#privacy

What this server has with the tag: posts by people here, and posts from elsewhere that reached it. There's more of it on infosec.exchange, m.ai6yr.org, mastodon.de, eldritch.cafe, social.openrightsgroup.org.

@Zelda@m.ai6yr.org

Roku has been bought out by Fox.

I found out when they sent an e-mail informing me they're updating their privacy policy and terms of service.

Hi,

We’re reaching out to let you know about some updates to the terms governing your use of our products and services and our privacy policy in connection with Roku joining the FOX family of companies.

You can continue to enjoy the Roku experience you know and love. Your Roku devices, channels, subscriptions, and account will continue to work just as they do today. Roku remains committed to giving you access to a wide range of entertainment and streaming choices from many providers across the Roku platform. You can review the updated privacy policy here and the updated terms here.

Thank you for being part of the Roku community. We are grateful for the trust you place in us and look forward to continuing to bring you the entertainment you love.

If you have questions, our team is here to help at support.roku.com.

Happy Streaming!

The Roku Team
@adbenitez@mastodon.de

🚨 is collecting phone numbers /SIM from your phone by default now without asking for consent, here is how to disable it

I have a test phone with stock Android (and hence Google services) to test how the apps I develop behave there etc.

The other day I woke up with a notification in that phone, out of the blue Google was telling me they "verified my phone number" basically they stole/collected my phone number from my phone and sent it to their servers without any consent.

I know the trust bar is very low, but even then I didn't expect Google to do this.

Here is how you can disable the collecting of your phone numbers which is on by default:

Go to Settings -> Google -> All services -> Privacy & security -> Phone number verification. See attached screenshot.

Or even better: switch to or other systems

Please boost and spread with your not-so-techie friends that might be using stock Google phones

EDIT: corrected typo: it is "all services" not "all devices"

@ml@eldritch.cafe

I dumped Proton when Yen blathered about the GOP being better for privacy... Glad I did even though it was disappointing to have to move email addresses again.

For those shopping for email providers, I use Posteo. At the time I was looking at them, AI hadn't quite been shoved everywhere yet so I didn't ask them their policy. posteo.de/en

I wrote support to ask what I could tell those who are considering Posteo now about what their AI policy is. This was the reply:

"The use of so-called AI is not allowed for the Posteo team, in order to protect sensitive data, company data or source code from being transferred to third party servers or to third countries, to ensure the security of the working environment, the Posteo systems, and the product itself, to mitigate the risk of incorrect AI results in work outputs, to protect data from being used by third parties for AI training and to prevent potential legal violations and loss of control over the data entered, and to meet our ethical and ecological requirements.

Posteo is intentionally designed as a product free of AI features. However, Posteo is fully compliant with internet standards (IETF) and users are free to decide whether they want to use so-called AI features with local programs or apps for email, contacts, calendars, and notes at any time using open interfaces and formats. Sharing passwords with so-called AI agents and allowing them to directly access our interfaces is prohibited.

Kind regards
the Posteo Team"
@openrightsgroup@social.openrightsgroup.org

In reply to a post

There are better ways to deal with online harms in the UK.

This includes tackling the business models that prioritise harmful content to generate sustained engagement and therefore ad revenue.

The privacy risks of age verification run by unregulated providers is too great.

Sign our petition if you agree ⤵️

action.openrightsgroup.org/say

@openrightsgroup@social.openrightsgroup.org

You get an ID check. And you get an ID check. And you...

Ofcom has announced a list of age verification methods to be used to enforce the UK's under-16s social media ban.

The only way to prove you're not under 16 is to prove you're older.

That's millions of adults having to hand over sensitive data.

techradar.com/computing/social

@steve_zeke@freeradical.zone

RE: mamot.fr/@pluralistic/11750799

> This is wildly illegal and incredibly immoral. The paper claims that by simply reading an article, you agree that you can never, ever sue them for virtually any reason, and that you have consented to effectively unlimited surveillance and commercial exploitation of your private data.

The filter feels a bit beyond my competency, but I tried simply turning off JS with uBlock. Seemed to work other than losing some media. Am I missing something?

@aral@mastodon.ar.al

Hey, @EUCommission, fuck you too.

