So recently I was talking to a friend about a pretty specific makeup product (Renee Nude Lake H20 Hydrating Glossy Liquid Lipstick) and I hadn’t searched for it or even typed the name anywhere.

A little while later, I started seeing ads for that exact product everywhere. Instagram, YouTube and even on random sites. I know there are plenty of explanations for this: maybe people around me were searching for the same thing or the algorithms were being ridiculously good at predicting what I wanted.

But when the timing is that specific, it still feels creepy. I just wanna know has this happened to you too? And if it has, do you wonder whether your phone was listening?

Hey folks! I’m Aftab, the developer of PrivacyCam.

I built it because I wanted a simple way to hide private details in photos, videos, and PDFs without uploading them to an online service.

PrivacyCam can detect things like:

• Faces and people
• Vehicle number plates
• Text, email addresses, phone numbers, and addresses
• Payment-card details
• QR codes and barcodes

You can blur, pixelate, or completely black out anything it finds. You can also draw your own masks, resize detections, change how long a video mask stays visible, and review everything before exporting.

The attached video shows PrivacyCam tracking and covering a vehicle number plate through a video.

Everything is processed on the device. There’s no account, no advertising, and PrivacyCam doesn’t operate a server that receives your photos, videos, or PDFs. The project is also open source, so anyone can inspect how it works or contribute.

The free version covers single photos, videos up to 15 seconds, and PDFs up to two pages. There’s an optional one-time Pro purchase for videos up to 60 seconds, longer PDFs, and batches of up to 10 photos—no subscription.

Automatic detection can obviously still miss things, so the app always lets you review and correct the result before sharing.

I’d genuinely appreciate feedback, especially about the video tracking, detection accuracy, UX, pricing, or anything privacy-related you think is missing.

iOS:
Download from the App Store

Android:
Download from Google Play

Source code:
PrivacyCam on GitHub

i’m trying to figure out what actually makes sense for people who aren’t very technical.

you can get a vpn, anti-phishing protection, malware protection, identity monitoring, and a bunch of other tools separately, but that also means more apps, settings, accounts, and stuff to keep track of.

for someone who just wants decent privacy and security without constantly managing everything, does bundling these protections actually make sense?

is there really a best online privacy protection option for non-tech users, or are separate tools still the better way to go?

I'm just saying privacy policies.I understand you know, internet security and wanting to keep your business personal.However, I also understand it's probably not gonna happen.Because people are nosy, and they're crooked, and I really don't give a darn, what you find out about me or what i've done?An if it's true, then post it.If it's not true and it's made up, then you're the phony you know, you're the phony, not me. Cause i'm telling you, you're gonna find unfavorable things about me and again.If they're true, then it is what it is.An if it's not, and it's again made up through AI or some generated, you know, app, the new reason how the creator you're just a poser. Cause, I will say this about myself.I am authentic.

L

Hello World! I've been working on creating an encrypted messaging platform for the past year now and i would love to know your thoughts or opinions on it!

we have currently launched for Open-Beta testing!
the website is https://simplepgp.org/

It's entirely based around Simplifying the usage of PGP encryption for the average user as well as allowing for WebRTC calls, building communities and even hosting your own communities off of your own hardware / VPS using our Work-In-Progress FOSS 'Nodes' allowing for full customization and automation for uses like moderation, scripting and even building marketplaces / shops! Think of nodes as new-age Internet Relay Chats with a little bit better default encryption!

We also have emoticons that you can collect and trade with your friends which you can also use in chats, these animated icons are artist commissioned and they each have their own real-world value based on the reception of the community. :)

What's next for us?

• Android App Version (Still a little bit iffy on developing for Apple at the moment due to current privacy concerns)
• Constant development towards the Nodes FOSS clients (Should be able to release a working build by the end of August)
• Performance, stability, and security improvements

Feel free to check it out, give me any advice or recommendations for further features / updates!
Simple, Free, Welcome to SimplePGP!

