Daily Digest | 7 July 2026

Your daily dose of Privacy, Data Protection, AI & Cybersecurity news.

5 stories you should not miss.

Read more: https://www.nicfab.eu/daily-digest/

#Privacy #AI #GDPR #Cybersecurity #TechLaw

Stop sending your API keys to the cloud! 🔒

postctl keeps your Mastodon, Bluesky, and Threads tokens securely stored on your local disk. Using AES-256-GCM encryption derived from a custom passphrase, your credentials stay encrypted inside a local SQLite database. Zero telemetry, zero cloud intermediate servers.

100% open source and local-first:
👉 https://github.com/aeon022/postctl
🌐 https://postctl.sh

#privacy #security #selfhosted #localfirst #opensource #cryptography

Chat Control is back in front of the EU Parliament this week — client-side scanning as the default architecture for everyone's messages, again. Whatever side of that fight you're on, it's a good reminder: the safest data is data that was never sent anywhere to be scanned. Local inference doesn't need a legal exception carved out for it — there's no wire to tap.

#Privacy #LocalAI #SelfHosted #DigitalSovereignty

The European Parliament will discuss the return of Chat Control 1.0 today — first, it will decide on an expedited procedure

The European Parliament is meeting in Strasbourg today. On the agenda is a proposal to reinstate the temporary voluntary message-scanning scheme, nicknamed “Chat Control”…

https://vsx.global/the-european-parliament-will-discuss-the-return-of-chat-control-1-0-today-and-will-first-decide-on-an-expedited-procedure/

#infosec #privacy #opensource #digitalsovereignty

The Feeling When you hacked your target, used a VPN, but had Connected Devices Platform enabled including logging of activity history.

Stop the pointless hacking, but also go read about Windows Timeline and activitiescache.db.

The story isn't the GDID. The story is the Surveillance by Default™.

#opsec #privacy #digitalforensics #scatteredspider

The arrest of a teenage hacker has revealed that #Microsoft can track a Windows PC and its online activity through a “Global Device ID" that seems to have no easy opt-out, sparking fears about potential #surveillance.
https://www.pcmag.com/news/a-hackers-arrest-reveals-microsoft-can-track-users-via-a-windows-device
#privacy #digitalsovereignty #infosec #gdid

Privacy News That Actually Matters. Every Monday, one story from the data privacy world. Recent, relevant, and actually readable.

#privacy #news #indigoprivacy

Privacy News That Actually Matters. Every Monday, one story from the data privacy world. Recent, relevant, and actually readable.

#privacy #news #indigoprivacy

This game could be used as a huge explainer into how surveillance capitalism works and how people are exploited on both sides of the screen.

MajorOffline: Hae Stack – MajorLinux

https://buff.ly/ANONU8v

#Gaming #HaeStack #Investigation #PointAndClick #Political #Privacy #Puzzle #Steam #SteamNextFest #Surveillance #Capitalism #Tech #YouTube

🌎Exploring the evolution of an idea that can have grave consequences for our privacy, particularly because many see this world as a zero-sum game where only the survival of the 'fittest' matter.

#privacy #privacymatters #humanrights #neurorights

Alt...

A reading list about the evolution of the idea of collective intelligence.

Ransomware is now the most common cause of retailer data breaches: 32% of claims and 61% of the losses, per Verizon's 2026 study. Every store you shop at holds your payment and personal data, and that data is the target.

#privacy #ransomware #databreach #retail #verizon #indigoprivacy

Musk’s X poses “serious risk to Americans’ privacy,” advocates warn #FTC

Ahead of a July 2 deadline to submit public comments, advocates are warning the Federal Trade Commission that it must keep close watch over Elon Musk’s X and firmly reject a recent bid to end the agency’s ongoing audits of the platform’s data handling.

Last month, the FTC posted a notice explaining that X had argued that an FTC order was no longer necessary due to changes #Musk had made to the platform.
#privacy #Twitter

https://arstechnica.com/tech-policy/2026/07/musks-x-poses-serious-risk-to-americans-privacy-advocates-warn-ftc/

The secret weapon of stylometry – the statistical analysis of writing style – is something called “function words.” Most people assume AI looks for unique topical vocabulary. It actually looks for words like the, and, of, and in. Authors use these filler words unconsciously. Because you do not think about them, they are incredibly difficult to fake or manipulate. You naturally drop them into sentences at a highly specific, mathematical rate, making your “word print” almost wholly unique.

