Shows / HeadFlash Privacy
HeadFlash Privacy
HeadFlash Privacy — a ~4-minute daily brief on digital privacy, data protection and surveillance. New episode every weekday morning.
Episodes
- HeadFlash Privacy
Ring AI apps let landlords count tenants; WA facial recognition trial ends with 122 arrests
Ring's third-party AI apps turn cameras on tenants, a WA facial recognition trial scanned 1.38 million faces, and mSecure warns customers after a breach…
- HeadFlash Privacy
Lenovo's 'encrypted' fingerprint USB drive was just a plain SD card
A researcher found Lenovo's AES-256 fingerprint stick stored data unencrypted, and follow-up work surfaced backdoors and hardcoded keys in other 'secure'…
- HeadFlash Privacy
Vizio smart TVs keep sending viewing data even after users opt out, study finds
A Northeastern study of 5,943 experiments finds ACR opt-outs fail on most smart TV platforms, with Vizio traffic persisting in every opted-out test. Sources…
- HeadFlash Privacy
GM pays $220 million over driver data sold to insurers
36 attorneys general settle with GM, Ofcom wins moderation data from TikTok, X and Meta, and CBP is ordered to explain a Dulles phone seizure. Sources: General…
- HeadFlash Privacy
GM pays $220M over driving data as FTC probes personalized pricing
Vermont nets $4.5M from GM's data-sharing settlement, France fines Fnac €7M, and the FTC questions nine firms over personalized pricing. Sources: Vermont to…
- HeadFlash Privacy
DHS leak exposes 41,000 staff as Austria bets on Matrix for hospitals
A transparency group published data on 41,000 Homeland Security workers, while Austria trials encrypted messaging to replace faxes in hospitals. Sources…
- HeadFlash Privacy
noyb Files Five Complaints Against Scale AI Over Worker Tracking
Privacy group targets Scale AI's Outlier platform in four countries, alleging illegal monitoring of freelancers who train AI models. Sources: Privacy group…
- HeadFlash Privacy
Samsung TV telemetry, Johns Hopkins AI leak, and India privacy law fight
A hacker finds Samsung TVs recording audio and screenshots for ads, 3,182 patient records went into an unapproved AI tool, and 21 Indian publishers sue over…
- HeadFlash Privacy
OpenAI cuts its top models off from the live internet after security scares
OpenAI locks advanced models offline, Google opens a Gmail ad loophole, and EU ambassadors agree six cookie purposes that skip consent. Sources: OpenAI is…
- HeadFlash Privacy
eMudhra exits TLS business after 8 weak-key certificates
An Indian certificate authority quits global SSL/TLS after researchers found private keys crackable in milliseconds, plus Malaysia's key custody and a Flock…
- HeadFlash Privacy
Judge orders Meta to pay $25B over Facebook privacy deception
Meta hit with a $25 billion New Mexico penalty, OPM ruled to have illegally shared federal worker records with DOGE, and a PHP flaw sparks breach warnings…
- HeadFlash Privacy
Court: OPM broke privacy law giving DOGE federal employee records
A New York federal court ruled OPM unlawfully handed millions of federal employee records to DOGE, while Telegram and AI data brokers face new scrutiny…
- HeadFlash Privacy
Meta opens news scraping rights as WhatsApp hides AI orders
Meta's October 30 terms let it scrape news sites for AI, while WhatsApp quietly embedded 102 hidden AI instructions in its help pages. Sources: Meta’s new…
- HeadFlash Privacy
Meta hack hits 1,500 people as 15 NHS staff fired over record snooping
Meta confirms stolen GitHub credentials exposed data on 1,500 people, while an NHS trust sacks 15 staff for accessing Nottingham attack victims' records…
- HeadFlash Privacy
HeadFlash report: the cookie banner doesn't ask for consent. It manufactures it
I checked 50 big websites visible from Poland: what really happens after you click “I do not consent”. On Onet, Poland's biggest news portal, 810 companies…
- HeadFlash Privacy
Citizen Lab: Discover-Tech ads delivered zero-click spyware to Al Jazeera devices
Citizen Lab says an Israeli ad agency's platform served millions of ads that covertly installed spyware, including on dozens of Al Jazeera devices. Sources…
- HeadFlash Privacy
Doctoralia strips health data trackers after Markup probe
Doctoralia removed web trackers that leaked patient searches and appointment details to Google, LinkedIn and TikTok, while Washington immigration arrests tied…
- HeadFlash Privacy
Coupang hit with $466M privacy fine as Elgin College bags Flock cameras
South Korea's record data-breach penalty, Pegasus data reaching NSO, and a college that had to trash-bag its own cameras. Sources: Coupang Data Breach Fine…
- HeadFlash Privacy
Norway fines Microsoft's Xandr $9.6M over Grindr data sharing
Norway's largest-ever privacy fine hits Microsoft's Xandr for exposing Grindr users' sensitive data in ad auctions. Sources: Norway fines Microsoft ad firm…
- HeadFlash Privacy
Google's $10M bid for Spirit Airlines data draws 120 lawmakers' warning
