After Noel Pichardo called out his city's embrace of Flock surveillance cameras, he was subjected to five internal affairs investigations in less than two years.

Alt...

The Cop Who Took On Flock

Meet #ArcaneChat

No phone numbers required for registration.

No strangers discovering and contacting your family members.

All your conversations end-to-end encrypted.

it is magic! ✨

#privacy #security #family #encryption #autonomy #europe #european #android

We’ve all been there before — waiting in the lobby for your dentist appointment and thinking “I’ll just log in to my banking app real quick.” Well, think twice. Hackers are targeting Wi-Fi networks at hotels and other places in ever sneakier ways. PC World has more, including tips to avoid getting hacked on public Wi-Fi:

https://flip.it/ByjdML

#Tech #Security #Technology

Found in my Calishat Snaps: Digital Escape Tools. From the About Page: “Digital Escape Tools exists to make strong privacy and security choices easier to discover. The web is crowded with pay-to-play lists, opaque rankings, and products that treat users as inventory. This platform takes a different stance: clear categories, editorial context, and a bias toward open source, self-hosting, and […]

Canada’s Age Verification Bill Was Always an Unconstitutional Mess

On the heels of the French court ruling, some are wondering is Canada's version is going to share the same fate. Yes.

https://www.freezenet.ca/canadas-age-verification-bill-was-always-an-unconstitutional-mess/

#Censorship #LawAndTechnology #News #Privacy #Security #AgeVerification #BillC34 #Canada #CanadianCharterOfRightsAndFreedoms #court #France

SF Standard: Castro bars dropped face scanners. The bigger fight isn’t over. “A months-long fight over an ID-scanning system that photographs arriving patrons at Castro gay bars has come to a head, with all three venues known to use it — Badlands, Toad Hall, and The Mix — halting the practice under pressure from privacy advocates. But the retreat from the tool, PatronScan, hasn’t […]

404 Media: The Government is Monitoring Anti-Flock TikTok and Instagram Accounts. “Government surveillance centers are monitoring viral anti-Flock Instagram posts, warning local police about upcoming DeFlock events including one scheduled to start next week, and have told cops to ‘increase patrols around ALPR [automatic license plate readers]’ as backlash to Flock grows, according to government […]

737 Chrome VPN Extensions caught routing Traffic through Proxies. [Check If You Have One]

The extensions, published across at least 40 Chrome Web Store developer accounts, racked up 75,486 installs. Of those identified, 274 have been found to impersonate 66 established VPN and privacy brands, including Proton VPN, NordVPN, Surfshark, AdGuard VPN, Browsec, ExpressVPN, CyberGhost, Windscribe, TunnelBear, Cloudflare's 1.1.1.1 and Google's Outline.

The censorship circumvention extensions "route the user's entire browser session through SOCKS5 proxies operated by a single provider," security researcher Kush Pandya said. "520 of the 522 in the bulk corpus route browser traffic through the same SOCKS5 infrastructure."

https://socket.dev/blog/chrome-vpn-extension-impersonation

⁉️"For each affected user, while the extension is connected, every request passes through a server the threat actor controls," Pandya said. "Whether the threat actor owns those proxy servers or resells capacity from an upstream provider is not resolvable from the extension code. If it resells, a further party is in the same position."⁉️

"What is established from the packages and from public infrastructure is the impersonation, the undisclosed proxy configuration, the non-existent premium servers, the false statements submitted to store reviewers, and the post-approval code substitution."

#google #chrome #browser #security #privacy #infosec #tech #media #news

Alt...

👾The vast majority of the extensions have been found to route users entire browser sessions by setting "chrome.proxy.settings" to a fixed SOCKS5 server on port 1082, placing the threat actor in an adversary-in-the-middle [AitM] position to observe browser destinations, source IP addresses, TLS SNI values and any request body sent over plain HTTP.👾 Every extension that configures a proxy also comes with a bypass list that only includes loopback addresses [i.e., the localhost or 127.0.0.1"], meaning every other browser request is funnelled through the SOCKS5 relay on port 1082 once the user connects to the purported VPN service. ⁉️As many as 221 browser add-ons have been removed from the Chrome Web Store, while the remaining 516 extensions have been listed as active. The threat actor is said to be running a subscription VPN business in Russia, based on a 12-digit taxpayer number and the fact that some of them leak their Windows build path ("C:\Users\ollob\OneDrive\Документы\1.myxa-work\08.06.26\<domain>\<product>\<product>-release.zip").⁉️

Alt...

