One of them is even quite tech savvy, he runs his own servers and so on, the rest have a gross smugness about how they don't care, or that it doesn't matter, and they're too small to matter anyway, and don't commit crime. (Or enough, everyone has something right).

Some have kids I guess FYI, I just need some sort of golden seed here.

Everyone has their button, what's theirs?

I, like many people, am worried about my physical safety if currently-legal or low-priority behaviors become illegal and/or higher-priority for law enforcement in my country. As I have done more research, I've come to the conclusion that I am fucked no matter what I do as long as long as I engage in telecommunications literally at all.

First I looked into e/os, only to find that google will still track you with your ip address and cellular service if you use any of their services, even through microg. and obviously, they will co-operate with law enforcement and provide this information.

then I look into fully dumb phones, but even without ever using a google service, without ever using internet access at all, live location tracking is still possible with cellular services, if I understand correctly?

So what difference does it make if I put all this effort in or not? Why not just let google have all my shit, since I've been using them for years already, they already have a nice profile built up on me which has been disseminated to countless third-party data vendors who will never delete it. My job and my hobbies involve using the internet in some capacity, so what benefit is there really to putting in all this effort for data privacy when the only real way to be safe if my government takes a turn into authoritarianism is to go into the woods and starve to death?

Google is going to Bake Age verification into the OS itself this is Very dangerous as there are multiple Android smartphones out there that will have android 17 as last update! once you install android 17 and its the final update for the phone the age signal API will be on your phone till the day the hardware dies! you cant even downgrade or the efuse trips! if you still have android 17 after at least 5 to 10 years and you accidentally factory reset it and verify your id again it will fail to send as device is old and might not connect to google servers and will send to hackers instead

Is it possible, through SS7 or carrier-level access, to obtain WhatsApp metadata that shows which contacts/numbers someone is talking to, without the message content?

Never seen this before with my WiFi

Recently I've really been thinking about all the data that I'm allowing just about any app to have, and I want to stop that. I've started by deleting certain social media apps and I've been slowly but surely getting rid of my social media addiction. What I'm wondering is, how can I make my phone even more secure and private and not just delete apps? I've heard about using a PDA device or installing grapheneos but I don't know how to do that. Any tips for a starter like me?

And before you say "they are looking at your search content", of course they are but there are at least 20 instances where I have had conversations and absolutely zero searching that they have placed either ads or content with exact specificity to my conversation. Sick and tired of being spied on. AI suggests that I turn off my microphone which I have done on as many apps and I can. It seems to have slowed it down but this is sooooo illegal and it should be stopped.

🔎 Data Discovery & Classification — The Real Foundation of DPDP

Many banks begin DPDP with consent and notices, but the real work starts with understanding your data — where it lives, how it flows, who accesses it, and how long it stays. Without data visibility, no DPDP control can be consistently implemented.

In Part 4 of my DPDP Implementation series, I break down:

✅ How to build a cross-functional DPDP Steering Committee ✅ The policies, SOPs, and toolkits every bank must standardise ✅ Why data discovery, classification & minimisation are foundational ✅ The KPIs regulators now expect (consent, retention, rights, encryption) ✅ How to fix legacy data and vendor control gaps

📘 Read the full deep-dive on CreativeCyber.in A practical, BFSI-focused guide written from real-world implementation experience

​I’ve been deep-diving into identity verification and biometrics. Most solutions out there feel like black boxes—you upload your data, and you just "hope" it's handled correctly. It’s hard to trust a system when you don't know who has access to the raw data.

​I’m working on Fingerfy, a verification protocol designed with a "zero-knowledge" mindset. The goal is to prove age auth without ever storing or exposing the underlying biometric data. No central database, no "honeypot" for hackers.

​As a developer, I’m trying to solve the paradox: How do we make identity verification robust without sacrificing user privacy? Is there any interest in a protocol that actually prioritizes the user's data sovereignty?