Plus: Dutch push for a kill switch on EU police data deals, and the ICO probes a 169% surge in WhatsApp scam calls. Sources: 100M Emails, 500M Chats: Google's…
- HeadFlash Privacy
Suffolk County Presses Flock Safety on 200 License Plate Cameras
Lawmakers question data retention, oversight of a 200-camera license plate reader network, while the ICO secures privacy changes from 10 AI developers…
- HeadFlash Privacy
Meta's Muse Builds Profiles of Non-Users as Church Hack Exposes 850,000
Meta's AI assistant drafts hourly dossiers on people who never signed up, while a South Korean megachurch breach may have hit 850,000 members. Sources: Meta's…
- HeadFlash Privacy
Denmark's CPR Register Breach Hits 8.8 Million; FBI Cuts Accenture After PeopleSoft Hack
Denmark's national register exposed 8.8 million records, the FBI removed an Accenture contractor over an unpatched system, and Indonesia passed a sweeping data…
- HeadFlash Privacy
Denmark CPR Breach Exposes 8.8 Million Records
Denmark calls the population register breach extremely serious, Seattle bans data-driven grocery pricing, and Raleigh weighs driverless patrol cars. Sources…
- HeadFlash Privacy
German Police Read Signal and WhatsApp Messages via Linked Devices
Germany's customs agency has turned messenger device-linking into a permanent surveillance tactic, plus Italy's €7M IQVIA fine and more. Sources: German Police…
- HeadFlash Privacy
Ethereum Foundation launches zkAPI for private AI payments on mainnet
Ethereum's new zkAPI lets users pay for AI models without revealing identity, while Delhi's 2,500 AI camera plan and Australian chatbot privacy reforms raise…
- HeadFlash Privacy
Pentagon alerts millions after DMDC breach; Palantir faces 44,000 NHS objections
Pentagon notifies service members of a nine-month DMDC hack, while 44,000 object to Palantir's NHS data platform and a study finds cars sharing more data than…
- HeadFlash Privacy
Newsom Vetoes AB 1542 as 19 of 21 Cars Leak Data
California keeps sensitive data on sale, connected cars phone home, and a filesystem flaw tracks users across every major OS. Sources: Location, Health…
- HeadFlash Privacy
Meta hit with 43 million violations in New Mexico Cambridge Analytica verdict
A Santa Fe jury found Meta misled users over Cambridge Analytica, with penalties that could top $200 billion. Plus: Apple's new watch AI, PACER fees, and more…
- HeadFlash Privacy
Australia Blames OpenAI Agent for Medicare Hack as Google Fined €403M
An OpenAI agent hacked Australia's Medicare portal, Google pays €403M over hidden tracking, and the Supreme Court greenlights a voter-purge database. Sources…
- HeadFlash Privacy
TikTok Pays £12.7m UK Child Privacy Fine as EU Warns on Quantum Threat
TikTok drops its appeal and pays a £12.7m UK fine over children's data, while EU supervisors warn quantum computers could break today's encryption. Sources…
- HeadFlash Privacy
Senate hearing targets Flock Safety as wrongful arrest and 240 misuse cases surface
Flock's CEO skipped a Senate hearing where a wrongly jailed woman testified, researchers reported 240 ALPR misuse incidents and exposed cameras. Sources: Three…
- HeadFlash Privacy
Seattle Bans Algorithmic Grocery Pricing as Sweden Fines Miljödata
Seattle becomes the first US city to ban algorithmic grocery pricing, while Sweden fines Miljödata $183,000 over a breach affecting 2.2 million people…
- HeadFlash Privacy
Google fined $462M in Ireland as BYD scrubs China from privacy policy
Google owes Ireland $462M over location tracking, BYD quietly rewrites its Australian privacy policy, and cheap smart glasses leak user data. Sources: Google…
- HeadFlash Privacy
OpenAI Cookie Links ChatGPT Accounts to Browsing on 936 Ad Pixels
OpenAI's ad collector ties your ChatGPT account to what you do on Chewy, Wayfair and hundreds of other sites, while Reform UK pledges to scrap GDPR. Sources…
- HeadFlash Privacy
Apple Fights Gag Order as Flock Camera Leak Exposes 1.6M Images
Apple challenges UK secrecy over an encryption backdoor demand, hackers pull 1.6 million images from a Flock camera, and the EU's digital ID wallet faces…
- HeadFlash Privacy
FBI biometric database exemption draws civil liberties pushback
FBI seeks to strip Privacy Act protections from its biometric mega-database as states move to mandate age checks at the operating system level. Sources: No…
- HeadFlash Privacy
EFF audit: police logged 'LOL' and 'idk' to search Flock camera network
An EFF review of Flock Safety logs found officers across the US searched license plate data with reasons like LOL, LMAO and idk, and Lee's Summit now demands…
- HeadFlash Privacy
DHS officers posed as voters to access state election records, whistleblower says
A federal whistleblower says DHS agents misrepresented themselves as voters to view state voting records, drawing Democratic warnings of thousands of state law…
- HeadFlash Privacy
FTC Bans GM From Selling Driver Data for Five Years
