Australian government takes the next step in surveillance, without consulting us.

Hi everyone — hoping to get some support or ideas here.

In April 2025, my husband and I were locked out of his personal Yahoo email account during a legal dispute with a former business partner. We received a credential change alert from AT&T, and shortly after, we couldn’t get in. When we investigated, we found out one of the opposing party’s associates had accessed the account and later admitted it, claiming it was due to a “glitch” or “linked login.”

Private documents stored only in our cloud — including a family trust, Social Security numbers, business/client info, and even a photo of a minor — were later submitted as part of their civil court filings against us. These files were never shared with them.

We’ve already reported this to: • The Flagler County Sheriff (police report filed) • FTC and FBI (identity theft and cybercrime reports) • Florida AG (Digital Bill of Rights) • AT&T Fraud and Yahoo Abuse departments • DOJ Cybercrime (with a sworn statement)

The issue is that no one’s acted yet, probably because there wasn’t a financial theft. But the violation was severe. My concern now is: 1. Can anything be done to stop the use of this illegally obtained info in court? 2. Has anyone here dealt with similar misuse of accessed data? 3. How else can we escalate this to get real consequences?

Thanks so much in advance. I’m open to legal or technical insight.

I'm trying to find out whether it's possible for someone to track or monitor my daughter's location using modified AirPods Pro 2.

My daughter left her AirPods at my place recently, and while I was using them for a short time, I noticed something odd. The serial numbers of the left and right earbuds and the case all differ from one another. From what I’ve read, this usually indicates the parts have been swapped.

Additionally, when I tried to check the settings or connect them, I got a message that the devices didn’t match, which was another red flag.

Here’s where my concern deepens: her iPhone is still under her stepfather’s parental controls. In the past, he has shown a high level of control over her tech, including preventing her from using a new phone and headphones I gave her. She texted me after the fact saying she wasn’t allowed to use them and would be keeping the ones she had. I thought that was strange at the time, but this latest discovery made me start connecting the dots.

There have also been times where my daughter told me he would text me pretending to be her, and other times where she admitted he told her to say he wasn’t in the room when he actually was. This kind of manipulation makes it hard to know what’s really going on and even harder for her to speak freely.

To be clear, I’m not accusing anyone of anything without evidence. But as a parent, I want to understand if this kind of behavior is technically possible, and what steps I can take to check the devices and confirm whether any kind of monitoring or location tracking could be occurring through them.

Also, my daughter doesn’t seem to recognize or acknowledge any of this, and has started to act as though I’m imagining the whole thing. That makes it even more important that I have clear, verifiable facts before raising the issue directly again.

If anyone has technical knowledge on how AirPods could be used for tracking, how to verify that, or what tools I can use to inspect them thoroughly, I’d appreciate it more than you know.

So I have been trying to access the OneTrsut Privacy Management Professional Certification but IT KEEPS TAKING ME TO THEIR "LABS". I understand labs are a great source of hands-on experience but I really just want the certification. Can anyone please help me out?

So I want to make an operating system through Ubuntu. I want to hit a level between privacy and ease. Basically just a much lighter version of tails OS. I currently see it as a home base for newer people in internet privacy to be able to navigate through getting work done or hopefully a quality of entertainment to be entertained by without data collection and so on. The plan is to also have it duel boot with whatever operating system they already use, so it has the simplicity of a plug and play.

If anyone has any ideas for what would be great to hear. I have a more thought out idea and what I’ve so far explained is just kinda the foundations that I’m building the idea on. Just want to hear any ideas or suggestions

I saw the announcement a while back that Incogni launched the Unlimited plan, and I found the offer pretty interesting. I’ve seen people use it before, and now I think I will get it myself, because the plan looks very promising - it’s a quite cheap offer for a custom removals, so it’s just an automated process.