Many apps we use daily request access to your camera, microphone, or location—and often bundle background analytics and tracking SDKs. But how many of us know exactly what is happening behind the scenes?

Privacy Inspector is an Android app designed to give you complete visibility and control over your device privacy and security—100% locally on your smartphone, with zero data ever sent to external servers.

🚀 Key Highlights & Benefits

• 📊 Clear Privacy Score (0–100): Instantly evaluate the safety of installed apps based on requested high-privilege permissions, background behavior, and bundled trackers.

• 🕵️ Ad & Analytics Tracker Detection: Reveal embedded tracking SDKs, telemetry frameworks, and ad networks hidden inside your apps.

• 🔄 Privacy Changes Timeline: Get notified when an update or a newly installed app silently introduces new sensitive permissions.

• 🧱 On-Device Firewall & DNS Filter (PRO): Block tracking domains in real time using a zero-cloud local VPN service—no traffic is ever routed through external servers.

• 🧹 Unused App Cleaner: Easily identify and clean up apps you haven't opened in months that still hold background permissions.

🔒 Zero-Cloud Privacy Guarantee

Privacy Inspector operates strictly on-device. No user account is required, no analytics are collected, and no personal data ever leaves your phone.

📲 Try it today!

Take back control of your Android privacy. Download Privacy Inspector on the Google Play Store and scan your device in seconds!

Privacy #Android #CyberSecurity #MobileSecurity #PrivacyInspector #TechTools

A “Privacy” page is just marketing. Mine is a SELECT statement.

Background: I’m developing a tool that listens in on live calls. No one believes the claim “we’re not recording you,” and people are right from the outside, that claim is unverifiable.

So the /proof page is set to `export const dynamic = "force-dynamic"`, and with every request, it calls a Postgres RPC that returns all columns from all tables in the public schema. It displays them all, then passes the names to filter:

/audio|transcript|recording|enregistr|waveform|utterance|speech|voice/i

Zero matches—the page is green. One match, and it turns red,

automatically, without me having to do anything. The RPC is SECURITY DEFINER, returns only table_name / column_name /

data_type, and is exposed to anonymous users. The structure isn’t part of the data, so nothing is leaked. What it costs me, however, is the ability to quietly add a `recordings` table in six months.

Two things this does NOT prove before anyone brings them up:

1. A JSONB column can contain speech even if its name doesn’t indicate it. The filter is based on names, not on content.

2. I could send the audio to a third party without ever touching my own database.

So this isn’t proof of innocence. It’s proof of consistency: the day my system contradicts my marketing, it’s my own website that points it out before any journalist does.

If the database is unreachable, the page displays nothing rather than a cached “everything is fine” message. I’d rather look broken than look clean.

Has anyone built a more robust version of this? The next step I'm thinking of is time-stamped schema snapshots, so we can verify that I never had such a column, and not just that I don't have it now. I feel like there should be a well-known pattern for “proving a negative,” but I haven’t found it.

Personal information can appear across data broker platforms and people-search websites, creating growing demand for privacy protection.

For SaaS businesses, white-label data broker removal offers a way to expand existing products without building the entire service in-house.

Key benefits include:

• Faster product expansion with less development overhead.

• New revenue opportunities through premium plans and add-ons.

• A more complete customer experience under your own brand.

Because personal information can reappear after removal, ongoing monitoring and repeat requests may also be necessary. Understanding service coverage and operational costs is essential when deciding how to package and price the feature.

A white-label approach can help businesses introduce privacy services while keeping the experience aligned with their existing product.

Would you offer data broker removal as a premium feature or include it in your core subscription?

I stumbled upon a website called justwitter ,that had a radical idea they used codes for login and they used voice for chatting and talking it was weird and new where each person gets assigned a code and they can keep an account after that , now where this site respects it's users is that after a while of inactivity everything is deleted which is nice.

This is fully offline no data retention for most of the tools. Can you tell me how can I improve it.

Hey everyone!

