Privacy & Governance

Proofpoint Launches OEM Program to Help Security Providers Embed Trusted Threat Intelligence and Detection Capabilities

The Senate Should Reject KOSA's Privacy Risks

The Senate Commerce Committee is once again considering legislation that would dramatically expand age verification, and undermine…

EFF Joins 18 Civil Rights Organizations Calling on Governor Hochul to Reject the Stealth Crawler Prohibition Act

EFF joined a group of 18 civil society organizations to send a letter encouraging New York Governor Kathy Hochul to Senate Bill 99…

EFF Joins Call for FTC to Drop Its Disastrous AI Policy Proposal

The Federal Trade Commission (FTC) in July issued a proposed policy statement “concerning the suppression of accuracy in artificia…

The Youth AI Privacy Act’s Privacy Paradox

The Senate Commerce Committee is poised to consider the Youth AI Privacy Act, a bill that would require AI companies to create kid…

Who (or What) Generates Images for EFF?

We’ve had a few questions from EFF supporters lately, asking whether the images we use on our blog posts, or on donation and shop…

More on the OpenAI Agent’s Attack on Hugging Face

Hugging Face has published a detailed timeline of the attack. From the summary: The agent was running an internal OpenAI cyber-cap…

EFF at BSidesLV, Black Hat, and DEF CON 👨‍💻

It's time. Time for tinkerers, security researchers, hackers, and fellow nerds to gather together in signature black hoodies and u…

The OpenAI Hack Shows the Genie Is Out of the Bottle

This essay originally appeared in Foreign Policy. Earlier this month, two of OpenAI’s models broke out of their containment sandbo…

Friday Squid Blogging: Squid Helps Discover New Marine Species

The Squid is a new scientific machine: One of the technological breakthroughs was the onboard use of a spinning wheel confocal mic…

Amending AB 1709 Doesn’t Fix It: California’s Social Media Ban Still Threatens Free Speech and Privacy

California lawmakers have amended A.B. 1709, but the core problem remains: the bill is still a ban on social media access for yout…

The SCREEN Act Threatens Privacy Far Beyond Adult Websites

The Senate Commerce Committee is set to consider S. 737, the SCREEN Act, a sweeping age-verification bill that would require onlin…

The CHATBOT Act Forces One Parenting Model On Every Family

Artificial intelligence is rapidly changing education, and the way people search for information. Parents, teenagers, teachers, an…

Anthropic’s Opus 5 Is Better at Resisting Prompt Injection

The chart is interesting. On the IPI benchmark, Opus 5 improved over Opus 4.8, reducing the probability of an attacker succeeding…

EFF Guide to Recording Law Enforcement

This post is available as a printable one page handout in English and Spanish. Recordings of law enforcement, whether by bystander…

Facial Recognition at Madison Square Garden

Last month, the story broke (alternate link) that Madison Square Garden uses facial recognition software on everyone entering the…

Max-severity Exchange server flaw under active exploitation by Kremlin hackers

American Being Prosecuted for Wiping His Phone Before Handing It Over to Border Officials

He’s being prosecuted for giving border officials a code that wiped his phone: The case centers on a feature included in GrapheneO…

Should You Use AI for a Task? Here’s a Simple Way to Decide

This essay originally appeared in The Guardian. I teach public policy at the Harvard Kennedy School and the Munk School at the Uni…

Measuring the Tendency of AI Agents to Go Rogue

This essay was written with Barath Raghavan, and originally appeared in The Guardian. In July, Hugging Face, a company that hosts…

🏃 Fitness Tracker Privacy Fails | EFFector 38.14

Watches, bands, and rings—if you want to digitally monitor your fitness, more companies than ever are selling devices to do it. An…

Long-Lived Vulnerability in Microsoft Secure Boot

Microsoft’s Secure Boot has had a serious vulnerability for most of its existence. An industry-wide standard Microsoft invented to…

Measuring LLMs’ Ability to Perform Cryptanalysis

There’s new benchmark measuring AI’s ability to perform mathematical cryptanalysis. Anthropic’s frontier model actually found new…

San Francisco: Don’t Fall for Industry Defense of Surveillance Pricing

The concept of “surveillance pricing” is just one part of a much larger problem and business model: corporations maximizing their…

Why Are Gay Bars Building Databases of Their Patrons?

Recent reports have raised alarm about the use of PatronScan, an ID-checking and face-scanning system, at multiple LGBTQ+ bars in…

Axon Is Another License Plate Surveillance Company

Governments are switching, but I’m not sure it makes a difference: …some municipalities, including Denver, Colorado, are ditching…

Missed EFF's Livestream with Adam Savage and iFixit? Listen Here!

EFF’s first EFFecting Change livestream was all the way back in July of 2024. Maybe you've caught each stream, or maybe you’ve onl…

Cognyte Sells a Mobile Cell Surveillance Van

Yet another Israeli mass surveillance company: Made by Israeli surveillance company Cognyte, the tech simulates a mobile phone tow…

Friday Squid Blogging: Illex Squid Catch in the Falklands

Lower catch this year. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t co…

Farmers Are Getting Control Of Their Equipment Back

For years, John Deere had actively made repairing their tractors near-impossible for anyone but itself and the few "authorized" re…