[ImageSource: socket.dev] ⁉️Ideally, the functionality is no different from a legitimate VPN or proxy service. The defining aspect of this activity is its attempt to impersonate established brands as opposed to offering it under their own name. Some of the other red flags include:⁉️ • Advertising paid tiers [or premium locations] that do not exist • DNS-over-HTTPS blocklist evasion • Failing every connection attempt while showing a complete fake interface, including a working connecting animation and status indicator • Shipping an internal manual named "Промт для сотрудников" [translated to "Prompt for employees"] that instructs them to avoid putting the domain directly into "chrome.proxy.settings" (and instead provide only the resolved IP) and refrain from using a domain from another extension without separate instructions • Presence of comments that indicate a deliberate attempt to evade Chrome Web Store policies • Adding a new remote-configuration layer after extension approval • Attempts to game the Chrome Web Store review process by submitting identical justifications, stating "No data transmitted to external servers" or "No user tracking or logging"

Associated Press: Flock announces changes amid backlash over its license plate reader network. “Flock Safety, the surveillance technology company increasingly under scrutiny from lawmakers from both parties, civil liberties advocates and citizens across the U.S., announced Thursday that it is making changes to its platform intended to quell privacy concerns and address documented abuses of its […]

Reuters: German advocacy group lodges criminal complaint over Meta AI glasses. “A German advocacy group has filed a criminal complaint ‌against Meta and other companies selling the technology group’s AI glasses in Germany, arguing the devices violate privacy laws.:

"Stop Using #Discord Right Now..."

https://inv.nadeko.net/watch?v=J1-Gfi2KNlc #Video #Privacy #Security

It took them 4 years to require cops to need a reason to use it?

Flock tries to make its cameras harder for cops to misuse - Engadget

https://www.engadget.com/2236415/flock-tries-to-make-its-cameras-harder-for-cops-to-misuse/

#Flock #Cameras #Cops #ACAB #Security #Surveillance #Tech

this is really super cool:

https://likebutter.app/blog/butterbox-deltachat

quite some other projects try to solve "offline communications" by using Bluetooth but I think this is very unpractical for anything that is not looking like an IRC or SMS app

but if people setup local interconnected wifi hotspots and build a mesh network in the cities/towns then you can have a something much more interesting while not draining everyone's battery

enabling people to do things like this and becoming truly resilient and autonomous

things like this you can never do with centralized messengers like #WhatsApp, #Telegram, #Signal, etc. if you really care about digital independence, centralized alternatives are just NOT an option at all

#mesh_network #mesh #offlinefirst #deltachat #autonomy #privacy #security #freedom #resilience #decentralization #opensource #europe #european #digitalindependence #diday #butterbox

#TutaMail and #ProtonMail are by far the world's two best email providers/services for #Anonymity, #Privacy and #Security (#APS).

I have recently (12th August 2026) carried out a thorough research into this as I am planning to migrate to whichever is the best email provider/service for APS and move away and ditch US Big Tech.

Between the two, the one that comes on top depends on what you value most on aggregate. In individual edge terms, here is how they compare:

Tuta Mail: cheaper; more custom domains; more email addresses; more established/robust Post-Quantum (PQ) Security;

ProtonMail:

@Tutanota
@ProtonMail
@protonprivacy

Common Dreams: New Database Documents Over 100 Cases of Cops Abusing Flock Surveillance Cameras. “A new database launched Wednesday that details more than 100 cases of alleged abuse by law enforcement officers using Flock Safety’s nationwide camera network is adding fresh urgency to the growing backlash against automated license plate readers.”

Apple iCloud Private Relay can expose Real IPs through WebKit Proxy Bypasses.

