Surveillance Report: Weekly News For Digital Freedom21 Aug

Apple's Private Relay Is Leaking Your IP, Plus Fake VPN Extensions & France's Big Win

Three cracks opened up in Apple's privacy story this week: iCloud Private Relay leaking real IP addresses through DNS prefetching, WebTransport, and passkeys; Hide My Email exposing real addresses in bounce logs; and an unprecedented wave of spyware notifications going out to targeted users. Also this week: 737 fake VPN extensions sitting in the Chrome Web Store, Edge phasing out Manifest V2, a judge giving Google one week to fix its anticompetitive Play Store flow, and France's top court blocking the under-15 social media ban on free expression grounds.

Stop handing out your real email address. addy.io gives every site an alias that forwards to your normal inbox. Open source, self-hostable, with browser extensions and mobile apps. 🚀 Get started for free: https://addy.io/?utm_source=techlore

In this episode:

Highlight: Three Apple flaws worth acting on today: Private Relay's IP leaks, the Hide My Email exposure, the macOS screen-sharing bug, and the spyware alert wave
737 fake VPN extensions impersonating Proton, Nord, Surfshark and Cloudflare in the Chrome Web Store, with 500+ still live after cleanup
A judge gives Google one week to fix its anticompetitive Play Store flow after Epic
France's top court blocks the under-15 social media ban, citing freedom of expression and privacy
Data Breaches: CareCloud (3.7M patients), a LiteLLM supply chain attack leaking terabytes of credentials, 3.6M Azure records, RingCentral (1.6M), Sakura Internet, Clarity Check's exposed face database, the French tax authority, SafePal, Trezor, and Pokémon Center
Threats: the Evooo1Bot Linux router botnet, Comcast adding motion sensing to millions of routers, Google buying bankrupt Spirit Airlines' customer data to train AI, DDoS attacks on Threema, and a Copilot prompt-injection disclosure
FOSS+: Tor Browser 15.0.20, Waterfox 6.7 "Supernova," a native ad blocker in Firefox for iOS, Startpage arriving in Firefox, Brave 1.93's GPU fingerprinting protections, Proton Mail Categories, Proton's AI Paper Trail tool, Ente's post-quantum work, Linux kernel 7.2, the Fairphone Gen 6 Plus landing in the US, SimpleX's equity crowdfunding, and Pine64 halting Linux device production

🧡 SUPPORT TECHLORE
Become a Techlorian and keep this show growing: ★ Support this podcast ★
🔗 SOURCES & LINKS
View all sources here: https://techlore.tech/apples-private-relay-is-leaking-your-ip-plus-fake-vpn-extensions-frances-big-win/

⏱️ TIMESTAMPS

(00:00) - WELCOME TO SURVEILLANCE REPORT
(00:38) - APPLE USERS SHOULD LISTEN UP
(09:04) - IMPORTANT BROWSER PRIVACY UPDATES
(13:34) - OUR SPONSOR: ADDY.IO
(15:06) - GOOGLE FORCED TO BEHAVE
(18:24) - A HUGE WIN IN FRANCE
(22:26) - DEFENSE BULLETIN: DATA BREACHES
(27:30) - DEFENSE BULLETIN: THREATS
(32:30) - DEFENSE BULLETIN: FOSS+

🎥 VIDEO
Watch on YouTube

📰 ABOUT SURVEILLANCE REPORT
Your essential weekly tech news podcast covering the latest threats to security, privacy, and digital freedom. Hosted by Henry Fisher from Techlore.

Det här avsnittet är hämtat från ett öppet RSS-flöde och publiceras inte av Podme. Det kan innehålla reklam.

Avsnitt(358)

Signal's Biggest Update In Years, Plus Rival App Stores Arrive In The Play Store

Signal just shipped its largest set of updates in years: A second phone can finally be a linked device, automatic key verification is rolling out alongside safety numbers, and there are commits hintin...

13 Aug 40min

OpenAI's Hacking Story Got Worse, Plus Iran In US Water Systems & A Felony For Wiping A Phone

OpenAI's rogue AI agent turned out to have hacked more than Hugging Face, and the more details come out, the less impressive it seems. Then Anthropic came forward with its own disclosure: three compan...

1 Aug 32min

France Banned Social Media For Under-15s, Plus A Hidden Device In Millions Of US Cars

France has become the first country in Europe to ban social media for children under 15. Meanwhile there's real good news elsewhere: the UK's incoming PM dropped digital ID entirely, and California's ...

24 Juli 41min

EU Passes Chat Control Anyway, Plus Microsoft's Secure Boot Mess & the Flock Resistance

This week's a double-week catch-up: the EU just greenlit Chat Control even after Parliament voted against it, Microsoft had a brutal stretch between a decade-old Secure Boot flaw and a Windows Defende...

16 Juli 37min

Apple Quietly Downgrades Hide My Email, Plus Chrome Kills uBlock Origin & Google's IP Tracking

Apple is moving Hide My Email aliases to a new private.icloud.com subdomain, which makes it trivial for any app or website to spot a private email and block the signup. 🔎 EasyOptOuts is the easy, aff...

24 Juni 27min

Meta Hid Face-Recognition Code on 50M Phones, The UK's Device-Scanning Ultimatum & A Burner Phone Ban

Meta quietly embedded unreleased facial-recognition code, internally called "nametag" onto more than 50 million phones through its Meta AI app, then deleted it the day after Wired exposed it. This wee...

12 Juni 35min

Dashlane Confirms Hackers Stole Password Vaults, Pentagon Location Tracking, and Hackers Trick Meta's AI

Dashlane has confirmed hackers stole around 20 encrypted password vaults, and the company is being unusually quiet about how it happened. Plus the Pentagon admits US troops were tracked using commerci...

4 Juni 38min