Privacy & Governance

AI Genie in the Wild

When I give talks about AI genies, I use this sort of example as a hypothetical. It’s happened. The story is from Australia. Someo…

AI for Military Support

Interesting empirical research: “Black Box Warfare: Human Judgment and Military Decision-Making in the Age of AI.” Abstract: How i…

Dismiss Church’s Trademark Lawsuit Against “Mormon Stories” Podcast, EFF Urges Court

Imagine if McDonald’s could use trademark law to control how you use the term “fast food.” Or if the Canadian government could sto…

Meta Must Stop Silencing Reproductive Health Information

Access to accurate information about reproductive and maternal health can be critical. But on Meta's platforms, simply talking abo…

Python Now Has a Post-Quantum Encryption Library

This is good: Post-quantum cryptography is now one pip-install away for the entire Python ecosystem. With funding from the Soverei…

Friday Squid Blogging: Arctic Bobtail Squid Video

Nice video of the Arctic bobtail squid. As usual, you can also use this squid post to talk about the security stories in the news…

Russian hackers can steal emails without a click

ICE Is Buying Access to Credit Card Records

Through data brokers, ICE is buying the information you provided to open a credit card.

Adversarial Clothing Designed to Fool Facial Recognition Systems

There are many companies manufacturing adversarial clothing designed to confuse facial recognition systems. It’s a cool idea, but…

Vulnerabilities in Car Anti-Theft Device

This is disturbing: …a team of security researchers at UC San Diego, who found that a model of aftermarket car alarm known as the…

Tomorrow’s U.S. Senate Vote: Four Internet Bills, One Wrong Direction

The Senate Commerce Committee will vote this week on several censorious and privacy invasive bills: KOSA, the SCREEN Act, Youth AI…

Appeals Court Agrees with EFF that Building a Web Browser Doesn’t Violate the CFAA

The Ninth Circuit Court of Appeals has endorsed a commonsense technical interpretation of the Computer Fraud and Abuse Act (CFAA),…

Mobile Ad Software Encourages Location Data Sharing, EFF Report Finds

Developers Must Beware of Ad Libraries that Betray Users’ Privacy SAN FRANCISCO – Some software development kits (SDKs) provide…

Developers: Beware of Ad Libraries that Betray Your Users’ Location Privacy

Across mobile platforms, advertising companies provide developers with software development kits (SDKs) that make it easy to monet…

Iran Cyberattacks Against Minnesota Water Systems

Attribution is preliminary, and so far it seems no real damage. And it seems like this is a campaign that has targeted at least se…

Technology's Power in the Hands of the People

In the scorching heat of every Las Vegas summer, EFF joins thousands of hackers, makers, policy analysts, and activists for the wo…

Proofpoint Joins Google Unified Security Recommended Program to Help Organizations Defend Against Today’s Most Sophisticated Threats

Some Claude Chats Are Searchable on Google

And it’s personal information (alternate link): The exposed data includes an AI-powered therapy app that someone appears to have v…

Proofpoint Launches OEM Program to Help Security Providers Embed Trusted Threat Intelligence and Detection Capabilities

The Senate Should Reject KOSA's Privacy Risks

The Senate Commerce Committee is once again considering legislation that would dramatically expand age verification, and undermine…

EFF Joins 18 Civil Rights Organizations Calling on Governor Hochul to Reject the Stealth Crawler Prohibition Act

EFF joined a group of 18 civil society organizations to send a letter encouraging New York Governor Kathy Hochul to Senate Bill 99…

EFF Joins Call for FTC to Drop Its Disastrous AI Policy Proposal

The Federal Trade Commission (FTC) in July issued a proposed policy statement “concerning the suppression of accuracy in artificia…

The Youth AI Privacy Act’s Privacy Paradox

The Senate Commerce Committee is poised to consider the Youth AI Privacy Act, a bill that would require AI companies to create kid…

Who (or What) Generates Images for EFF?

We’ve had a few questions from EFF supporters lately, asking whether the images we use on our blog posts, or on donation and shop…

More on the OpenAI Agent’s Attack on Hugging Face

Hugging Face has published a detailed timeline of the attack. From the summary: The agent was running an internal OpenAI cyber-cap…

EFF at BSidesLV, Black Hat, and DEF CON 👨‍💻

It's time. Time for tinkerers, security researchers, hackers, and fellow nerds to gather together in signature black hoodies and u…

The OpenAI Hack Shows the Genie Is Out of the Bottle

This essay originally appeared in Foreign Policy. Earlier this month, two of OpenAI’s models broke out of their containment sandbo…

Friday Squid Blogging: Squid Helps Discover New Marine Species

The Squid is a new scientific machine: One of the technological breakthroughs was the onboard use of a spinning wheel confocal mic…

Amending AB 1709 Doesn’t Fix It: California’s Social Media Ban Still Threatens Free Speech and Privacy

California lawmakers have amended A.B. 1709, but the core problem remains: the bill is still a ban on social media access for yout…

The SCREEN Act Threatens Privacy Far Beyond Adult Websites

The Senate Commerce Committee is set to consider S. 737, the SCREEN Act, a sweeping age-verification bill that would require onlin…