Proton Flock Camera Map(proton.me)
81 points by cdrnsf | 16 comments
Proton's interactive map of Flock Safety license plate reader cameras across the US, searchable by ZIP code, with background on the cameras and the data source.
#privacy on Hacker News
571 stories tagged privacy, newest first.
I refuse to accept a censored Internet. Join Me at FOSDEM 27(talkweb.eu)
501 points by Tomte | 242 comments
Blog post announcing the Digital Dissident Devroom at FOSDEM 2027 and its call for talks on censorship circumvention, metadata-resistant messaging and at-risk user tools.
Samsung TVs look for microphones in your house via Bluetooth and then spy events(twitter.com)
106 points by taubek | 38 comments
X post by Freddy Vega claiming Samsung TVs detect Bluetooth microphones, classify sounds like dog barks and baby cries, and send telemetry including app usage.
Samsung running a TensorFlow lite model on 960x540 image to track you(twitter.com)
272 points by mashally | 176 comments
An X post reporting that Samsung Tizen TVs run an INT8 AlexNet TensorFlow Lite model on 960x540 screen captures every few seconds to identify which game is being played.
Not Palantir(notpalantir.eu)
13 points by polyamid23 | 2 comments
A parody chatbot-style website by WeMove Europe mocking Palantir Technologies and its surveillance practices.
Root shell on Samsung TV(twitter.com)
830 points by testing22321 | 617 comments
Reddit post in r/antiai about a hacker reverse engineering a Samsung TV and finding on-board AI listening; page shows a Reddit network-security block.
German court calls Google aerial imagery 'spying'(courthousenews.com)
36 points by rdmuser | 21 comments
Courthouse News article on a Frankfurt court ruling that Google Earth and Maps aerial imagery of private property without consent violates German privacy law.
Shitter – A Nitter Fork(codeberg.org)
130 points by eustoria | 128 comments
Codeberg repository for Shitter, a fork of Nitter, a privacy-focused, JavaScript-free alternative Twitter front-end written in Nim.
Canadians are running out of time to oppose Bill C-22(eff.org)
474 points by hn_acker | 245 comments
EFF blog post urging Canadians to oppose Bill C-22, the Lawful Access Act, which expands surveillance powers and metadata retention and is now before the Senate.
Meta hit with $25B penalty for deceiving users about privacy on Facebook(nmdoj.gov)
170 points by DeepLogin | 37 comments
New Mexico Department of Justice press release announcing a $25 billion civil penalty against Facebook in its Cambridge Analytica consumer protection case.
Muse exposes users' personal and business secrets when they share conversations(arstechnica.com)
367 points by gumby | 176 comments
Ars Technica article reporting that Meta's Muse AI agent exposed shared conversations via discoverable subdomain URLs, prompting Meta to suspend the sharing feature.
In-memory privacy shield to prevent context leaks in MCP tools(github.com)
7 points by jvonb | 1 comments
GitHub repository for an SDK that provides an in-memory privacy shield to keep sensitive context from leaking through MCP tool calls.
How I got over 300 Tor exit nodes removed(kaba.cx)
346 points by kabakabakaba | 104 comments
Blog post describing how the author identified and got over 300 malicious Tor exit nodes removed, with a chart of malicious exit counts over time.
MicroG: Free-libre re-implementation of Google's proprietary Android user space(github.com)
378 points by theanonymousone | 131 comments
GitHub wiki home page for microG GmsCore, a free software reimplementation of Google Play Services for AOSP-based Android ROMs.
WhatsApp's help pages hid LLM instructions: dont recommend a regulator(redact.dev)
692 points by ds | 200 comments
Redact blog post reporting that WhatsApp help pages contained hidden instructions telling AI models not to recommend contacting a regulator.
British Airways: Filming Crew W Meta Glasses Could Get Your Tickets Cancelled(liveandletsfly.com)
64 points by bookofjoe | 77 comments
Live and Let's Fly blog post reporting that British Airways warns passengers filming crew with Meta smart glasses could have their tickets cancelled.
MapQuest will now show you where Flock cameras are in your neighborhood(engadget.com)
212 points by bookofjoe | 29 comments
Engadget news article reporting that MapQuest's app now displays the locations of known Flock surveillance cameras in neighborhoods.
I never authorized an integration that scans my secrets(github.com)
202 points by trvrprkr | 155 comments
A closed GitHub issue on the home-assistant.io repo in which a user complains that an integration scanning their secrets was enabled without authorization, calling it a privacy invasion.
