🤖 Nodriver: Advanced automation and web scraping

Collecting web data today means dealing with serious anti-bot defenses. That's where nodriver comes in. As the successor to Undetected-Chromedriver, this library handles asynchronous web automation and scraping while slipping past detection systems like Captcha and CloudFlare. For developers who need reliable access to web data, it's built to work when other tools fail.

🖥 Core features and ease of use

Unlike Selenium-heavy solutions, nodriver runs light and fast. You can start a browser session with literally one line of code. Each execution automatically cleans up user profiles afterward, which helps avoid fingerprinting issues. The element search and selection methods are also more advanced than what you get with traditional libraries, saving time on complex interactions.

▶️ Performance and resilience benefits

Speed is noticeably better thanks to the async architecture. Data collection happens faster, but the real win is how it holds up against WAFs and bot mitigation systems. I've seen scrapers that normally block within minutes keep running for hours with nodriver. For both quick prototypes and production setups, that reliability makes a difference.

👨‍💻 Ideal use cases

If your project involves scraping sites known for blocking automation, or you need to navigate flows that aggressively detect bots, this tool gives you the flexibility to stay under the radar. It's particularly useful when you're tired of constantly tweaking scripts just to get through basic pages.

🛡 Protection tips for ethical scraping

Powerful tools come with responsibility. Here's how to use them without causing issues:

▫️ Check robots.txt first — respect what sites allow you to scrape.

▫️ Add delays between requests so servers don't get overwhelmed.

▫️ Read Terms of Service before automating access to any site.

▫️ Watch out for personal data — GDPR and similar regulations still apply.

🐱 For those wanting to dive into the code or documentation, check out the official repository

😊 If you enjoyed the article share it with your friends and follow us.

#Python #WebScraping #Automation #CyberSecurity #OpenSource

@PrivacyNotACrime 🗽 ⌨️ Chat

🖐 Discover 100 private services: Free alternatives to leading platforms

Big tech giants like Google, ChatGPT, and Midjourney profit from your data. Every click, message, and upload can end up in advertisers hands. But you don't have to accept this trade-off anymore.

🔛 Practical replacements that work

This collection curates 100 tools that put you in control. Swap out mainstream services for private file managers, discreet app stores, local AI models, encrypted cloud storage, and keyboards built for privacy. Each option keeps your information local or encrypts it before it ever touches a server.

🔐 Simple steps to protect yourself

Make security a habit: enable end-to-end encryption on everything you can, choose open-source software whenever possible, limit what you store in the cloud, and remember that free services usually monetize through your data. Small changes add up to real protection.

🐱 Check the full toolkit at Github

😊 If you enjoyed the article share it with your friends and follow us.

#Privacy #OpenSource #CyberSecurity #DataProtection #DigitalRights

@PrivacyNotACrime 🗽 ⌨️ Chat

🗽 The ten commandments of Privacy Not A Crime

This is who we are. This is what we believe. Ten principles that guide everything we share.

🔢 Information must be free and accessible to everyone, at all times

Knowledge should never sit behind paywalls or borders. The moment we accept only those who can afford it deserve to be informed, we lose something fundamental. Security awareness, threat intelligence, defensive techniques, all of it should flow freely.

🔢 Never pay for information, except in rare exceptions

Core security knowledge should not become a luxury item. When protecting yourself online comes with a price tag, something has gone wrong. Exceptions exist, but openness is always the default.

🔢 Economic contributions must always be voluntary

Support should come from conviction, never pressure. No forced subscriptions, no hidden fees, no holding content hostage. Support grows organically when people truly believe in what you do.

🔢 Physical and digital freedom is the number one priority

Your right to walk down a street without tracking and browse without profiling are the same fight. Both matter equally. Freedom is not a setting you toggle, it is a baseline.

🔢 Use learned knowledge to do good and for a just and ethical cause

Skills are tools. Vulnerability disclosure can save millions or get sold to exploit them. The difference lies in the hands that hold the knowledge. We choose protection, always.

🔢 Transparency is the antidote to abuse

Secret algorithms shape what you see. Hidden data collection profiles who you are. None of this survives public scrutiny intact, which is why scrutiny matters. Openness is the foundation of security.

🔢 Security is a human right, not a luxury product

Being safe online should not depend on affording premium software. Basic digital hygiene, encrypted communication, strong authentication, these are not perks for the privileged. They are minimum standards everyone deserves.

🔢 Anonymity is a shield for the vulnerable

Anonymity protects journalists, activists, survivors, and ordinary citizens who do not want every move catalogued. It is not about hiding wrongdoing, it is about surviving.

