# privacy Published articles for privacy. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## 12 celebrity deepfake websites seized by Manhattan DA DevFeed: [12 celebrity deepfake websites seized by Manhattan DA]() Original publisher: [Read original article]() Author: Danny Bradbury Published: 2026-09-17T11:20:46Z Content type: news Language: en Sources: [Malwarebytes]() Topics: [Artificial Intelligence](), [Security]() Tags: [ai](), [department-of-homeland-security](), [department-of-justice](), [privacy](), [report](), [security]() ### AI overview The Manhattan District Attorney's Office seized 12 websites that hosted AI-generated celebrity deepfakes, including non-consensual intimate imagery depicting more than 1,200 people. The article describes the harms of deepfake abuse and expanding legal action against its distribution. ### Source excerpt The largest known celebrity deepfake seizure has taken 12 websites offline, disrupting access to videos depicting some 1,200 people. ## Report says OpenAI contractors review ChatGPT conversations under Project Lily DevFeed: [Report says OpenAI contractors review ChatGPT conversations under Project Lily]() Original publisher: [Read original article]() Author: techno\_mot (Selectel) Published: 2026-09-17T07:07:15Z Content type: news Language: ru Sources: [Tagir Valeev]() Topics: [ChatGPT](), [OpenAI](), [privacy-filter]() Tags: [chatgpt](), [openai](), [privacy](), [privacy-filter](), [selectel](), [tag-11019b84ba80](), [tag-32a5d252bf88](), [tag-61cd5a476b1d](), [tag-9fe8963de219](), [tag-b427c8ac240b]() ### AI overview The article reports on 404 Media's investigation into Project Lily, an internal OpenAI program in which external contractors review real ChatGPT prompts and conversations to assess model responses. It says a Privacy Filter removes some direct identifiers but may miss rare or context-dependent identifying details. ### Source excerpt 404 Media опубликовала расследование о внутренней программе OpenAI под названием Project Lily. Сотни внешних подрядчиков, нанятых через рекрутингового посредника Crossing Hurdles и получающих выплаты через платформу Mercor, читают настоящие промпты и целые диалоги пользователей ChatGPT, оценивают ответы модели и пишут разборы. Сама практика такой "человеческой" оценки известна давно. Новостью стал масштаб и то, насколько мало о ней знают пользователи. У ChatGPT больше 900 млн пользователей. Читать далее ## Arduino announces a live build of a privacy-focused smart doorbell on the Arduino UNO Q DevFeed: [Arduino announces a live build of a privacy-focused smart doorbell on the Arduino UNO Q]() Original publisher: [Read original article]() Author: Arduino Team Published: 2026-09-16T14:06:15Z Content type: article Language: en Sources: [Arduino Blog]() Topics: [Arduino](), [Computer vision](), [Security]() Tags: [arduino](), [computer-vision](), [model](), [notify](), [privacy](), [security](), [smart-doorbell](), [uno-q]() ### AI overview Arduino announces a live build showing how to create a smart doorbell using a computer vision model that runs locally on an Arduino UNO Q board. The event is scheduled for September 22 at 3 PM CET / 9 AM ET and will include questions for the Arduino team. ### Source excerpt Go on your favorite online shopping platform, and you'll find any number of smart doorbell options. Click to purchase, have it delivered, install it, download some app. But where's the fun in that? And also, don't you wonder how that thing works? That thing that watches you and your loved ones go in and out, [...] The post Build your own smart doorbell and protect your privacy - in one hour, with Massimo Banzi appeared first on Arduino Blog. ## Meta Reportedly Building Smart Glasses without Cameras Following Public Backlash DevFeed: [Meta Reportedly Building Smart Glasses without Cameras Following Public Backlash]() Original publisher: [Read original article]() Author: Scott Hayden Published: 2026-09-16T12:49:39Z Content type: news Language: en Sources: [Road to VR]() Topics: [Meta](), [webcam](), [Android XR]() Tags: [cameras](), [meta](), [news](), [privacy](), [xr-industry-news]() ### AI overview A report says Meta is preparing camera-less smart glasses, internally codenamed Luna, potentially for unveiling at its September Connect developer conference. The glasses are expected to use microphones, speakers, and a button for Meta AI instead of outward-facing cameras, amid privacy scrutiny of smart