305 private links
Encryption is only a first step: there are others in order to control the devices we use daily. "Sovereign control" means answering yes to each of the following:
- Do you own the encryption keys — not the platform provider?
- Are backups protected end-to-end, by default, without manual configuration?
- Is metadata shielded from external observation, including communication patterns, timing, and participant identity?
- Do you control who can access message content, with no external request system that can override that?
- Do you govern which devices, users, and integrations can access sensitive channels?
- Can the platform be deployed on infrastructure you control, in jurisdictions that meet your data residency requirements?
Not the mainstream privacy-focused tools like AdGuard, uBlock Origin or Ghostery, but the others having audiences numbering in the millions
That is why transparency should be one of the first things users evaluate before installing any browser extension.
Streaming related extensions under the "dogooodapp" brand
Before installing an extension, it’s worth running through a quick checklist:
- search in the privacy policy for phrases like:
- “may share”
- “business partners”
- “analytics purposes”
- “commercial purposes”
- “affiliates and third parties”
- Be wary of extensions with no privacy policy at all
- Check who developed the extension
- Read reviews critically
- Avoid installing unnecessary extensions entirely
- Go for well-established open-source privacy tools when possible
Utiliser les IA et leurs MCP, c'est effectivement donner l'accès total des données utilisées par l'IA aux États-Unis.
De ce fait, le département d’Indre-et-Loire illustre le paradoxe français en matière de numérique. On parle de souveraineté à longueur de discours, mais quand vient le moment d’acheter, l’habitude et la facilité l’emportent. Le réflexe Microsoft est ancré depuis trente ans dans toutes les administrations. De plus, personne ne semble vouloir prendre le risque politique de basculer.
D'autres comme l'Île-de-France utilise cependant déjà des infrastructures européennes.
Pas bête la remarque: un système de DNS européen est primordial pour assurer la sécurité de l'accès à Internet.
Sur iPhone et MacOS, les applications Facebook et Instagram peuvent lire vos conversations WhatsApp. Donc malgré le chiffrement, Facebook peut lire vos conversations WhatsApp.
Les chercheurs de Mysk ont identifié que WhatsApp enregistre l'historique des conversations dans un fichier nommé "Axolotl.sqlite". Ce dernier est placé dans un conteneur partagé entre les applications d'un même développeur, désigné sous l'identifiant "group.net.whatsapp.WhatsApp.shared"
Des explications plus profondes sont trouvées sur https://blog.cryptographyengineering.com/2026/02/02/whatsapp-encryption-a-lawsuit-and-a-lot-of-noise/
Pour la vie privée, Signal, DeltaChat ou Threema sont recommandées.
Ou comment les États-Unis peuvent récolter les données de santé.
Merci PURR pour ce partage d'informations
Describes tracking capabilities a website can do on behalf of the user consent.
The project is available at https://github.com/kadir/cloakrs
his web app will send you a confirmation email to make sure you own the email address. In that email there will be another link. Click that link and you will be taken to a page where you can trigger test emails to be sent to you. Those test emails are specially crafted to use a variety of techniques, to attempt to send information back to this server when read. It will then display the results for you.
The project is available at https://gitlab.com/grepular/ept3
le FBI a réussi à extraire et lire des messages Signal d’un iphone à l’aide de techniques de forensic.
car l'aperçu des notifications est stocké en clair dans une base de données locale du système.
Signal est ici pas en cause, mais bien le stockage des aperçus de notifications.
Si vous utilisez un iPhone, quelques réglages simples peuvent limiter les dégâts :
- Dans Signal → Notifications → “Ni le nom ni le message”
- Dans iOS → Notifications → Signal → désactiver les aperçus ou les limiter à “Quand déverrouillé”
Et surtout, il faut déconstruire une idée reçue tenace : celle de “l’application magique” qui réglerait tous les problèmes de sécurité. C’est une illusion dangereuse.
LinkedIn scans for over 200 products that directly compete with its own sales tools, including Apollo, Lusha, and ZoomInfo. Because LinkedIn knows each user’s employer, it can map which companies use which competitor products. It is extracting the customer lists of thousands of software companies from their users’ browsers without anyone’s knowledge.
And more things:
- Linkedin published one API to the European Commission as compliance. These APIs handle approximately 0.07 calls per second. Meanwhile, another internal API called Voyager handles 163 000 calls per second. In Microsoft’s 249-page compliance report to the EU, the word “API” appears 533 times. “Voyager” appears zero times.
- At the same time, LinkedIn expanded its surveillance of the exact tools the regulation was designed to protect. The scan list grew from roughly 461 products in 2024 to over 6,000 by February 2026. The EU told LinkedIn to let third-party tools in. LinkedIn built a surveillance system to find and punish every user of those tools.
- LinkedIn loads an invisible tracking element from HUMAN Security (formerly PerimeterX), an American-Israeli cybersecurity firm, zero pixels wide, hidden off-screen, that sets cookies on your browser without your knowledge. A separate fingerprinting script runs from LinkedIn’s own servers. A third script from Google executes silently on every page load. All of it encrypted. None of it disclosed.
La transposition prend du temps car "d’un point de clivage politique : l’article 16 bis, introduit au Sénat afin de consacrer dans la loi la protection du chiffrement et d’interdire l’imposition de dispositifs de portes dérobées (« backdoors ») aux messageries instantanées, fait l’objet d’une opposition du gouvernement".
Ok, on perd du temps à cause de ce genre de conneries, alors qu'il y a déjà 25 ans d'exemples contre l'affaiblissement du chiffrement.
Imagine l'affaiblissement du chiffrement des applications de messageries instantanées: les criminels et hors-la-loi iront en utiliser une autre. C'est ridicule.
L'ANSII a ouvert un guichet de pré-enregistrement, et mis à disposition le REférentiel CYber France.
Plus de ressources sont listées sur https://cyber.gouv.fr/actualites/nis-2-lanssi-poursuit-et-renforce-sa-dynamique-daccompagnement/
The Washington Post price is now dynamic depending on the user data. It's the next step of the pricing strategy. The journal already uses an algorithm to detect the amount of free posts an anonymous user and authenticated user can watch.
Readers’ usage of the Post‘s services might also play a role in how much they’re charged. “Users that read a lot may need to be paying more because they actually use more of the services—you can say, probably, they value our services more so we can charge them a little bit more,” Cian says.
The comeback of the pay to use, instead of the original idea of a subscription...
How to make them better. If the UX priority is the advertising or subscription, no doubt there is also clear quickwins.