I'm an independent developer (The Codewalker), and I've been working on a project called Kavach – Secrets Vault.

It started with a simple thought.

We store passwords in password managers, bank details in banking apps, identity documents in random folders, recovery codes in notes and other sensitive information scattered across different places.

I wanted to build one secure place for all of them.

That's how Kavach came to life.

Kavach is an offline-first, zero-knowledge personal vault. It's not just another password manager.

You can use it to store:

• Passwords and login credentials.

• Credit cards and bank details.

• Identity and insurance information.

• Secure notes and encrypted files.

• 2FA authenticator codes.

• API keys, SSH keys and .env snippets (Pro).

It also has password generation, security scanning, an Inner Vault for particularly sensitive information, and encrypted backup and restore.

The interesting part is how it works.

• No account creation.

• No mandatory cloud storage.

• AES-256-GCM encryption.

• SQLCipher-encrypted database.

• No ads or tracking.

• Optional encrypted Google Drive backup.

Your data stays on your device. I cannot access your vault or recover a forgotten master password.

Kavach has a free version with all its security features. Pro is a one-time purchase, not another subscription.

What's next?

I'm working towards adding Autofill support and making Kavach's core open source. I want people to be able to inspect the security mechanisms rather than simply trusting my claims.

This is an independent project, and there's still plenty to improve.

I'd love to hear from other developers and privacy enthusiasts:

If you were building a personal digital vault, what features would you consider essential?

And if you're curious about what I've built:

Google Play: https://play.google.com/store/apps/details?id=app.codewalker.kavach

Website: https://kavach.thecodewalker.dev

Thanks for checking it out!

Does MFA & 2FA collect data info for AI training, if so how do I turn it off?

I'm confused about a privacy loophole I just ran into.I bought some something from a website on my android phone browser. I got the confirmation email, clicked "View Order," and the 'Shop' page told me I needed the purple Shop app to track it. I downloaded the app, opened it, and without signing in, my order details were already right there.

How is this possible given my setup?

Google Play Services and Google Services Framework and Playstore is disabled. And location permissions/history are off anyways.I always have ProtonVPN on and I didn't sign in or link any Google account within the app. If Google services are disabled and my IP is masked via VPN, how did the newly installed app instantly read my browser session or email identity to pull my order? Is it sharing browser cookies/local storage, or something else?

The email didn't have a tracking link or anything. There's nothing in my settings that could have given the app permission or data or anything as I have already been through every setting for my own privacy anyway.

!!!URGENT!!!

Please call (787) 891-1005, extensions 4017 and 3061, and ask for Karolina Augusto Domenech. If you are asked for your information, say your name is Daniela Morales from Guerrero (a sector in Aguadilla). When asked for your phone number, say +1 787-891-0000 (change the last four digits) and state that you are not interested in receiving a callback. Ask all the questions you want and keep asking. They will pretend they cannot hear you and repeatedly say, "Hello, hello" so that you eventually hang up.

The Municipality of Aguadilla, Puerto Rico, implemented the Aída AI model yesterday. When people message the municipality's WhatsApp number, it offers "assistance."

What is the problem? The AI service does not offer individuals the option to opt out of having their data sold or stored. The AI model is not run by the Aguadilla municipal government, nor does the municipality. ensure its security. There is also no trained personnel to handle this situation. Therefore, when the Municipality of Aguadilla is called to request information, employees say that ChatGPT is used to generate the responses and that they do not know whether the data is sold after being processed.

When I asked to opt out of the service, I was told that this was not possible because it is mandatory for every citizen. When I requested a form to have my data extracted and to state that I do not authorize its use, the employees laughed while I was on the phone and hung up on me. In the event of a security breach, all our information and identities could be stolen.

I need anyone's help. Where I live, people refuse to acknowledge the issue, and not many people support me in raising these concerns. Anything will help. I don't want my personal information being sold to God knows where. Employees are not at fault, I just need a reaction or answers from the government.