glasses. ### Source excerpt Meta is reportedly preparing a new slate of smart glasses that are ditching those pesky cameras. The News Zuckerberg previously teased a pair of smart glasses in May alongside the official announcement of Connect's September dates. Now, according to a report from The Information, those may be a new class of camera-less smart glasses, slated [...] The post Meta Reportedly Building Smart Glasses without Cameras Following Public Backlash appeared first on Road to VR. ## How to opt out of AI chatbot training DevFeed: [How to opt out of AI chatbot training]() Original publisher: [Read original article]() Author: Pieter Arntz Published: 2026-09-15T15:41:44Z Content type: tutorial Language: en Sources: [Malwarebytes]() Topics: [ChatGPT](), [OpenAI](), [online privacy](), [Artificial Intelligence]() Tags: [ai](), [anthropic](), [chatgpt](), [how-to](), [human-review](), [news](), [openai](), [perplexity](), [privacy](), [privacy-filter]() ### AI overview This tutorial explains how to turn off ChatGPT's "Improve the model for everyone" setting to opt out of using chats for model improvement. It also notes that authorized personnel and trusted service providers may still access content for safety, support, troubleshooting, security, abuse investigations, or legal matters. ### Source excerpt ChatGPT contractors are reviewing real users' conversations. Here's how to stop AI companies using your chats for model training. ## Meta AI builds detailed profiles of children from years of family posts DevFeed: [Meta AI builds detailed profiles of children from years of family posts]() Original publisher: [Read original article]() Author: Danny Bradbury Published: 2026-09-15T09:44:10Z Content type: news Language: en Sources: [Malwarebytes]() Topics: [Artificial Intelligence](), [Meta](), [Instagram]() Tags: [ai](), [automated](), [facebook](), [family-and-parenting](), [information](), [instagram](), [issue](), [location](), [meta](), [photos](), [privacy](), [profile](), [social-media](), [statement]() ### AI overview A mother says Meta AI assembled detailed profiles of her young daughters by connecting names, birth details, photos, videos, and location information from family posts across Facebook and Instagram. Meta acknowledged that the feature should not have prompted questions about personal topics and said it fixed the issue. ### Source excerpt A mother says Meta AI pieced together names, birth details, photos, and location information about her young daughters from years of family posts. ## Turn Arduino® UNO™ Q into your local 3D printing watchdog DevFeed: [Turn Arduino® UNO™ Q into your local 3D printing watchdog]() Original publisher: [Read original article]() Author: Arduino Team Published: 2026-09-14T18:03:45Z Content type: article Language: en Sources: [Arduino Blog]() Topics: [Arduino](), [Hardware](), [webcam](), [MQTT](), [Home Assistant](), [API](), [Security]() Tags: [3d-printer](), [3d-printer-watchdog](), [3d-printing](), [3d-printing-watchdog](), [anomaly-detection](), [api](), [arduino](), [cameras](), [edge-ai](), [hardware](), [mqtt](), [privacy](), [security](), [uno-q]() ### AI overview This Arduino Blog article presents a local 3D-printing watchdog built with an Arduino UNO Q, a camera, and the FOMO-AD anomaly model through Arduino App Lab. It trains on images of normal prints, flags deviations, and can automatically pause a print through the Moonraker API after repeated anomaly detections. The system can also integrate with OctoPrint, send MQTT notifications to Home Assistant, and operate entirely on the local network for privacy and security. ### Source excerpt A lot of newer 3D printers incorporate sophisticated sensor suites and cameras to detect problems with print jobs, like the dreaded "spaghetti failure." Those work pretty well and prevent wasted time, wasted filament, and even damage to the printer. But what if you don't have a printer with those features? Or if you want to [...] The post Turn Arduino® UNO™ Q into your local 3D printing watchdog appeared first on Arduino Blog. ## A Case Study: Building an EN 18031-Compliant IoT Solution with ESP32-C5 and ESP RainMaker DevFeed: [A Case Study: Building an EN 18031-Compliant IoT Solution with ESP32-C5 and ESP RainMaker]() Original publisher: [Read original article]() Author: John Lee Published: 2026-09-14T00:00:00Z Content type: article Language: en Sources: [Blog on Developer Portal]() Topics: [ESP32](), [Internet