privacy
19 posts
Your Git history is already in the cloud
ZCode transmits local Git history to the cloud with no consent prompt and no notification. A post-incident breakdown of the boundary that was never enforced.
Every new feature makes iOS 27 less safe
iOS 27, iPadOS 27, and macOS 27 concentrate risk at one point: whether a capability re-checks identity at execution, not at the moment consent was captured.
XCancel shut down the last usable Nitter
XCancel's Nitter service is suspended. What the sudden shutdown means for your data and how to avoid the malicious clones rushing to replace it.
Zoom reads your clipboard uninvited
On Linux, the Zoom client reads everything written to the X11 clipboard because trust on the selection channel is granted at connection, not per read.
You depended on access you never owned.
Google's anti-scraping update changed a control scrapers never owned, exposing the structural risk of building on an interface you cannot see or govern.
A helpful AI agent cannot be a private one
Meta's Muse personal AI agent is only useful because it reads your messages, contacts, and habits. What that access costs your privacy and safety.
You can't reset your genome
AlphaGenome Atlas makes genomic prediction cheap and fast, but a genome can't be rotated like a password - reshaping AI safety and data ethics.
Chrome exempts Google's domains from user site-data controls
Chrome does not enforce user site data settings against Google-owned domains. What the exempt scope means and how to treat the control.
The system ran one veteran 100 times
One person was queried 100+ times in a Flock tracking system. When identity is the only enforced gate, abuse completes exactly like legitimate use.
The torrent protocol shares your address by design
How an adult studio unmasked a Meta exec's John Doe torrent handle, and what the IP-to-identity pipeline means for your privacy.
Private was never private
Messaging apps protect your chat from other users, not from the operator that holds the content, the metadata, and the terms you accepted at install.
tanh now fingerprints your OS
Chromium 148 dispatches Math.tanh to the platform libm, leaking OS identity through last-bit IEEE 754 divergence. A silent, unpatchable fingerprinting signal.