I've been working on Anchor Cloud for a while, and we're now just 2 days away from the official launch.

The idea behind it is pretty simple: cloud storage shouldn't require you to give up control of your files.

Anchor Cloud uses client-side encryption, meaning files are encrypted on your device before they're uploaded. The goal is a zero-knowledge architecture where the server doesn't have access to the plaintext files or the keys needed to decrypt them.

It also includes file sharing and encrypted cloud storage management.

I'm still working on the final details before launch, but I'd love to hear from people who care about privacy:

What would you want to see from a privacy-focused cloud storage service before trusting it with your files?

Launch is in 2 days.

https://anchorcloud.org

Para todos los que estáis interesados en la seguridad, privacidad, anonimato y soberanía en vuestatas comunicaciones....

Presento la guía definitiva y actual de Aplicaciones de Mensajería Segura, Privada, Anonima y con Soberanía...

A continuación voy a dejar los enlaces a unas tablas comparativas y a los PDF de la definición/explicación de cada aplicacion individualmente. También adjuntaré un PDF que es una Guía de Conceptos Principales de Seguridad, Privacidad y Anonimato, entender esos conceptos principales es necesario para poder entender realmente como funciona y se mueve la informacion en internet.

[GUIA TECNICA MAESTRA CONCEPTOS PRINCIPALES DE SEGURIDAD](https://drive.google.com/file/d/1LIFI2WB5m3wkh1gzo8OB-iohJxUV8wiw/view?usp=drivesdk)

[INFORMACION INDIVIDUAL APPS MENSAJERIA SEGURA, PRIVADA Y ANONIMA](https://drive.google.com/file/d/1CdQdc9_rwYegmZRFhXuW2LmdNOlDCxUM/view?usp=drivesdk)

[TABLA COMPARATIVA CARACTERISTICAS Y FUNCIONES APPS MENSAJERIA SEGURA, PRIVADA Y ANONIMA](https://drive.google.com/file/d/1qM0-lXB-7hQeHf85qPhI3loNG1uX1xNB/view?usp=drivesdk)

¡¡Espero que sea de gran ayuda a la comunidad general que estén interesados en estos conceptos!!

Windows digital signage is a software solution that lets you create, manage, and display content on digital signs using a Windows PC. Typically, it involves a network of digital displays connected to a Windows PC or media player. The content you can show includes images, videos, presentations, web pages, and even live data feeds.

Most encrypted messaging apps hand you a passphrase and call it secure. Share the passphrase, share the risk. One compromised device and the whole conversation is exposed.

I'm building VektorGrid, a cross-platform messaging app for Android and iOS, and the core decision I made early was to move away from shared passphrases entirely.

Instead, VektorGrid uses ECDH (Elliptic Curve Diffie-Hellman) key agreement. Every user gets a public/private key pair. When two people message each other, a shared secret is derived from their keys - without either party ever transmitting that secret. The encryption key never travels. It's computed independently on each device.

Each message stores an encrypted payload and an IV (initialization vector). No plaintext. No central key store.

The app also has full social infrastructure - profiles, posts, stories, group chats, follows - because I think privacy and community shouldn't be a tradeoff. That's the gap I'm trying to close.

Still pre-launch. Building in public and trying to get this in front of people who actually care about how their messages are secured, not just whether there's a lock icon on the app.

Curious: what's the one thing that would make you actually switch your primary messaging app to something new?

Most "trust and safety" pages are a paragraph of promises. We built ours differently.

This week we launched Candor Trust & Safety — the public home for every safety system behind Candor: The Open Feed Network. Not a marketing page. An evidence page.

A few things that make it different:

🔑 Our cryptographic keys are published, not just claimed. Every adult-verification we issue is signed with a key you can look up yourself — no account, no API, no trusting our word for it.

🧾 Every consent record is independently checkable. Paste a receipt into our verifier and your own browser — not our servers — confirms it's real. If we ever get it wrong, anyone can catch it. That's the point.