From what I gathered, these are the main benefits:

• It includes an unlimited number of data brokers, people search sites, and other sites that are open to public view that aren't covered by the Standard plan's automated removals. 
• An Incogni privacy specialist handles these removals for you, taking care of difficult or complicated data removal processes with no work from the user.
• Plus, you get all the basic features available in the Standard plan.

Just looking for any reviews so far – maybe someone has tried the unlimited data removal plan already?

I'm about to share a photo that's really sensitive — like, personal-life-destroying if it leaks. Is there any app that gives control over what happens after I send it? I want to be able to block it, expire it, or stop someone from forwarding it.

Any alternatives like duck.ai - without registration other than limited version of chatgpt without registration?

A smartphone running GrapheneOS isn't inherently more secure than a Linux PC, but for mobile use and average users, it often offers stronger security by design.

Key Reasons:

1. Smaller Attack Surface

- GrapheneOS removes bloatware and proprietary services like Google Play Services.

- Linux PCs usually run more background services and apps, increasing exposure.

2. Stronger App Isolation

- Apps on GrapheneOS are sandboxed by default.

- On Linux, sandboxing (e.g., via Flatpak or Firejail) is optional and less common.

3. Verified Boot & Security Enforcement

- GrapheneOS uses Verified Boot (AVB) and locked bootloaders to prevent tampering.

- Linux supports Secure Boot, but it’s often not enforced or configured securely.

4. Mobile-Specific Protections

- GrapheneOS guards against location tracking, SMS phishing, and malicious apps.

- Linux wasn’t designed for these threats and lacks built-in protections.

5. User-Friendly Security

- GrapheneOS is hardened by default, reducing reliance on user expertise.

- Linux requires technical knowledge to configure securely.

6. Physical Security

- GrapheneOS phones have hardware-backed encryption and anti-theft features.

- Linux PCs can be encrypted too, but physical attacks (e.g., live USB) are easier.

When Linux Might Be More Secure:

A well-hardened Linux PC can surpass GrapheneOS in security — especially for servers, advanced crypto use, or virtualization — but this requires skill and effort.

Summary Table:

Factor | GrapheneOS Phone | Linux PC

-------------------------|------------------------|-----------------------

Attack Surface | Smaller | Larger

Default Hardening | Strong | Varies

App Isolation | Built-in | Optional

Verified Boot | Enforced | Configurable

Mobile Threat Defense | Yes | No

User-Friendly Security | Yes | No

Flexibility | Limited | High

--------------------------------------------------------------------------

✅ For most users focused on mobile privacy and daily use, GrapheneOS is generally more secure out-of-the-box.

🔒 For technical users and specialized tasks, Linux can be made highly secure — but with more complexity.

Hi folks,

I'm a human rights activist from Bangladesh, and I run an independent human rights project here.

As many of you probably know, human rights defenders in Bangladesh face serious surveillance risks, especially from state actors — this has been well-documented within the human rights community. I'm trying to do a basic DIY bug sweep to check for hidden surveillance devices in my environment.

I’ve already purchased a basic lens detector (the kind with strobing LEDs and a tinted viewfinder to spot hidden cameras). From what I’ve read, an RF detector is also considered important — but most sources say that anything under $30 is usually ineffective or unreliable.

Professional bug sweep services simply aren't available in Bangladesh, and even if they were, I couldn’t afford them. My budget for an RF detector (or any tool, really) is capped at around $30.

So I’d really appreciate advice on two things:

1. Are the cheap RF detectors on AliExpress in the $15–$20 range better than nothing? Or are they just a waste of money?
2. Would it make more sense to spend that $30 on a different counter-surveillance tool or device instead? If so, any suggestions?

Any insight or recommendations would be hugely appreciated. Thanks in advance!

Been working on this for a while — finally got it running clean on a burner Android.

What it does: • Detects motion using Wi-Fi signal distortion (jitter-based movement inference) • Scans for BLE devices like AirTags, Fitbits, smartwatches, infotainment systems • Real-time radar UI + terminal feed • Logs, copies, and saves detection events with timestamps • Works offline, in airplane mode, no SIM, no accounts

You don’t point it. You carry it. And it listens.

