Notices by Alexander Hanff (thatprivacyguy@eupolicy.social)

This is CNN doing it (unlawfully, without consent)...

As I warned about months ago now, I can confirm that Google Chrome's #AI API is now actively being used for device fingerprinting and tracking purposes.

Out of 100 of the top global english language content sites - around 30% are actively using the API for fingerprinting, Google Advertising (profiling) or both) without the legally required consent (EU law).

#Privacy

Not trying to start anything here I mean $40T debt is already a lot, but given #Trump's https://america.gov website uses an #AI chatbot, presumably if the entire world asks it a bunch of questions about #Epstein the #Whitehouse #LLM #API bill is gonna be fucking HUGE!

@dalias you do realise that AI only write the way it does because a vast number of real people write that way right? Because AI was trained to write based on trillions of lines of real human prose, so the reality is AI only writes the way it does because a lot of people write that way too - so assuming something is AI because of that is dangerously limiting and creates a cognitive bubble (not in a good way).

@dalias it is not slop, I wrote the damn thing, AI was used to make the image nothing more. People need to start understanding that AI was trained on people - so just because AI writes in a certain way doesn't mean people don't also write that way - I have ADHD, I write in a very specific way and I have been writing articles for 3 decades, so there is plenty of published work out there to illustrate my writing style.

@dalias I mean that is entirely your choice, but I am curious what was so offensive about my post about digital sovereignty as to cause you to unfollow?

How does ThatPrivacyGuy! use AI?

A tour of my (almost) fully self-hosted AI stack: local LLMs on Apple Silicon, orchestrated by Gitea, human-gated and cloud-free — privacy-first, sovereign AI.

https://www.thatprivacyguy.com/blog/how-does-thatprivacyguy-use-ai

#ai #SelfHosted #claude #compliance #DataSovereignty #LocalLlm #AppleSilicon #gitea

Amazon Ring's Familiar Faces is a textbook example for ECD

Amazon's Ring Familiar Faces biometrically scans every person who approaches a Ring doorbell, performs the match in Amazon's cloud rather than on the device that could have done it locally, and stores faceprints of non-consenting strangers for up to thirty days. The architectural choice produces two independent breaches: a GDPR exposure the household-activity…

https://www.thatprivacyguy.com/blog/amazon-ring-familiar-faces-is-textbook-example-for-ecd

#ai #climate #consent #environment #esg #law #gdpr

Google quietly removes the on-device AI privacy assurance from Chrome's Settings UI

Google has quietly removed the privacy assurance from Chrome's on-device AI Settings UI. The sentence promising that the model runs locally without sending data to Google's servers has been deleted, and the toggle moved out of the System block to reduce the chance the change is noticed. There are three plausible reasons for tha…

https://www.thatprivacyguy.com/blog/google-quietly-removes-on-device-ai-privacy-claim

#ai #chrome #consent #compliance #eprivacy #gdpr #google

Anthropic secretly installs spyware when you install Claude Desktop

Anthropic's Claude Desktop silently installs a Native Messaging bridge into seven Chromium browsers, including browsers Anthropic's own documentation says it does not support, and browsers the user has not even installed.

https://www.thatprivacyguy.com/blog/anthropic-spyware

#ai #privacy #eprivacy #compliance #infosec #gdpr #law #cyber #security #anthropic #claude

European Court of Human Rights bans weakening of #E2EE - a death knell for #ChatControl

https://hudoc.echr.coe.int/eng/?i=001-230854 (para 76 onwards)

#privacy #security #confidentiality #humanrights #fundamentalrights #surveillance

@ErikJonker it doesn't matter where it rolls out, EU persons communicate with people outside of the EU all the time, which is why I have called on the DPC to issue a global ban, because even in jurisdictions where all party consent is not required (such as jurisdictions which only require single party consent) Eu persons messages will be intercepted and as such their rights will still be subject to a breach.

As such, today, I filed an open letter complaint with the Irish Data Protection Commission calling for an immediate global ban on Alphabet's plans in order to protect the confidentially of hundreds of billions of private communications.

Sadly I cannot post the letter here as my Mastodon instance doesn't allow for pdf attachments, but you can read it here:

https://www.linkedin.com/posts/alexanderhanff_open-letter-to-irish-dpc-over-alphabets-bard-activity-7157651449101877251-xAds

#privacy

cc @eu_edpb @echo_pbreyer @EDPS @euractiv_politics

In what can only be seen as Alphabet's blatant refusal to obey EU law, it was announced over the weekend that they would introduce Bard to Android Messages App and intercept all messages (past and future) for the purpose of training it - in breach of EU's rules on interception of communications under Article 5(1) of Directive 2002/58/EC.

To make it worse Alphabet know this is illegal after they were caught intercepting WiFi communications in 2010 with their Streetview cars.

#privacy

@mikarv probably a bad idea to use this given that so many sites still unlawfully enabling the non-existent legal basis of Legitimate Interest under their TCF banners. Rejecting consent on these banners does not unset the LI toggles.

Fun start to my day - up at 4:30am to head to hospital for surgery on my left hand. Currently in pre-op after just receiving anesthetic - should be going in in about 5 minutes.

Currently looking to file a criminal complaint against Meta on the basis that their processing of personal data (which has already been declared as illegal under the two legal bases they chose since 2018) breached criminal law with regards to computer trespass and misuse of computing resources.

The scripts they placed on our devices for the purpose of tracking our behaviour were criminal trespass (accessing a computer without consent and use of computing resources without consent).

#privacy

EDPB sends binding instruction to Irish DPC to ban Meta's processing of personal data for behavioural advertising permanently across the EU/EEA.

According to a press release by the Norwegian DPA, the ban will include Facebook and Instagram and prevents Meta from using the legal bases of 6(1)(b) (Contract) or 6(1)(f) (Legitimate Interest) under GDPR and must instead obtain consent.

Norwegian DPA also states that Meta's plans to introduce paid subscription would be illegal.

Lot's of people asking me why I filed a complaint against #YouTube for their illegal deployment of #spyware to detect #adblockers instead of simply paying for YouTube Premium.

The answer is simple - YouTube Premium has no ads but Google still use it to profile you for advertising on their other products.

I refuse to pay for *any* service which doesn't respect my fundamental rights.

And so should everyone else, because until they do, Alphabet will continue with their illegal #surveillance.

@feld @AlgorithmWolf yes and you think they found themselves for me? Please do go do one - I am not your research assistant.