of things](), [Security](), [Cloud](), [Security & Privacy](), [Espressif](), [Authentication](), [Authorization]() Tags: [access-control](), [authentication](), [blog](), [compliance](), [connectivity](), [cryptographic](), [data](), [data-management](), [documentation](), [en-18031](), [esp-rainmaker](), [esp32-c5](), [espressif](), [eu](), [firmware](), [iot](), [privacy](), [rainmaker](), [regulatory](), [security](), [standards](), [storage]() ### AI overview This case study describes an ESP32-C5 and ESP RainMaker device-to-cloud IoT implementation assessed against EN 18031 cybersecurity and privacy requirements for products targeting the EU market. ### Source excerpt This case study assesses device-to-cloud IoT implementation of products based on ESP32-C5 and ESP RainMaker against the EN 18031 security requirements for the EU market. ## Are Browser-Based Apps Enough for Web Designers? DevFeed: [Are Browser-Based Apps Enough for Web Designers?]() Original publisher: [Read original article]() Author: Eric Karkovack Published: 2026-09-13T19:09:47Z Content type: opinion Language: en Sources: [Speckyboy Design Magazine]() Topics: [web applications](), [Web platform](), [web-standards](), [Figma](), [Google]() Tags: [apps](), [browser](), [collaboration](), [design](), [design-business](), [freelance-career](), [freelance-design](), [privacy](), [software](), [tools](), [web](), [web-apps](), [web-design](), [web-designers](), [workflows]() ### AI overview Browser-based apps have matured enough to handle serious design, editing, and productivity work. The article considers their convenience and collaboration benefits, while also examining privacy concerns and cases where desktop tools remain preferable. ### Source excerpt Browser-based apps can now handle serious design, editing, and productivity work. We take a look at their convenience, collaboration benefits, privacy risks, and where desktop tools still make sense. The post Are Browser-Based Apps Enough for Web Designers? appeared first on Speckyboy Design Magazine. ## The Android Startup Pattern: A Lifecycle-Aware, Multi-Module Approach DevFeed: [The Android Startup Pattern: A Lifecycle-Aware, Multi-Module Approach]() Original publisher: [Read original article]() Author: Ehab Elwan Published: 2026-09-13T05:31:09Z Content type: tutorial Language: en Sources: [ProAndroidDev - Medium]() Topics: [Android](), [modules](), [Jetpack](), [Framework]() Tags: [android](), [android-development](), [app-startup](), [architecture](), [framework](), [jetpack](), [kotlin](), [mobile-architecture](), [module](), [privacy](), [software-architecture]() ### AI overview This tutorial presents a lifecycle-aware, dependency-injection-driven startup pattern for modular Android applications. It contrasts a centralized startup anti-pattern with Jetpack App Startup and discusses process lifecycles, testability, and delaying tracking SDK initialization until privacy consent is evaluated. ### Source excerpt A Clean, DI-Driven Architecture for Managing Cold Starts, Background Wakeups, and Privacy Compliance in Modern Android Apps Image generated by AIDisclosure: This article was drafted by me and refined with the help of AI tools. Every growing Android project eventually spawns a two-headed "God Class." On one side, your Application class becomes a dumping ground for global infrastructure--third-party SDKs, crash reporters, and tracking tools. On the other side, your main entry point (typically the MainViewModel) gets choked with UI-blocking startup logic. It usually looks something like this: The Anti-Pattern: The Two-Headed God Class class MyApplication : Application() { override fun onCreate() { super.onCreate() // The framework dumping ground CrashReportingSDK.getInstance().setCollectionEnabled(true) HeavyUiSDK.initialize(context = this, ...) AnalyticsSDK.initialize(this, "API_KEY") // ... 