IT-Security researchers have disclosed a security issue with Apple's iCloud Private Relay tool that can expose a user's real IP address.

https://mysk.blog/2026/08/04/webkit-proxy-icloud-private-relay-ip-leak/

Introduced with iOS 15, iCloud Private Relay employs a dual-hop architecture to ensure users privacy by routing their Safari web traffic through two relays so that no single third-party, including Apple, can determine where the request is originating from and what sites are being visited. It's available as part of the iCloud+ subscription.

https://support.apple.com/102602

⚠️Researchers Talal Haj Bakry and Tommy Mysk, who found the issue, said the problem is rooted in three features in Apple's WebKit: DNS prefetching, WebAuthn Related Origin Requests, and WebTransport. WebKit is the default web browser engine used by Safari and all third-party browsers on iOS and iPadOS, such as Google Chrome, Microsoft Edge, Mozilla Firefox, Brave and others.⚠️

A proof-of-concept (PoC) website named "leaks.psylo[.]app" has been made available for anyone to check if their real IP address leaks, even when Private Relay is on.

https://leaks.psylo.app/

⁉️Apple did not immediately respond to a request for comment. But the company told 404 Media that it's investigating the researchers' report.⁉️

https://www.404media.co/apples-private-relay-is-exposing-users-real-ip-addresses/

#apple #icloud #security #privacy #infosec #tech #media #news

TechSpot: A cybersecurity researcher covered a Toyota in an AI-generated pattern to confuse Flock cameras. “The pattern does not stop a camera from recording. Instead, it is designed to prevent the software connected to the camera from recognizing what it sees. A person or car wearing the pattern would still appear in the footage, but the detection system may not flag it as a person or […]

Decentralized Identifier Resolution (DID Resolution) v1 retrieves a DID document for a given DID, while DID URL dereferencing retrieves a resource for a given DID URL. This @w3c specification defines a standard interface for both, independent of the DID method, along with implementation, #security and #privacy requirements #timetoimplement
▶️ https://www.w3.org/TR/did-resolution-1.0/

Feedback welcome! https://github.com/w3c/did-resolution/issues

The Register: Signal adds an extra layer of security to make sure you’re actually chatting with the right person. “Signal has introduced a new layer of security to help make sure no one has secretly interfered with your encrypted chats. The chat app is favored by diplomats, activists, and journalists for its security. It uses end-to-end message encryption and ‘safety numbers’ – cryptographic […]

Signal introduces Automatic Key Verification 🔑

It provides an easier solution for confirming end-to-end encryption between you and your contact

👉 https://aboutsignal.com/news/signal-introduces-automatic-key-verification/

#signal #signalapp #signalmessenger #aboutsignal #security #privacy #tech #news

#Flock Highlighted #Police Departments Using Its Tech. Now 4 Face Allegations of Misuse

Flock posted videos on its YouTube channel highlighting at least four police departments whose officers have faced allegations of misusing the company’s tech.
#alpr #privacy #security #flocksafety

https://www.wired.com/story/flock-videos-highlighted-police-departments-that-face-misuse/

Why Are So Many People Upset About #Flock #Cameras ?

Flock Safety’s automated license plate-reading cameras, used by thousands of law enforcement agencies in the U.S., have drawn intense criticism from civil liberties groups.
#privacy #security #alpr #flocksafety

https://www.nytimes.com/article/flock-safety-camera-technology.html

"The #BBC has spoken to several headteachers and staff at #Jewish #schools. All asked not to be named because of concerns over their #security and that of their schools.

One headteacher said: "In recent years [security] has become an overwhelming priority and increased a significant amount. There have been weeks where approximately 90% of my time has been spent on security-related matters.

"Security concerns can become one of the many things that headteachers carry with them beyond the school day and, quite literally, can be among the things that keep me awake at night."

Another headteacher, who has led a different Jewish school for 13 years, told the BBC: "I've never spent so much of my time and so much energy dealing with security issues, talking to governors and parents, and above all making daily decisions about how to ensure #children in our school are safe."

https://www.bbc.com/news/articles/c98vm1n64ljo

Meet #ArcaneChat

No phone numbers required for registration.

No strangers discovering and contacting your family members.

All your conversations end-to-end encrypted.

it is magic! ✨

#privacy #security #family #encryption #autonomy #europe #european #android

Do mini PCIe hardware security modules or standalone cryptographically strong pRNGs exist? If they do, where can I get one? NetBSD is complaining about low entropy (laptop from 2011) & suggests I keysmash, use an entropy file, or get a USB pRNG. I would prefer to have all of my USB ports free.