🔢 Education empowers resistance

You cannot defend what you do not understand. Knowing how tracking works, why apps want your location, what permissions mean, this is survival literacy for the digital age. We break down complex concepts into language anyone can follow.

🔤 Privacy is not a crime, it is a fundamental right

Wanting a private life does not make you suspicious. Encrypting messages does not make you a target. Refusing to share personal data means you understand your life belongs to you, not a corporation or algorithm.

Privacy Not A Crime. It never was. And it never should be.

These ten commandments are who we are. If they resonate with you, you are already one of us.

😊 Follow us to stay informed about the latest threats and protect yourself.

#PrivacyNotACrime

💬 A follower asks us the following question in Spanish:

Which operating system is most vulnerable to these attacks: GrapheneOS, iOS, or standard Android? Which one is more secure in preventing real-time remote access by government spyware and zero-click attacks where the user doesn’t have to do anything, but simply by inserting the SIM card and connecting to the network, the phone becomes infected and is accessed remotely?

🙏 First of all, thank you for asking.

🔹The most vulnerable and exploitable operating systems are those that are closed-source, the ones that the community cannot audit and does not know what lies behind them. That is why we always recommend using the latest version of Android with the latest security patches applied. Note: we mean ‘open-source’ Android, without proprietary services such as those from Google.

🔹To prevent remote access to your smartphone, you need to take certain basic security measures; the most important ones are as follows:

▫️ Manually update your operating system to the latest version and ensure it has the latest security patches. By ‘manually’, we mean that you should download the update from the provider’s official website and install it from a PC; never update automatically, as this is a common vector for compromise. Always be wary of automatic updates.

▫️ Never accept automatic updates for any type of app.

▫️ Never click on any links that are sent to you, no matter how harmless they may seem. Even if they're sent by someone you trust. Just don't do it.

▫️ Always keep your web browser and apps updated to the latest version, although there are exceptions depending on each person's situation.

▫️ Do not use proprietary services from companies such as Google, Microsoft, Facebook (Meta), X, YouTube, WhatsApp, etc.

▫️ Of course, don't install apps from unknown sources unless you know what you're doing.

🔹Disable the network operator’s services and uninstall apps such as ‘SIM Toolkit’, as this is a commonly used attack vector.

🔹Always opt for an eSIM rather than a physical SIM card to reduce the attack surface.

🔹Use a good, community-maintained smartphone firewall that is regularly updated, and a good VPN that does not keep logs

🔹Block all private IP addresses on the firewall, but particularly those of the service provider (100.64.0.0/10). The service provider may intercept your traffic and reroute it through that range in order to spy on your communications.

🔹Always prioritise 5G NR over any other mobile network. Do not confuse this with 5G NR NSA, as NR NSA uses 4G LTE for the control channel and 5G NR for the data channel. This offers no additional security benefits and creates attack vectors such as man-in-the-middle attacks.

🔹Uninstall any certificate from the root system unless you fully trust it and know what it is for. If you do not know why it is there, it is best to remove it.

❕ But it’s not all down to the software; the hardware is also very important, and, paradoxically, using a less popular smartphone will help to reduce the attack surface. Most exploits are designed for Samsung and Apple.

🔖 These are just a few tips for reducing your attack surface. However, you’ll also need to learn how to identify indicators of compromise so you know when your device might be compromised. But we’ll cover that in another article if our followers show their support.

👋 If you’ve enjoyed this new section, please let us know.

@PrivacyNotACrime 🗽 ⌨️ Chat

🧠 GLM-5.3 vs. Claude Mythos 5: Open source model uncovers thousands of vulnerabilities

Chinese AI firm Z.ai has unveiled GLM-5.3, and its most striking achievement wasn't winning standard coding benchmarks. Instead, when tasked with auditing real-world open-source repositories, the GLM family of models identified a staggering 2,436 vulnerabilities across 269 projects. This discovery highlights a growing shift where AI is becoming a primary tool for automated security research, potentially outperforming traditional static analysis tools in finding complex logic flaws.

📊 The scale of the discovery

While many AI models are praised for their ability to generate code, GLM-5.3 demonstrated exceptional prowess in breaking it. The audit covered a wide range of popular open-source libraries, revealing critical issues that had gone unnoticed by human maintainers for years. The sheer volume over two thousand distinct flaws suggests that the current pace of software development may be outstripping our ability to manually review security implications.

This capability poses an interesting dynamic in the AI landscape. While Western models focus heavily on alignment and general utility, this Chinese-developed model has carved a niche in aggressive vulnerability scanning. It raises questions about whether future AI safety standards will need to include offensive capabilities as a core requirement for securing the global software supply chain.