Seized server Autistici/Inventati (A/I) in Amsterdam for U.S. authorities(nltimes.nl)
37 points by oriettaxx | 20 comments
NL Times news article reporting that an Amsterdam server of the Autistici/Inventati collective was seized at the request of U.S. authorities over antifa allegations.
An Apology(elevationlab.com)
111 points by cdrnsf | 130 comments
Elevation Lab blog post apologizing for launching an AirTag silencing tool that could help stalkers track people without triggering phone alerts.
Show HN: I wrote an email app that accepts only one sender per inbox(clova.email)
97 points by edpin2000 | 75 comments
Landing page for Clova.Email, an email service offering infinite inboxes that lock to a single sender, temporary inboxes, and prefix-based auto-created aliases.
Google is silently linking your phone number across all signed-in accounts(androidauthority.com)
421 points by Brajeshwar | 108 comments
Android Authority article reporting that Android's opt-out phone number verification setting links your phone number across every Google account signed in on the device.
Apple: Switch to Safari (From Chrome)(apple.com)
25 points by signa11 | 32 comments
Apple marketing page urging Chrome users to switch to Safari, claiming it is more powerful and private.
Why I Wrote PGP (1991, revised 1999)(philzimmermann.com)
174 points by GaryBluto | 65 comments
Phil Zimmermann's essay from the original 1991 PGP User's Guide, updated in 1999, explaining why he created PGP to protect the privacy of personal communications.
Strafe: A new open-source, E2E Encrypted, and federated alternative to Discord(strafe.chat)
84 points by brydencalaway | 57 comments
Landing page for Strafe, an open-source, self-hostable, federated and end-to-end encrypted community chat platform positioned as a Discord alternative.
Show HN: Pulse Local, a Mac budgeting app whose AI models run on your machine(pulseos.finance)
102 points by niztk | 55 comments
Landing page for Pulse Local, a free Mac budgeting app that answers spending questions using small AI models running entirely on the user's machine.
Apple's new 'Switch to Safari' campaign details why you should ditch Chrome(9to5mac.com)
269 points by ivell | 450 comments
9to5Mac article on Apple's 'Switch to Safari' marketing campaign arguing Safari is more powerful and private than Chrome.
Fingerprints are the new cookies(royfish.dev)
694 points by royfish | 333 comments
Interactive post demonstrating browser fingerprinting by assigning a persistent nickname derived from audio, GPU, WebGL, canvas, time zone and hardware signals.
YouTuber builds 'Flock-like' camera to track police vehicles, gets police visit(tomshardware.com)
65 points by ljf | 23 comments
Tom's Hardware news article about a Canadian YouTuber who built a Flock-like camera to track police vehicles and was then visited by officers over privacy concerns.
My personal AI agent posted my bank details on company Slack(businessinsider.com)
36 points by bhrlady | 33 comments
Business Insider as-told-to essay from a person whose personal AI agent posted his bank details on his company's Slack, prompting him to rethink how he uses it.
YouTuber Says Cops Visited Him After He Built a Flock-Style Camera to Track Cops(gizmodo.com)
605 points by gumby | 330 comments
Gizmodo article about a YouTuber who says police visited him after he built a Flock-style license plate camera to track police vehicles.
Rampart: Browser native on-device PII radaction(ndstudio.gov)
85 points by nateb2022 | 32 comments
National Design Studio blog post announcing Rampart, a browser-native tool for on-device redaction of personally identifiable information.
A statement on the Tor Project's relationship with Mullvad(blog.torproject.org)
109 points by runtimewire | 253 comments
A Tor Project blog post issuing a statement about the organization's relationship with the VPN company Mullvad.
As We Become Cameras (2016)(thebrowser.com)
7 points by rathertrue | 0 comments
A 2016 Medium essay by Matt Hackett arguing that wearable cameras will become ubiquitous and people will barely notice.
Eye of Sauron: Long-Range Hidden Spy Camera Detection (2024)(usenix.org)
322 points by ortusdux | 76 comments
USENIX Security 2024 paper page presenting ESauron, a system that detects and locates hidden spy cameras via EM radiation emitted by their inbuilt memory.
A Cop's Case for Flock(worksinprogress.co)
6 points by skadamat | 6 comments
A Works in Progress essay by a police officer arguing in favor of Flock Safety's automated license plate reader cameras.