I have no idea where to find such a thing & I can't even find USB HSMs besides the one that YubiCo sells. The closest thing I have found is a bunch of TPM2 chips with SPI headers on them & I don't think I have any free SPI connectors in the laptop. For now I'll use an entropy file but I would rather do something better like using a proper RNG device.

I think people watching these tags might know more than I can find with a search engine. Thank you.

#Security #BSD #NetBSD #Linux #Cryptography

VPNs, or virtual private networks, are among the best tools for protecting yourself online. They’re generally best when paid for, but you can still keep your privacy without forking over the cash. Here are PC World’s top five:

https://flip.it/6B3waM

#Tech #Security #VPN

Happy Sunday!

The weekend is not over yet: you still have time to recommend #ArcaneChat to a friend or family and help them get in contact with you here.

Spread purple love 💜✨
Keep the family safe 🤗

#privacy #encryption #europe #european #OpenSource #android #security

Interesting Git repos of the week:

Detection:

* https://github.com/Yamato-Security/WELA - improve your Windows logging

Bugs:

* https://github.com/timb-machine-mirrors/imbas007-POC-CVE-2026-60206 - popping WebLogic via SAML

Exploitation:

* https://github.com/Mrnmap/RedTeam - a nice list of tools
* https://github.com/H4CK3RT3CH/RedTeam-Tools - another nice list of tools
* https://github.com/redteaminfra/redteam-infra - Puppet powered red team infrastructure
* https://github.com/apocalypse9949/Redteam-Automation - AI driven red team framework 🤖
* https://github.com/CR-DMcDonald/letitrust - seizing hanging Azure tenant domains with Gandi
* https://github.com/SyscallX-18113/Apkx-Hunter - automated analysis of Android APKs

Cryptography:

* https://github.com/bandrel/HashcatRosetta - Hashcat rule analyzer and interpreter 🤖

#security, #research, #code

"#Synagogues across the #US are having congregants train to be volunteer #security teams as #antisemitic #assaults hit record levels and #Jewish gathering places face increasing threats.

Driving the news: The front doorways of many synagogues are becoming both a place of welcome and a security checkpoint — a sign of how #antisemitism is reshaping Jewish life in #America.

The traditional practice of hiring a guard for High Holy Days services, installing cameras and calling police if something happens, is giving way to more complex, layered security systems.

It doesn't mean that we're ninjas ... [or] law enforcement officers, but everybody can have a role to play," said Rusty Rosenthal, a retired FBI agent who leads #JShield, the #JewishFederation of Greater Washington's security arm in the D.C. area."

https://www.axios.com/2026/08/08/synagogues-security-teams-jews

PetaPixel: Apple Faces $32.5 Billion Lawsuit Over Facial Recognition in iPhone Photos App. “Apple is facing a lawsuit seeking up to $32.5 billion over claims its iPhone Photos app illegally collected users’ biometric information. The iPhone is widely known for using Face ID as a biometric security feature to help protect users’ privacy. However, a class action lawsuit in Illinois alleges […]

The Guardian: Restaurants, pubs and theatres ban Meta’s ‘spy glasses’ over privacy fears. “When Meta used superstar Kylie Jenner to promote its sleek new line of ‘spy glasses’, the social media company hoped the devices would reach the same broad acceptance that tablets and smartwatches have found before them. But those plans have hit a snag in the UK, where venues from elite restaurants […]

Lifehacker: AI Note-Taking Apps Are Violating User Privacy. “A few years ago, AI note-taking and transcription tools were a niche productivity hack used by busy executives and the media. Now, they’re everywhere. But these apps come with a legal fine print that most people don’t know to look for.”

am I the only one annoyed by so frequent #GrapheneOS updates???

I am already pissed off one can not disable automatic download of updates, one can disable the updates app completely, but I would prefer to manually check for updates and review available update before downloading not to completely disable updates

then after applying updates it takes ages "optimizing apps" see this screenshot, only 8 optimized apps out of 35 and it has taken 19 minutes already and in the meantime the phone is very slow and overheated :(

#android #degoogled #degoogle #privacy #security #opensource

Harley, a Proton privacy expert, shares 7 physical privacy gadgets her team actually uses when passwords aren’t enough: BusKill laptop theft kill switch, IMSI catcher detectors, Faraday pouches, security keys, privacy screen protectors, USB data blockers, and yes—cash. 🔐🛡️📵 https://proton.me/blog/privacy-gadgets #privacy #security #ProtonTeam #Proton

Flock posted videos on its YouTube channel highlighting at least four police departments whose officers have faced allegations of misusing the company’s tech.