50 more lines of spaghetti } }class MainViewModel : ViewModel() { init { // The UI-blocking dumping ground updateRemoteConfigs() checkUserSessionToken() processPendingDeepLinks() prefetchHomeFeedData() // ... UI cannot render until this finishes } } Splitting initialization across these two files creates major problems: It breaks the Single Responsibility Principle: The app's entry points are forced to orchestrate the inner workings of every single feature, tightly coupling your modules. It ignores process lifecycles: Application tasks run indiscriminately on every silent background wakeup, while MainViewModel tasks fail to re-trigger when the app returns to the foreground. It destroys testability: Hardcoding SDK initializations directly into your entry points makes it incredibly difficult to write isolated unit tests without complicated mocking setups. It complicates privacy compliance: A centralized dumping ground makes it extremely difficult to dynamically suspend tracking SDKs until user consent under global privacy regulations (such as GDPR, CCPA, and CPRA) is explicitly grant ## Visual playback of the user journey: Introducing Session Replay in Grafana Cloud Frontend Observability DevFeed: [Visual playback of the user journey: Introducing Session Replay in Grafana Cloud Frontend Observability]() Original publisher: [Read original article]() Author: Lukasz Gut Published: 2026-09-12T11:22:06.456390Z Content type: article Language: en Sources: [Grafana Labs blog on Grafana Labs]() Topics: [session replay](), [Grafana Cloud Frontend Observability](), [Frontend observability](), [web applications](), [telemetry](), [SDKs]() Tags: [analytics](), [frontend-observability](), [grafana](), [grafana-cloud-frontend-observability](), [instrumentation](), [logs](), [metrics](), [monitoring](), [observability](), [privacy](), [session-replay](), [telemetry](), [traces](), [web-applications]() ### AI overview The article introduces Session Replay, a public-preview add-on for Grafana Cloud Frontend Observability. It visually reconstructs how a web application appeared and changed during a user session, linking that playback to session timelines and technical telemetry so engineering teams can investigate frontend problems more directly. ### Source excerpt Grafana Cloud Frontend Observability helps engineering teams quantify the end user experience by bringing metrics, logs, traces, and user session context to client-side web applications. Teams can monitor application health and performance over time, triage errors, and correlate frontend signals with backend telemetry to investigate issues across the stack. Yet some of the hardest frontend problems remain difficult to diagnose. A support ticket might report that a checkout button did nothing, a form unexpectedly reset, or a workflow broke only in one browser or on one device. Metrics can reveal a performance regression, logs can capture an error, and traces can expose a slow request, but no single signal shows what the interface actually looked like to the user. This is exactly why we built Session Replay, an add-on feature in Frontend Observability that provides a visual reconstruction of a user's journey, connected to the telemetry Grafana Cloud already collects. It helps engineering teams move from a reported problem to seeing what happened and knowing exactly where to investigate next. What is Session Replay in Grafana Cloud Frontend Observability? Session Replay, now in public preview, adds visual playback capabilities to Frontend Observability. It reconstructs how a web application appeared and changed as a user navigated and interacted with it, so you can observe the journey as it unfolded instead of inferring it from individual telemetry events. Frontend Observability already brings together a chronological timeline of the events within a user session. That timeline tells you what happened and when. Session Replay adds the missing visual context: what was happening in the interface around those events and how one interaction led to the next. Because both views belong to the same session, you can move between the user experience and the relevant technical signals without losing the thread of your investigation. Session Replay builds on the Grafana Faro Web SD ## (Re)introducing Developer Story DevFeed: [(Re)introducing Developer Story]() Original publisher: [Read original article]() Author: Philippe Beaudette Published: 2026-09-10T18:01:54Z Content type: news Language: en Sources: [Stack Overflow Blog]() Topics: [Programming](), [Code](), [Large Language Model](), [datasets]() Tags: [career](), [community](), [company](), [cv](), [datasets](), [developer](), [identity](), [llms](), [news](), [privacy](), [profile](), [programming](), [se-stackoverflow](), [se-tech](), [skills](), [work]() ### AI overview Stack Overflow is reintroducing Developer Story, a profile feature designed to showcase developers' careers, specialties, contributions, and technical identity. The article also introduces Stack Identity, a broader