devtake.dev

#privacy

RSS
Two gold Apple Watch Series 12 models with Milanese loop bands, one showing a 62 BPM heart rate screen and one turned to show the green sensor lights on its back
Apple·

Apple Watch's Secure Exclave: raw audio stays in silicon, the summary goes to Apple's servers

Apple's S11 chip walls microphone audio off from watchOS, apps and Apple itself. The condensed text of a Siri Recap still travels to Private Cloud Compute.

A California DMV specimen driver license stamped SAMPLE in black across the middle, showing the fictional holder's portrait, address, height, weight and date of birth
Security·

153 million driver's license scans went up for sale. Krebs traced them to IDScan.net.

A dark web service listed scans of 153 million US and Canadian licenses. Krebs's timestamp analysis points at IDScan.net, and the FBI opened an inquiry.

Data-flow diagram showing a user prompt going to a Microsoft moderation server, which returns a moderated prompt and a watermark ID GUID, with local Stable Diffusion generating the picture and an image-watermarking stage stamping the GUID into the final image
Security·

Server-issued GUID in the pixels: Paint's local AI generation still phones Microsoft first

Xusheng Li took apart Microsoft Paint's watermarking code and found the invisible mark is a per-request GUID issued by a Microsoft server before any pixels exist.

Tim Cook seated at a meeting table, smiling, during a visit to the European Commission
Apple·

Tim Cook says heavy Siri AI users may buy more compute on iCloud+. The plan isn't finished

On his final earnings call, Tim Cook said Apple will offer Siri AI upgrades through iCloud+ for heavy users. No price and no tier have been announced.

Illustration of a figure with an EU-flag head and a figure wearing a headband bearing the Google logo and the German, Polish and French flags, tearing a chocolate-chip cookie apart between them.
Policy·

Around 3% of people want tracking. EU governments dropped the plan to end cookie banners.

A civil-society coalition wants EU browsers to send a machine-readable privacy signal instead of showing consent pop-ups. The Council deleted the provision on June 18.

Delta aircraft parked at jet bridges on the apron at Hartsfield-Jackson Atlanta International Airport under a pink sunset sky
Security·

The DOJ charged a US citizen over a GrapheneOS duress password that wiped his phone at the border

Samuel Tunick's Pixel erased itself during a CBP inspection at Atlanta's airport. Prosecutors call that destroying property to prevent its seizure.

Exploded view of the camera module built into the corner of a Ray-Ban Meta smart glasses frame
Apple·

Apple considered camera-free smart glasses ahead of a planned WWDC 2027 debut

Bloomberg's Mark Gurman reports Apple is aiming for a WWDC 2027 reveal of its first smart glasses, with privacy features and even a camera-free build under discussion.

Android 17 promotional hero image from Google showing new features
Android·

Android 17 ships with floating app bubbles and on-screen reaction recording

Android 17 is rolling out to Pixel first. Here's what actually shipped, from Bubbles and Screen Reactions to tighter location privacy, and which features are still coming.

An open passport photo page, the kind of government ID that age-verification systems ask users to upload.
Policy·

The web wants your ID now. Most age checks leak the data they collect.

Mandatory age-verification laws are turning the open internet into a checkpoint. Here's what the UK, EU, and US states actually require, and why the methods leak.

An automated license-plate reader camera mounted on a roadside pole
Policy·

An Illinois police chief tracked a woman's ex 140 times on Flock, with no warrant required

A McHenry County police chief faces felony charges for using Flock's plate-reader network to track people he knew. The case is fueling a push for warrants.

A Volkswagen ID.4 electric SUV, the kind of connected car whose companion app stopped working on GrapheneOS
Security·

Volkswagen blocked GrapheneOS from its app. Privacy-focused Android keeps getting locked out

Volkswagen's app stopped working on GrapheneOS, the hardened Android fork. The leading explanation is a Play Integrity attestation check that flags non-Google builds.

Brave Origin promotional graphic from Brave's announcement blog
Web·

Brave's browser got bloated with crypto and AI. Origin strips it back for $60

Brave released Origin, a paid version of its browser that compiles out Leo AI, the crypto wallet, Rewards, Tor, and the VPN. A one-time $59.99 buys it, and Linux is free.

A consumer M.2 solid-state drive, the kind of storage the FROST attack times from a browser tab
Web·

A browser SSD timing trick can fingerprint your browsing, and cookies won't stop it

Graz researchers built FROST, a browser side-channel that times SSD activity to guess which sites and apps you're running. Here's how it works and what helps.

Mozilla *Privacy Not Included graphic illustrating a car as a privacy nightmare, with data flowing out of the vehicle.
Security·

Your car logs every hard brake, and the FTC just banned GM from selling it for five years

Connected cars collect location, driving behavior, in-cabin audio, and synced contacts, then route it to automaker clouds, brokers, and insurers. Here's how to stop it.

US military personnel walking with smartphones, illustrating phone location data exposure
Policy·

Adversaries are tracking US troops with the same phone-location data advertisers buy

A Wired investigation and a CENTCOM letter to Senator Wyden confirm enemies are tracking US troops through commercial phone location data. Here's how the broker pipeline works.

DuckDuckGo's 'No AI' search promotion, the page the company points users to when they want AI features turned off.
Web·

Google said people love AI search. DuckDuckGo's installs jumped 30% the next week.

DuckDuckGo's US downloads climbed about 30% and its no-AI search page saw 28% more visits the week after Google's I/O push. The backlash is now measurable.

Apple Newsroom illustration for end-to-end encrypted RCS messaging beta.
Apple·

iOS 26.5 brings encrypted texting between iPhone and Android. Group chats and metadata still leak.

Apple and Google began rolling out end-to-end encrypted RCS on May 11. The MLS-based encryption rides on GSMA Universal Profile 3.0, but EFF says the rollout leaves real gaps.

Abstract illustration of health data and digital privacy
Policy·

Palantir contractors are getting 'unlimited access' to NHS patient data before it's anonymized

NHS England created an admin role giving Palantir staff access to identifiable patient data. The £330M contract's break clause arrives in March 2027.