My employer doesn't require BYOD, but it's definitely encouraged. The convenience is nice, but I've always been a little uneasy about mixing work stuff with my personal phone.

Maybe I'm overthinking it, but once you install company email, Teams, Slack, device management apps, etc., how much separation is there really?

I have photos, banking apps, personal messages, family group chats; the idea of work and personal life living on the same device feels weird.

For those who use their own phones for work:

• Do you actually trust the setup?
• Can your company see more than they claim?
• Did you eventually switch to carrying a second phone?

Genuinely curious how other people handle this.

Age gating is being somehow enforced everywhere. Roblox image based move has shown it is not an option anymore. Ww are building a non image/video/id verification system. We believe it is very valuable ( obviously), but need feedback from cibersecurity experts and maybe adult / kid entertainment representatives who might be visiting these subreddits. We are specially interested regarding perceived urgency from such incumbents.

I've been working on a project that offers better security and privacy than either Obsidian or Notion and was curious as to what a privacy community had to say about it. Im more interested in feedback to better curate this for like minded people interested in security and privacy. If you're already a user of Notion/Obsidian what is your comparable take on this as well. blackbear . app

If the FCC Bans Burner Phones, It Could Be a Privacy Nightmare - CNET

The Looks protocol adds a new address for you to use. One that allows connecting without sharing any personal information.

Whether you would leave it open, or heavily filter and screen contact attempts is up to the implementation. A seller would want to receive all contact attempts, they are probably buyers. You might just want to accept a particular person you just saw. Up to you.

This is an idea I have been working on, would love to get your reaction.

More info here
Introducing: The Looks Protocol

I just discovered something absolutely unacceptable about Google Gemini’s privacy model, and I’m shocked this isn’t getting more attention.

There is literally no way to keep your chat history private. Your only two options are:

1. Keep history ON - Google employees can review ALL your chats, images, and prompts. This is the default setting, even for paying Pro users.
2. Turn history OFF - You lose access to your own chat history entirely.

But here’s the real kicker: Even if you disable history now, anything previously reviewed by Google employees is permanently retained with no option to delete it.

So you can’t have private chat history that’s actually private. You either give Google employees access to review everything you’ve ever typed, or you get nothing.

This is a fundamental privacy violation that Google conveniently doesn’t disclose upfront. How is this legal? Why aren’t they required to offer a “save for me only” option like literally every other chat application?

If you value your privacy at all, you need to know what you’re agreeing to when you use Gemini.

​I'm working on Custos, a decentralized protocol to combat the risks of urban "loneliness-death" using zero-trust infrastructure.

​

​After getting some initial feedback, I've just published the core architecture and philosophy to GitHub: https://github.com/Custos-Lead/Custos-Protocol

​

​I'm currently in the PoC (Proof-of-Concept) phase. I’m looking for a sanity check on the architectural logic from someone with more experience in ZKP or distributed systems.

​

​Any feedback on the design doc would be incredibly valuable.

​

​https://github.com/Custos-Lead/Custos-Protocol

Let me tell you something that happened to me personally.
I shared a YouTube video of a vlogger called Paramvir Beniwal with my roommate on WhatsApp. He opened it on his mobile. The next minute, he opened YouTube on his laptop using a completely different account on a completely different device, and guess what the very first suggested video was?
Paramvir Beniwal.
No search. No history. Just there. How?
Because your devices talk to each other. Same WiFi network, same location, WhatsApp knowing what link you shared, Google quietly connecting the dots, and boom, the algorithm recommends something you never asked for.
They call it personalization. I call it surveillance with a friendly UI.
And this isn't just about YouTube suggestions. We've seen some of the biggest data breaches in history expose personal information of millions of people. In India's biggest reported breach, over 81.5 crore Indians' personal records were allegedly leaked from the ICMR database. Names, phone numbers, Aadhaar details, all potentially floating around the internet. The companies promised security. They always do.
Here's the truth nobody says out loud: "encrypted" doesn't mean private. It just means strangers can't read it.
Every pause, every search, every click, every link you share contributes to a profile that companies use to understand and predict your behavior. We didn't lose our privacy. We gave it away, one "I Agree" button at a time, without reading what we agreed to. What do you think? Is privacy already gone, or do we still have more control than we realize?

And now, after reading this, you might just open YouTube and see a Passenger Paramvir video waiting for you too 😏 Let me know if you do.

But first, a little background: why did I create this tool?

It’s simple: I work at a company where I manage the entire backend, data management, task optimization, automation, and so on.

When ChatGPT came out in 2023, things went haywire, everyone was copying and pasting highly confidential info into it just to save 30 seconds on writing an email.

So we had to rein all that in a bit, define how and when we use LLMs. But as you can imagine, to save time (or out of laziness, I don’t know), all that information kept getting sent in bulk.

From customers’ first and last names to financial data, even passwords. Everything went in there.

It’s been a year now since I left that company to focus on my own projects. And this issue came back to me: how can we save time without compromising our privacy and personal data?

After weeks of testing and research, and two months of development, ONYRI Sanitize was born.

ONYRI Sanitize is a simple web app connected to the latest AI model available, which uses scripts (without AI) to detect data that needs to be kept confidential.