🌟 What this means for developers

For the open-source community, this is a double-edged sword. On one hand, having an AI that can instantly flag thousands of bugs accelerates the patching process and strengthens the ecosystem. On the other, it implies that malicious actors could potentially use similar models to scan for zero-day exploits just as quickly. The barrier to finding critical vulnerabilities is lowering, which means the window of exposure for unpatched software is shrinking rapidly.

Developers should anticipate a future where AI-assisted code review becomes mandatory before merging pull requests. Relying solely on human intuition or legacy linting tools may no longer be sufficient against the speed and depth of modern AI auditors.

🐱 Check the available models at GitHub

💸 Chat with the AI right now

😊 If you enjoyed the article share it with your friends and follow us.

#Vulnerabilities
#OpenSource #GLM53 #CyberSecurity #CodeAudit

@PrivacyNotACrime 🗽 ⌨️ Chat

✅ Fake Chrome update delivers DragonDoll spyware across 26 countries

A malicious update disguised as Google Chrome has infected Android devices in 26 countries, giving attackers near-total control over victims' phones.

The malware, called DragonDoll, uses "special functions" to bypass security measures and steal sensitive data from encrypted messaging apps like Telegram, WhatsApp, and Signal.

🦠 How the infection works

The attack relies on social engineering, tricking users into installing a fake version of the browser. Once installed, DragonDoll doesn't just steal files. It watches screen activity in real-time, intercepts incoming calls, and captures PINs and passwords as people type them. Most worryingly, it targets end-to-end encrypted apps by reading notifications and screen overlays, essentially bypassing the privacy protections users count on for secure chats.

⚡️ Scope and impact

The campaign has spread fast across 26 nations. The sophistication behind DragonDoll points to a well-funded group behind it, possibly state-sponsored or part of a major cybercrime network. Being able to read Signal messages, a platform known for rock-solid security, shows how serious this breach is. The attack happens at the device level, not by breaking the encryption itself.

😊 Follow us to stay informed about the latest threats and protect yourself.

#CyberSecurity #AndroidSafety #DragonDoll #PrivacyMatters #SpywareAlert

@PrivacyNotACrime 🗽 ⌨️ Chat

🤩 AI Jail: Secure sandbox for AI agents

Running AI agents comes with risks. They might touch files they shouldn't or access data they were never meant to see. That's where Ai Jail comes in handy. This multi-platform tool creates a controlled environment for AI agents, locking them down so they can only access what you explicitly allow.

💙 How the isolation works

Ai Jail uses built-in operating system features to do its job. On Linux, it leverages bwrap. On macOS, it relies on sandbox-exec. What happens is straightforward: the tool mounts only the directories an agent actually needs for its task.

So when you're testing a code-writing bot or a data-analysis script, that agent literally cannot see files outside its assigned sandbox. It's similar to containerization, but built specifically for the unique risks that come with autonomous AI decision-making.

💡 Why this matters for AI safety

Here's the thing, AI agents are getting smarter, and with that power comes greater potential for problems. A model might accidentally delete important files, pull credentials from your home directory, or reach out to external networks if left unconstrained. Ai Jail tackles this by taking a "deny-by-default" approach.

Developers and security researchers get a reliable way to test how an agent behaves without risking the rest of their machine.

🐱 Check this tool at GitHub

😊 If you enjoyed the article share it with your friends and follow us.

#CyberSecurity #AISafety #OpenSource #DevOps #PrivacyTools

@PrivacyNotACrime 🗽 ⌨️ Chat

🤣 Dark web launches MessiahGPT for cyberattacks at just eight dollars a month

A new neural network called MessiahGPT has emerged on the dark web, significantly lowering the barrier to entry for cybercrime. For approximately eight dollars a month, this clandestine service allows users to generate sophisticated attack tools with a single prompt. The creators are even offering the first 50 requests completely free and without registration, making it accessible to anyone with an internet connection.

😘 Democratizing cybercrime for everyone

The implications are stark: you no longer need to be a skilled hacker or possess deep technical knowledge to launch a cyberattack. With MessiahGPT, a user can instantly generate an extortion scheme, create a convincing phishing page, and craft a detailed deception script, all in one go.

This turns complex cyber warfare into a consumer-grade service. Individuals with malicious intent but zero coding skills can now execute high-impact attacks.

Instead of spending weeks learning exploits or buying fragmented tools, criminals can rely on this AI to orchestrate the entire attack vector. This shift suggests a worrying trend where the technical expertise required for severe breaches is becoming obsolete, replaced by simple subscription fees and prompt engineering.

😆 If you enjoyed the article share it with your friends and follow us.