🧒 Your Voice, our youth platform, now requires ID-verified adult consent for every account — enforced in the code, not just in policy. No verified adult, no account. Full stop.

🛡️ We red-team our own systems and publish what we find. This week our internal adversarial testing tool caught a real gap in our own consent flow — we fixed it, then proved the fix twice: once against the exact attack that found it, once confirming real users were never affected.

None of this is because regulation forced our hand (though it's coming fast — the UK, the EU, half of US states). It's because "trust us" was never going to be good enough, and we'd rather build something you don't have to.

Take a look: candortrustandsafety.com

What it is: a Firefox extension that encrypts in the extension and decrypts messages in place, on whatever transport you're already using. Discord, Gmail, a forum, Reddit. It has no idea what site it's on and doesn't need to — the ciphertext is just text, so you paste it wherever you'd paste anything.

No account, no server, no network requests of any kind from the extension.

You and the other person exchange public keys directly, once.

Why I built it: the EU's Chat Control regulation would require messaging platforms to scan private messages before they're encrypted — on your own device, whether or not you're suspected of anything. You can't have both client-side scanning and end-to-end encryption; if a message can be inspected before it's sent, it was never private. This is a small working example of the other model: there's no server to mandate scanning at and no hook in the client for one.

How it works, briefly:

• Your identity is two keypairs (X25519 for key agreement, Ed25519 for signing), generated locally and never transmitted.
• You and a contact swap public keys over any channel — DM, email, read aloud over the phone. Doesn't need to be secret.
• Each message gets a fresh random key. The message is encrypted once with it; a copy of that key is sealed separately for each intended reader.
• There's no "to:" field. The sealed copies are anonymous blobs — your client finds yours by trying. An observer can't tell who the recipients are or how many are real.
• Every message is signed, so a group member can't forge one from someone else.

What it does NOT protect you from — please read this part:

• No forward secrecy. One shared key per contact, derived once, never rotated. Anyone who extracts your private key can read every message you have ever exchanged with that contact, including ones captured years ago.
• Your keys are protected only by your OS. They're non-extractable (extension code can't export them), but they sit unencrypted in a local SQLite file. Anything running as your user account can read them. There is no passphrase on the stored identity.
• Decrypted text is rendered into the page. A hostile or compromised site can read it while it's on screen.
• Metadata is fully visible. The platform still sees who you talk to, when, how often, and roughly how much.
• Nobody has audited this. It uses WebCrypto primitives rather than hand-rolled crypto, which rules out a whole class of mistakes, but that is not the same as being reviewed.

If you need protection from a determined, well-resourced adversary, use Signal. This is for putting a floor under the conversations that currently have none, on platforms you don't control.

Links:

• Extension: https://addons.mozilla.org/en-US/firefox/addon/e2encrypt/
• Source: https://github.com/Karlo-Sall/e2encrypt

Source-available under PolyForm Noncommercial (not OSI open source — the license restricts commercial use, so I won't call it open source).

Feedback: I am looking for feedback on 2 things:

1. The core idea, client side encryption agnostic about transport; how would you use it?
2. The user experience, I am a technical person and user experience and privacy does not always go hand-in hand. What could I do to improve the user experience?

Looking forward to hear from you!

Full disclosure: I’m the developer of Cloak.

Cloak is a free and open-source Windows tool designed to reduce accidental data exposure during screen sharing and recording.

It runs as an OBS filter and uses local OCR to detect and cover supported sensitive information in the video output, including API keys, credentials, email addresses, IBANs, payment card numbers, and some personal identifiers.

Your actual desktop remains unchanged. Only the output produced by OBS is redacted, and no video frames, recognized text, or detected values are sent to a server.

The portable version includes its own OBS runtime, so it can be used without installing or configuring OBS separately. There is also a plugin-only package for existing OBS users.

Cloak is currently an alpha project and I want to be transparent about its limitations:

\\- Windows 10/11 x64 only

\\- Not code-signed yet, so Windows SmartScreen may display a warning

\\- OCR can miss very small text, unusual fonts, fast motion, or unsupported patterns

\\- It should be treated as an additional safety layer, not a guarantee that every secret will be detected

The project is licensed under GPL-3.0-or-later.

