As I age, I become increasingly cautious about my #privacy. The slope the world is sliding on is also a big, unfortunate incentive. I have been eying #PiHole for some time: in this post, I want to explain what it does, how to install it on a #RaspberryPi, and how to integrate it with #Tailscale.
A lawsuit filed Monday mirrors the findings of a ProPublica investigation that made public for the first time details about a program that sent gun owners’ information to political operatives without their consent.
🇦🇹 Austria's Armed Forces have replaced MS Office with LibreOffice on 16,000+ workstations 📄
This shift began in 2020 to avoid mandatory cloud reliance ☁️
Their goal? Digital sovereignty—not cost saving 🔒
They even contributed 5+ person-years of code 🛠️
EU trend toward open-source grows 🇪🇺
🔗 https://news.itsfoss.com/austrian-forces-ditch-microsoft-office/
#TechNews #LibreOffice #Linux #OpenSource #Privacy #FOSS #Security #Europe #EU #Microsoft #Cloud #DigitalSovereignty #Government #Defense #Innovation #Technology
🙏 New Blog Post
The Pope's official prayer app has an IDOR that lets anyone pull user data for all 719,517 accounts. One GET request per user. No auth check.
What's exposed:
Email addresses
Names
Country
Date of birth (they call it "borned_date" lol)
Account role (it's "PRAYER" for everyone, obviously)
Also found:
Signup endpoint returns the email verification token in the response body, so you can verify accounts without accessing the inbox
Their verification emails fail their own domain's authentication requirements
Reported January 3rd. Emailed 9 people. A journalist also contacted them. Zero responses. Still live six months later. Vow of silence I guess.
Full writeup: https://bobdahacker.com/blog/click-to-pray
#InfoSec #BugBounty #ResponsibleDisclosure #IDOR #Security #CyberSecurity #Privacy #DataExposure #ClickToPray #Vatican #APISecurity
Great new feature in the latest Signal app. If you enable disappearing messages the meta data of calls and missed calls gets deleted as well.
I know this was a long standing goal for them, but the engineering behind it took time.
#Privacy @signalapp
California residents now have a real tool against the data broker industry.
The state has launched DROP, a single portal to demand deletion of your personal data from 500+ registered data brokers in one request, for free.
To start: https://consumer.drop.privacy.ca.gov/
🚨 We're disclosing a macOS security bug that Apple says is not an issue.
Using a simple archive-and-restore trick, an attacker can silently replace the main executable of virtually any application downloaded from the web—no password or warning is required.
Here's a demo using Signal to steal its encryption key.
📝 Blog with technical details: link in the replies.
Do you think this should be considered a security bug?
🎬👇
#Apple #privacy #infosec #security #macOS
RE: https://mastodon.social/@eff/115345214105078622
And, let me just remind everyone that —
Wireless telecommunications companies (i.e., your mobile provider) collects and sells this data, too.
And, this is not something you can block from your phone. It is not something you can opt-out of.
...
Of course, it doesn't mean you shouldn't prevent others from collecting this data. (You probably should.)
So, what the EFF wrote here is good advice.
But, while doing what they wrote makes you safer — you are not completely safe.
I can't stop grinning today. Thank you for showing up!
I keep picturing MEPs' inboxes and timelines flooding with messages from people who decided to act instead of just scrolling, and they couldn't ignore it. I'd like to think that pressure changed votes this week, and if it did, you did this.
This is a hard-won pause, not a full stop. Chat Control is blocked for now, so celebrate tonight and rest a little, but don't mistake relief for the end of the fight. My guess is they'll come back (they always do), though for now we won.
I'm proud and exhausted and oddly hopeful. Sleep a little better tonight, then we get back to work. ✊
#ChatControl #DigitalPrivacy #privacy #encryption #StopScanningMe
Signal massively downloaded amid rising tensions, number one in Denmark 🇩🇰 🇬🇱
People are looking for a safer alternative to WhatsApp
👉 https://aboutsignal.com/news/signal-massively-downloaded-amid-rising-tensions-number-one-in-denmark/
#signal #signalmessenger #signalapp #tech #privacy #whatsapp #denmark #greenland #news
They have started to store birthday info in systemd...
Are they really planning to integrate age verification in systemd too? That's terrible.
#systemd #Linux #AgeVerification #Privacy
My Rayhunter is live! All clear, so far. We'll see if it finds anything at this weekend's festivities. 🤔
This was pretty painless to get going (<$50 hardware, <5min setup).
#Rayhunter #CellSiteSimulator #Stingray #privacy #surveillance
GmsCompatConfig version 168 released:
https://github.com/GrapheneOS/platform_packages_apps_GmsCompat/releases/tag/config-168
See the linked release notes for a summary of the improvements over the previous release and a link to the full changelog.
Forum discussion thread:
https://discuss.grapheneos.org/d/33369-gmscompatconfig-version-168-released
Exquisite.social is a general Glitch Mastodon server with a slight focus on technology, privacy and *BSD. We are here to play and make friends in a supportive atmosphere.