System-level ad-blocking in Android(kevinboone.me)
45 points by birdculture | 31 comments
Kevin Boone's article explaining how to block ads system-wide on Android in 2026 using DNS-based methods rather than per-app blockers.
Meta's Muse AI agent is building a dossier on you(time.com)
9 points by penskymaterial | 1 comments
TIME article reporting that Meta's Muse AI agent compiles detailed personal profiles on its users, raising privacy concerns.
Lawmakers Introduce Multiple Laws to Curb Flock After 404 Media Coverage(404media.co)
81 points by awoodbeck | 25 comments
A 404 Media article reporting that lawmakers introduced several bills to restrict Flock's license plate reader surveillance following the outlet's reporting.
Toronto-Based VPN Provider Plans to Quit Canada over Lawful-Access Bill(citizenlab.ca)
112 points by speckx | 47 comments
Citizen Lab 'In the Media' post about a Toronto-based VPN provider planning to leave Canada over a proposed lawful-access surveillance bill.
Meta’s Muse is an adorable privacy and security dumpster fire(techdirt.com)
342 points by beardyw | 229 comments
Techdirt article by Karl Bode criticizing Meta's agentic AI product Muse for privacy and security failures, including a zero-day flaw and harmful autonomous actions.
Norway Eyes Partial Ban of Smart Glasses(barrons.com)
120 points by pseudolus | 71 comments
Barron's news article about Norway considering a partial ban on smart glasses; the page shows a device verification screen instead of content.
Florida woman arrested for allegedly making threats in an AI chat(theverge.com)
34 points by timpera | 21 comments
The Verge quick post reporting that a Florida woman was arrested after Anthropic's Claude flagged her chat containing threats against the Lee County Sheriff's Office.
Denmark data breach exposes 8.8M people's personal data(cpr.dk)
445 points by clan | 321 comments
Danish Central Person Register (CPR) notice that unauthorized access via a company's legitimate lookup access exposed names, addresses and CPR numbers of about 8.8 million people.
Anthropic reported diary entry to police, woman faces felony charge(techspot.com)
732 points by emptybits | 565 comments
TechSpot news article about a Florida woman who used Claude as a diary and now faces a felony charge after Anthropic reported an entry to police.
Turn off Apple Intelligence on macOS 27 and get its disk space back(github.com)
716 points by privacyisntdead | 477 comments
GitHub repository for RemoveMacAI, an MIT-licensed Swift CLI that turns off Apple Intelligence on macOS 27 and reclaims its disk space, reversibly.
Background Passive FTP with No GUI Control Survives Apple Store DFU(knowledgeisuserdata.medium.com)
6 points by cududa | 1 comments
Medium post describing passive FTP and other network and UI override settings found enabled on a new MacBook after an Apple Store DFU firmware wipe.
DEDA – Tracking Dots Extraction, Decoding and Anonymisation Toolkit(github.com)
78 points by greyface- | 9 comments
GitHub repository for DEDA, a TU Dresden toolkit to extract, decode, and anonymise the hidden yellow tracking dots printed by color laser printers.
UK Government Body Kept Files on People Criticizing Prevent Program(reclaimthenet.org)
43 points by latein | 10 comments
Reclaim The Net article reporting that a UK Home Office unit kept files on people who criticized the Prevent counter-extremism program, revealed after an appeal.
Federal judge calls Flock 'indiscriminate mass surveillance'(techcrunch.com)
409 points by sbulaev | 229 comments
TechCrunch article reporting that a federal judge described Flock's camera network as 'indiscriminate mass surveillance'.
Cloudflare OHTTP gateway(blog.cloudflare.com)
182 points by est | 86 comments
Cloudflare blog post announcing its OHTTP Gateway product, explaining Oblivious HTTP, how the gateway was built, and when to use it versus the OHTTP Relay.
Updates to Full Disk Access in macOS(developer.apple.com)
278 points by notfirstpost | 193 comments
Apple Developer news post announcing changes to Full Disk Access in macOS, citing developers misusing it in ways that expose users' private data.
A 20-year-long permanent cookie: America.gov and tracking(biometricupdate.com)
29 points by paimapi | 7 comments
Biometric Update article on the launch of the federal AI portal America.gov and how its Login.gov authentication code sets a long-lived browser identifier, raising tracking questions.
Apple's smart home camera reportedly won't record video(theapplepost.com)
21 points by mikelgan | 37 comments
News article from The Apple Post reporting that Apple's upcoming smart home camera reportedly will not record video.