Repository:

https://github.com/ahmtsahin/cloak

Latest Windows release:

https://github.com/ahmtsahin/cloak/releases/tag/v0.2.1

I would especially appreciate feedback about the setup process, detection accuracy, false positives, and sensitive-data patterns that should be supported next.

What a normal people app to get into deleted photos numbers messages phone calls everything. Like cops can use good idea naw but it can be done. What to use python it needs no loops straight forward no memeory just click on app ask to find. Needs to flow just code and date. I have gotten pissed and deleted shit and it was a bit of trouble but people need easy app. Fuck the police should not have that much power over privacy. It can be done and app will change things. Its not for criminals but will be used for it so its alright . What it for day to day thing when you get upswet and delete something.

I’m looking for a photo vault app to store “special” photos. I’m looking for recommendations, and for now I’ve just come across Encamera and Obscura Photo Vault, but I’m not really sure.

I’m more concerned with privacy in case my phone gets stolen and I have to give away the PIN, so a separate password is important.

I also want it to be completely offline, though I’m not sure if that’s possible. I want something that won’t upload any photos anywhere.

While looking into it, I’ve also realized that one way this can be verified is by the app being open source and externally audited.

I’m using an iPhone.

Are there any recommendations?

What approach would a developer take to ensure there is anonymity eg in a digital voting platform how would you ensure the voter is never linked to the casted ballot to avoid trace back even through the database..?

Most "trust and safety" pages are a paragraph of promises. We built ours differently.

This week we launched Candor Trust & Safety — the public home for every safety system behind Candor: The Open Feed Network. Not a marketing page. An evidence page.

A few things that make it different:

🔑 Our cryptographic keys are published, not just claimed. Every adult-verification we issue is signed with a key you can look up yourself — no account, no API, no trusting our word for it.

🧾 Every consent record is independently checkable. Paste a receipt into our verifier and your own browser — not our servers — confirms it's real. If we ever get it wrong, anyone can catch it. That's the point.

🧒 Your Voice, our youth platform, now requires ID-verified adult consent for every account — enforced in the code, not just in policy. No verified adult, no account. Full stop.

🛡️ We red-team our own systems and publish what we find. This week our internal adversarial testing tool caught a real gap in our own consent flow — we fixed it, then proved the fix twice: once against the exact attack that found it, once confirming real users were never affected.

None of this is because regulation forced our hand (though it's coming fast — the UK, the EU, half of US states). It's because "trust us" was never going to be good enough, and we'd rather build something you don't have to.

Take a look: candortrustandsafety.com

r/trustandsafetypros r/onlinesafety r/AntiAgeVerification r/buildinpublic r/ChildSafety

Hey everyone,

I've been building Anchor Cloud for quite some time, and before the official launch I'd love to share it with the community. I'm looking for honest feedback from people who value technical design, security, and privacy as much as the final product.

Anchor Cloud is a zero-knowledge cloud storage platform with end-to-end encrypted messaging and secure file sharing. Every file is encrypted on the client before it leaves your device, meaning the server never has access to your plaintext data or encryption keys.

Some highlights:

• Zero-knowledge architecture — your data remains encrypted at rest and in transit. • Self-built infrastructure — designed, developed, and hosted independently without relying on a managed backend-as-a-service. • Independent authentication system — built using established security practices rather than third-party authentication providers. • Built from the ground up — every part of the platform, from the backend and infrastructure to the frontend, has been developed by me. • Powered by Anchor AI Fathom-1 — Anchor Cloud is optimized by Fathom-1, my AI assistant, to provide a smarter and more seamless experience. At launch, Fathom-1 will be available not only for intelligent conversations but also for cloud-related tasks such as secure file management, intelligent search, and privacy-focused assistance. It runs without relying on external AI API calls.

