Hacker News with Generative AI: Data Security

Microsoft unveils finalized EU Data Boundary as European doubt over US grows (theregister.com)
Microsoft has completed its EU data boundary, however, analysts and some regional cloud players are voicing concerns over dependencies on a US entity, even with the guarantees in place.
Banking's critical functions are vanishing into the cloud (ft.com)
It’s 9pm — do you know where your data is?
Research Finds 12,000 'Live' API Keys and Passwords in DeepSeek's Training Data (trufflesecurity.com)
Research finds 12,000 ‘Live’ API Keys and Passwords in DeepSeek's Training Data
Corporations dig deeper: using bunkers to secure data (and their CEOs) (semafor.com)
Large corporations are shopping for underground bunkers that can survive a nuclear blast to protect their data centers and C-suite employees as geopolitical tensions rise.
CouchDB Prevents Data Corruption: Fsync (neighbourhood.ie)
Programming can be exciting when the underlying fundamentals you’ve been operating under suddenly come into question. Especially when it comes to safely storing data. This is a story of how the CouchDB developers had a couple of hours of excitement making sure their fundamentals were solid (and your data was safe).
Github scam investigation: Thousands of “mods” and “cracks” stealing data (timsh.org)
While looking through the articles on a "social engineering" themed forum I discovered a relatively new scam scheme that shocked me.People create thousands of GitHub repositories with all sorts of things - from Roblox and Fortnite mods to "cracked" FL Studio and Photoshop.
SanitAI: A reverse proxy to remove PII data from OpenAI API calls (github.com/edublancas)
DeepSeek coding can transfer users' data directly to the Chinese government (abcnews.go.com)
DeepSeek, the explosive new artificial intelligence tool that took the world by storm, has code hidden in its programming which has the built-in capability to send user data directly to the Chinese government, experts told ABC News.
Ask HN: Thoughts on using American-based cloud vendors in the Trump era? (ycombinator.com)
I think American cloud providers offer state‐of‐the‐art infrastructure but it's fair to question whether the current U.S. political environment—and the unpredictability it sometimes brings—could affect data sovereignty and regulatory stability.
Ask HN: How can I prepare my digital life for geopolitical disruptions? (ycombinator.com)
I'm from Germany and currently rely on macOS and iOS, with all my personal data stored in iCloud. Recent political tensions have made me question what might happen in the event of a military conflict between the US and Europe. Could Apple be forced to shut down its services in Europe? What would happen to my devices, operating systems, and stored data in such a scenario?
Dutch medical records on HDDs bought for €5 at fleamarket traced to software biz (theregister.com)
Typically shoppers can expect to find tie-dye t-shirts, broken lamps and old disco records at flea markets, now it seems storage drives filled with huge volumes of sensitive data can be added to that list.
Musk Team Seeks Access to IRS System with Taxpayers' Records (nytimes.com)
The Internal Revenue Service is preparing to give a team member working with Elon Musk’s so-called Department of Government Efficiency access to sensitive taxpayer data, people familiar with the matter said.
EFF Sues DOGE and the Office of Personnel Management (eff.org)
EFF and a coalition of privacy defenders have filed a lawsuit today asking a federal court to block Elon Musk’s Department of Government Efficiency (DOGE) from accessing the private information of millions of Americans that is stored by the Office of Personnel Management (OPM), and to delete any data that has been collected or removed from databases thus far.
ChatGPT maker OpenAI taking claims of data breach 'seriously' (the-independent.com)
OpenAI is investigating reports of a potential data breach affecting millions of user accounts, but says it has yet to find evidence supporting the claims.
Mad at Meta? Don't Let Them Collect and Monetize Your Personal Data (eff.org)
If you’re fed up with Meta right now, you’re not alone. Google searches for deleting Facebook and Instagram spiked last week after Meta announced its latest policy changes.
"Disturbing" new detail emerges about DeepSeek and what it does with your data (neowin.net)
Everyone knows your location: tracking myself down through in-app ads (timsh.org)
Recently I read about a massive geolocation data leak from Gravy Analytics, which exposed more than 2000 apps, both in AppStore and Google Play, that secretly collect geolocation data without user consent. Oftentimes, even without developers` knowledge.
Guess who left a database wide open, exposing chat logs, API keys, and more? (theregister.com)
China-based AI biz DeepSeek may have developed competitive, cost-efficient generative models, but its cybersecurity chops are another story.
Cerebras fastest host for DeepSeek R1 70B, 57x faster than Nvidia GPUs (venturebeat.com)
Cerebras Systems announced today it will host DeepSeek’s breakthrough R1 artificial intelligence model on U.S. servers, promising speeds up to 57 times faster than GPU-based solutions while keeping sensitive data within American borders.
Microsoft Probing If DeepSeek-Linked Group Improperly Obtained OpenAI Data (bloomberg.com)
Microsoft Corp. and OpenAI are investigating whether data output from OpenAI’s technology was obtained in an unauthorized manner by a group linked to Chinese artificial intelligence startup DeepSeek, according to people familiar with the matter.
FTC takes action against GoDaddy for alleged lax data security (ftc.gov)
US Cloud soon illegal? Trump punches first hole in EU-US Data Deal (noyb.eu)
Since the Snowden disclosures we know that the US engages in mass surveillance of EU users by scooping up personal data from US Big Tech. The "Privacy and Civil Liberties Oversight Board" (PCLOB) is the key US oversight authority for these laws. The New York Times now reports, that Democratic Members of the (officially "independent") PCLOB, have received letters, demanding them to resign by Friday night.
US Cloud soon illegal? Trump punches first hole in EU-US Data Deal (noyb.eu)
Since the Snowden disclosures we know that the US engages in mass surveillance of EU users by scooping up personal data from US Big Tech. The "Privacy and Civil Liberties Oversight Board" (PCLOB) is the key US oversight authority for these laws. The New York Times now reports, that Democratic Members of the (officially "independent") PCLOB, have received letters, demanding them to resign by Friday night.
FTC Takes Action Against GoDaddy for Lax Data Security for Its Web Hosting (ftc.gov)
GM banned from sharing driving and location data with insurance companies (techcrunch.com)
We regularly hear stories about companies that are selling your sensitive personal information — including your location data — to the highest bidder. The latest culprit appears to be General Motors.
Candy Crush, Tinder, MyFitnessPal: Apps hijacked to spy on location (wired.com)
Some of the world’s most popular apps are likely being co-opted by rogue members of the advertising industry to harvest sensitive location data on a massive scale, with that data ending up with a location data company whose subsidiary has previously sold global location data to US law enforcement.
What happens on your device, stays on your device – until it doesn't (obdev.at)
Apple has recently shown a noticeable tendency to collect, gather, transmit, and sometimes even store privacy-sensitive data – despite repeatedly emphasizing the importance of protecting such data and ensuring it remains solely on the user’s device.
ShredOS – Secure disk erasure/wipe (github.com/PartialVolume)
We know where your car is (ccc.de)
Der Chaos Computer Club (CCC) deckt auf, dass der Volkswagen-Konzern Bewegungsdaten von hunderttausenden Fahrzeugen der Marken VW, Audi, Skoda und Seat systematisch erfasst und über lange Zeiträume speichert. Die Daten, einschließlich Informationen über Fahrzeughalter:innen, waren zudem ungeschützt im Internet zugänglich.
Beijing got unprecedented access to private texts and phone conversations (fortune.com)