Dozens of #RedHat packages #backdoored through its official #NPM channel

Official Red Hat NPM accounts have been #compromised and used to push a malicious #worm that spreads from machine to machine, where it pilfers sensitive credentials in hopes of stealing yet more confidential data, researchers said.
#privacy #security

https://arstechnica.com/security/2026/06/dozens-of-red-hat-packages-backdoored-through-its-offical-npm-channel/

#Linux Is Too# Powerful For #AgeCheck Laws #MentalOutlaw #yt #Privacy #Security #MassSurveillance

https://www.youtube.com/watch?v=zQ0iVWUvvDM

Papra is an open-source, self-hosted document management platform focused on long-term document storage and organization.

It includes OCR-powered search, tagging, email ingestion, sharing, and document archiving, all under your control.

Still under active development, but an interesting privacy-friendly alternative to traditional document archive tools.

👉 https://digitalescapetools.com/tools/tool.html?id=papra

#OpenSource #SelfHosting #Privacy #DocumentManagement #OCR #DigitalMinimalism

Alt...

A dark-themed logo and introduction card for "Papra - Document management platform." It features a white minimalistic document icon above the bold title and the subtitle: "Minimalistic document management and archiving platform."

Alt...

A dark mode web dashboard for Papra, a document management system with bright green accents. The interface shows a sidebar navigation menu and a main dashboard displaying total storage stats alongside a list of recently imported PDF documents, including a payslip, insurance info, and a diploma.

"Publicis Groupe is the largest of the Big Three global advertising conglomerates (the others are WPP and Omnicom), and by itself it captured almost one-third of all global billings last year. A couple of weeks ago, Publicis announced its intention to buy LiveRamp in a $2.5 billion deal. This is the company that combines multiple inputs of an individual’s personal data (web activity, subscriptions, apps, travel, retail, financial, and even medical history) to generate an “identity graph,” a precise profile of our lives and actions.

LiveRamp is said to have built identity graphs on 245 million Americans, virtually every U.S. adult. These can be used in any context, from web to apps to smart TVs. “LiveRamp makes possible the data integration empowering cross-platform tracking,” said Jeff Chester of the Center for Digital Democracy. And in the past, it has reportedly sold identity graph information segmented by military or pregnancy status, among others.

Publicis, a French multinational, has been gradually acquiring data firms, from data broker Epsilon to “end-to-end data solution” Lotame. Publicis represents global juggernauts like Coca-Cola and McDonald’s, and its global reach could expand the identity graph everywhere. It is even the largest Western advertiser in China, with about 20 percent of the Chinese media agency market and partnerships with Tencent and Alibaba. Its clients hold massive troves of personal information which LiveRamp can make more valuable through targeting at the individual level."

https://prospect.org/2026/06/01/one-company-may-know-everything-about-you/

#DataProtection #Privacy #AdTargeting #Publicis #Surveillance

deflock.org

An open-source project mapping license plate readers. These systems continuously record your movements without a warrant, probable cause, or even reasonable suspicion.

#deflock #flocksafety #alpr #surveillance #privacy

"Meanwhile, the AI strategy itself threatens to create more barriers to AI adoption. The strategy is expected to include mandated age verification for using both social media and AI chatbots, with a plan to establish new restrictions on the use of these services for those under the age of 16. But limiting AI access to adults will require everyone to certify their age, typically through foreign third-party services that introduce new privacy risks to sensitive personal information.

You can’t proclaim AI leadership while eschewing rules that address safety issues for all users by instead relying on age-gating services with requirements that will affect tens of millions of Canadians. Yet that is what the federal government is proposing to do with promises of “AI for all” that may actually become “ID for all”.

None of this is hypothetical, either, because Ottawa has been here before. When it passed the Online News Act, it brushed aside warnings that Meta would block news rather than pay for news links. And when Meta followed through on its threats – a blockade that is in place to this day – Canadians simply lost access to the links (and credible information) that the law was trying to protect. The lesson the government keeps ignoring is that when the rules become impossible or unpalatable to follow, companies are prepared to leave."

https://www.theglobeandmail.com/opinion/article-canadas-ai-strategy-is-set-to-fail-before-it-even-launches/

#Canada #AI #AgeVerification #CyberSecurity #Privacy

"Quote of the day by Oracle co-founder Larry Ellison: "Citizens will be on their best behavior, because we’re constantly recording and reporting everything that is going on" — a dire warning on the erosion of privacy"

"Legendary technologist Larry Ellison has outlined a vision for an increasingly aggressive surveillance state in the 21st century"

https://www.techradar.com/pro/quote-of-the-day-by-oracle-co-founder-larry-ellison-citizens-will-be-on-their-best-behavior-because-were-constantly-recording-and-reporting-everything-that-is-going-on-a-dire-warning-on-the-erosion-of-privacy

#Privacy

https://www.wired.com/story/websites-can-now-spy-on-you-through-your-hard-drive/

Sites have a new way to spy on their visitors: by measuring subtle interactions with their solid-state drives. The technique, named FROST (fingerprinting remotely using OPFS-based SSD timing), allows sites to monitor other sites a visitor is viewing and what apps are open on their devices.