#MessiahGPT #Cybercrime #DarkWeb #AIThreats #Phishing

@PrivacyNotACrime 🗽 ⌨️ Chat

ℹ️ Chart showing the number of artificial intelligence users from 2022 to the present.

▫️ ChatGPT has gone from 99% to 46%

🛶 Deep State: Real-Time submarine tracking

An open-source initiative called Deep State is changing how we visualize global naval activity. The project tracks 292 submarines currently operating across 30+ navies worldwide, offering a level of transparency that was previously unthinkable for underwater military movements.

📱 Interactive OSINT map

The platform is built around a dynamic, real-time interactive map powered by open-source intelligence (OSINT). Instead of relying on classified reports, it pulls together publicly available data to display submarine positions as they are detected.

The system auto-updates every 6 hours, keeping the information fresh and aligned with the ever-changing geopolitical picture.

🐱 Check this tool at GitHub

🔻 Live OSINT map

😊 If you enjoyed the article share it with your friends and follow us.

#Geoint #NavalTracking #OSINT #Submarines #DefenseTech

@PrivacyNotACrime 🗽 ⌨️ Chat

👮‍♂️ Police used public GitHub code to crack EncroChat

Users sought perfect anonymity, but ended up with law enforcement watching their conversations in real time. The massive European operation against organized crime received an unexpected technical explanation that turned out to be remarkably straightforward.

📎 The Bad Binder vulnerability

French cyber intelligence exploited a known Android kernel flaw, identified as CVE-2019-2215 and nicknamed "Bad Binder." Rather than developing a sophisticated zero-day exploit, authorities simply adapted proof-of-concept code that was already publicly available on GitHub. The vulnerability allowed attackers to inject arbitrary code into freed memory areas, effectively creating a backdoor into the encrypted messaging platform.

Once deployed on EncroChat handsets, the malware could capture messages and lock-screen PINs instantly. It bypassed the device's self-destruct "panic-wipe" feature and forwarded intercepted data to police servers within seconds. Czech researchers who later reverse-engineered the French malware confirmed it was essentially a repurposed version of open-source code.

⚖️ Legal and ethical implications

This revelation has sparked intense debate about the legality of using publicly available exploit code for surveillance operations. British lawyers argue this disclosure could reignite legal challenges in the UK's Investigatory Powers Tribunal, where cases have been adjourned for over two years awaiting clarity on the hack's methodology.

Critics warn that relying on existing vulnerabilities rather than developing custom tools lowers the barrier to mass surveillance significantly. Supporters, however, contend that targeting criminal organizations using encrypted devices justified the technical approach.

⚡️ Check the mentioned vulnerability here

😊 If you enjoyed the article share it with your friends and follow us.

#EncroChat #CyberSecurity #Privacy #Vulnerability #OpenSource

@PrivacyNotACrime 🗽 ⌨️ Chat

📶 Wi-Fi transforms into a free motion sensor without cameras

Comcast has taken a bold step by turning standard Wi-Fi signals into an invisible radar system. The company has integrated the WiFi Motion feature directly into its Xfinity Shield platform, with a public rollout launching in August 2026. The concept is surprisingly simple: the radio waves traveling between a router and a stationary smart speaker act as a proximity sensor. As these waves bounce off moving objects in the room, they distort slightly, and the application instantly alerts users to movement. This means homeowners no longer need to install cameras in every corner to secure their space.

📖 How the technology works and its limitations

While this sounds like futuristic sci-fi, the practical application comes with nuances. Users can adjust sensitivity settings to filter out pets weighing up to 18 kilograms, effectively reducing false alarms. However, the algorithm currently struggles to detect smaller movements, such as those made by young children. Consequently, this technology cannot yet fully replace traditional audio monitors or baby monitors.

From a privacy standpoint, the implications are significant. Although the system does not recognize faces or capture video footage, it creates a detailed log of how people move throughout their homes. While Comcast emphasizes that it does not track individual identities, the terms suggest that data access could be granted to authorities under specific legal conditions. This raises important questions about the extent of passive surveillance embedded in everyday connectivity devices.

🛜 Beyond Wi-Fi: 5G and the next wave of sensing

The shift toward wireless sensing is not limited to home routers. The rollout of 5G networks opens the door to similar scenarios at a much broader scale. 5G uses higher frequency bands (millimeter-wave) and denser antenna arrays (massive MIMO), which makes the signals even more sensitive to environmental changes. This allows cellular infrastructure in densely covered urban areas to detect movement, gestures, and occupancy patterns through channel-state-information analysis.