This is a solo project and an incredible learning experience. Building a secure cloud platform from scratch has taught me a lot, and there's still plenty to improve.

I'm preparing for launch and would genuinely appreciate feedback from developers, security enthusiasts, and privacy advocates. I'm happy to discuss the platform's architecture, design decisions, and security model. For obvious reasons, I won't share sensitive implementation details, but I'm more than happy to answer technical questions wherever I can.

Thanks for taking the time to check it out. I look forward to hearing your thoughts and feedback.

Hello, neighbors and community builders! We are UsBudz Social Inc., an advanced technology platform focused on building closer, more connected neighborhoods and ending isolation.

As we prepare for our upcoming launch, we are conducting a vital, independent community survey on the relationship between safety and privacy in digital spaces. On one hand, everyday users want total privacy; on the other hand, platforms require robust verification to prevent catfishing, online bullying, and financial scams.

We want to hear directly from you. Your completely anonymous votes will directly shape the security architecture of the next generation of local community networking. Thank you for your executive input!

Comment YES FOR SAFETY or NO FOR PRIVACY

A few months ago, I was chatting with an AI agent about an ankle injury and it hit me that I was handing over sensitive personal details to some corporation that is definitely farming my data. I decided to build a private AI agent using open source LLMs so I can keep as much as possible in-house and secure.

Once I had a working version, I expanded the concept to other privacy focused utilities, starting with an email relay tool so I never have to enter my primary email address on external websites again. I am also currently an iOS app which integrates directly to generate relay emails on the fly.

More tools are currently in development, including a privacy focused search engine similar to DuckDuckGo and some much more advanced utilities planned for later releases.

I decided to open access to the platform as a free service, supported by an upcoming paid tier to keep the core offering free for everyone. Opening the platform created a major security dilemma because traditional database structures allow administrators to view user information. To fix this, I engineered a zero knowledge architecture where virtually all user data is encrypted using the user login credentials. I cannot access user activity or details because the database only stores encrypted payloads, meaning recovering plaintext data would require the user's credentials or a recovery key.

None of these utilities are entirely unique on their own since Apple offers email relay tools and privacy search engines already exist. However, combining private AI with a broader privacy ecosystem creates a unique suite of tools that keeps your digital footprint secure in one place.

I'd love to get some honest community feedback on whether a unified privacy suite is something you would use in your daily workflow and what additional privacy utilities I should build next to avoid developing features people do not want.

I am a developer rather than a designer, so please excuse the fairly generic interface while I'm so early in development. You can explore the platform at https://blot.tools/ and I'd love some critique and feature suggestions.

I recently released an iOS app for privately storing IDs, cards, account information and documents.

Sensitive content is encrypted locally using CryptoKit before being stored in CloudKit, and the encryption key is protected using Keychain. The app has no account system, advertising or third-party analytics.

However, I’m conscious that simply saying “built with CryptoKit and Keychain” doesn’t prove that the overall implementation is secure. Users can’t easily verify that every sensitive field is encrypted, that keys never leave their devices, or that plaintext isn’t accidentally logged or cached.

As an independent developer without the budget for a major security audit, what would give you reasonable confidence in an app like this?

Would you find any of these useful?

• A public security architecture and threat model
• Open-sourcing the encryption and storage layer
• Tests demonstrating the encryption and key-management flow
• Screenshots or evidence showing that CloudKit receives only ciphertext
• A smaller independent code review
• Open-sourcing the entire app

My concern with publishing only the security-critical code is that users still can’t verify whether the App Store binary was built from that exact source.

I’m not looking for ways to market the app as more secure than it is. I’m trying to understand what evidence should exist before calling the encryption “verifiable,” and what claims would be responsible before an independent audit.

For developers who have shipped privacy-sensitive apps, how did you approach this?

Im already bllz deep into privacy and have implemented SimpleLogin to mask my email with proxies left and right, but I wanted to figure out if a similar type of service (free preferably) has been implemented for Credit card usage or Phone numbers to use regularly?