vision for verified proof of developer work, with privacy controls and integrations for verified contributions from other sites. ### Source excerpt For the past few years, we've been looking at ways to bring a little more of the individual developer back to Stack. ## Dental contractor set up secret account with access to 4,000 patient records then left the company DevFeed: [Dental contractor set up secret account with access to 4,000 patient records then left the company]() Original publisher: [Read original article]() Author: Avram Piltch Published: 2026-09-10T07:00:00Z Content type: news Language: en Sources: [www.theregister.com - Articles]() Topics: [Cybersecurity](), [Security & Privacy]() Tags: [privacy](), [pwned](), [security]() ### AI overview A dental contractor allegedly created a secret account with access to 4,000 patient records before leaving the company. ### Source excerpt Toothless security ## Use a local and open source code assistant DevFeed: [Use a local and open source code assistant]() Original publisher: [Read original article]() Author: Seth Kenlon Published: 2026-09-09T14:01:45Z Content type: tutorial Language: en Sources: [Red Hat](), [Red Hat Developer]() Topics: [ai-coding](), [Local AI](), [Open Source Models & Datasets](), [Large Language Model](), [Model Context Protocol](), [ide](), [Security, Privacy and Abuse Prevention](), [Command-line interface](), [Homebrew](), [Linux](), [macOS]() Tags: [ai-coding](), [ai-inference](), [artificial-intelligence](), [command-line](), [developer-tools](), [ide](), [linux](), [llm](), [local-ai](), [macos](), [model-context-protocol](), [ollama](), [open-source](), [privacy]() ### AI overview This Red Hat Developer article explains how to use OpenCode as a local, open source AI coding assistant. It covers OpenCode's terminal, desktop, and IDE extension interfaces, its use of the Model Context Protocol, installation requirements, and the need to configure an LLM. For privacy-conscious local development, it recommends open source local AI tools such as Ollama or OpenVINO. ### Source excerpt There's a lot of excitement about AI coding assistants, but many of the available options either aren't open source, or don't respect your data privacy by sending what you're working on to the cloud for processing. If you're looking for an alternative to closed AI, then you need an open coding assistant and an open source IDE. The post Use a local and open source code assistant appeared first on Red Hat Developer. ## PostgreSQL Anonymizer 3.2 : Faster Pseudonymization DevFeed: [PostgreSQL Anonymizer 3.2 : Faster Pseudonymization]() Original publisher: [Read original article]() Published: 2026-09-09T00:00:00Z Content type: release Language: en Sources: [PostgreSQL news]() Topics: [Databases](), [Extension](), [Vulnerabilities]() Tags: [database](), [extension](), [pii](), [postgresql](), [privacy](), [security](), [vulnerabilities]() ### AI overview PostgreSQL Anonymizer 3.2 adds faster localized pseudonymization functions, deprecates the previous pseudo_* functions, and fixes three critical privilege-escalation vulnerabilities. ### Source excerpt Eymoutiers, France, Septembre 4th, 2026 Dalibo is pleased to announce PostgreSQL Anonymizer 3.2 introducing a new panel of fast pseudonymization filters. Enhanced Privacy Protection for Your Data PostgreSQL Anonymizer is an extension that hides or replaces personally identifiable information (PII) or commercially sensitive data from a PostgreSQL database. The extension offers 6 different masking strategies: Dynamic Masking - Real-time data protection Static Masking - Permanent data transformation Replica Masking - Anonymized logical replication Backup Masking - Privacy-protected database exports Masking Views - Controlled data visibility Masking Data Wrappers - Extended protection across systems Each strategy is complemented by an enhanced suite of Masking Functions, including advanced techniques such as: Substitution, Randomization, Faking, Pseudonymization, Partial Scrambling, Shuffling, Noise Addition and Generalization. The extension can be installed with Debian and RPM packages, an Ansible role, a Docker image, etc. You can use it on most major DBaaS providers including : Alibaba Cloud, Crunchy Bridge, Google Cloud SQL, IBM Cloud, Microsoft Azure Database, Neon, Yandex It is also available on some Postgres forks such as EDB Advanced Postgres, Greenplum and Yugabyte. See the INSTALL section of the