Privacy & Governance

We Demand More Information on How Marin Cops Illegally Shared Flock ALPR Data

The Marin County Sheriff’s Office is the latest California law enforcement agency to get caught sharing automated license plate re…

Challengers Approach: Third Party App Stores Arrive to Google Play

If you are an Android user, you may have noticed it already: Google has begun allowing rival, third-party app stores to be distrib…

Court Agrees with EFF: Utah’s VPN Law Demands a Technical Impossibility

When state lawmakers attempt to rewrite how the internet works, users rely on courts to recognize that laws can’t make technical i…

Happy Opt Out October! Let’s Find Real Alternatives to the Tech Giants

Over the years, the major tech companies have found all sorts of ways to embed themselves into our lives. We often use their softw…

Connected Cars Are a Surveillance Platform

Researchers at Northeastern University, in collaboration with Consumer Reports, evaluated how much modern cars spy in their driver…

Victory! California Appeals Court Refuses to Revive Surveillance Tech CEO’s Meritless Lawsuit Against Journalist

When the rich and powerful try to use the court to silence negative reporting about themselves, it’s worth calling out that behavi…

📱 Hey Siri, How Do I Limit AI Data Access? | EFFector 38.17

With the launch of iOS 27, Apple is rolling out a variety of new AI features to its familiar voice assistant, Siri. But how are AI…

Proofpoint on Why AI Security Must Focus on Intent

I Want Better Reporting on AI Genie Behavior

AI systems are regularly completing tasks in ways that their prompters don’t want or intend. Some of them are disturbing, and some…

While the Country Rejects ALPR Mass Surveillance, SF Settles for Weak Safeguards

San Francisco's decision to retain its use of Automated License Plate Reader (ALPR) surveillance cameras belies what we know about…

Privacy’s Defenders Podcast: Cowboys, Cypherpunks and Visionaries

People are increasingly concerned about the ways in which mass surveillance is tracking our every move: from Flock license plate r…

Using Device Linking to Eavesdrop on WhatsApp and Signal

Modern messaging apps allow users to link their phone accounts to their computer desktop. Eavesdroppers are taking advantage of th…

EFF to San Francisco Police: Drones are Powerful Surveillance Tools That Require a Robust Policy

The San Francisco Police Department (SFPD) began regularly deploying drones two years ago and has since expanded their use in a wa…

New Attack Against RSA

ArsTechnica is reporting on a “new” attack against RSA, one that bypasses factoring. First, this attack isn’t new. The original re…

Friday Squid Blogging: Participatory Squid Dissection in October in Tennessee

I feel like someone who reads this blog will want to go to this: Families are invited to dive into the fascinating world of marine…

EFF to Court: Trump's Use of Truth Social's Pay-To-See-Posts-First Scheme Violates Americans' 1st Amendment Equal Access Rights

EFF legal intern Simar Kaur also contributed to this article. Americans’ First Amendment right to equal access to official governm…

On Anthropic’s AI Misuse Report

Earlier this month, Anthropic published a long report detailing all of the Claude misuses it detected. Daniel Meissler usefully su…

DraftKings Is Using AI to Supercharge the Harms of Online Behavioral Advertising

Online sports betting company DraftKings is using AI to target customers who are most likely to place losing bets and respond to g…

TeamFiltration Campaign Compromises Seven Microsoft 365 Accounts Using Default Passwords

Ghost Service Accounts Enable M365 Data Theft in Chile

Proofpoint Banks on Intent‑Based Detection

Malicious npm Packages That Evade Defenses

This is an impressive piece of malware. Its sophistication says nation-state to me, but there is no direct evidence and certainly…

Research on Models Engaging in Genie-Like Behavior

New paper: “Self-Jailbreaking: Language Models Can Reason Themselves Out of Safety Alignment After Benign Reasoning Training.” Abs…

Sumit Dhawan | theCUBE + NYSE Wired - Proofpoint Protect 2026

GPT-6 Astra Breaks an Old Enigma Message

This is pretty amazing: However, the most astonishing thing about this break is that the GPT­6 Astra did it entirely on its own. C…

Proofpoint Stops the Attacks Traditional Defenses Miss in the AI Era

Proofpoint Breaks Down the Divide Between Data Security and AI Security with the Industry’s First Unified Agentic System

D.C. Circuit Must Vacate a Drone Flight Restriction That Criminalized Recording Immigration Agents

EFF joined an amicus brief with ACLU, ACLU of D.C., National Press Photographers Association, and Professional Photographers of Am…

Reverse-Engineering Flock Cameras

Hackers captured a Flock camera and got a look (alternate link) at the software: While much of the automatic license plate reader’…

EU Kids Act Won't Keep the Internet Accountable and Trustworthy

The EU Commission draft law to restrict young people’s access to the internet that it presented last week will come at a high cost…