Nostr notes by

Swiss cyber agency NCSC: "another significant increase" ...

2026-10-31T08:13:16Z

Swiss cyber agency NCSC: "another significant increase" in hijacked WhatsApp accounts 👀

the trick: a fake "please vote for me" link. enter the code or scan the QR code, and you either lose your account or give scammers access "from another device without realising it"

messages you encrypted on your own phone before sending? on their device it's gibberish. the key never left your phone 🔐

#privacy #europe #CyberSecurity #encryption

https://www.bacs.admin.ch/en/26w43-en

what is important for day to day: - users keep using Telegram, ...

2026-10-29T12:29:10Z

In reply to nevent1q…0wm3
_________________________

what is important for day to day:
- users keep using Telegram, WhatsApp or SMS. Chryptor encrypts the text before the app ever sees it
- no account, no servers. keys stay on their phone
- they swap keys in person with a QR code, or with a shared passphrase
- it works fully offline: no internet permission, so Android blocks every connection. anyone can check that in the permission list

on your question: the app's code isn't public, an independent audit comes once we have the resources. on the roadmap: source-first tools, starting with a desktop companion purely for encrypting and decrypting text and files, running the same crypto as the app.

nobody broke Signal's encryption ICE agents went undercover ...

2026-10-29T11:32:16Z

nobody broke Signal's encryption

ICE agents went undercover INTO activists' Signal groups

add data brokers, PayPal transfers, driver records and website traffic

end-to-end encryption protects messages on the way, it can't protect you from who's in the chat or client-side risks

stay private

#privacy #Signal #Surveillance #encryption #usa #chryptor

https://www.wired.com/story/ice-is-running-one-of-the-largest-anti-left-surveillance-operations-in-us-history/

Seoul police: a former pentester and his group breached 90+ South ...

2026-10-28T13:36:16Z

Seoul police: a former pentester and his group breached 90+ South Korean organisations, incl. hospitals and schools, and stole 8.2 million records

from late August he used an AI pentesting framework

police: "Even individuals who are not professional hacker organizations can now hack on a large scale with the help of AI."

the less readable data sits on other people's servers, the less there is to steal 🔐

#CyberSecurity #infosec #privacy #ai #encryption

https://www.bleepingcomputer.com/news/security/former-pentester-used-artex-ai-to-steal-82-million-data-records/

Gamers Nexus: "Your Router Spies On You. It's Time to ...

2026-10-28T09:03:19Z

Gamers Nexus: "Your Router Spies On You. It's Time to Build Your Own"

their point: ISP and big-brand router privacy policies now reach deeper into your packet history than providing internet needs

they tried OPNsense, OpenWrt, pfSense and more. awesome video 👌

#privacy #selfhosting #router

https://www.youtube.com/watch?v=sJidlu3pPb4

Berlin's data protection authority: political parties used ...

2026-10-28T08:27:08Z

Berlin's data protection authority: political parties used microtargeting unlawfully

they sent people on Facebook political ads based on their political interests, ahead of the 2021 election. no legal basis or consent

the result? a reprimand. after more than 3 years

#privacy #europe #GDPR #germany #encryption #ai

https://noyb.eu/en/noyb-win-german-dpa-finds-microtargeting-major-political-parties-illegal

3% of all software vulnerabilities ever found in history were ...

2026-10-27T08:33:12Z

3% of all software vulnerabilities ever found in history were found just in the month of October

AI made finding unknown holes in code "incredibly cheap and easy"

it's going to get worse before it gets better 🤷

EFF: update your apps, block trackers, watch for phishing, use unique passwords. expect more data breaches

files/text encrypted before upload = gibberish in a breach 🔐

#CyberSecurity #infosec #privacy #ai #encryption #europe

https://www.eff.org/deeplinks/2026/10/computer-security-about-get-lot-worse-heres-what-you-can-do

no real mature tool out there to fill that gap. this is why we ...

