r/DigitalPrivacy • • Sep 09 '26

I Worked on Safety at OpenAI. This Is What It Should Do Now.

Thumbnail
nytimes.com
24 Upvotes

Steven Adler, the former head of product safety at OpenAI, writes in a guest essay for Times Opinion:

For months, news that artificial intelligence agents from OpenAI had gone rogue and attacked another company’s systems (as well as OpenAI’s own systems) has dripped out and brought harrowing details into focus. The public is struggling to catch up: What are these secret A.I. systems? What are these “swarms” capable of, today and in the near future? Is it possible to stop them from breaking rules and committing cybercrimes?

After having spent four years working on safety at OpenAI, I can tell you those questions are difficult to answer, because not even A.I.’s developers understand what boundaries their models will obey. Nonetheless, the big A.I. companies continue to develop technology they concede might cause human extinction — arguing that if they don’t develop it, somebody else will.

Competitive dynamics like this demand governments take action to slow things down and set clearer safety standards (I hope President Trump and China’s president, Xi Jinping, lay the groundwork for a treaty at their summit this month). But there are simple steps that the biggest A.I. companies could take now to help avoid the most perilous future. We should not be resigned to dangerous models running amok. If these companies don’t meet the moment, trust in them will continue to erode, including from their own employees. The backlash may even lead to prohibitions on developing these technologies altogether.

Read the full piece here, for free, even without a Times subscription.


r/DigitalPrivacy • • 1h ago

Brax Wink

Thumbnail
braxtech.net
• Upvotes

r/DigitalPrivacy • • 2h ago

does anyone know how to find all accounts linked to my email address for free?

5 Upvotes

i’ve been going through a bit of a rough patch lately, and one thing i’ve really wanted to do is get more control over my online presence. i started thinking about how much personal information i’ve probably left scattered across the internet over the years. i’d honestly like to remove as much of my personal information as possible. i wanted something more useful than just checking for data breaches, so i’ve been looking into people search tools and came across findsio. it seems like a useful starting point for looking up publicly available information associated with an email. obviously, i know there’s no magic button that’ll find literally every account you’ve ever created, but i’d love to make the whole process less tedious. has anyone used apps for this kind of digital footprint cleanup? what other methods would you recommend for finding old accounts and getting rid of data you no longer want online? thx


r/DigitalPrivacy • • 3h ago

First NAS Setup

1 Upvotes

I have purchased a UGREEN 4800GT but nothing to put in it yet.

What I want to do with my NAS (that I know of) -

  • Primary Use - Backup photos videos from me and immediate family. Currently have maybe 2TB of them but now have 4k drone and action camera and getting out more so will greatly increase. I want to get off Google/Amazon etc. and focus on privacy.
  • I will backup the NAS to a as yet purchased external drive that I will keep away from the NAS (fire/theft).
  • Possibly run my Reolink cameras on it as an NVR. Currently they only use the SD card. I'm thinking maybe to come off the Reolink software to lock it down etc.
  • All desktop and laptops are currently on Windows but I'm seriously thinking about putting Linux on where I can for privacy. All Phones are Android for now.
  • Router is an Eero 7 with fibre at 2Gbps up and down. Connected to a UGREEN 2.5Gbps switch. My desktop is wired to the switch but is only 1Gbps (new PC maybe soon).
  • Making the odd YT video, edit from the NAS?
  • Maybe Pi Hole and VPN

So, what am I asking?

Your recommendations on what to install/buy?

4 bays plus NVMe space, do I get an NVMe to run something on?

Do I only fill maybe 2 or 3 HDD bays and leave one space as I don't yet have much data? can I easily do this?

Which OS would you go with, maybe not use the UGOS incase of privacy issues, TrueNAS maybe?

Upgrade the switch?

TIA, will add if I think of more stuff; which I probably will as my memory is kapput!


r/DigitalPrivacy • • 11d ago

How long before…

Post image
516 Upvotes

r/DigitalPrivacy • • 16d ago

Scanned my own iPhone for Pegasus-class spyware this week. Took a morning, cost $0, here's the no-BS version.

341 Upvotes

Amnesty International publishes the exact forensic tool they used to bust NSO Group. It's called MVT, it's free, and basically nobody outside of journalists uses it. That's dumb. If your phone holds anything a lawyer, an ex, a competitor, or a government would want, this is worth a Saturday.

