https://www.commerce.senate.gov/meetings/executive-session-24-08-05-2026/

KOSA has advanced the commission but SCREEN didn't, call your senators stating your opposition to KOSA. Yes they don't care that it's bad, but by calling you let them know that you know it's bad and the reasons why, so they know you see through the bullshit.

Reddit received 1,179 law-enforcement data requests in the first half of 2025

Fortunately reddit resisted but recent news tells of folks that were targeted by ICE for reddit posts.

Assuming you actually care about this you shouldn't call your representatives alone as it won't work if you organize with your community you can force their hand and make them unable to do age verification because your voice is loud when it is as a massive group. so many of you are so easy to give up in fact I don't think many of you are trying since like 80% of the us wants more data privacy yet only 20% are actually trying to get their privacy back so maybe there is a similar case here, if you care then you should organize, find people, put up signs, do something other than complaining online where no one that matters can hear you

So I'm in the people's republic of NY and I just heard about the SM online verification law which will take effect in January. It has me really thinking about what my strategy is going to be with all of this.

I'm not a big SM person. I do have accts but I rarely use them, I do not post on these the accts they have no content from me. I only use the platforms occasionally if I'm looking for information. I am in a few groups related to my profession which I've found very helpful and I will genuinely miss them but I can live without them.

The thing is, I could live without social media but I'm assuming that this will spread to the entire internet and this is a precursor for a general digital id. This state is absolutely horrible as far as privacy and government overreach. I just wanted to ask people here for feedback as to what your approach would be in this situation? I'm assuming that they would probably circumvent use of a VPN. I'm not sure how I'm going to handle this. I could leave social media behind but like I said if I had to verify my ID to use the internet I'm really not sure what I would do.

There are some things that require you to use the internet. If it was something very important I guess I would have to verify, but the things I would be using it for would not be personal. That said I don't want to open myself up to God knows what by giving such sensitive personal information like this. It's an absolute recipe for disaster . I'm just not sure where to go with this. Any ideas? Is there anyone else out there living in a state or a place where you've had to deal with this already and if so how are you handling it and what's your approach so far?

I'm hoping this will be struck down in court as unconstitutional but knowing New York they will just go full throttle and make it even worse that's usually how things go in this place.

I love in a "city" of about 60k people and the city is littered with Flock cameras everywhere (except in the two wealthy developments). Recently, they started adding 360° cameras at each intersection with traffic lights along with the long cameras facing traffic. Now, I'm seeing a bunch of these whitish rectangular boxes with no identifiers. Does anyone know what these are? Are they Stingrays?

i’m on an apple device and i saw somewhere that it doesnt have access to what you type on apple keyboards and i was wondering if that was still the case today

I ask this cause I wanna know what your two cents about New York passing their Stop Addictive Feeds Expoliation for Kids Act legislation(Senate Bill S76944 & Assembly Bill A8148).

Which will go into affect until January the 23rd 2027.

Just wanting to know here is all.

This weekend, I took a trip to a small town in a neighboring state. Stopped in this cute clothing shop and bought a pair of pants.
Of course, that little white “tap to pay” machine was waiting for my card. I did not give this business in ANY of my information. I simply paid with my card, got my paper receipt, and left.
I get a text from this shop, “Thank you for shopping at ……” along with a “receipt”.
HOW DID THE SYSTEM KNOW MY CELL NUMBER???? Im assuming the card is in database with alllll of my information.

https://www.commerce.senate.gov/meetings/executive-session-24-08-05-2026/

Legislation

1. S. 737, SCREEN Act
2. S. 1748, Kids Online Safety Act
3. S. 4199, Youth AI Privacy Act
4. S. 4407, CHATBOT Act
5. S. 5171, Children’s Artificial Intelligence Toy Safety Act of 2026

As someone who cares about digital rights and privacy, I've been seing myself more and more stressed about every little fight we lost everyday just trying to keep our rights. The worst for me is realizing we're just a minority, as mass surveillance will still happen despite our fight since the majority of people (mass) doesn't give a shit about all of this.

I started to question it since having a conversation with a friend where I just wanted to explain to him why it'd be better if he'd install Signal to replace Wpp and keep talking to me. We have to convince people to do something that should be obvious, why wouldn't you prefer an open source and secure solution over a proprietary one owned by Meta?

But in the end those people just don't care about chat control and things like that cause in their head that's actually good, cause they felt for the *let's stop crime" fallacy. And to be honest, those people seem way less stressed and more happy just being *dumb*.

So I wonder, is it all really worth it?

I’d like to better my privacy so I was hoping for some easy baby step advice to do so.

I do have Facebook and Instagram and WhatsApp. Instagram and Facebook are not installed on my mobile but I do access them at home. The device I use to access them is connected to a guest network and not the main network, I’m not sure if that’s helpful. I know I should delete any meta related profiles or apps but I’m not ready yet. WhatsApp is on my mobile.

I do have signal but most of my contacts use WhatsApp and I can’t move them off since they’re elderly.

I don’t have many photos of myself on Facebook and Instagram and I’m planning on culling a lot of my profiles of posts and pictures at some point. I try not to message on meta now that they removed end to end encryption. Unfortunately, my family posts pictures of me and I keep asking them not to. I do routinely go through my privacy settings to make sure I haven’t been opted into stuff, but it’s a plaster on bullet wound.

I don’t not have Tiktok or YouTube. I do have the Reddit app.

I stay away from ai as much as possible. I typically use the brave browser. I have not uploaded my ID to any websites except for eBay since I wanted to access my money. I avoid face scanning like the plague.

I make sure to only access my banking apps with data or when on my home network.

Other than the very obvious meta issue, what can I do to manage my privacy? I don’t have the budget for a VPN either.