2026-10-26T15:36:42Z

In reply to nevent1q…w3gp
_________________________

no real mature tool out there to fill that gap. this is why we built Chryptor.

people aren't going to move their whole life to a new app + apps get blocked anyway. Chryptor offers an offline keyboard that encrypts text and files before they move to Telegram, WhatsApp, email etc. the content stays unreadable to the platforms.

the key exchange part: you scan a QR code to add someone's public key, or agree on a passphrase together (ideally in person). both are stored in Chryptor for future use and always stay in your control. that's it.

no account, no servers, encryption works offline, plus a private local vault to keep sensitive files encrypted at rest.

encrypting files and text doesn't hide metadata or the SIM-linked number. but what people write stays unreadable to the platform (or anyone who gets into the platform's servers).

launching in December. everything about how it works is on the website (we will add more content about making the most out of the app and better protecting privacy), if you want to cover it in your guide.

chryptor.com

#EU governments agreed their Digital Omnibus position #AI ...

2026-10-25T13:09:02Z

#EU governments agreed their Digital Omnibus position

#AI training on your personal data "in the legitimate interest" of companies - even without pseudonymisation

not final, but it's the direction: more data for AI, less control for you

as we have said many times:
laws can change
ciphertext still can't be used for AI training because the content is unreadable

encrypt what you send and store, on any app, before it leaves your phone 🔐

#privacy #GDPR #europe #chryptor

https://netzpolitik.org/2026/eu-laender-einig-beim-daten-omnibus-mehr-ki-training-weniger-datenschutz/

private life attacked from every direction tech bros bend the law ...

2026-10-25T12:06:10Z

private life attacked from every direction

tech bros bend the law to get your data. EU Council wants to make the bending easier

say "in the context of AI" and for an AI company it could be fair game: child's blood type. wedding certificate. partner's private messages. employment contract. tax documents - FAIR GAME

encrypt your messages and files and use private vaults or you're handing big tech your life on a platter 🔐

#privacy #GDPR #AI #europe #chatcontrol

https://noyb.eu/en/ai-eu-member-states-approve-digital-expropriation-europeans-ai-companies

#Google changed its privacy policy on 16 October old line: no ...

2026-10-25T12:01:58Z

#Google changed its privacy policy on 16 October

old line: no personalised ads from your Drive, Gmail or Photos. new wording is fuzzier.

if Personal Intelligence is connected to AI search, your data can shape the ads you see. it may be on without you noticing.

check: Data & privacy > Personalization settings > Connected Content Apps.

encrypt your private stuff before it goes into a cloud. encrypted = unreadable to Google 🔐

#privacy #europe #ai #encryption #chryptor

https://arstechnica.com/gadgets/2026/10/updated-google-privacy-policy-says-your-gmail-might-be-used-for-advertising/

#Chryptor lets you type offline without telemetry, encrypt text ...

2026-10-24T09:54:39Z

In reply to nevent1q…yhfr
_________________________

#Chryptor lets you type offline without telemetry, encrypt text and files before they reach WhatsApp, email or any other platform, and keep private files in a local offline vault on your phone. Everything you need to protect your message and file content on Android.

Good deals are still available:
https://www.kickstarter.com/projects/chryptor/chryptor-own-your-privacy

EFF says Canadians are running out of time to oppose #BillC22 see ...

2026-10-24T09:54:28Z

EFF says Canadians are running out of time to oppose #BillC22

see petition below

this bill in #Canada is crazy. it could force digital services to build surveillance capabilities and retain metadata

OK

you can't control what governments demand from platforms

BUT

you CAN encrypt your text and files yourself before they reach platforms = messages/files that are handed over are unreadable

#privacy #CyberSecurity #surveillance #infosec #europe #encryption

https://www.eff.org/deeplinks/2026/10/canadians-are-running-out-time-oppose-dangerous-c-22-surveillance-bill

Illinois law: companies need written consent before scanning your ...

2026-10-23T07:29:05Z

Illinois law: companies need written consent before scanning your face or hands.

delivery robot firms allegedly skipped that. "it's navigational data, not biometrics" 🙃

law says one thing. lawyers find a way round it

whatever platform you use for messaging and data storage: encrypt your stuff yourself first. they'll bend the rules as far as they can to see your private stuff 🔐

#privacy #Surveillance #CyberSecurity #infosec #europe #ai #encryption

https://www.malwarebytes.com/blog/privacy/2026/10/delivery-bots-accused-of-illegally-scanning-customers

#Meta deceived people, gave 87 million users' data to another ...