***

On Wednesday, EU Member States approved a change to the GDPR that would put the profit-making interests of OpenAI, Anthropic, Google, Meta and SpaceX over European's fundamental right to data protection. According to the approved text, processing personal data “in the context of AI” should automatically be lawful. In particular, Big Tech would be able to use all personal data collected over the past decades with virtually no restrictions, as long as this happens “in the context” of AI. Schrems: “Under the agreed text, the profits of AI companies would typically trump European’s fundamental right to privacy. This is nothing but a digital expropriation of Europeans.”

noyb.eu/en/ai-eu-member-states

@finnmyrstad@eupolicy.social

🫵🏽 You are welcome to join this BEUC and NCC webinar 📺 on the future of commercial surveillance online in light of the recent decision of the Norwegian Data Protection Authority against the Microsoft owned adtech company Xandr.

🚩 What the does the decision is mean for the adtech sector? What might the digital omnibus and changes to the GDPR?

➡️ Sign up here: forbrukerradet.no/side/webinar

Hope to see you!

@noybeu @beuc

Photo of the event page, with three persons. 

Join BEUC and the Norwegian Consumer Council for a webinar exploring the Xandr fine, its implications for commercial surveillance and the adtech industry, and the ongoing EU Digital Omnibus.

On 12 October, the Norwegian Data Protection Authority fined the Microsoft subsidiary Xandr 8,5 million euros million (NOK 92 million) for processing personal data from the dating app Grindr illegally. The decision is based on an action from the Norwegian Consumer Council (NCC) and over 40 organisations, including BEUC and noyb.

On November 2, 15.30-16.30 CET, the European consumer organisation BEUC and the NCC are organising a webinar to unpack the issue of commercial surveillance, what the most recent DPA decision means for adtech companies, and what the omnibus may mean for our ability to keep adtech companies accountable in the future.
@JulianOliver@mastodon.social

It was a real pleasure teaching the 6th edition of the Tunnel training.

Some exceptional displays of determination, focus and peer support. It came together beautifully in that last session with not just 'conservative' VPN configurations, of using a remote endpoint as a gateway to the www, but implementing real private LAN-like layers atop Internet infrastructure.

Congrats to the graduates!

@jwcph@helvede.net

RE: mamot.fr/@pluralistic/11745585

"The problem here isn't advertising, it's surveillance. The ad-tech sector has convinced advertisers that targeting ads to users rather than content will massively improve ad performance. The evidence for this is very poor: targeted ads improve clickthrough rates by less than 5% (relative to content-based ads that relate to the substance of the page you're looking at), and they're incredibly expensive (and very dangerous!) to serve." - @pluralistic

@WeirdWriter@caneandable.social

Excuse me, but no, this is not the same as being banned from a place. Nope, no. No. Fucking. Way. No. . We blind people turn off our smartphones when we're watching a movie in a theater don't we? If you are using these glasses for education, in an educational setting, and they are denying you the tech, I can stand behind you on that but not this. No. Not every place that is backlashing against these glasses is banning you. This is not the same thing. I refuse to see it as such. > "That is essentially a little bit like an organisation saying: 'As a blind person you're not welcome coming into this place'," he said. bbc.com/news/articles/cmx2qlz7

@JulianOliver@mastodon.social

Big tech is not inevitable, there is no conveyor belt to enshitification. There is always a choice. Civil servants - politicians - just need to make the right one.

Civil servants like Torgeir Micaelsen, Norway’s minister of digital affairs:

"We do not want a society where people worry about being recorded without their knowledge, photographed or filmed in places and situations where they are accustomed to not being monitored"

theguardian.com/world/2026/oct

@Em0nM4stodon@infosec.exchange

Privacy needs to be the default,
Even for people who don't think they need it,
And even for people who don't care about it.

Privacy is a human right.

@Em0nM4stodon@infosec.exchange

Do not provide your ID or facial scan to access social media.

I repeat, do NOT provide your ID or facial scan to access social media when requested.

This is not a drill.

If everyone refuse to comply, and let their accounts dormant instead, I promise you the platforms themselves, with their immense budget and network of lobbyists, are going to fight these absurd laws to recover their users.

They need you more than you need them.
Make them fight for your rights.
Do not comply.
Spread the word and boycott ID checks ✊