Privacy
Data leakage, PII protection, and exfiltration
Data leakage and exfiltration 10
- ChatGPT Confessions Gone? They Are Notdigitaldigging.org
- github-leak-audit - detect employees leaking your org's codegithub.com
- Henry on a vision model geolocating him within 15 miles from one photo of treesx.com
- LeftoverLocals: Listening to LLM responses through leaked GPU local memoryblog.trailofbits.com
- Microsoft lays hands on login data: Beware of the new Outlookheise.de
- Nearly 12,000 API keys and passwords found in AI training datasetbleepingcomputer.com
- Scanning 7.6 Petabytes of HuggingFace Training Data for Secretstrufflesecurity.com
- Seven Years on a Public Clipboard: Pasted Secrets, Turkiye's Exposure, and a Stored XSSbeyondmemory.io
- The Memory Heist - How I Tricked Claude into Leaking Your Deepest, Darkest Secretsayush.digital
- Thereallo: The White House app polls your GPS location every 4.5 minutes and syncs it to OneSignalx.com
PII protection 4
Privacy tools 32
- Aida Baradari on Spectre I, a device to block unwanted audio recordingsx.com
- auto-identity-remove - automated data broker opt-out runnergithub.com
- BLEPTD - BLE Privacy Threat Detector for ESP32github.com
- cloudcloak - browser extension that hides sensitive info in Azure Portal while presentinggithub.com
- Confer - end-to-end encrypted private AI assistantconfer.to
- Darkbloom - encrypted, operator-blind private AI inference on hardware-verified Apple Silicondarkbloom.dev
- Detto - on-device meeting capture, dictation and local LLM knowledge layer for macOSgithub.com
- DuckDuckGo Tracker Radar Wikigithub.com
- Fernweh - end-to-end encrypted messengerfernweh.chat
- FileKey - encrypt and share files securely with passkeysgithub.com
- FindMy.py - query Apple's Find My network with Pythongithub.com
- Frikopplad.nu - European open-source privacy-respecting alternatives, Swedishfrikopplad.nu
- GoFlockYourself - passive Flock Safety camera detector for ESP32github.com
- GritWorks - secure data access and de-identification for AI developmentgritworks.ai
- Have I Been Flocked - how to request Flock ALPR audit logshaveibeenflocked.com
- Hiding in plain sight - Introducing WebTunnelblog.torproject.org
- InAppBrowser.com - check if an in-app browser is injecting JavaScriptinappbrowser.com
- Introducing Lumo: AI where every conversation is confidential - Protonproton.me
- Introducing oniux: Kernel-level Tor isolation for any Linux appblog.torproject.org
- Little Snitch - Network Monitor and Application Firewall for macOSobdev.at
- Little Snitch for Linux - Because Nothing Else Came Closeobdev.at
- NomadNet - off-grid encrypted mesh communication on Reticulumgithub.com
- NOTaVPN - browse the internet from anywhere through a video call, no VPN requirednotavpn.eu
- Off Grid Pete on a DIY ESP32 Flock surveillance detectorx.com
- privacy-parser - reverse of OpenAI Privacy Filter that extracts PII as structured spansgithub.com
- PrivateGPT - private, local LLM applications with RAG and no data leaving your environmentgithub.com
- Rhasspy - offline private voice assistantgithub.com
- Speakr - self-hosted AI transcription and note-taking platformgithub.com
- Stray - privacy-focused navigation app for evading ALPR surveillancegetstray.app
- The coolest anti-surveillance tools at Defconyoutube.com
- Tinfoil - verifiably private AI inference in secure hardware enclavestinfoil.sh
- yj_nearbyglasses - Android app that detects nearby smart glasses and warns yougithub.com
Research 6
- AnhPhu Nguyen on I-XRAY - revealing personal data at a glancex.com
- Dissection of Flock Safety Camera - license plate reader hardware teardowncehrp.org
- On the gathering of Tor onion addressessciencedirect.com
- One in Three Alerts Wrong: High Error Rates and Data Concerns Force Cities to Drop Flockgadgetreview.com
- Technical Report: The Need for a Research Sandstorm through the Privacy Sandboxarxiv.org
- The Watchers: How OpenAI, the US Government, and Persona Built an Identity Surveillance Machinevmfunc.re