Alt...

Flock Highlighted Police Departments Using Its Tech. Now 4 Face Allegations of Misuse

PetaPixel: Meta Smart Glasses Face Calls for Bans Across Europe Over Privacy Concerns. “Several European countries — including France, Germany, and the Netherlands — are considering banning Meta’s smart glasses as regulators examine whether the devices comply with privacy laws.”

Meet ArcaneChat: a secure and #decentralized private messenger

Anonymous: No SIM card needed! No phone numbers required for registration, just set a name and start chatting!

Private: All your conversations are end-to-end encrypted

Discreet: No one can discover you or know that you are using the app! only people you share your invitation link or QR with can contact you

#digitalindependence #privacy #security #family #encryption #autonomy #european #openSource #europe #diday #decentralization

And another #GenAI on GenAI hack case. This time Meta AI is the culprit:

https://www.reuters.com/technology/metas-ai-model-hacked-another-company-during-testing-information-reports-2026-08-05/

I guess it's for street creds that your #AI needs to be at least good enough to take out another one's security.

#LLM #Meta #security

https://proton.me/blog/privacy-gadgets

The tools that a privacy expert uses to protect themselves, Article and video past the link

- BusKill: a kill switch for laptop theft
- IMSI catcher detectors
- Faraday Pouches
- Security Keys
- Privacy Screen Protectors
- USB Data Blocker
- Cash

#Privacy #Security

we are happy to hear reports from parents that say the small ones of the family like a lot ArcaneChat and the in-chat mini-apps

#ArcaneChat #family #kids #privacy #security #encryption #android #Europe #European #OpenSource #decentralization #digitalindependence

"I just despise... having to buy multiple phones to test shit on another android version on occasion without it being highly time consuming and inconvenient (esp. for stuff like banking apps breaking even when reverted)..."

#Quote Klaus Frank / @agowa338

#Mobile #Phone #Working #Testing #Apps #Banking #Security #Quotes

The #security and #privacy oriented #NextcloudPi project, which is focused on self-hosting on your own raspberry pi hardware, blocks #TORbrowser from accessing docs.nextcloudpi.com.

One is not allowed, apparently, to exercise one's privacy when learning how to use the software.

Meet ArcaneChat: a secure and #decentralized private messenger

Anonymous: No SIM card needed! No phone numbers required for registration, just set a name and start chatting!

Private: All your conversations are end-to-end encrypted

Discreet: No one can discover you or know that you are using the app! only people you share your invitation link or QR with can contact you

#digitalindependence #privacy #security #family #encryption #autonomy #european #openSource #europe #diday #decentralization

Gizmodo: Flock Cameras Got the Wrong License Plate 71% of the Time in California City. “The analysis focused on a two-year period between 2023 and 2024, in which Roseville PD received 1,427 alerts from Flock cameras…. In 71% of cases that generated an alert related to vehicles that were stolen or used in a felony, the system misread the license plate, seemingly producing false positives.”

happy #caturday! don't forget to be a little weird today and to join some #ArcaneChat channels! check the list at:

https://arcanechat.me/channels

#chatmail #DeltaChat #channels #memes #news #politics #dev #developerjokes #comics #android #opensource #privacy #encryption #security

#ShinyHunters claims #BrinksHome breach, threatens to leak stolen data

https://www.bleepingcomputer.com/news/security/shinyhunters-claims-brinks-home-breach-threatens-to-leak-stolen-data/

#Brinks #security #cybersecurity #privacy

Mashable: Central Park lawyers’ viral kiss sparks privacy debate. “On July 23, TikTok creator Jay Guapõ, who boasts 3.5 million followers, posted a video showing a man and woman kissing near Central Park West and West 63rd Street. Guapõ approaches them while continuing to record. ‘Get a room. There’s kids around,’ he tells them.”

ABC News (Australia): AFL clubs explore facial recognition as new ticketing method. “Facial recognition technology (FRT) is being rolled out in Australia as an alternative to digital or paper tickets for live events. The Geelong Football Club has made it available to its members, while technology provider Wicket says it is in ‘active discussions’ with other AFL clubs.”