AI stylometry algorithms can identify anonymous authors with up to 99.8% accuracy just by counting subconscious function words. The technology is so precise it is sparking debates about whether writing style is biometric data. #TechNews #Privacy #AI #Cybersecurity
https://blazetrends.com/how-ai-stylometry-identifies-anonymous-authors-the-code-behind-your-writing-dna/?fsp_sid=46822

#Flock Defense "No Expectation of #Privacy In Public" Is Wrong (Public Report)

Online, Flock draws far more critics than defenders. But among those who do, the most common argument is a familiar one: there is no expectation of privacy in public, and license plates are visible to anyone on the road, so what's the problem? It is a reasonable instinct. It is also an oversimplification, and not what courts are being asked to decide.
#alpr #surveillance #flocksafety

https://ipvm.com/reports/flock-no-privacy-public

If you are out at the Stampede in #Calgary and you see us, come to say hi and sign the petition to bring political parties under #privacy law in person!

We will be talking with attendees about the privacy loophole and how to prevent the #Alberta breach from happening again!

Learn more at https://voterprivacy.ca/

Hospital emergency departments collect patient location data through mobile check-in apps and share it with marketing vendors through third-party analytics tools.

#privacy #healthcare #locationdata #indigoprivacy

Quick practical one: photos taken on a phone usually embed EXIF metadata — GPS coordinates, device model, exact timestamp — inside the file itself. Sending it through an E2EE chat protects it in transit, but if the app doesn't strip EXIF (or the recipient re-shares the raw file), that metadata travels with it.

Worth checking whether your messenger strips this automatically, and doing it yourself before sending anything sensitive if you're not sure.

#privacy #infosec

While the Trump administration is strong-arming developing countries into giving up their citizens' privacy, other countries can afford to be more conscious about keeping their data safe.
#digitalsovereignty #privacy
https://www.connexionfrance.com/practical/france-moves-to-cut-reliance-on-microsoft-for-health-data/796443

RE: https://indieweb.social/@perlman/116769358209034227

Oooh ... This is going to be useful! Definitely, adding it into #SovereignByDesign #DigitalAutonomy👌🏻😍

#Privacy #PrivacyMatters #OpenSource

🚨 WHOIS privacy is under pressure.

GoDaddy is challenging an Indian court ruling that could fundamentally change how domain privacy works by requiring:

🔹 Mandatory e-KYC for domain registrations
🔹 WHOIS privacy no longer enabled by default
🔹 Registrars to disclose registrant details within 72 hours to parties claiming a "legitimate interest"

This isn't just about India.

The outcome could influence domain privacy, ICANN policy, RDAP adoption, cybersecurity investigations, trademark enforcement, and the future of online anonymity worldwide.

I break down:
✅ What the court actually ordered
✅ Why GoDaddy is appealing
✅ How WHOIS and RDAP really work
✅ The privacy vs law enforcement debate
✅ What it means for domain owners, security researchers, and businesses

Read the full analysis 👇
https://thecybersecguru.com/news/godaddy-india-whois-privacy-ruling/?utm_source=mastodon&utm_medium=social

#CyberSecurity #WHOIS #GoDaddy #DomainNames #Privacy #RDAP #ICANN #OSINT #DNS #InfoSec #CyberLaw #India #DataPrivacy #CyberNews

🔒 A 19-year-old cybercriminal was caught despite using a VPN across multiple countries - because Windows has a tracking number built into every install that a VPN can't hide.

Peter Stokes, arrested in Finland in April and extradited to the US last week, is tied to Scattered Spider, the hacking group behind the 2023 MGM and Caesars casino breaches. The group is linked to 100+ intrusions and over $100 million in extortion.

The FBI didn't crack his VPN. Microsoft handed over his Global Device ID (GDID), a unique identifier baked into every Windows installation at setup. It doesn't change when you update, switch networks, or use a VPN. The only way to reset it is a full OS reinstall.

Investigators matched Stokes's GDID across IP addresses in Estonia, New York, and Thailand, correlating with login times on his Snapchat, Apple, and Facebook accounts. The same device that breached a luxury jewelry retailer and demanded $8 million in ransom also logged into Snapchat and a video game from his real network.

