Surveillance Report: Weekly News For Digital Freedom12 Jun

Meta Hid Face-Recognition Code on 50M Phones, The UK's Device-Scanning Ultimatum & A Burner Phone Ban

Meta quietly embedded unreleased facial-recognition code, internally called "nametag" onto more than 50 million phones through its Meta AI app, then deleted it the day after Wired exposed it. This week I also get into Microsoft repos weaponized a second time to push credential-stealing malware to AI users, the UK's ultimatum to scan every device (and Signal's response), the FCC's push to kill burner phones...plus the usual breaches, threats, and a stacked week of FOSS+ updates.

🗺️ The open-source answer to Google Timeline is finally here! Replay every route and light up every city you've visited on a map nobody else owns; self-host Dawarich free or grab the hosted version at https://dawarich.app/techlore/ with code TECHLORE for 20% off your first year.

In this episode:

Highlight: Meta's secret face-recognition code on 50M+ phones
Microsoft repos weaponized a second time in weeks to push credential-stealing malware to AI users
The UK's ultimatum to scan all content on all devices and Signal's one-page rebuttal
Two states, two directions: Massachusetts bans precise-location-data sales (146–0); Texas forces Apple/Google age verification (SB2420)
The FCC's push to kill burner phones by making telecoms collect everyone's ID
Defense Bulletin, Breaches: DentaQuest, UN World Food Programme (600K Gaza households), ServiceNow, SoFi, Dashlane (20 vaults, but Argon2-encrypted), Oxford, 20K Instagram accounts via Meta's AI, French govt messaging
Threats: Chrome zero-day, WhatsApp/NSO, Microsoft "Nightmare Eclipse" 0-days, UniFi root bug, Gogs RCE, npm + PyPI supply-chain attacks, Hola browser cryptominer, OpenAI Lockdown Mode, Apple's auto-password-changer, license-plate readers adding AirPod/phone trackers
FOSS+: Tails 7.8.1, Firefox Vulkan video + free VPN going unlimited, Nextcloud Hub 26, Proton Drive CLI for Linux, Futo Keyboard, Brave Origin, FSFE's public-money-public-code win, and Loupe (see what your apps can see)

🧡 SUPPORT TECHLORE
Become a Techlorian and keep this show growing: ★ Support this podcast ★
🔗 SOURCES & LINKS
View all sources here: https://techlore.tech/meta-hid-face-recognition-code-on-50m-phones-the-uks-device-scanning-ultimatum-a-burner-phone-ban/

⏱️ TIMESTAMPS

(00:00) - WELCOME TO SURVEILLANCE REPORT
(01:00) - META ADDING SNEAKY FACIAL RECOGNITION
(05:42) - MICROSOFT HACKED TO PUSH MALWARE
(08:38) - THE UK'S SURVEILLANCE ULTIMATUM
(11:40) - OUR SPONSOR: DAWARICH!
(13:20) - GOOD & BAD NEWS IN US STATES
(16:42) - FCC BANNING PRIVATE NUMBERS
(20:00) - DEFENSE BULLETIN: DATA BREACHES
(24:15) - DEFENSE BULLETIN: THREATS
(28:54) - DEFENSE BULLETIN: FOSS+

🎥 VIDEO
Watch on YouTube

📰 ABOUT SURVEILLANCE REPORT
Your essential weekly tech news podcast covering the latest threats to security, privacy, and digital freedom. Hosted by Henry Fisher from Techlore.

Denne episoden er hentet fra en åpen RSS-feed og er ikke publisert av Podme. Den kan derfor inneholde annonser.

Episoder(361)

No Hack Needed: How Revolut Leaked Your Passport, Plus New Age Verification & Rogue AI Agents

A hacker emailed Revolut pretending to be a government agency, and Revolut handed over customers' passports, IDs, and financial details. Plus: the global age-verification wave forcing even more ID col...

17 Sep 36min

153 Million Driver's Licenses For Sale, Plus Chrome Kills uBlock Origin & Texas Kicks Out Flock

An ID-verification company, IDScan.net, appears to have leaked scans of 153 million driver's licenses, then sold on a dark-web market called Nexus. This week I break down why this breach is the perfec...

5 Sep 29min

Apple Fixed A Leak Without Telling Anyone, Plus More VPN News and Flock's Creepy Police AI

Four positive VPN stories in one week: Mullvad's new multihop modes, Obscura shipping on Windows, Apple quietly patching the iCloud Private Relay leak, and Firefox's free VPN rolling out to Android. T...

29 Aug 35min

Apple's Private Relay Is Leaking Your IP, Plus Fake VPN Extensions & France's Big Win

Three cracks opened up in Apple's privacy story this week: iCloud Private Relay leaking real IP addresses through DNS prefetching, WebTransport, and passkeys; Hide My Email exposing real addresses in ...

21 Aug 40min

Signal's Biggest Update In Years, Plus Rival App Stores Arrive In The Play Store

Signal just shipped its largest set of updates in years: A second phone can finally be a linked device, automatic key verification is rolling out alongside safety numbers, and there are commits hintin...

13 Aug 40min

OpenAI's Hacking Story Got Worse, Plus Iran In US Water Systems & A Felony For Wiping A Phone

OpenAI's rogue AI agent turned out to have hacked more than Hugging Face, and the more details come out, the less impressive it seems. Then Anthropic came forward with its own disclosure: three compan...

1 Aug 32min

France Banned Social Media For Under-15s, Plus A Hidden Device In Millions Of US Cars

France has become the first country in Europe to ban social media for children under 15. Meanwhile there's real good news elsewhere: the UK's incoming PM dropped digital ID entirely, and California's ...

24 Jul 41min

EU Passes Chat Control Anyway, Plus Microsoft's Secure Boot Mess & the Flock Resistance

This week's a double-week catch-up: the EU just greenlit Chat Control even after Parliament voted against it, Microsoft had a brutal stretch between a decade-old Secure Boot flaw and a Windows Defende...

16 Jul 37min