Privacy

Consumer Tech 5 min EU Privacy Regulators Tell Smart-Glasses Makers to Make Recording Obvious The EDPB says makers cannot pass their GDPR duties to wearers, and that glasses should not record with the ind... AM Amelia Wong 15 Oct Privacy & Data 6 min Looking up a MAC address by its first three bytes misses the holders of smaller IEEE blocks A MAC address carries two flag bits and, for a factory address, the organisation that bought its block from th... PR Priya Nair 14 Oct Business 4 min Norway Fines Microsoft's Xandr NOK 92 Million Over Grindr Users' Data in Ad Auctions The regulator's largest ever fine rests on one point: an adtech intermediary cannot simply trust that the app... DA Daniel Koh 14 Oct Cybersecurity 4 min Intruders Used One Company's Legal Access to Reach 8.8 Million Danish ID Records Names, addresses and CPR numbers were obtained from the national population register over about ten days in Se... PR Priya Nair 7 Oct AI & ML 4 min Apple Will Make It Harder to Give Mac Apps Full Disk Access, Citing AI Agents The setting was built for backup software and lets an app read files, mail and messages. Apple's notice came d... MA Maya Lin 3 Oct Privacy & Data 7 min How a Taiwan ID number is built, and what its check digit misses A Taiwan ID number is a letter, a sex digit, a seven-digit serial and a check digit. Where the check-digit rul... PR Priya Nair 3 Oct Privacy & Data 5 min What the 12 digits of a Malaysian IC number record What each part of a MyKad number (nombor IC) records: the date of birth with no century, JPN's state and count... PR Priya Nair 1 Oct ASEAN Tech 4 min Thailand's Top Court Rules Ballot Barcodes and QR Codes Did Not Break the Secret Vote The unanimous ruling keeps February's election valid. Identifying a voter would need three locked records link... DA Daniel Koh 29 Sep ASEAN Tech 4 min Thailand's THIM Immigration App Reads Your Passport Chip and Scans Your Face THIM launched formally on 25 September with the digital arrival card on board. The bureau plans to add visa ex... SA Sarah Chew 28 Sep Developer Tools 7 min Stripping the dots from an email address can merge two different people Only Gmail's consumer domain and Proton document dots as ignorable. On Google Workspace dots change the addres... KE Kenji Tanaka 21 Sep Privacy & Data 7 min Singapore's data protection law does not cover the government The PDPA's data protection obligations do not bind ministries, departments or gazetted statutory boards, so th... PR Priya Nair 17 Sep ASEAN Tech 5 min OpenAI Is Funding an NTU Tool That Predicts What People Do With Handouts Trained on a million people's actual spending records, not surveys. Half the grant is model credits, and the d... SA Sarah Chew 17 Sep Privacy & Data 6 min OpenAI Has Hundreds of Contractors Reading Whole ChatGPT Conversations They see whole conversations and score them 1 to 7. Names are stripped; the memory summaries describing where... PR Priya Nair 16 Sep Privacy & Data 6 min Nobody Broke Into Revolut. Someone Asked, From a Government Domain. Passports, verification selfies and full transaction histories went out through the channel that answers offic... PR Priya Nair 14 Sep Consumer Tech 7 min Apple Built the Privacy Case for the Wearer, Not the Room Siri Recap keeps audio inside a secure exclave and deletes summaries after seven days. Every protection belong... AM Amelia Wong 14 Sep Privacy & Data 6 min Two ASEAN countries cannot use Apple's Private Relay, and Thailand is still being sold it Apple publishes an exact 160-country list for iCloud Private Relay. The Philippines and Thailand are absent wh... PR Priya Nair 11 Sep Privacy & Data 5 min The privacy header thousands of sites copied now guards something else Permissions-Policy: interest-cohort=() was added in 2021 to opt out of FLoC. FLoC was cancelled, and Chromium... PR Priya Nair 11 Sep ASEAN Tech 6 min Vietnam deleted the rule that made its ID numbers decodable, and nobody stopped decoding them Since 1 July 2024 no Vietnamese instrument says the 12-digit citizen ID has any internal structure. The decree... SA Sarah Chew 5 Sep Privacy & Data 7 min Singapore's 3 days and Malaysia's 72 hours are not the same deadline Both look like the same breach-notification window, but the clocks start at different events. Singapore's thre... PR Priya Nair 4 Sep Privacy & Data 7 min The Thomson Reuters C-Track Breach May Include Sealed Court Records Files left C-Track in March, were found on 30 June and disclosed on 3 September. The remedy offered is credit... PR Priya Nair 4 Sep Consumer Tech 7 min Meta Disabled Cameras on Thousands of Smart Glasses With Tampered Lights Covering the capture light temporarily locks the camera and reverses when the tape comes off. New hardware det... AM Amelia Wong 3 Sep Privacy & Data 6 min 500,000 New ID Documents a Day Is Not a Historical Breach A dark-web service advertised documents from an identity verification firm and claimed half a million new ones... PR Priya Nair 3 Sep Consumer Tech 6 min Android 17 Hides the Domain Name. The IP Address Is Still in Plain Sight. Three things identify a destination: the DNS lookup, the SNI field and the IP address. Encrypted Client Hello... AM Amelia Wong 1 Sep Developer Tools 6 min VLC Passed 7 Billion Downloads, the Only Number It Can Measure Every product of this reach reports monthly active users because every product of this reach phones home. VLC... KE Kenji Tanaka 1 Sep