documentation for more details! Fast and Localized pseudonymization Although Pseudonymization is not Anonymization, it may be useful in some contexts. Until version 3.1, this was achieved with a panel of pseudo_* functions, such as anon.pseudo_last_name(...), anon.pseudo_email(...), etc. These functions are now replaced by a new panel of anon.seeded_* functions, such as anon.seeded_last_name(...), anon.seeded_email(...), etc. The anon.seeded_* functions have 2 main advantages over the previous ones: They can be localized, e.g anon.seeded_street_name(id,'fr_FR') They are 40x faster :) The anon.pseudo_* functions are kept for backward compatibility but are now deprecated ## Join Us: EF Protocol Reddit AMA - September 16th, 2026 DevFeed: [Join Us: EF Protocol Reddit AMA - September 16th, 2026]() Original publisher: [Read original article]() Author: Ethereum Foundation Protocol Cluster Published: 2026-09-09T00:00:00Z Content type: news Language: en Sources: [Ethereum Foundation Blog]() Topics: [Ethereum](), [Development](), [Protocol (disambiguation)](), [Formal verification]() Tags: [2026](), [community](), [development](), [ethereum](), [formal-verification](), [privacy](), [reddit](), [research-development](), [technical](), [upgrades]() ### AI overview The Ethereum Foundation announces a September 16, 2026 Reddit AMA with researchers and developers from its Protocol cluster. The discussion will cover Ethereum protocol development, including the Glamsterdam hard fork, Hegotá, post-quantum Ethereum, formal verification, privacy, client development, and related topics. ### Source excerpt Every year since January 2019, teams from the Ethereum Foundation have spent an afternoon or two on r/ethereum answering questions from the community. The format hasn't really changed: one thread, technical debates, detailed explanations, and community members asking whatever is on their mind. By now it is a tradition, and... ## Pick One Contact Without Asking for the Address Book DevFeed: [Pick One Contact Without Asking for the Address Book]() Original publisher: [Read original article]() Author: Shai Almog Published: 2026-09-09T00:00:00Z Content type: article Language: en Sources: [CodeName One]() Topics: [API](), [Android](), [iOS](), [Code](), [App]() Tags: [android](), [api](), [code](), [contactpicker](), [ios](), [native](), [permission](), [privacy]() ### AI overview ContactPicker lets Codename One applications request selected contact fields through a system-owned picker without broad address-book permission. The article describes platform differences, limited fallback behavior, manual-entry handling, and more precise permission detection. ### Source excerpt ContactPicker lets a Codename One application request selected contact fields through the system picker without broad address-book permission. ## Grindr settles HIV status data-sharing lawsuit for $35 million DevFeed: [Grindr settles HIV status data-sharing lawsuit for $35 million]() Original publisher: [Read original article]() Author: Pieter Arntz Published: 2026-09-08T12:51:14Z Content type: news Language: en Sources: [Malwarebytes]() Topics: [online privacy](), [App](), [SDKs]() Tags: [advertising](), [grindr](), [lawsuit](), [news](), [norway](), [privacy](), [sdks](), [uk-lawsuit]() ### AI overview Grindr reportedly agreed to settle a UK lawsuit alleging that it shared sensitive user data, including HIV-status information, with advertisers. The article explains privacy risks from advertising identifiers, analytics, SDKs, and other third-party app integrations. ### Source excerpt Grindr has settled a UK lawsuit alleging that it shared sensitive user data, including HIV status, with advertising companies. ## Progressive Authentication for Production-Ready RAG Architectures DevFeed: [Progressive Authentication for Production-Ready RAG Architectures]() Original publisher: [Read original article]() Author: Aishwarya Murali Padikkal Published: 2026-09-08T07:16:00Z Content type: article Language: en Sources: [Data Science at Microsoft]() Topics: [Authentication](), [Retrieval Augmented Generation (RAG)](), [sensitive data](), [User Experience](), [Security]() Tags: [ai](), [ai-agent](), [authentication](), [data-science](), [privacy](), [rag](), [retrieval](), [sensitive-data](), [user-experience]() ### AI overview The article presents progressive authentication for RAG systems: answer public questions without sign-in, then authenticate within the