This server has a post size of up to 2500 characters.
You can find out more at https://exquisite.social/about or contact the admin account @exquisite
#FeaturedServer #Technology #Privacy #BSD #GlitchMastodon #Mastodon #Fediverse #FreeFediverse
US accuses American of allegedly wiping his phone using a 'duress' password during border search
very interesting #privacy and #surveillance case to keep an eye on
#grapheneOS #duress #counterDisruption #googlePixel #4A
Bonus video this week!
I read the story of Samuel Tunick, who has a criminal case pending against him for using a 'duress password' to delete his date during a US border entry, and couldn't resist making a video.
If you enjoy the video, please please please tap the like button. This helps us smaller creators immensely.
#Tech #Technology #GrapheneOS #Video #SamuelTunick #YouTube #Privacy #Fascism
GrapheneOS Won’t Implement Age Verification
https://www.privacyguides.org/news/2026/03/23/grapheneos-wont-implement-age-verification/
Konform Browser 140.12.0-103 has been released!
https://codeberg.org/konform-browser/source/releases/tag/140.12.0.103
Some notable news since last week:
- The browser now has a lot more theming options out of the box! This "brings back" the Colorways themes designed by Keely Lascio for Mozilla "Independent Voices" initiative, which were previously part of Firefox for a limited time only. These themes are very lightweight and only affect browser chrome: Negligible impact on installation size and not detectable by webpages. Aesthetics aside, having more builtin color schemes available can be pretty useful for people with multiple browsers/profiles to easily distinguish their domains without having to manually or remotely install new themes to do so. Available at bottom of `about:addons#themes`.
- Fixed multiple media playback issues - certain video or audio formats that would previously play incorrectly or not at all should now play properly.
- Various other smaller fixes and improvements, including some security fixes from upstream. See release notes for details.
In other news, preview release for upcoming v153 is available for anyone interested in testing or browsing on the edge.
Check it out and spread the word ☮️ 🕉️
These announcements can be filtered using #konform_release hashtag.
#konformbrowser #konform_release #browsers #cybersecurity #privacy #opensource #mozilla #firefox #firefox_esr
Konform Browser 140.13.0-100 has been released and users are encouraged to upgrade.
https://codeberg.org/konform-browser/source/releases/tag/140.13.0.100
This includes all security fixes from Firefox 140.13.0esr as described in https://www.mozilla.org/en-US/security/advisories/mfsa2026-70/.
Fixes for half of the related CVEs were are included in Konform Browser 140.12.0-104, released last week. Users are still advised to upgrade to latest versions before opening untrusted content. See release notes for details.
Last week also brought in a few improvements and streamlining of settings UI, like making settings related to cross-origin refer(r)ers more complete and understandable.
In other news, Konform Browser sources and build-tooling repositories are now also being mirrored via P2P Radicle Network (@radicle ) for redundancy. If the primary mirror on Codeberg is ever having issues, this more decentralized alternative can hopefully fill in the gaps. Patches and issues can also be submitted via Radicle without need to register account with any particular provider.
konform-browser source: rad:z4D6gZLANjQKHNPdKRSCREnkM8Y4g
konform-browser bsys: rad:z4DPNRhfcgw11WiBVL8HUAHaRT4NW
All commits on releases are signed with same PGP key and verifying these signatures is encouraged before building from these, especially as Radicle is still relatively experimental.
These announcements can be filtered using #konform_release hashtag.
#konformbrowser #konform_release #browsers #mozilla #firefox #opensource #privacy #security #radicle #p2p #forgefed
1/2 📢 Got a groundbreaking idea for #free #software and #privacy preserving projects that support our mission for @Taler ?
🌟 Our 11th Open Call is live since 1st of December 2025 and you’ve got about 3 weeks to apply!
⏰ Deadline 1st of February, 2026 12:00 CET (noon) @EC_NGI
💡We’re on the lookout for proposals that will revolutionize #digitalpayment systems and contribute to an #open, #trustworthy, and #reliable internet for all.
🎬 Short FAQ video on our PeerTube here https://video.ngi.eu/w/8oEts9kfxisRWy8oGEG4BM
Mi pareja compró un cacharro de estos de segunda mano y no supo hacerlo funcionar. Yo le dije que probablemente estuviese algo defectuoso y por ahí sigue aparcado. La razón es que no quería conectar a mi red algo de dudosa seguridad. Pero podría ser aún mucho peor que una cuestión de seguridad. ¡Lean, lean!
https://codetiger.github.io/blog/the-day-my-smart-vacuum-turned-against-me/
Overwhelmed by randomness of my toots? Protip: you don't need to follow me/people, you can just follow hashtags for interaction. I use several, like:
#InfoSec #Privacy #Venice #Food #Art #F1 #Caturday (yup) & #LazyPip #Education #Security #Photography #Motorbike & #Ducati #theNetherlands #PhotoChallenge