"Ghost Town has stepped in to address a decades-old problem with an unconventional approach."

Hayes Davenport for LA Material: https://lamaterial.com/p/ghost-town-consultants-venice-homelessness

#Longreads #Homelessness #Unhoused #Venice #LosAngeles #Security

#Reminder Activist Checklist was launched in mid-2024 to cut confusion and improve digital security for Palestine solidarity organizing—without requiring anyone to become an expert. Built by experienced activists; guidance updates as surveillance tactics evolve. Subscribe: https://activistchecklist.org 🔒🛡️📱 #DigitalSecurity #PalestineSolidarity #SurveillanceAwareness #MutualAid
#Privacy #Security

A quotation from John Adams

   We are to look upon it as more beneficial, that many guilty persons should escape unpunished, than one innocent person should suffer. The reason is, because it’s of more importance to community, that innocence should be protected, than it is, that guilt should be punished; for guilt and crimes are so frequent in the world, that all of them cannot be punished; and many times they happen in such a manner, that it is not of much consequence to the public, whether they are punished or not.
   But when innocence itself, is brought to the bar and condemned, especially to die, the subject will exclaim, it is immaterial to me, whether I behave well or ill; for virtue itself, is no security. And if such a sentiment as this, should take place in the mind of the subject, there would be an end to all security what so ever.

John Adams (1735–1826) American lawyer, Founding Father, statesman, US President (1797–1801)
Speech (1770-12-03/04), Argument for the Defense, Boston Massacre Trial

More about this quote: wist.info/adams-john/15073/

#quote #quotes #quotation #qotd #johnadams #bostonmassacre #nothingtolose #civilrights #crime #criminal #exoneration #guilt #guilty #innocence #innocents #justice #lawandorder #moralhazard #protection #punishment #security #socialcontract #justicesystem

858 potential bugs found, 595 awaiting patches, 120 fixes open upstream, 143 merged.

Patch the Planet's latest numbers are now on a public dashboard that covers 41 codebases, including curl, OpenSSL, Keycloak, containerd, and kubernetes-client.

The 13 CVEs assigned so far include a high-severity nginx bug (CVE-2026-42530) and findings in curl, aiohttp, go-jose, and cryptography.

Every accepted fix links to its upstream PR.

https://trailofbits.com/patch-the-planet/dashboard

#opensource #security

Keep the family safe with #ArcaneChat 🤗💜

No phone numbers required for registration, just set a name and start chatting!

No strangers discovering and contacting your family members!

All your conversations encrypted, only visible by family members, no 3rd party trust needed!

#digitalindependence #privacy #security #family #encryption #autonomy #europe #european #android

Google has introduced video selfie authentication for account login and recovery. PC World tells us why you should stick to established authentication methods:

https://flip.it/LZjXHv

#Tech #Google #Security

𝗢𝗯𝘀𝗲𝗿𝘃𝗮𝘁𝗼𝗿𝘆 𝗯𝘆 𝗠𝗼𝘇𝗶𝗹𝗹𝗮:

#Header #Security #Mozilla

https://thewhale.cc/posts/observatory-by-mozilla

Observatory helps developers, system administrators, and security professionals how configure their sites safely and securely.

Alt...

Observatory helps developers, system administrators, and security professionals how configure their sites safely and securely.

really?
ok, normally, i support jason hanson with #physical #security , but here i simply can't.
first off, from the looks of it, all this does is block trackers using a 50-100 dollar router.

second, why would i pay $1000 - $10000 for a device like this? i've, on my own hardware, for about 90dollars, deployed a DNS server on this miniPC in underr 10 minutes. i don't see where the value is.

and lastly, do not market the fact it's X CIA certified as a markup strategy.
this is the worst marketing for a cybersecurity product, if i've ever heard of one. CC: @kkarhan
https://www.youtube.com/watch?v=-9UddKV_JQw&t=188s

Future of Privacy Forum: FPF Releases New Issue Brief on U.S. “Data Broker” Regulatory Landscape. “To help make sense of this rapidly evolving regulatory space, FPF is releasing a new issue brief, The Boundaries of Data Brokerage: An Overview of the U.S. Regulatory Landscape. This issue brief provides an overview of the emerging regulatory landscape—focusing on recently enacted state and […]