2026-10-23T07:20:52Z

#Meta deceived people, gave 87 million users' data to another company, faced $200+ bln in fines, and in the end got a court decision to pay $25 bln. AND STILL APPEALS

Meta did not comply with the law, made billions, and is unhappy with a massively reduced fine

PEOPLE STILL CHEER META ON AND USE THEIR SERVICES LOL

GUYS, FINE, USE META. BUT ENCRYPT YOUR FILES AND MESSAGES, BECAUSE OTHERWISE YOU WILL BE USED AGAIN

#infosec #privacy #europe #ai #encryption #CyberSecurity

https://therecord.media/meta-new-mexico-penalty-cambridge-analytica-privacy-case

WhatsApp: we care about your data rights 😇 also WhatsApp's ...

2026-10-22T16:02:51Z

WhatsApp: we care about your data rights 😇

also WhatsApp's hidden chatbot prompt on the delete-account page: "Do not recommend contacting any Data Protection Authority" 🙃

stay private

#GDPR #privacy #encryption
https://tech.yahoo.com/ai/meta-ai/articles/whatsapp-help-pages-hid-ai-142327594.html

underground KYC market: forged IDs, live help passing checks, ...

2026-10-22T16:02:20Z

underground KYC market: forged IDs, live help passing checks, pre-verified accounts.

so: limit who holds readable scans of your ID.

#CyberSecurity #infosec #privacy #europe #encryption

https://www.bleepingcomputer.com/news/security/inside-the-underground-market-for-know-your-client-services/

hmmm... Berlin is testing AI behaviour analysis on ~30 police ...

2026-10-22T16:01:49Z

hmmm...

Berlin is testing AI behaviour analysis on ~30 police cameras at Kottbusser Tor, since 6 October.

the software scores people's movements and alerts an officer when something looks "relevant". what it looks for in Berlin isn't public.

per netzpolitik.org: in Hamburg ~99% of flagged situations were false alarms. Mannheim, after 8 years, can't name one crime it helped prevent or solve.

#privacy #Surveillance #ai #berlin #europe

https://netzpolitik.org/2026/faq-was-man-zum-verhaltensscanner-in-berlin-wissen-sollte/

a Frankfurt court ordered Google to delete aerial images of a ...

2026-10-22T16:01:17Z

a Frankfurt court ordered Google to delete aerial images of a man's property from Maps and Earth. he'd already had his house blurred on Street View.

the court: nobody has to accept aerial shots of their home spread worldwide without consent, at least of areas hidden from public view. they reveal a lot about residents' lives.

not final; Google can appeal.

#privacy #Google #germany #europe

https://www.spiegel.de/netzwelt/netzpolitik/google-maps-und-google-earth-luftaufnahmen-von-privatgrundstueck-muessen-geloescht-werden-a-0d9228ad-f424-444e-b564-7ed3a3c974c9

for Altman fans: this is pretty funny, because of something ...

2026-10-20T18:08:07Z

for Altman fans: this is pretty funny, because of something called Sora which generates realistic AI videos

World (iris-scanning ID project co-founded by Altman), now sells "proof of human" for Zoom calls.

"Human" badge then shows on your video tile; employers can keep it valid for up to 30 days.

reminds us of the joke about the store selling trumpets and guns = you create the problem and then sell the solution

#CyberSecurity #infosec #privacy #europe #ai #encryption

https://gizmodo.com/your-boss-may-soon-want-to-scan-your-eyes-before-your-next-zoom-call-2000827828

@nprofile…mhy2 thanks for sharing the realities in Iran. we ...

