Hacker News with Generative AI: Privacy

Digital Payment System GNU Taler Gets Green Light to Operate in Switzerland (itsfoss.com)
GNU Taler, the privacy-preserving digital payment system, is now Swiss ready.
Claude 4 can whistleblow you [video] (youtube.com)
Claude 4 Opus can blow the whistle on you (twitter.com)
Something went wrong, but don’t fret — let’s give it another shot.
DOGE used Meta AI model to review emails from federal workers (wired.com)
Elon Musk’s so-called Department of Government Efficiency (DOGE) used artificial intelligence from Meta’s Llama model to comb through and analyze emails from federal workers.
Court Upholds Verdict Adtech TCF for RTB Is Illegal Under GDPR (zylstra.org)
Back in 2022 the Belgian and other data protection boards found that IAB’s ‘Transparency and Consent Framework‘ is illegal, because it is neither transparent nor has any meaningful connection with the word consent.
Administrative court: Cookie banner must contain "Reject all" button (heise.de)
Lower Saxony's data protection officer Denis Lehmkemper can report a legal victory in his long-standing battle against manipulatively designed cookie banners.
U.S. Spy Agencies–One-Stop Shop to Buy Your Personal Data (theintercept.com)
The ever-growing market for personal data has been a boon for American spy agencies. The U.S. intelligence community is now buying up vast volumes of sensitive information that would have previously required a court order, essentially bypassing the Fourth Amendment. But the surveillance state has encountered a problem: There’s simply too much data on sale from too many corporations and brokers.
Russia to enforce location tracking app on all foreigners in Moscow (bleepingcomputer.com)
The Russian government has introduced a new law that makes installing a tracking app mandatory for all foreign nationals in the Moscow region.
I Built My Own Audio Player (nexo.sh)
In 2025, playing your own music on an iPhone is surprisingly hard, unless you pay Apple or navigate a maze of limitations. So I built my own player from scratch, with full text search, iCloud support, and a local-first experience.
Switzerland plans surveillance worse than US (tuta.com)
In Switzerland, a country known for its love for secrecy, particularly when it comes to banking, the tides have turned: An update to the VÜPF surveillance law directly targets privacy and anonymity services such as VPNs as well as encrypted chat apps and email providers.
New Privacy Principles for a more trustworthy web (w3.org)
Protecting user privacy is fundamental to creating a web that works for everyone. Last week, W3C published its Statement on Privacy Principles, in support of furthering this goal. This document defines some foundational privacy concepts and provides a set of privacy principles to guide web development. We hope this guide will enhance the community’s understanding of privacy, illustrate ways of realizing it in practice, and inspire a vision of the trustworthy web that we can create and sustain together.
"Microsoft has simply given us no other option," Signal blocks Windows Recall (arstechnica.com)
Signal Messenger is warning the users of its Windows Desktop version that the privacy of their messages is under threat by Recall, the AI tool rolling out in Windows 11 that will screenshot, index, and store almost everything a user does every three seconds.
By default, Signal doesn't recall (signal.org)
Signal Desktop now includes support for a new “Screen security” setting that is designed to help prevent your own computer from capturing screenshots of your Signal chats on Windows.
YouTube blocking Opera with uBlock origin (reddit.com)
Verizon is sharing customers email addresses (verizon.com)
Our Privacy Policy describes the information we collect, how it is used and disclosed, your choices about uses and disclosure and your rights under certain privacy laws.
The consent you never gave: cookie pop-ups ruled unlawful under GDPR (adguard.com)
An EU appeals court has confirmed in a ruling that a mechanism called the Transparency and Consent Framework (TCF) — which enables tracking and, consequently, tracking-based online advertising — is not compatible with the cornerstone of Europe’s data protection law: the GDPR (General Data Protection Regulation).
How does The Guardian track us? (reddit.com)
Dedicated to the intersection of technology, privacy, and freedom in the digital world.
Firewalls and BIOS's and Coreboot (2020) (hagensieker.com)
I’m into computer security a little bit and always striving to learn more.  I’m also a firm believer in Open Source software.  In Proprietary software you don’t know really know what’s going on.  Case in point:  Alexa, Siri, Hey Google.  They say it isn’t spying on you but you know that it is.
Show HN: A free, privacy preserving, archive of public Discord servers (searchcord.io)
DDoSecrets publishes 410 GB of heap dumps, hacked from TeleMessage (micahflee.com)
This morning, Distributed Denial of Secrets published 410 GB of data hacked from TeleMessage, the Israeli firm that makes modified versions of Signal, WhatsApp, Telegram, and WeChat that centrally archive messages. Because the data is sensitive and full of PII, DDoSecrets is only sharing it with journalists and researchers.
Have I Been Pwned 2.0 (troyhunt.com)
This has been a very long time coming, but finally, after a marathon effort, the brand new Have I Been Pwned website is now live!
Signal Knockoff App Telemessage Got Hacked in 20 Minutes (wired.com)
The company behind the Signal clone used by at least one Trump administration official was breached earlier this month. The hacker says they got in thanks to a basic misconfiguration.
Noyb sends Meta 'cease and desist' letter over AI training (noyb.eu)
Meta has announced it will use EU personal data from Instagram and Facebook users to train its new AI systems from 27 May onwards.
How the Signal Knockoff App TeleMessage Got Hacked in 20 Minutes (wired.com)
The company behind the Signal clone used by at least one Trump administration official was breached earlier this month. The hacker says they got in thanks to a basic misconfiguration.
Show HN: A web browser agent in your Chrome side panel (github.com/parsaghaffari)
BrowserBee is a privacy-first open source Chrome extension that lets you control your browser using natural language.
Show HN: Keep track of why you muted someone on X (github.com/klntsky)
A simple browser extension for x.com (formerly Twitter) that helps you remember why you muted or blocked a user and allows you to keep private notes on user profiles, visible only to you.
Wacom drawing tablets track the name of every application you open (2020) (robertheaton.com)
I have a Wacom drawing tablet. I use it to draw cover illustrations for my blog posts, such as this one:
EU-backed surveillance software for detecting CSAM has flaws,manufacturer admits (ftm.eu)
Controversial non-profit Thorn touts its software as a privacy-friendly way to detect child abuse content. Experts have criticised such tools as potentially leading to mass surveillance – and the technology, while praised by the European Commission, is less reliable than it purports to be, new documents obtained by Follow the Money show.
Alarming gains in face reconstruction from biometric templates (biometricupdate.com)
Biometric template security is critical to the data integrity and privacy the industry needs to thrive, and template inversion attacks represent a potential threat vector that has been mostly theoretical, at least so far. That may be changing, however, with researchers finding sophisticated methods of reconstructing people’s faces from templates.
Switch to EU (switch-to.eu)
Are you concerned about your privacy and the power abuse by American tech companies? This website helps you switch to European and open-source alternatives.