heise.de/en/news/Too-critical-…

#Wiewiorowski #EDPS

Too critical? MEPs vote out Data Protection Commissioner Wiewiórowski

EU Parliament's Committee on Home Affairs has chosen Bruno Gencarelli as its preferred candidate for the role of EU Data Protection Supervisor.

^{Stefan Krempl (heise online)}

#Google Starts Tracking All Your Devices In 6 Weeks—Forget Chrome And #Android

Long story short is that Google has made updates to its advertising ecosystem essentially _permitting_ the fingerprinting of devices for use in targeted advertising. In their words they are going to be “less prescriptive with partners in how they target and measure ads.”

Doesn’t mean fingerprinting wasn’t happening before, just that Google is giving the green signal to the rest of the ecosystem to do so… and will likely use this to maybe replace third-party cookies.

Use an adblocker. Seriously.

#privacy #ads #privacymatters #useadblockers

forbes.com/sites/zakdoffman/20…

Google Starts Tracking All Your Devices In 6 Weeks—Forget Chrome And Android

Say hello to 2025—the way you're tracked has suddenly changed. Here's what you need to know.

^{Zak Doffman (Forbes)}

just discovered some very cool new projects:
git.deuxfleurs.fr/Deuxfleurs/b…
aerogramme.deuxfleurs.fr/

aerogramme is a proxy for imap and caldav that offers encryption and some security guarantees

bagage is webdav with an s3 backend

this is all based on garage which works great on commodity hardware. you could rent a $5/mo/tb vps from hosthatch and have decently good secure, open source, cloud storage of all the above

#privacy #openSource #security #s3 #garage

bagage

Bagage is the bridge between our users and garage, it enables them to synchronize files that matter for them from their computer to garage through WebDAV

^{Gitea: git with a cup of coffee}

Google: Device Fingerprinting ist okay
heise.de/news/Google-Device-Fi…

Ist ja auch für die Werbeindustrie ganz dolle wichtig...

#privacy

Google: Device Fingerprinting ist okay

Google lässt ab Februar das Tracking von Verbrauchern per Device Fingerprinting für Werbezwecke zu – eine fundamentale Abkehr von seiner bisherigen Position.

^{Jo Bager (heise online)}

❤️ Privacy matters - so does doing good. We donate Tuta to #opensource projects! ❤️

Ready to turn on #privacy?

👉 tuta.com/blog/tutanota-for-ope…

#foss #givingback #encryption #security

We fight for your right to #privacy with #encryption! 🔒

Check out our new scrolling animation: tuta.com/ 💪

GrapheneOS version 2025010700 released:

grapheneos.org/releases#202501…

See the linked release notes for a summary of the improvements over the previous release.

Forum discussion thread:

discuss.grapheneos.org/d/18831…

#GrapheneOS #privacy #security

GrapheneOS version 2025010700 released - GrapheneOS Discussion Forum

GrapheneOS discussion forum

^{GrapheneOS Discussion Forum}