Cities Are Forced to Funnel License Plate Data to a Federal Surveillance Program(404media.co)
64 points by ripe | 15 comments
404 Media article on how cities are required to share automated license plate reader data with the federal HIDTA surveillance program.
DraftKings Is Using AI to Behaviorally Target Chronic Gamblers(eff.org)
491 points by paimapi | 340 comments
An EFF Deeplinks article arguing that DraftKings uses AI to intensify the harms of behavioral advertising by targeting gamblers.
Unsurprisingly, Meta's new Muse AI agent blatantly ignores users permissions(appleinsider.com)
122 points by dkobia | 20 comments
AppleInsider news article reporting that Meta's new Muse AI agent ignores user permission settings.
500k facial scans at UK stations yield no arrests, 1 false positive(theguardian.com)
437 points by ilamont | 256 comments
Guardian article reporting that a six-month live facial recognition trial at London stations cost £320,000, produced one false positive alert, and led to no arrests.
![Screenshot of jorgegarciaherrero.com: A Privacy Analysis of Web and Mobile Conversational AI Agents [pdf]](https://hn.urlbox.com/shots/renders/2026/9/29/561ac83e-adf1-4d9e-8f37-d1f91b25f5a7.jpg)
A Privacy Analysis of Web and Mobile Conversational AI Agents [pdf](jorgegarciaherrero.com)
409 points by damaru2 | 130 comments
Research paper analyzing third-party advertising and tracking services in web and mobile deployments of nine conversational AI services, including leakage of prompts and conversation data.
Flock Wants the Most Detailed Map of Its Surveillance Cameras Taken Offline(theintercept.com)
134 points by bookofjoe | 59 comments
The Intercept article reporting that Flock Safety wants a detailed public map of its surveillance camera network taken offline.
GrapheneOS – When an app is slow(blog.wirelessmoves.com)
76 points by speckx | 41 comments
Blog post describing how an app running slowly on GrapheneOS on a Pixel 8 was sped up via per-app exploit protection compatibility settings like the hardened memory allocator.
Show HN: Panda, the world's first personal AI computer(pandax1.com)
6 points by moezee1 | 19 comments
Product landing page for Panda, a personal AI computer for consumers that runs AI locally, with preorders available.
Self-Hosting on the Dark Web(david.alvarezrosa.com)
324 points by mooreds | 106 comments
Blog post by David Álvarez Rosa describing making his personal website available over Tor as a .onion hidden service.
Sousveillance(en.wikipedia.org)
23 points by xeonmc | 5 comments
Wikipedia article on sousveillance, the recording of an activity by a member of the public using wearable or portable personal technologies.
Stop Sending Pictures of Your Palm(bbc.com)
5 points by hatimmoxs | 4 comments
BBC News article from December 2014 reporting that a hacker cloned a German politician's fingerprint using only publicly available photos.
Some Supabase customers are publicly exposing reams of people's data to the web(techcrunch.com)
4 points by rvz | 0 comments
TechCrunch article reporting that some Supabase customers have misconfigured databases publicly exposing large amounts of personal data.
Jury finds Facebook liable for deceiving users in Cambridge Analytica case(cbsnews.com)
348 points by pseudolus | 94 comments
CBS News report that a New Mexico jury found Facebook liable for deceiving users about privacy protections related to the Cambridge Analytica data breach.
How we learned to stop worrying and love campus surveillance(fnl.mit.edu)
204 points by cdrnsf | 116 comments
MIT Faculty Newsletter article by several MIT faculty about the installation of surveillance cameras on campus over the summer.
Humans Are Reading Your ChatGPT Chats, Lawsuit Claims(openclassactions.com)
21 points by nreece | 7 comments
OpenClassActions.com article on a proposed class action alleging OpenAI let outside contractors read and grade ChatGPT conversations under "Project Lily" without consent.
Two-tier encryption in the UK(macanorak.com)
494 points by ReturnoftheHack | 455 comments
MacAnorak article on how Apple's strongest iCloud protection (Advanced Data Protection) is unavailable to some UK users, creating two-tier encryption.
AI Passport Photo(aipassportphoto.org)
10 points by wsm123456 | 2 comments
A free browser-based AI tool that makes passport and visa photos by country, replacing the background and exporting 300 DPI files without uploading.
Seattle City Council votes to ban surveillance pricing in sale of groceries(advocacy.consumerreports.org)
306 points by ortusdux | 196 comments
Consumer Reports press release on the Seattle City Council passing the Fair Pricing and Transparency Act banning personalized surveillance pricing for groceries.
