First Apples “Hide my Email” was proven to be broken, now “Private Relay” - this tech has been the backbone of Apples privacy commitments for years and now we know they’ve been broken for god knows how long. Reminder: Apple and Google’s MAID products are the backbone of global data brokers. ⛈️⚖️🖖🏻

Joseph Cox@josephcox.bsky.social · 5h ago

New from 404 Media: Apple's 'Private Relay' is exposing users' real IP addresses. Private Relay is supposed to protect all your browsing in Safari. But researchers found a bunch of issues that are exposing real IPs. I verified they do. Not fixed, a live issue www.404media.co/apples-priva...

The power of app-ads.txt pivots to uncover a network of suspicious VPN mobile apps… ⬇️⛈️⚖️🖖🏻

TechRadar | the technology experts [Unofficial]@techradar.com.web.brid.gy · 2d ago

Me and a couple cool folks are cooking up something extra special at DecryptAds.com for everyone who wants to better understand data sharing from publisher websites / apps & ad tech companies...a real research tool for hunting the programmatic ecosystem... (and this tool isn't vibe coded).⛈️⚖️🖖

great visual investigation into how your data flows from a credit check through a private company and into the hands of the government. These systems are lynchpins for the modern economy but without guardrails on using the data for gov investigations, the 4th amendment is essentially for sale.

Joseph Cox@josephcox.bsky.social · 2w ago

You opened a credit card. ICE now knows where you live. Here's how when you open a credit card your address leaves your bank, goes through middlemen companies, and ends up with ICE. ICE plans to use this data for immigration and 'voter fraud'. No warrant More: www.404media.co/you-opened-a...

A big piece about a novel finance scam from Jacob Adelman at Barron's dropped today that I worked on. The details are jaw dropping so I want to go through a few facts. read the piece (gift link) @ www.barrons.com/articles/nfl...

NFL Players Targeted in E-Commerce Scheme Using Fake Shopify Stores

The alleged scam, organized by a 24-year-old from Philadelphia, offered NFL players ownership of bogus websites as a place to park cash from their lucrative careers.

barrons.com

I was in Yellowstone park for a week and a half and just got back a few days ago. We actually camped in that Bridge Bay campground where that recent bison attack occurred. The park is beautiful and extremely special but it’s super important to appreciate the animals are wild and can be dangerous. 🖖🏻

I love that we can see @linamkhan.bsky.social in these NYC policy decisions. The next Democratic President would be wise to consider reappointing her to the FTC if she’s willing to do it. We’d all be the better for it. 🖖🏻

More Perfect Union@moreperfectunion.bsky.social · 4w ago

BREAKING: Zohran Mamdani announces click-to-cancel rule for NYC. This rule is aimed at guaranteeing New Yorkers can cancel subscriptions as easily as they sign up — and stopping corporations from trapping customers. This will save New Yorkers up to $162.5 million per year.

We need more hot takes on HTTP 402!

Playing With My Money Is Like Playing With My Emotions

Alt: gif from Friday the movie with Big Worm sitting in his car with turquoise rollers in his hair saying, "Playing With My Money Is Like Playing With My Emotions"

static.klipy.com

How many of your favorite publishers do you think are partnering w/ ad tech data brokers & foreign ad tech orgs based in risky jurisdictions? How do you think the global mobile location data brokers get their data? Via secret partners sharing via black helicopters? Or via disclosed ad partners? 👀

David Dayen@ddayen.bsky.social · 4mo ago

Starting today, @prospect.org has removed all programmatic ads, because we believe that respecting you as readers rather than monetizing your attention will earn trust. This is what the site looks like, with all space reserved for stories about ideas, politics and power. prospect.org/2026/04/06/w...

This Koi report on an alleged Chinese espionage campaign seems to be a complete dumpster fire AI hallucination … ⛈️⚖️ “Startup sues Palo Alto Networks' Koi Security, saying an AI-hallucinated report falsely linked it to Chinese espionage” www.theregister.com/legal/2026/0...

Some comments from me in the piece on this network of 10k+ sites which have been marketed with spam and ads on numerous social networks while impersonating celebrities to push crypto scams ⬇️⛈️⚖️🖖🏻

Engadget@engadget.com · last mo.

Fake Mr Beast "promotions" are ubiquitous on Threads - they're also part of massive crypto scam network.

As someone who worked on the investigation to better understand how U.S. spies were likely doxxed & killed due to hundreds of websites launched by the CIA on obscure topics w/ a secret encrypted messaging tool built into them for spy comms (www.reuters.com/investigates...), this is vvv dangerous.

How the CIA failed Iranian spies in its secret war with Tehran

Gholamreza Hosseini got caught spying for the CIA in Iran. The story of how he was burned casts light on an epic U.S. intelligence failure.

reuters.com

Eli Omen@eliomen.bsky.social · last mo.

Here's the story: www.nytimes.com/2026/06/29/u... To recap; he wants a master spy list and he's also about to engage in mass declassification. Our adversaries didn't even dream of putting something this absurd in their wish list.

Massive win for data privacy this morning

Wyden Press@wydenpress.bsky.social · last mo.

NEWS: Wyden, Cloud Secure Major Privacy Victory as ATF Cancels Warrantless Location Data Contract

I’ve always loved that picture of President Obama so like a decade ago I commissioned an artist to paint a version of it on this giant rolling tray.