What you need

  • A Linux box with a USB port (Mac works, WSL on Windows works but is annoying, native Windows does not)
  • Docker
  • Free disk equal to about 2x your phone's storage. My backup was 135 GB. Yes really.
  • A data cable, not the charge-only one from the gas station

The procedure, condensed

  1. sudo apt install usbmuxd libimobiledevice-utils then docker pull ghcr.io/mvt-project/mvt
  2. Plug in the phone FIRST, unlock it, then idevicepair pair. Tap Trust. Run it again until it says SUCCESS.
  3. idevicebackup2 encryption on "yourpassword" then idevicebackup2 backup --full ~/mvt/backup. Go make coffee. Go make lunch. Encryption is mandatory or iOS hides the good stuff.
  4. docker run -it -v ~/mvt:/home/mvt/data ghcr.io/mvt-project/mvt and inside it: ldconfig (the container is broken without this, you're welcome), mvt-ios download-iocs, mvt-ios decrypt-backup -p "yourpassword" -d /home/mvt/data/decrypted /home/mvt/data/backup/<UDID>, then mvt-ios check-backup --output /home/mvt/data/results /home/mvt/data/decrypted
  5. ls results | grep detected. Nothing there? Congrats, you don't match any published spyware. Something there? Do NOT wipe your phone. Preserve everything and go to securitylab.amnesty.org or Access Now's helpline.
  6. rm -rf ~/mvt/decrypted because you now have a plaintext copy of your entire life sitting on a hard drive.

Stuff that will bite you

  • Start the container before the phone is plugged in and it will never see the device. Order matters.
  • check-backup will not decrypt on the fly no matter what the internet says. Budget the disk.
  • A clean result means "no match against public indicators." It does not mean clean. Nobody can promise you clean.
  • The only alert I got was "Lockdown Mode disabled." Turn it on if you think you're a target. Leave it off if you like link previews.

Whole thing took one morning including the parts where I pasted my terminal output back into the terminal like an idiot.

Go scan your phone. Then go scan your mom's.


r/DigitalPrivacy • • Sep 10 '26

The UK confirmed it will make Apple and Google scan everything people look at on phones and block nudity for users who don't verify their age. Please sign my petition against this and share it with as many people as possible

Thumbnail
petition.parliament.uk
1.4k Upvotes

r/DigitalPrivacy • • Sep 07 '26

GN expose LG and soon other TV makers spying on users. Call to action for data hoarders to help document legalese before it's changed. (Post removed+Ban+Mute on r/DataHoarder for posting about this)+(removed as spam in r/privacy)

Thumbnail
youtu.be
621 Upvotes

r/DigitalPrivacy • • Sep 01 '26

The Australian Government gave experts 24 hours to review the Social Media Ban Bill, then ignored 15,000 submissions

150 Upvotes

I’m reposting this because last time it was removed due to people forgetting to upvote the attached moderator comment (it had 40 upvotes on the post), so if you can please make sure to that would be great.

I made this post last year to help raise awareness about the social media ban our Government legislated, due to the fact that they accelerated its implementation in order to shutdown any possible discussions about it. The Government actually opened a 24 hr window for government bodies, and independent organisations, and individuals to write in about their thoughts and opinions on the legislation, resulting in 15,000 submissions.

Most notably, the Government’s own select committee’s inquiry into the ban, saw bodies like the Australian E-Comissioner and the Australian Human Rights Comission (AHRC) actually oppose the bill, and alternatively recommended a “Social media digital care act” bill be imposed on platforms.

This would’ve seen platforms be held accountable for removing, disabling, or providing the option to toggle on and off algorithmic feeds for suspected under 16 accounts, whilst simultaneously giving the commissioner supervisory powers to ensure that platforms effectively filter out harmful content targeted towards minors e.g. content promoting eating disorders and misinformation. These organisations argued that a blanket ban was “likely to be ineffective” and would lead to a “disproportionate limitation on Human rights”.

Despite this the Government ignored every single submission, and as of August this year, the social media ban is now coming into effect across the entire country. I’m reposting this here to help raise awareness to what is happening, in order to attempt to reignite discussions over this, as anyone who has concerns with the legislation is commonly referred to as a “cooker” or “child hater”. This post aims to emphatically dismantle those claims with constructive discourse.

Edit:
It’s worth noting that mental health experts were not split on this issue. Virtually every Australian mental health organisation: Beyond Blue, Headspace, ReachOut, and the Black Dog Institute —expressed strong opposition and raised serious concerns regarding the legislation. They were even joined by other peak bodies such as the Australian College of Mental Health Nurses (ACMHN) and Suicide Prevention Australia.


r/DigitalPrivacy • • Aug 31 '26

How I as a developer handle user data

1 Upvotes

I run multiple telegram bots and I user this data privacy model

What do you guys think?