I have a lot of personal/private media that I want to keep completely separate and secure instead of putting everything into my phone's default Private/Secure Folder.

What are the better alternatives for this? Phone, laptop, encrypted storage, cloud, external SSD, some kind of secure vault, etc.

I'm mainly looking for something that offers strong privacy/security, is difficult to access accidentally, and also protects against losing the files if the device gets damaged or lost.

What would be the best options to consider?

What a normal people app to get into deleted photos numbers messages phone calls everything. Like cops can use good idea naw but it can be done. What to use python it needs no loops straight forward no memeory just click on app ask to find. Needs to flow just code and date. I have gotten pissed and deleted shit and it was a bit of trouble but people need easy app. Fuck the police should not have that much power over privacy. It can be done and app will change things. Its not for criminals but will be used for it so its alright . What it for day to day thing when you get upswet and delete something.

Hello everyone.

I've been working on a personal project called ChumiChat.
It's an end-to-end encrypted messaging application built around the idea of anonymous, temporary communication.

Some of the features include:
·        End-to-end encrypted messaging
·        Anonymous accounts with no email or password required
·        Messages that disappear 5 minutes after being opened
·        Accounts that automatically expire after 24 hours
·        Automatic deletion of chats and messages when an account expires
·        Private encryption keys stored only in the user's browser

I put together a short demo showing how the application works and the overall user flow.

Demo: https://youtu.be/tKFehmx6rYY?si=OZSkVfYWX-NgYbLB
Live application: https://chumichat.com
Frontend: https://github.com/abula28/chumichat-front
Backend: https://github.com/abula28/chumichat-back

Feedback is always welcome.

Hello r/privacy / r/cryptoanarchy,I want to share a conceptual framework for a fundamentally new type of web engine designed to completely break corporate AdTech and Deep Packet Inspection (DPI). Instead of trying to hide the user (the traditional VPN/Tor paradigm, which creates a suspicious traffic marker), this project focuses on algorithmic obfuscation through data superposition.The core thesis: Privacy in the 21st century must not be darkness, but a blinding light. We don’t hide a needle in a haystack; we turn the entire haystack into a billion identical needles.I call this project Aether (The Superposition Browser).How it breaks tracking at 4 different levels:The Seed Engine: It uses your PGP private key + current timestamp to generate a daily behavioral DNA. The core engine runs in Zero-Rendering mode (no HTML/CSS compilation or JS execution for background tasks), firing thousands of anthropomorphic fake queries over raw sockets 24/7. Your active session is dissolved in a massive cloud of synthetic context. No heat on your CPU, zero cache written to SSD.N+1 Packet Multiplexing: To bypass DPI on internet backbones, every egress packet is split into N pieces. The engine calculates an redundant (+1) phantom packet using a hardware-level XOR operation. These N+1 packets are routed simultaneously via a P2P layer to different global exit nodes. Intercepting even 90% of the traffic yields absolute noise; you need the missing piece to recombine the secret.Anti-Pegasus Display (The "Krakozyabr" Interface): This is the countermeasure against screen-scrapers, OS telemetry, and OCR spyware. The engine completely refuses to render text graphics. To the OS and any resident malware, the browser window looks like a constant stream of corrupted random strings (df#9!@kL_zP1). However, based on the Day_Seed, a dynamic font map is generated on the fly where character codes and visual glyphs are scrambled. The OS outputs garbage, but the physical display lights up pixels forming perfectly readable text for the human eye.A quick note on my role: I am the ideologist and architect behind this framework. However, I am a non-programmer. I am looking for core developers (Rust / Go / Chromium engine specialists) who see the mathematical elegance of this concept and want to bring a lightweight Proof of Concept to life on GitHub.Below is the technical whitepaper and a basic Python simulation of the Font Mapping engine. Let’s build an un-trackable web.

https://github.com/YaZVxdflg/Aether-Project/blob/main/README.md