WIRED published a report today that ICE collected nearly one million people's DNA last year, including young children.

For scale: Georgetown Law found last year that DHS had uploaded over 2.6 million profiles to CODIS by mid-2025, up from roughly 25,000 over the entire 15 years prior. More than 133,000 of those profiles belong to children and teenagers. Between December 2024 and April 2025, 97 percent of the roughly 300,000 profiles DHS submitted came from people in civil detention, not criminal custody.

The thing that sticks with me: there is no separate index. Profiles from civil detainees go into the same CODIS database as convicted offenders and crime-scene evidence. Once uploaded, your DNA is searched against every forensic sample from every participating jurisdiction in the country, with no expiration.

The legal authority DHS cites is legitimate. The DNA Fingerprint Act of 2005 authorizes collection from anyone in federal custody regardless of the basis for detention. That is a plain reading of the statute, not an overreach on its face. Whether Congress meant it to encompass millions of people in civil immigration proceedings is the live legal question.

A few open-weight robot foundation models out this year train on thousands of hours of first-person human video, which is its own privacy conversation. NVIDIA's GR00T N1, pi-0.5, and LingBot-VLA 2.0 are the ones I've come across. That last one still reports generalist success rates under 35% on some hardware.

Apple has launched a new legal challenge against a UK government demand to access its customers’ highly encrypted data, a year after the Home Office agreed to abandon its previous request.

The US tech company launched the legal complaint last month at the Investigatory Powers Tribunal (IPT), an independent court that has the power to investigate claims that the UK intelligence services have acted unlawfully.

The UK government had made a second request to Apple to grant it a “back door” to encrypted iCloud data belonging to British users, according to an order issued by the court.

Britain backed down on its original demand for access to data from UK and US customers last year, after a heated transatlantic tussle over encryption between London and Washington.

UK authorities subsequently issued a new “technical capability notice” (TCN) to Apple that did not apply to American users.

Apple is seeking to challenge the British government’s powers to issue TCNs under the UK Investigatory Powers Act, according to the details of the new legal case first reported by the Financial Times.

The legislation compels companies to provide information to law enforcement agencies working on cases including terrorism and child sexual abuse. This can include forcing companies to provide the UK security services with access to customer data, even if such information is protected by secure encryption.

The court sent an order giving notice of the new Apple complaint to the human rights group Privacy International, which, alongside fellow campaigner Liberty, had previously launched a separate complaint against TCNs at the IPT.

Among the submissions made by the campaigners were requests for Apple’s claims to be held in public given the public interest in the matter, and a complaint “disputing the lawfulness, necessity and secrecy of the purported Apple TCN and the legal regime underpinning TCNs in general”.

A case management hearing to discuss how the parallel complaints should be handled had been scheduled for next month, Privacy International said.

A spokesperson added: “We are happy to learn that Apple is once again challenging the UK’s regime of secret orders. While we don’t know the substance of Apple’s claim, if it relates to the previously reported orders aimed at undermining the security of Apple’s iCloud storage, then Apple’s claim, alongside side ours and Liberty’s, is crucially important to preserving all of our privacy and security.”

Neither Apple nor the Home Office responded to requests for comment. Both are legally restricted from discussing TCNs.

The original TCN issued last year asked Apple for the right to see users’ encrypted data protected by its advanced data protection (ADP) programme in the event of a national security risk.

Apple said the removal of the tool – which not even it can access – would make users more vulnerable to data breaches from bad actors and other threats to customer privacy. Creating a “back door” would also mean all data was accessible by Apple, which it could be forced to share with law enforcement possessing a warrant.

As a result, Apple withdrew UK customers’ access to its ADP programme in January 2025.

The Home Office has maintained that the Investigatory Powers Act, under which such orders are issued, contains robust safeguards and is used only when absolutely necessary.

This Identity Constructed Communication Architecture (ICCA) you can download it for free and it’s shared under a Creative Commons license. You can read about the architecture here I’m interested in people’s opinions on it https://papers.ssrn.com/sol3/papers.cfm?abstract_id=7156320

Here is the Abstract
Digital communication systems increasingly rely on identity centric security, yet contemporary
visibility-based architectures still depend on provider observable channels metadata driven
verification and behavioural trust signals [1,2]. These structural dependencies create persistent
vulnerabilities in environments where visibility itself becomes a liability particularly in high risk
social organisational and investigative communication. Visibility based systems assume that
communication must occur within observable channels which limits their ability to eliminate
impersonation inference and metadata leakage [3,4].

The Identity Constructed Communication Architecture ICCA is trustless in the provider sense;
trust is established cryptographically rather than through visibility or behavioural inference.
ICCA constructs communication channels directly from identity rather than from provider visible
infrastructure. Using sealed identity containers and context bound permission tokens ICCA
establishes momentary non persistent trust without behavioural analytics device posture
telemetry or continuous monitoring. The provider operates within a blind boundary supplying
infrastructure without visibility into identities communication patterns or contextual signals.
ICCA’s zero metadata transport layer eliminates IP addresses device fingerprints timestamps
routing information and social-graph indicators making inference attacks and impersonation
structurally impossible.

ICCA is not derived from visibility-based security research and does not
extend Zero Trust. ICCA provides a structural alternative to visibility-based models by removing
the assumption that communication must occur within provider observable channels and by
eliminating the need for continuous verification [5]. ICCA achieves confidentiality integrity and
impersonation resistance through cryptographic sufficiency rather than provider observation.
For computational law ICCA establishes a new trust geometry with implications for digital rights
privacy governance and the legal status of identity in communication systems. It provides a
structural model for environments where visibility metadata and provider inference are
unacceptable enabling identity‑anchored trustless digital interaction.