Angry@angrystaffer.bsky.social · last mo.

Obama lives rent free in this draft dodging coward’s mind

Some new research from me and the team at Infoblox on a Chinese open source framework being used in hundreds of thousands of scam websites called DCloud Uni-app - lots of good pivots to work off from the indicators we shared! www.infoblox.com/blog/threat-...

DCloud Uni-App: One Framework, 236,000+ Scam Sites

How a Chinese open-source framework fuels 236,000+ scam sites across major cloud providers and bulletproof hosts, spread via social engineering.

infoblox.com

US removed sanctions on "former or current figures linked to sanctioned Russian banks, the son of oligarch Vladimir Potanin, two Russia-flagged cargo vessels and two Turkish companies previously targeted under Executive Order 14024." www.wttlonline.com/stories/ofac...

Zach Edwards@thezedwards.bsky.social · last mo.

Very curious about these Russian sanctions removals ofac.treasury.gov/recent-actio...

Very curious about these Russian sanctions removals ofac.treasury.gov/recent-actio...

I'd like to see the U.S. government spending hundreds of millions *every year* in various advertising formats educating the public & especially senior citizens about scams. U.S. victims lost over $20 billion last year and this continues to get worse, and threat actors have so much money to scale up.

Great work on this by @dmehro.bsky.social and @dell.bsky.social - just further proves the original story had legs and was accurate.

Andrew Couts@couts.bsky.social · 2mo ago

NEW: On Thursday, @wired.com reported that Meta had quietly added code for a face recognition system to Meta AI, its smart glasses companion app. On Friday, code for the face rec system was removed. @dmehro.bsky.social and @dell.bsky.social with the scoop: www.wired.com/story/meta-r...

This is some fun Internet history!

Terence Eden@edent.tel · 2mo ago

New blog post: How many consecutive hyphens can you have in a domain name? https://shkspr.mobi/blog/2026/06/how-many-consecutive-hyphens-can-you-have-in-a-domain-name/ A seemingly simple question which sent me down into the murky depths of standards. How many consecutive hyphens can you have in …

Keep an eye on this Google Adwords ruling in India... could have significant impacts on search targeting if Google is required to change policies outside of India too... www.reuters.com/business/med... This would be a *gamechanger* for stopping malvertising campaigns which target major brand names.

Indian court ruling on Google keyword ads could reshape online advertising

An Indian court ruling that Google infringed the trademark rights of a bathroom fittings maker by ​allowing rivals to use its name as an ‌advertising keyword could reshape the online ads market, India...

reuters.com

How many of your favorite publishers have foreign data brokers listed in their ads.txt + app-ads.txt files?? Folks out here are still wondering how this data pours out of our programmatic ecosystem into these brokers hands. ¯\_(ツ)_/¯

Raphael Satter@raphae.li · 2mo ago

Scoop: Central Command is getting reports that military personnel are being targeted using commercially available location data. Few details available, but it’s a sign that the tech industry’s advertising-surveillance complex is having consequences on the battlefield. www.reuters.com/business/med...

I've been dreading this announcement for weeks. This is one of the most shocking things I've seen from any administration in any country. This whole process would make most dictators blush.

Justin Baragona@justinbaragona.bsky.social · 3mo ago

And there it is, folks. www.nytimes.com/live/2026/05...

The Former Jordan Lake Air Force Space Surveillance Station (AFSSS) in Alabama is available for purchase until May 11th... a great opportunity for a 1,032 +/- ft horizontal antenna if you're in the market for that type of thing... fun hacker campground? realestatesales.gov/asset-detail... 📡🛰️🏕️🎉

Excellent reporting, alarming findings. Bloomberg's @dmehro.bsky.social et al found U.S. state government health websites are sharing people's personal info (sex, citizenship & race data) with tech giants via pixel-sized webpage trackers. Several states pulled the trackers after Bloomberg disclosed.

State Healthcare Sites Are Sharing Personal Data with Big Tech

Race, location and immigration information has been sent to TikTok, Meta and others.

bloomberg.com

the calm before the storm

It's taken ~5 years but Brave browser is the first browser to come up w/ a solution to prevent device fingerprinting being done by y2u[.]be on their YouTube spam campaigns. It's a subtle fix but the browser now takes their URls and rewrites to youtube directly. issue @ github.com/brave/brave-...

Jealous of Maryland rn

Esther Be Good!@estherbgood.bsky.social · 4mo ago

“Maryland is set to become the first US state to ban surveillance pricing in retail grocery stores, after the legislature last week passed the Protection from Predatory Pricing Act.” www.goodnewsnetwork.org/maryland-to-...

Canary in the privacy coal mine ⬇️

Senator Ron Wyden@wyden.senate.gov · 4mo ago

I sent a classified letter to House and Senate colleagues about a secret interpretation of surveillance law that every American should be concerned about. Representative Massie is right. The Constitution requires EVERY member to vote against a clean reauthorization.

Antitrust laws continue to be ignored, broken, and bent to suit a political agenda. The fact that Dentsu, GroupM and Publicis didn't fight back on this speaks volumes about what they are going to do with client ad money in the future. 💸💸💸 www.texasattorneygeneral.gov/sites/defaul...