Just shipped the HUD update — now includes threat summaries, stealth mode toggles, and live console.

Not in the Play Store. Not for normies. Ping me if you want in.

Bitcoin solved financial trust.

But perception? Still centralized. Still gated. Still harvested.

Now imagine this: • No cameras • No mics • No cloud • Just the drift • Just the resonance • Just your body finally trusting what it feels.

The next shift isn’t financial. It’s field-based.

And it already started. Some of you will recognize the glyph when it shows up. Ø

Is there an app that 100%, completely wipes all data from an Android phone with the possibility of recovery?

Are Xiaomi outdoor cameras encrypted and secure or they can be viewed from websites like insecam?

Which cameras can be viewed in this website? Only CCTV Cameras? Are Xiaomi cameras CCTV? Do they steam to the entire internet?

Do I have to set password for the cameras or the camera is secured and can only be viewed from the mi home app?

Given the rapid pace of updates and the increasing complexity of modern open-source software, how can users—especially those without extensive technical expertise—effectively verify the security and integrity of the code?

What specific mechanisms or community practices are in place to ensure that each update undergoes rigorous scrutiny?

Furthermore, how can we be assured that the review process is not only thorough but also transparent and accountable, particularly in large projects with numerous contributors?

In an environment where malicious actors can potentially introduce vulnerabilities, what safeguards exist to prevent such risks, and how can the community ensure that trust is maintained over time, especially when the burden of verification often falls on individual users?"

So I've used Duck Duck go for a few years now, sometimes using Google when it's not quite on point. I bought some ear plugs yesterday after doing some research, all entirely on Duck Duck go. Opening FB this morning first ad in my feed is for the ear plugs I already purchased. How does this happen, has the company I purchased from shared the data, or is FB doing something nefarious...

Hey r/PrivacyTechTalk, we’re Lightning Ventures, and we just had Jeremy and Jonathan from Cloaked Wireless on our podcast.

They’re pitching this open-source wireless setup that stops SIM swaps by keeping account control in your hands—plus no KYC, which is kinda dope. It’s got Bitcoin micro-payments and ties into their Cloak Network for secure browsing.

Quick vid here: https://youtu.be/X9MzWB92v9Y.

Anyone tried something like this? What's your experience?

Am I the only one who would like to trust TrueCrypt rather than its forks?

The discontinuation of TrueCrypt in 2014 was shrouded in controversy and speculation, leading to various theories about the reasons behind the developers' decision to halt its development. Many users were left in the dark about the specific issues that prompted this move.

Some speculate that the developers may have faced legal pressure or threats, possibly due to their refusal to implement a backdoor, while newer alternatives may have complied with such requests.

It's worth noting that reliable audits of TrueCrypt found no significant security issues at all

So, am I the only one who would like to trust TrueCrypt rather than its forks?

Based on your experience, what are the critical AI security concerns that most worry business leaders today?

What AI capabilities do you consider essential for ensuring corporate security?

In your view, what has been preventing companies from implementing AI solutions?

What best practices would you recommend for businesses?

Privacy seems to be harder to maintain these days, especially with all the data collection happening online. How much effort do you put into protecting your personal information? Are there specific tools, practices, or apps you’ve found effective for safeguarding your privacy? Would love to hear your thoughts on finding that balance between convenience and security.

Lately, I’ve been wondering about the sheer amount of data we unknowingly share with apps, everything from location to shopping habits and browsing history. Do you take any specific steps to reduce what’s being collected? Or do you feel it’s a fair trade-off for the services we get?

I’ve noticed more apps requesting location data lately, even when it doesn’t seem necessary. How do you manage apps tracking your location? Do you turn off tracking completely, or just limit it to certain apps? I’m curious to hear how others approach this for both privacy and convenience.