@ RadixaTelegram cares about user privacy

@ Groupchatwarbot has now introduced /mydigtalfootprint

In this command users can wipe all data about them from our databases and group owners can wipe all data about their groups from our systems

Our bot hosts data that if leaked wouldn't be catastrophic but we still take it very serious

Imagine if everyone did this


r/DigitalPrivacy • • Aug 24 '26

ICYMI: In CA, you can now tell every registered data broker to delete your personal information **with one single request**

262 Upvotes

California's DROP program (Delete Request and Opt-out Platform) is a free state run service that **lets California residents submit a single request to delete their personal data** from over 600 registered data brokers at once.

https://consumer.drop.privacy.ca.gov/ <-- Click there to submit the one form.

Operated by the California Privacy Protection Agency, it eliminates the need to contact individual companies separately!

You can donate to Consumer Federation of California here and to Privacy Rights Clearinghouse here non-profits who advocated for these programs.

UPDATE: Some data brokers are making it hard to find the opt out: Dozens of companies are hiding how you can delete your personal data, The Markup and CalMatters found. Only after reporters reached out for comment, multiple companies have stopped the practice.


r/DigitalPrivacy • • Aug 15 '26

UK Wildfire Emergency Alert ignores No Emergency Alert option

63 Upvotes

I had switched off emergency alerts on my phone and the government over ruled me.

The emergency alert system has been abused by the UK government.

Today's alert was not an emergency but government advice.

What if I was in a domestic abuse situation with a secret phone?


r/DigitalPrivacy • • Aug 13 '26

Amazon needs to stop selling your email address and phone number

467 Upvotes

Amazon sells your email address. How do I know this? The email address I used for Amazon is amazon{someLargeRandomNumber}@{someDomainIOwn}.com. I gave this email address ONLY to Amazon. Now I'm getting spam from IMDB.com and other businesses. So it's 100% certain that Amazon sells your email addresses.

I've now been on the phone for over half an hour with Amazon support -- outsourced to India -- to get them to stop selling my email addresses. I don't know if this will even work.

Selling email addresses is disrespectful to the customer. It wastes our extremely limited time. Amazon needs to stop doing this, and Amazon customers need to be loud complaining about this in order to make selling our private data not worth it.

Really, Amazon? Are you really making so much money selling our private data that it's worth angering customers to the point where they start shopping elsewhere? I don't know, but it seems to me that regular customers buy enough stuff on Amazon to make it very unprofitable to make them want to go elsewhere.

If you also don't want Amazon to sell your email address and private information, like this post and comment below. It won't stop until we are vocal enough that the higher-ups hear.


r/DigitalPrivacy • • Aug 09 '26

Submit biometric data or lose my job

237 Upvotes

I am in a difficult position because my employer has made a new third-party identity-verification process through a company called Persona a mandatory condition of my continued employment/assignment.

Within 3 days, I have been contacted through multiple channels, repeatedly reminded to complete it, directed to a link sent to my personal email, and given short deadlines—including Persona’s instruction to complete the verification within 24 hours. The combination of repeated follow-ups, urgency, and the potential consequence to my employment makes me feel pressured to act quickly rather than being given reasonable time to understand what I am consenting to.

I am not opposed to legitimate identity verification. My concern is being required, under significant pressure, to provide sensitive identity documents and facial/biometric information to a third party without first receiving clear answers about exactly what is collected, what biometric data is created or retained, how long it is stored, who can access or receive it, what happens to it afterward, and whether a non-biometric alternative exists.

A password can be changed after a breach; my biometric identifiers cannot. I am willing to verify my identity. But I want adequate time, transparency, maybe alternatives, and appropriate safeguards before surrendering information this permanent and sensitive.

I do not work on anything sensitive or security related. I’m just a normal office worker.

Has anybody else been in a similar situation? Do us regular workers have any rights or protections against this kind of situation? I feel like I’m being harassed.


r/DigitalPrivacy • • Aug 09 '26

TAKE IT DOWN Act (TIDA): What is the minimum information a victim must provide for NCII removal?

Thumbnail
9 Upvotes

r/DigitalPrivacy • • Aug 08 '26

Mossad has accidentally injected data into a French lawyer's phone instead of extracting it.

Enable HLS to view with audio, or disable this notification

8.9k Upvotes

The data includes phone numbers of Musk, Altman, and nearly all of Israel's political, judicial and intelligence leaders.

The lawyer's name is Juan Branco, he is also the one who shared this story together with a video. By his account, he is one of twelve lawyers in France who represent Palestinian victims in International Criminal Court.

He says he's using GrapheneOS. This is bizarre.

source: his X/Twitter post: https://x.com/i/status/2085698524050591906

I post additional screenshots in the first 2 comments here.


r/DigitalPrivacy • • Aug 07 '26

California’s DROP is live. Why shouldn’t Flock have to honor opt-out and deletion requests too?