Several telecommunications companies are already exploring this frontier. Ericsson and AT&T recently demonstrated how existing 5G sites could detect, locate, and track drones in real time. The same radio waves that deliver high-speed internet can also function as a pervasive presence detection system. When combined with edge computing, compatible cell towers can become potential monitoring nodes. The convergence of Wi-Fi and cellular sensing technologies, known as ISAC (Integrated Sensing and Communication), means our connected world is becoming increasingly aware of physical activity, whether we consent to it or not.

🏭 Industry adoption and future standards

The security sector has quickly recognized the potential of this technology. The industry is actively implementing the new IEEE 802.11bf-2025 standard, which was approved by the IEEE Standards Association Board on May 28, 2025. Major players are already investing heavily; for instance, ADT recently acquired the specialized startup Origin Wireless for $170 million to accelerate similar developments. Soon, the home router will evolve from a simple connectivity box into the primary sensor hub for smart homes, blending internet access with environmental awareness.

As Wi-Fi and 5G sensing become ubiquitous, the line between connectivity and surveillance will continue to blur. It is essential to understand what your network knows about your daily life.

😊 Follow us to stay informed about the latest threats and protect yourself.

#WiFiSecurity #HomePrivacy #IoT #Surveillance #CyberSafety

@PrivacyNotACrime 🗽 ⌨️ Chat

😤 Discover 1000+ free and open-source alternatives to paid tools

Tired of expensive subscriptions eating into your budget? A new initiative is quietly changing how people access software.

The project nosubscription.org has compiled over 1,000 free and open-source alternatives to popular paid tools, giving users a practical way to escape the subscription trap without sacrificing functionality.

🖥 Navigate your options with ease

What makes the platform stand out is its search engine and categorization system. Need a secure email client? A professional video editor? A full office suite? Everything's organized so you spend less time hunting and more time working. Each tool comes with a detailed breakdown of features, typical use cases, and links straight to official sources, no sketchy third-party downloads.

👛 Beyond cost savings

The move away from subscription models isn't just about saving money. It's also about reclaiming control over your data. Proprietary software often collects more information than users realize, while open-source projects invite community scrutiny. This transparency matters, especially for journalists, activists, and anyone who values privacy.

Some well-known swaps include LibreOffice for word processing, GIMP for photo editing, and Signal for encrypted communications. You'll find dozens of these replacements alongside hundreds of niche tools you might never have discovered otherwise.

🔗 Check the official website

😊 If you enjoyed the article share it with your friends and follow us.

#OpenSource #PrivacyTools #NoSubscription #CyberSecurity #FreeSoftware

@PrivacyNotACrime 🗽 ⌨️ Chat

📰 Weekly Cybersecurity News Roundup

This week was defined by two major incidents: a significant network outage occurred due to an electrical failure in zone M9 (Russia), and globally, Washington authorized private companies to attack foreign networks.

What formally wasn't considered an act of war is now legal. We've gathered the most interesting news of the week in one place so you don't miss anything.

🌐 Global developments

🔹 An electrical failure in zone M9 in Russia took down Reg.ru and thousands of websites, marking the largest network outage in the country in recent times.

🔹 The White House signed a decree that, in essence, legalizes offensive cyber operations by private contractors against foreign networks.

🔹 The State Department sent a letter to 35 countries asking them to define which side of the technological race, American or Chinese, they would position themselves on regarding AI.

🔹 A leak of 500 repositories from Geedge Networks allowed researchers to create a functional copy of the Great Firewall of China.

🔹 New European standards for VPNs, browsers, antivirus software, and routers threaten manufacturers with fines of up to €15 million for unresolved vulnerabilities.

🔹 Google will implement a mandatory one-day pause before installing applications from unverified developers; by 2027, this will affect all certified Android devices.

🛡 Security sphere updates

🔹 Four T-Mobile employees and a pair of common pliers disabled the Chinese group Salt Typhoon from the operator's networks after a campaign affecting 80 countries.

🔹 The United States accused 17 hackers from Iran's Mabna Institute of stealing 31.5 TB of scientific data from 8,000 professor accounts.

🔹 The French tax agency was hacked twice, resulting in the biggest fiscal cyber scandal in the country's history.

🔹 An open link in the source code of the ClarityCheck service revealed photographs of 9 million faces.

🔹 Passwords have definitively lost their value: according to BiZone, the price of new "cookies" to bypass two-factor authentication has increased by 13%.

💬 Share in the comments how your week went and which news surprised you the most.

😊 Follow us to stay informed about the latest threats and protect yourself.

#CyberSecurity #DataPrivacy #DataBreach #PrivateOps #Threats

@PrivacyNotACrime 🗽 ⌨️ Chat