#Privacy #Tech #FROST #Security #Fingerprinting

https://proton.me/blog/duckduckgo

A deep dive into DuckDuckGo. How their privacy search works, how private it is, how it stacks up against other alternate search engines like Brave & Searx and more.

Very detailed, in short DDG is a great place to start with very few tradeoffs

#Privacy #Search #DDG #DuckDuckGo

"PewDiePie Is Here to Offer You Privacy Assurances in the Age of AI"

"Apparently he's an AI influencer now."

https://gizmodo.com/pewdiepie-is-here-to-offer-you-privacy-assurances-in-the-age-of-ai-2000765812

#Privacy

Screenpipe is an open-source AI memory tool that records your screen activity and audio, then lets you search everything you've seen, heard, or done using natural language.

Unlike Microsoft Recall, all data stays on your device. It also integrates with Claude, Cursor, and ChatGPT through MCP.

A powerful idea with an interesting privacy trade-off: local-first, but it remembers nearly everything.

👉 https://digitalescapetools.com/tools/tool.html?id=screenpipe

#OpenSource #FOSS #Privacy #AI #SelfHosting #Productivity

Alt...

Screenpipe project page featuring its logo, tagline, and description of an open-source AI memory tool that records screen activity and audio locally for searchable personal history.

Alt...

Screenpipe memory interface displaying a timeline of recorded computer activity, audio transcripts, and AI-generated summaries that can be searched using natural language.

Alt...

Screenpipe dashboard showing automated AI workflows (“Pipes”), connected devices, and scheduled tasks running on locally stored screen activity and audio data.

I have been dragged into the rabbit hole of GnuPG/LibrePGP VS Sequoia/OpenPGP and, boy it is ugly. Yeah, yeah, I know, PGP is bad, but of all the ugly things that could have happened to the FOSS crypto space, this is really unwelcome. I wish people would just sit at a table and talk.

#pgp #gpg #sequoia #crypto #cryptography #security #foss #floss #libre #drama #ietf #privacy #openpgp #librepgp

Top 15 “Privacy-First” Projects You Can Host on Raspberry Pi
#raspberrypi #linux #privacy #opensource
https://raspberrytips.com/top-privacy-projects-raspberry-pi/

GrapheneOS Speech Services version 2 released

https://discuss.grapheneos.org/d/36001-grapheneos-speech-services-version-2-released

#HackerNews #GrapheneOS #Speech #Services #SpeechRecognition #TechNews #OpenSource #Privacy

#Cops Are Spying on People Who Criticize #AI #DataCenters Online
A #lawenforcement document obtained by The Intercept shows #police scan #socialmedia looking for posts opposing AI data centers.
A #fusioncenter combed through spicy internet comments from AI critics and concluded there is growing risk of physical violence against data centers from “domestic violent extremists,” ranging from white supremacists to anarchists.
https://theintercept.com/2026/06/01/ai-data-center-protest-police-surveillance/
#privacy #surveillance #firstamendment #freespeech

Decline of the White Picket Fence Reflects Changing American Neighborhoods

📰 Original title: White picket fences were the American Dream. Now people want higher walls.

🤖 IA: It's not clickbait ✅
👥 Users: It's not clickbait ✅

View full AI summary https://en.killbait.com/decline-of-the-white-picket-fence-reflects-changing-american-neighborhoods.html?utm_source=mastodon_social&utm_medium=social&utm_campaign=killbait.mastodon_social

#society #suburbs #privacy #fences

Decline of the White Picket Fence Reflects Changing American Neighborhoods

📰 Original title: White picket fences were the American Dream. Now people want higher walls.

🤖 IA: It's not clickbait ✅
👥 Users: It's not clickbait ✅

View full AI summary https://en.killbait.com/decline-of-the-white-picket-fence-reflects-changing-american-neighborhoods.html?utm_source=mastodon_world&utm_medium=social&utm_campaign=killbait.mastodon_world

#society #suburbs #privacy #fences

FROST è una tecnica di analisi forense degli SSD che ricostruisce la cronologia delle attività digitali a partire dai metadati interni del firmware. Non si tratta di un exploit, ma di un vettore di indagine — o di sorveglianza. Ricorda che il "cancellato" su un SSD non è sempre davvero cancellato. #infosec #forensics #privacy
http://www.zeusnews.it/n.php?c=32117