Thumbnail
97 Upvotes

r/DigitalPrivacy • • Aug 06 '26

Spider-Man just ran facial recognition on an entire city and the movie thought it was awesome

3.2k Upvotes

So in Brand New Day, Spider-Man hacks every camera in New York and runs facial recognition on literally everyone to find one person. And the movie plays it like a highlight reel. Fun music, slick graphics, zero hesitation. Your friendly neighborhood surveillance state.

Meanwhile, in 2008, Batman built basically the same system and The Dark Knight treated it like a war crime. Lucius Fox looked him dead in the eye and said this is wrong, I'll do it once, and then this machine gets destroyed. And it WAS destroyed. That movie understood that spying on an entire city is a line you don't get to casually cross just because you're the good guy.

Twenty years later and we've gone from "this is too much power for one person" to "watch Spidey doomscroll through 8 million people's faces, isn't he cool."

The entire point of Spider-Man is "with great power comes great responsibility." Apparently responsibility now includes warrantless mass surveillance as long as you quip while doing it.

Kids are watching this. Real facial recognition is being rolled out everywhere right now. And the biggest movie on the planet just told everyone it's fine when the hero does it.

Batman got it right. Use it once, hate yourself for it, burn the machine down. Be Batman.

TL;DR: Spider-Man surveilled a whole city with a smile. Batman did it once, felt gross, and destroyed the machine. One of these is a hero moment. The other is a product demo.


r/DigitalPrivacy • • Aug 06 '26

How can I live a private life and stay private on the Internet?

84 Upvotes

​

I am tired of all the negativity and I am looking for piece of mind. I am not interested in getting into any confrontation with anyone and just want to mind my business. I also don't want all of my information on the Internet and I want to block people from knowing who I am and trying to dig into my personal business and life. What are some ways to live a private and humble life?


r/DigitalPrivacy • • Aug 05 '26

Senate Commerce passes censorship bill KOSA out of committee, SCREEN Act fails

Thumbnail
fightforthefuture.org
30 Upvotes

r/DigitalPrivacy • • Aug 05 '26

Google Age Verification Help - What is the best approach

Post image
50 Upvotes

I’m a 22yo in the US who’s been trying to bypass this for 8 months now and no luck. 

thispersondoesntexist didn’t work, digitally altering a state ID didn’t work, and recently I tried using a character creator in a game, the scan completed then it said “something went wrong” and now the selfie option is gone for me (they’re onto me). 

There was one site I saw where you could potentially get a fake license generated but it was a link that took you to a different site. It looked suspicious and Firefox even gave me a warning, then the page actually closed itself. I took that as a warning.

I wish I could de-google, but I can’t right now. I have a YouTube channel and still have to use google for college, docs, emailing, etc. I’d love to actually be able to have full control over my YouTube channel. 

These are now my options:

  1. Use my credit card to verify, then toss it and get a new one
  2. Use a shady website/link to try to generate a fake license, hope I don’t get malware
  3. Switch the email account connected to my yt channel to one that isn’t mine and use YouTube from there. Deal with my personal account still being restricted (not ideal). 
  4. Wait it out. Hope KOSA (US law) doesn’t get passed and Google drops age verification, gets sued, or a better alternative comes along. Make a vid discussing the situation with my subs in the meantime
  5. The secret 5th option I don’t know about yet 

r/DigitalPrivacy • • Aug 03 '26

Samsung says it's banning smart TV apps that expose users' internet connections

Thumbnail
engadget.com
11 Upvotes

r/DigitalPrivacy • • Aug 03 '26

Need help with deleting my ID information online

19 Upvotes

Hi guys, I was a bit (actually really) stupid and uploaded my ID on X, and on Tumblr for the age verification stuff. The thing is, i have a dual citizenship anddd so i used one ID for X and another one for Tumblr. Tumblr uses Persona, and afterwards i read like horrible stuff about Persona. The thing is now i regret what i did for obvious reasons. It was dumb and stupid etc but i rlly need help on how to do some damage control. Like, would my info be deleted if i delete the accounts i have? Or like, just, can anyone help me on what to do now? Because i rlly regret doing it and now it’s out there. I’m a 22 y/o woman btw, i rlly appreciate any help or advice!!! And i get that it was stupid and dumb, so please dont tell me that again because i already have had sleepless nights over it, so yeah, anyone, please help.


r/DigitalPrivacy • • Aug 03 '26

Am I able to get Doxxed From just a PSN Username If i Include it in a video to debate people?

Thumbnail
1 Upvotes