California curbs AI in schools, Florida confirms DMV breach, and Oregon cities drop Flock cameras as privacy fights sharpen. Sources: Your car is selling your…
- HeadFlash Privacy
South Korea's 10% Privacy Fine Regime Starts as Musk PAC Sells Voter Data
Korea's amended PIPA takes effect with the world's highest fine ceiling, while Musk's America PAC quietly expands what it can do with VoteSafe users' data…
- HeadFlash Privacy
Microsoft Signs 30-Page Student AI Privacy Deal as New Mexico Tests Facebook
Microsoft becomes first major AI developer to accept binding school privacy standards, while New Mexico opens a Cambridge Analytica-linked trial against…
- HeadFlash Privacy
Grindr Settles £26m HIV Data Claim; California Brokers Resist DROP
Grindr pays £26m over alleged HIV data sharing, California brokers fight DROP deletion platform, LG TVs face listening concerns, and Proton VPN surges in…
- HeadFlash Privacy
Trezor Breach Expands to 81,000; DHS Subpoenas 17M Driver Records
Trezor's logistics breach now hits 81,000 customers, while California fights a DHS subpoena for 17 million commercial driver records. Sources: Trezor data…
- HeadFlash Privacy
IDScan faces lawsuits over alleged breach of 153 million driver's licenses
Lawsuits target IDScan after hackers allegedly stole 153 million driver's licenses. Also: Thomson Reuters court data breach, Mullvad DNS shutdown, and more…
- HeadFlash Privacy
French Hospital Fined €500,000 Over Breach of 727,000 Records
CNIL fines Hôpital privé de la Loire for security lapses after a hacker stole data on over 727,000 patients and relatives. Sources: French hospital fined…
- HeadFlash Privacy
FBI Probes 150M Driver's Licenses Sold on Dark Web
Massive breach of US driver's license data linked to IDScan.net; FBI opens investigation. Also: TikTok's $400M COPPA settlement and more. Sources: 150M+…
- HeadFlash Privacy
ChatGPT iMessage Integration Threatens Apple Encryption
OpenAI's new Mac plugin can read and analyze iMessage chats, raising alarms over end-to-end encryption and privacy for all participants. Sources: 'I can't…
- HeadFlash Privacy
GS Retail fined $9.3M over leak of 1.66M customers
South Korea fines GS Retail, a rushed school tool leaks records, Bandai's ring skips tracking, and ChatGPT reads iMessage threads. Sources: GS Retail fined…
- HeadFlash Privacy
Carhartt breach hits 12.9M accounts; Manchester Airports loses 86GB
Carhartt breach exposes 12.9M accounts, Manchester Airports loses 86GB, and Meta fixes smart glasses LED loophole. Sources: Carhartt Data Breach: Edelson…
- HeadFlash Privacy
UK Poll Shows 90% Reject Secret Surveillance Orders After Apple Row
A new poll reveals overwhelming public opposition to secret UK surveillance orders, while Ring rolls out encryption that limits police access and Flock faces a…
- HeadFlash Privacy
Brazil Hits TikTok With $29.8M Fine Over Minor Tracking
Brazil fines TikTok $29.8M for tracking 8 million minors; Ring's new encryption limits police access; Hawley probes Flock's camera network. Sources: Brazil…
- HeadFlash Privacy
GAO Warns Retirement Plans May Sell Your Data; Apple Reverses Hide My Email Change
Retirement plans may share or sell personal data, Apple backs down on Hide My Email domain change, and Hollywood police share plate data widely. Sources…
- HeadFlash Privacy
Twitch and Amazon Face Class Action Over AI Training on Streamer Data
A streamer sues Twitch and Amazon over using content for AI training without consent, plus California's data broker bill and Flock's privacy battles. Sources…
- HeadFlash Privacy
Uber hit with $964M Dutch fine over automated driver bans
Dutch regulators fine Uber $964M for automated account suspensions; CBP database abuse exposed; Maryland coalition targets data brokers. Sources: Uber fined…
- HeadFlash Privacy
Fake VPNs Flood Chrome Store; FTC Targets Personalized Pricing
Hundreds of fake VPN extensions hit Chrome users, while the FTC warns companies on personalized pricing and OpenAI tests new abuse detection. Sources: Hundreds…
- HeadFlash Privacy
Meta Faces Trial as Four States Seek Billions Over Child Safety
Four states take Meta to court over alleged child harm; rogue ransomware affiliate scams victims; MIT study finds AI image attribution decay. Sources: ‘Harvest…
- HeadFlash Privacy
Meta Files Patent for Glasses That Auto-Record People
Meta patents facial-recognition glasses that film without prompting; China boots Windows 10 from agencies; ChatGPT ads hit Europe with consent-first model…
- HeadFlash Privacy
Google Pays $10M for Spirit Airlines Data, Picks Anonymizer
Google's $10M Spirit Airlines data deal faces court review; France warns taxpayers after major hack; Russia expands travel surveillance. Sources: Google picked…
- HeadFlash Privacy
Norway orders SATS to fix gym photo checks; Europol plan draws fire
Norwegian DPA forces SATS to change check-in photo legal basis, while EDPS warns Europol overhaul risks biometric rights. Sources: Norway forces SATS to let…