conversation when a request requires access to sensitive personal data. It argues that static, upfront authentication does not fit conversations that shift between public and private contexts. ### Source excerpt Designing a production-ready RAG architecture where authentication becomes part of the conversation, not a prerequisite for it. By Aishwarya Murali Padikkal & Priyank Solanki From understanding to retrieval, grounding, and response, authentication enters only when the conversation requires access to sensitive data- illustrating the core idea of progressive authentication. Illustration generated using ChatGPT and refined by the authors. Two questions, one help line Imagine two taxpayers opening the same AI-powered tax assistant. The first asks, "When is the filing deadline this year?" The second asks, "What was my refund last year?" Both questions are valid. Both deserve fast, helpful answers. Yet they represent fundamentally different types of requests. Figure 1. The same assistant, two different journeys. Requests are routed according to the type of information being accessed. Illustration generated by AI (ChatGPT) and refined by the authors. The answer to the first lives in a public handbook. Anyone should be able to access it instantly- no sign-in, no friction. The answer to the second is within an individual's private tax records. Before revealing a single detail, the assistant must be certain it is interacting with the right person. Making public information instantly accessible while ensuring private information is revealed only to the right person, all within the same conversation, is the challenge we set out to solve. It is also where conventional RAG systems quietly fall apart. Traditional RAG architectures assume a much simpler interaction model: a user asks a question, the system retrieves relevant documents, and the model generates an answer. Authentication, if it exists at all, is treated as a one-time checkpoint at the start of the interaction. Real conversations are far less predictable. Users naturally shift contexts, starting with a public question, moving to a personal one, and then asking follow-up questions that rely on both. The conversation evo ## Black Hat USA 2026: Safeguarding DNS with Secure Access DevFeed: [Black Hat USA 2026: Safeguarding DNS with Secure Access]() Original publisher: [Read original article]() Author: Steve Vida Published: 2026-09-07T15:00:32Z Content type: article Language: en Sources: [Security @ Cisco Blogs]() Topics: [SIEM, Security, Observability](), [telemetry](), [NOC]() Tags: [apple](), [black-hat](), [cisco-secure-access](), [cisco-security-cloud](), [cisco-talos](), [cisco-xdr](), [cloudflare](), [cybersecurity](), [dns](), [google](), [network-operations-center](), [noc](), [phishing](), [privacy](), [security](), [security-operations-center](), [soc](), [splunk-cloud](), [splunk-enterprise-security](), [statistics](), [telemetry]() ### AI overview Cisco reports on using Secure Access and DNS telemetry to protect the Black Hat USA 2026 network. The article highlights blocking unapproved encrypted DNS resolvers, DNS request statistics, and activity classified as hacking. ### Source excerpt Cisco is the Security Cloud Provider for the Black Hat conferences, over a decade providing DNS Security. Learn about protecting DNS with Secure Access. ## LG TV flaws could let attackers listen in, even in standby mode DevFeed: [LG TV flaws could let attackers listen in, even in standby mode]() Original publisher: [Read original article]() Author: Pieter Arntz Published: 2026-09-07T13:34:40Z Content type: news Language: en Sources: [Malwarebytes]() Topics: [Vulnerabilities](), [Networks](), [Embedded Software Dev]() Tags: [acr](), [audio](), [lg](), [networks](), [news](), [privacy](), [security](), [smart-tv](), [testing](), [vulnerabilities]() ### AI overview An investigation reported that LG smart TVs may scan local networks and collect viewing-related data, while undisclosed vulnerabilities could enable audio capture from a compromised TV. ### Source excerpt Testing found that LG smart TVs can track viewing and scan home networks, while security flaws could let attackers record conversations. ## Dealing with sensitive permissions on Android DevFeed: [Dealing with sensitive permissions on Android]() Original publisher: [Read original article]() Author: Thomas Künneth Published: 2026-09-05T09:22:30Z Content type: opinion Language: en Sources: [Thomas