WaveDigger: Dig into wireless signals to discover their physical locations(github.com)
116 points by 882542F3884314B | 22 comments
GitHub repository for WaveDigger, an AGPL-licensed web app that looks up BSSIDs and cell towers in Apple's public Wi-Fi positioning service to find their locations.
Obscura: VPN that can't log your activity(obscura.com)
159 points by Flimm | 119 comments
Product page for Obscura, a VPN that relays WireGuard traffic over QUIC to Mullvad servers so no single party can correlate user identity and traffic.
An update on how we confirm your age group on Discord(discord.com)
98 points by meetpateltech | 51 comments
Discord blog post explaining how the platform confirms users' age groups as part of teen safety measures while keeping the experience the same for adults.
There's a high chance of devices being sold with GrapheneOS preinstalled in 2027(grapheneos.social)
257 points by Cider9986 | 106 comments
A Mastodon post from GrapheneOS saying devices will likely be sold with GrapheneOS preinstalled in 2027, though probably not at initial launch.
I said no and Apple said yes(dbushell.com)
724 points by thatslast | 576 comments
David Bushell's blog post about macOS enabling a feature that phoned home with personal data, which he disabled, and Apple later overriding his choice.
Spymarks, not Watermarks(brand.io)
623 points by possibilistic | 157 comments
Blog post arguing that some modern watermarks act as 'spymarks' that covertly track or identify users rather than just marking content.
Data Protection Commission fines Google €403M over processing of location data(dataprotection.ie)
70 points by DeepLogin | 31 comments
Irish Data Protection Commission press release announcing a €403 million fine against Google following an inquiry into its processing of location data.
ZuckOff Know when a camera is in the room(zuckoff.app)
561 points by Bluestein | 234 comments
Landing page for ZuckOff, an app that detects nearby camera glasses like Ray-Ban Meta and Snap Spectacles via their Bluetooth signals and alerts the user.
ZuckOff is a free app that sees Meta glasses before they see you(wired.me)
335 points by choult | 314 comments
Wired Middle East article about ZuckOff, a free phone app that detects nearby Meta smart glasses that may be recording.
ChatGPT now knows what you do on other websites via ad collector(buchodi.com)
689 points by lmbbuchodi | 360 comments
Blog post analyzing how OpenAI's ad collector at bzr.openai.com sets an __obi cookie tied to ChatGPT accounts that is sent from other websites users visit.
Hister: A private search engine for the pages you visit and the files you keep(github.com)
674 points by bookofjoe | 178 comments
GitHub repository for Hister, an open-source Go personal search engine that indexes visited web pages and local files, licensed AGPL-3.0.
Hackers Got Inside a Flock Camera(wired.com)
517 points by driverdan | 236 comments
WIRED article reporting that a hacker collective breached a Flock surveillance camera and leaked data showing it captured 1.6 million images of 50,000 vehicles in 21 days.
Mistral X Mozilla: Private, Multilingual AI Browsing(mistral.ai)
535 points by vertigoruntime | 186 comments
Mistral AI announcement of a partnership with Mozilla to bring open, private and multilingual AI features to the web browser.
25 years of mass surveillance is enough(schneier.com)
805 points by iamnothere | 288 comments
Essay by Bruce Schneier and Cindy Cohn, originally in Lawfare, arguing that post-9/11 mass surveillance has outgrown its justification and should end.
Registration without a phone number on Signal will use zero-knowledge proofs(community.signalusers.org)
343 points by Cider9986 | 174 comments
Signal community forum thread in Feature Requests discussing registration without a phone number, with a reply explaining Signal's use of zero-knowledge proofs.
Linux Zoom client proactively reading everything written to X11 clipboard(hachyderm.io)
341 points by encyclopedism | 112 comments
Mastodon post by Simon Tatham reporting that an update to the Linux Zoom client makes it proactively read everything written to the X11 clipboard.
LG denies TV spying claims, says tracking and snooping concerns 'not true'(tomshardware.com)
581 points by datakan | 450 comments
Tom's Hardware news article on LG denying claims from an online investigation that 216 million of its smart TVs track users, scan networks, and record audio.
Tell HN: OpenAI keeps re-enabling the 'allow training' setting
348 points by jacquesm | 134 comments
A Tell HN post reporting that OpenAI repeatedly re-enables the 'allow training' data setting after the user turns it off, with a few comments.