Privacy Guides
282 subscribers
2 videos
821 links
Updates from the Privacy Guides discussion forum and social media channels.

https://www.privacyguides.org
https://discuss.privacyguides.net
https://mastodon.neat.computer/@privacyguides
Download Telegram
@fria posted a new discussion: CISA Releases Guidance Urging Water Treatment Facilities to Disconnect Equipment From the Internet

CISA released an urgent message warning water utilities to disconnect their logic controllers from the internet in the face of rising cyberattacks. 

This is a companion discussion topic for the original entry at https://www.privacyguides.org/news/2026/07/31/cisa-releases-guidance-urging-water-treatment-facilities-to-disconnect-equipment-from-the-internet/
@jonah (Jonah Aragon) posted a new discussion: Nearly 1,400 Bitcoin Hacked from Coldcard Wallets

In the middle of the night on July 30, $70.2 million worth of Bitcoin were stolen from addresses created by hardware wallet manufacturer Coinkite's Coincard products. A firmware bug weakened the recovery phrases generated by several generations of their devices, allowing an attacker to reconstruct their users' private keys without physical access to the devices. 

This is a companion discussion to...
@arise1984 posted a new discussion: EXCLUSIVE: Apple engineer says he was fired after refusing to send customer device IDs to AT&T

Its an article being viralled around now. First of all i’m not defending Apple, nor shitting on Apple, I’m indifferent. I’m also not a native English speaker and reading the article theres a few weird, strange things being cited like 

A 16-year employee

Whats the minimum age to be employed in the us?

His version of the story begins three years earlier

He worked at Apple since he was 13?

...
@fria posted a new discussion: Multiple Flaws in Google's Synced Passkey Implementation Allow Attackers to Take Over Your Accounts

Unit 42 released new research showing that in Google's synced passkey ecosystem, it's possible for an attacker to take over accounts protected by synced passkeys without user interaction. 

This is a companion discussion topic for the original entry at https://www.privacyguides.org/news/2026/08/03/multiple-flaws-in-googles-synced-passkey-implementation-allow-attackers-to-take-over-your-accounts/
@fria posted a new discussion: WhatsApp is Testing Age Verification

The Tech Trace reports that a WhatsApp representative has confirmed the messenger is testing out new age verification on some user accounts to comply with a new law in India. 

This is a companion discussion topic for the original entry at https://www.privacyguides.org/news/2026/08/04/whatsapp-is-testing-age-verification/
@blap posted a new discussion: Online advertising giant Adform was hacked

Online ads provider Adform was hacked. On July 27, the company began serving ads containing malicious code. The company says in its latest annual report that its serves 1.5 billion ads to people’s devices daily. 
According to security researcher Kevin Beaumont, who first revealed the incident, some of the code that Adform used to load its ads on its customers’ websites was maliciously altered. ...
@fria posted a new discussion: Apple's Private Relay Leaks Your Real IP Address in Safari

App developer/security researchers at Mysk discovered several leaks in Apple's Private Relay and all other browser proxies that allow websites to see your real IP address. 

This is a companion discussion topic for the original entry at https://www.privacyguides.org/news/2026/08/05/apples-private-relay-leaks-your-real-ip-address-in-safari/
@nateb (Nathan Bartram) posted a new discussion: Data Breach Roundup (July 24 - 30, 2026)

OnTrac is an American delivery company that operates in 35 states, covering roughly 70% of the US population. This breach took place in March. The article referenced notification letters but didn't share how many people or what data was impacted. 

This is a companion discussion topic for the original entry at https://www.privacyguides.org/news/2026/08/05/data-breach-roundup-july-24-30-2026/
@blap posted a new discussion: EU Age Verification Project Mandates Hardware-Bound Attestation

“Hardware-bound attestation is a requirement of this project, not an implementation detail we can simply drop,” a maintainer responded. The project invited alternative architectural proposals and said a dedicated security review and threat model would be published soon.I swear to god the EU always does this  kind bs. Here is GrapheneOS take on this: Verifying your browser… 

I swear to god the ...
@nateb (Nathan Bartram) posted a new discussion: North Korean Hackers Breached Over 1,600 Organizations Worldwide

Greek cybersecurity researcher Vangelis Stykas revealed at the Black Hat security conference that he discovered evidence that 1,640 companies across 57 countries have been compromised by North Korean hacking operations. 

This is a companion discussion topic for the original entry at https://www.privacyguides.org/news/2026/08/06/north-korean-hackers-breached-over-1-600-organizations-worldwide/
@fria posted a new discussion: Spectre is Back: CPU Mitigations Found to Be Ineffective

Researchers found a way to bypass the latest Spectre mitigations and exploit AMD and Intel processors to leak secrets like passwords and encryption keys. 

This is a companion discussion topic for the original entry at https://www.privacyguides.org/news/2026/08/07/spectre-is-back-cpu-mitigations-found-to-be-ineffective/
@maqp (Markus Ottela) posted a new discussion: A new paper by Daniel Simon might indicate lattice based crypto (ML-KEM etc) breaks with quantum computers

The paper in question: 


The author also developed Simon’s algorithm that inspired the Shor’s algorithm. The paper hasn’t been peer-reviewed yet.
There’s some analysis by Marin Ivenzic Simon Claims Polynomial-Time DCP Quantum Algorithm
Also a Reddit thread.
❤1
@nateb (Nathan Bartram) posted a new discussion: Data Breach Roundup (July 31 - August 6, 2026)

This impacted the UK's Police National Legal Database (PNLD) and exposed full names, organizations, and email addresses of police officers, staff, criminal justice professionals, and government partners. The names and email address of "Ask the Police" users who submitted questions are also believed to be compromised. 

This is a companion discussion topic for the original entry at https://www.priv...
❤1
@RandomRandomly posted a new discussion: The Verge: Now you can securely link multiple phones to one Signal account

You can link more devices with one phone number on Signal now, including an Android phone or iPhone. Signal already supported linking PCs and iPads, but not additional phones. When you link a device on Signal, you can check and respond to new messages across all of your linked devices. You can also choose whether or not to transfer an end-to-end encrypted copy of your previous messages to each ...
@fria posted a new discussion: 18-Year-Old Linux Kernel Bug Allows Full System Takeover

Researchers at Tencent Zhuque Lab uncovered an 18-year-old vulnerability in the Linux kernel that can escape containers and gain full root privileges on the host system. 

This is a companion discussion topic for the original entry at https://www.privacyguides.org/news/2026/08/07/18-year-old-linux-kernel-bug-allows-full-system-takeover/
@PurpleDime posted a new discussion: Proton VPN accused of running price sensitivity testing (A/B Testing) on their customers

Since Friday, August 7th, 2026, multiple Redditors have reported that they are seeing different prices for Proton VPN Plus, suggesting that Proton is running price sensitivity testing on their customers, which is also called A/B testing. 
[PROTON VPN_Pricing]
Proton has formally denied it.
[PROTON VPN_General Manager AB Testing Denial]

But Windscribe is calling them out on Twitter for lying...
@ph00lt0 posted a new discussion: Signal is working on a paid option to create an account without a phone number

Signal appears to allow users to create an account without providing a phone number. However, users must pay for this feature. 

Tweakers
@WhinyHamletPayer posted a new discussion: Facial recognition in sports

Note: This article is from 2023. 
Based on the article, I can see the benefit for fans and the arena to use the technology. Fans don’t need to fumble for cards in their wallets and get through lines quicker. Normally those are the pain points for fans and this resolves them seamlessly.
The arena also benefits in preventing fans that were disruptive in the past from attending events again. Thoug...