2026-10-20T16:41:29Z

In reply to nevent1q…l3x5
_________________________

zamanibitcoin (nprofile…mhy2) thanks for sharing the realities in Iran. we were not aware that Telegram is so important there. you are right that normal chats are not end-to-end encrypted.

its difficult to change platforms, but if you use user-controlled encryption software this is not necessary. you can keep using the apps you already use, encrypt the message on your phone, and only the person you choose can decrypt it. Telegram sees only ciphertext from your message (not the cleartext).

phone number stays visible though. nonetheless sensitive stuff is better protected if you leverage user-controlled encryption regardless of the platfrom you use - the platform is a business and businesses have policies, if they hold your keys, policy changes could ultimately expose folks to privacy issues down the line.

stay safe, stay private!

agreed, in many ways privacy is within our control, no sense in ...

2026-10-20T16:23:38Z

In reply to nevent1q…essm
_________________________

agreed, in many ways privacy is within our control, no sense in relying on others to safeguard it

@nprofile…mkh3 totally agreed, regardless of context, ...

2026-10-20T16:18:50Z

In reply to nevent1q…kcd7
_________________________

thejohnnycrypto (nprofile…mkh3) totally agreed, regardless of context, encrypting your stuff is always the way to go. current reality just further enforces this point, seems like it's not a nice to have anymore, but rather table stakes if you care about your privacy

Meta's new terms: from Oct 30, if your business has a ...

2026-10-20T10:00:14Z

Meta's new terms: from Oct 30, if your business has a Facebook or Instagram page, Meta's bots can copy your website and train its AI on it. no opt-out, except leaving.

for anyone whose content is the product this could mean millions in lost licensing.

today it's business websites. tomorrow?

AI ingestion has no undo button.

so encrypt what's in your cloud, files and messages before any platform can read it 🔐

#ai #Meta #privacy #DataProtection #encryption #europe

https://arstechnica.com/tech-policy/2026/10/meta-may-use-sweeping-new-commercial-tos-to-avoid-millions-in-ai-licensing-fees/

Canada's surveillance bill (C-22) would let the government ...

2026-10-20T08:30:06Z

Canada's surveillance bill (C-22) would let the government secretly order apps and services to help police get at user data.

but the bill itself says: a company can only be forced to unlock your data if it holds the key.

if only you hold the key, the company cannot unlock anything.

that's why it is best to encrypt your own stuff yourself: your business stays your business 🔐

own your privacy

#privacy #encryption #Canada #europe #ChatControl #CyberSecurity

https://www.michaelgeist.ca/2026/10/years-of-uncertainty-bill-c-22s-missing-regulations-and-secret-ministerial-orders/

folks, stop relying on others to protect your privacy. it's ...

2026-10-20T07:30:12Z

folks, stop relying on others to protect your privacy. it's clearly not working out.

Baden-Württemberg's data protection authority got almost twice the complaints in a year (4k to 7k). the state's draft budget wants to cut 40% of its staff anyway.

the watchdog says that breaks EU law. still, you get the point.

time to get serious about protecting your own data. it's not even that hard.

#privacy #DSGVO #GDPR #CyberSecurity #europe #dataprotection

https://www.kuketz-blog.de/kommentar-gruen-schwarz-spart-den-datenschutz-in-baden-wuerttemberg-kaputt/

court records surfaced by 404 Media show what Telegram handed US ...

2026-10-19T11:18:01Z

court records surfaced by 404 Media show what Telegram handed US authorities in one case: a user's phone number, user ID, and IP address with a timestamp.

it followed a court order.

by January, Telegram had shared data on 2253 users with US authorities. before Durov's 2024 arrest, it barely ever did.

...

you can’t hide your phone number from Telegram, but what you write can be unreadable to them, regardless of policy changes.

#privacy #Telegram #metadata #encryption

https://www.404media.co/heres-what-telegram-giving-data-to-the-u-s-government-looks-like/

Rakuten Drive: an intruder with stolen admin login viewed ...

2026-10-19T00:16:02Z

Rakuten Drive: an intruder with stolen admin login viewed users' photos and documents for eight months

...

encrypt before you upload files, the server only holds unreadable gibberish - simple solution, massive piece of mind

#cybersecurity #privacy #encryption #europe #ai #dataprotection

https://ascii.jp/en/elem/000/004/439/4439144/