So while VPNs mask your IP address, they were never designed to hide device-level identifiers embedded in your operating system. The tracking can live one layer deeper than the one most people defend.

Read more:
https://www.itnews.com.au/news/microsoft-device-telemetry-key-to-unmasking-alleged-scattered-spider-hacker-627148
https://www.databreachtoday.com/scattered-spider-suspect-extradited-from-finland-to-us-a-32140

#cybersecurity #privacy #windows

Opinion
"AI surveillance is being supercharged – and it will chill social progress
Bruce Schneier and Jon Penney

These systems will soon be able to track our public and private lives. But we can make the policy choices to reject it"

#privacy #surveillance #ai #noai #BruceSchneier

https://www.theguardian.com/commentisfree/2026/jul/06/ai-surveillance-policy

(the images cover about half of the article)

Alt...

In the near future, AI-powered surveillance systems will be able to track everything we do in public, and much of what we do in private. And if we do something wrong – shoplift, litter, jaywalk, you name it – the system will notice, retain it, tie it to your official government record, communicate that fact to you, and provide real-time alerts to any relevant authorities … and maybe also to the general public. Think of these systems as automated speed cameras, but on steroids. Only they’ll enforce not just speed limits, but any other rule you can imagine. And you won’t receive a ticket weeks later by mail; you’ll be informed about and fined for your violation immediately. These systems will combine powerful AI, public and private surveillance via real-time facial recognition technology and digital tracking, mass databases and highly personalized enforcement. If deployed at scale, they will have profound chilling effects not just on personal freedoms, but democracy and social progress itself. China has been developing its surveillance infrastructure for years. The country has over 600 million surveillance cameras, increasingly powered by AI and facial recognition to enforce legal and social rules. Take the case of Lao

Alt...

Duan, a Chinese citizen blacklisted by the system after he lost his job and was unable to repay a series of loans. When he visited Beijing, the city’s AI surveillance system identified him by his face at a major intersection and displayed his face, name, and citizen ID number on a large electronic billboard nearby with a message that he was an untrustworthy person. Similar systems are now being deployed across China and integrated with its infamous online monitoring, censorship, and social credit systems. AI surveillance is now being experimented with in North America, South America, Europe, Asia and Africa. According to a new report, the US Department of Homeland Security is rapidly increasing its use of AI-based surveillance, including facial recognition and the monitoring of social media accounts, to keep tabs on immigrants, dissidents, journalists, legal observers and protesters. While the systems are ostensibly used to maintain security and public safety, the real aim is often social control. Larry Ellison, CEO of Oracle – a powerful tech giant that works closely with the Trump administration – has said: “Citizens will be on their best behavior because we’re constantly recording and reporting.” The chilling effects are the point.

Alt...

AI surveillance raises a range of public policy challenges: technical biases, unauditable systems, and inflexible automated law and social rule enforcement that can promote discrimination and undermine transparency, accountability and the rule of law. But we believe the most urgent and long-term impact will be its broader chilling effects. In a new book, Chilling Effects: Repression, Conformity, and Power in the Digital Age, Jon Penney explains how surveillance, technology and power can be weaponized to influence behavior at scale. Surveillance, personalization, uncertainty and authority are all key mechanisms to increase the scale and impact of chilling effects. They cause people to self-censor their words and actions, to become more conformist and compliant and thus easier to manage and control. And the effects are additive: the more mechanisms employed, and the more powerful the form, the greater the chill.

Alt...

Computerization has long allowed data collectors to track our locations, collect lists of whom we communicate with, and monitor our spending habits – unless we use cash. What’s new is an unprecedented fusion of each of these mechanisms, persistent and unrelenting. AI brings an analytical ability to spy on the contents of our communications, and to answer sophisticated questions about our whereabouts and activities: actions that previously required human analysts are now automated. The result will be a kind of supercharged societal level of chilling effects where fear, self-censorship and groupthink reign, and dissent, creativity and innovation become increasingly rare. In this atmosphere of fear and conformity, risky ideas, social activism and self-reinvention – especially by disfavored groups and targeted populations – are also chilled. This will have long-term effects on social progress.

AI glasses with built-in cameras are making people uneasy about being recorded in public without consent. Critics say they blur everyday life into surveillance, and the pushback is real: workplace bans, public callouts, and apps that scan for hidden cameras.

#privacy #smartglasses #surveillance #consent #indigoprivacy