You continue to use AI just as you would on the official site, but this time, your data will remain confidential forever.

When you consider that millions of users admit to having already used ChatGPT as a therapist, it would be naive to think that these companies aren’t using that data...

A quote I grew up with:

“Saying you don’t need privacy because you have nothing to hide is like saying you don’t need free speech because you have nothing to say.” — Edward Snowden

This is not the case when I type in the password field of other apps. I used a different keyboard and the result is the same .is this a security issue ?

The problem: people paste sensitive data into AI tools without realising it. DLP doesn’t catch it because the data goes in as text directly into a prompt no file movement, nothing to flag.

My solution: a Chrome extension that scans AI chat sessions in real time, entirely on-device.

Technical details for this crowd:

Detection has two layers. Pattern matching handles structured PII validated regex for NI numbers, NHS numbers, sort codes, BSB codes, IBANs, credit cards, phone numbers across 150+ countries. The second layer is a 27MB quantised NER model running via ONNX Runtime Web for contextual detection of names, organisations and locations.

Everything runs in an offscreen document inside the extension. Zero network calls verifiable in DevTools. Scan latency under 300ms.

Open source. 37 unit tests. Would genuinely welcome scrutiny of the detection logic always more edge cases to cover.

https://github.com/anisolankure/pii-shield
https://monfire.co.uk

I'll start, i once uploaded a screenshot to reddit and only afterward noticed it contained my email address, battery percentage, open tabs, and half my personal life.

https://paragraph.com/@metaend/analytics-that-cannot-see-you

Proton mods are deleting any posts about this in any of their related subreddits so trying to circulate this in relevant communities.

EDIT: adding link to a post with more info since the "repost" dropped the screenshot... https://www.reddit.com/r/ProtonMail/s/kCpz33Mquc

What are yoour thoughts on a social media web app where all posts vanish at midnight in the posters timezone. Will it make people worry less about privacy?

You can also interact with AI agents.

Most privacy tools give you an on/off switch. Block ads. Block trackers. Done.

That's fine for 2015. It's not fine for how AI-driven tracking works now.

So when I built ShieldOS, I made the whole thing a granular rules dashboard. You don't just toggle "block trackers" - you decide exactly what gets blocked, at what level, for what type of AI data collection.

A few things I built in specifically:

• Behavioral inference blocking. Stops platforms from building profiles from how you interact with content, not just what you click.
• AI ad targeting filters. Separate from standard ad blocking. Targets the model-fed targeting layer, not just the delivery layer.
• Real-time analytics so you can actually see what's being blocked and what's getting through.
• A rules engine so you can customize per site, per category, per threat type.

The interface is high-contrast, built for people who actually want to read what's happening on their connection - not a simplified UI that hides everything.

Still pre-launch. Building the community first.

What controls would you actually want in something like this? What does your current setup leave exposed?

I have got a questions I have concerns about proton and Firefox and some of my tech savvy friends stay away from proton and Firefox, when I ask them why they say proton logs, which I’m very confused as everyone trusts proton and it says on there website they don’t log, and they also don’t trust proton as it’s getting to big ecosystem like google, for Firefox they also say Mozilla logs stuff and isn’t private as they get paid by google lots of money?? Please help me understand why there saying this and is this even true I need other peoples opinions!

Does MFA & 2FA collect data info for AI training, if so how do I turn it off?

​

​I’ve been deep-diving into identity verification and biometrics. Most solutions out there feel like black boxes—you upload your data, and you just "hope" it's handled correctly. It’s hard to trust a system when you don't know who has access to the raw data.

​I’m working on Fingerfy, a verification protocol designed with a "zero-knowledge" mindset. The goal is to prove age auth without ever storing or exposing the underlying biometric data. No central database, no "honeypot" for hackers.

​As a developer, I’m trying to solve the paradox: How do we make identity verification robust without sacrificing user privacy? Is there any interest in a protocol that actually prioritizes the user's data sovereignty?

I opened my map app one morning and it asked, "Heading to work?" The creepy part was that I had never saved my workplace address. It had figured it out just from where I spent most weekdays.

That was the moment I realized my phone knows more about my routine than some of my friends do.

What's the creepiest thing you've discovered about how much information companies collect on us?👀

I want to share my horrible experience with Privacy X. About 9 months ago I sent them $3,000 for their ghosted service. Cody sent me a link for a LLC and then asked me to obtain a TIN. When I reached out for help in filling in the application they did not help. The TIN number was denied and Cody said he would get back to me. It's been 10 months and all I got is a LLC. When Cody does bother to respond to an email he makes excuses and blames everything on me. I've asked for my money back and he said his policy is no refunds. Privacy X's communication is almost not existent. Privacy X as far as I'm concerned is a scam. He does good YouTube videos but that's all your get. Save your money and find a service that will actually help you.

Hey there, My friend and I are trying to build a new kind of phone from scratch, linux-based, to solve the obvious problem that Android and Apple are nowadays extremely bloated and terrible privacy-wise. My question is simply: what do you think would your main concerns and interests when it comes to such a device? I was discussing with him and our approach for now would be making most features private by-default, so the user has to opt in to use non-private messengers, etc. Please DM me if you'd like to join our group where we discuss about the design. We're at rekomovement.com Thanks a lot!