Künneth]() Topics: [Android](), [Google Play](), [Authorization](), [Google]() Tags: [android](), [androiddev](), [app](), [coding](), [community](), [development](), [engineering](), [google-play](), [inclusive](), [permission](), [policy](), [privacy](), [software]() ### AI overview This article explains how Android and Google Play treat READ_CALL_LOG as a sensitive permission. It describes how Google Play restrictions affected TKWeek's distribution and led the author to remove call-log access from Play builds while restoring the feature in builds distributed through F-Droid and Obtainium. ### Source excerpt Right now the developer community seems fascinated (if not outright obsessed) with agentic coding. That wave is real, and it will heavily impact how we build software. But let's not forget there are other topics worth attention. Here, the focus is something less fashionable: sensitive permissions on Android. After shipping TKWeek updates outside Google Play and answering the inevitable Why isn't this on the Play Store? with a blunt Sensitive permissions, it is fair to ask whether that topic still matters in 2026. I can answer that from shipping one app for a long time. I started working on TKWeek back in 2010. Some time later I added a module called My day that shows important information for a particular day, including missed phone calls. READ_CALL_LOG is a dangerous permission since API level 23, so users who do not want to allow the app to read those details have a secure, reliable safety hatch. Still, after a late-2018 announcement, by 2019 Google Play was enforcing READ_CALL_LOG under its high-risk / sensitive rules. Now, what does that store layer mean anyway? Dangerous on the device, sensitive in the store On the platform side, Android already classifies quite a few permissions as dangerous: they guard private user data, and starting with API 23 the user must grant them at runtime. READ_CALL_LOG is in that bucket (Manifest.permission.READ_CALL_LOG). Google Play's extra layer sits on top of that. In Play docs the umbrella is high-risk or sensitive permissions; Call Log and SMS are restricted permission groups. Either way, it is store policy, not just OS protection. For Call Log and SMS, only narrow use cases are allowed (typically default Phone, SMS, or Assistant handlers, plus a short list of exceptions), and you must declare them in Play Console or remove them from the manifest. See Google's Permissions and APIs that Access Sensitive Information and Use of SMS or Call Log permission groups. Back in 2021 that policy stopped being theoretical. Showing missed c ## Free streaming boxes may be routing criminal traffic through your home DevFeed: [Free streaming boxes may be routing criminal traffic through your home]() Original publisher: [Read original article]() Author: Pieter Arntz Published: 2026-09-04T09:20:48Z Content type: news Language: en Sources: [Malwarebytes]() Topics: [networking](), [Malware]() Tags: [android](), [apps](), [devices](), [malware](), [networks](), [news](), [privacy](), [residential-proxy-network](), [routing](), [security](), [streaming](), [superbox]() ### AI overview Researchers report that SuperBox apps may add household connections to residential proxy networks, enabling third parties to route traffic through them. The article also warns that weakened Android safeguards could expose devices to additional malicious software. ### Source excerpt Researchers found that apps available on SuperBox devices could add your household connection to a residential proxy network. ## Your phone or computer may soon ask how old you are DevFeed: [Your phone or computer may soon ask how old you are]() Original publisher: [Read original article]() Author: Danny Bradbury Published: 2026-09-03T08:54:50Z Content type: news Language: en Sources: [Malwarebytes]() Topics: [Operating system](), [App](), [Software](), [iOS]() Tags: [android](), [app](), [developers](), [ios](), [linux](), [news](), [open-source](), [privacy]() ### AI overview California's Digital Age Assurance Act will require operating systems to collect users' age brackets and provide a non-identifying signal to app developers. The article examines the compliance and privacy concerns, particularly for volunteer-developed open-source operating systems. ### Source excerpt California and Colorado will require operating systems to collect users' ages, but open-source software like Linux may be exempt. [Next page]()