TL;DR: EU Parliament quietly passed Chat Control 1.0, extending rules that let companies scan private messages for child abuse material until 2028 - even though it was rejected earlier this year. A small loophole for fully encrypted chats was added, but critics say it's mostly for show. Privacy advocates are furious, calling it a step toward mass surveillance. The real battle now moves to Chat Control 2.0.

So i am like really worried right now and decided to ask here… can facetime calls be traced?? last night around 1am i got a random facetime call from a number i dont know. i accidentally hit accept instead of decline cause i was half asleep, and it was some guy showing a weird creepy video before hanging up immediately. my roomie told me i should probably block them and change my settings, but now im scared wondering can facetime calls be traced back to my actual home address or real name?

I didnt say anything or show my face really since my room was completely dark, but the call connected for like 3 seconds. i know apple uses end to end encryption for video calls so my friend said nobody can intercept what was actually said, but im more worried about the technical ip address stuff

Like can some random scammer or hacker extract my real ip or location just from a 3 second incoming call? i was on my home wifi at the time and i dont use a vpn on my phone usually because it slows down my streams. i tried searching it but all the articles are technical with huge networking words i dont get. i just wanna know can facetime calls be traced easily by random people or if you need serious police level tools to actually track someone down through apple servers?

Im probably overreacting over a prank call but my anxiety is driving me crazy today lol. if anyone knows how apple handles this or can facetime calls be traced through ip logs please let me know, thanks

Has anyone made an auto data poisoner

Once you're email has been leaked from a home address, you're kinda screwed tbh, can't really hide your IP or any anything that has been leaked once it has been leaked

*cough cough* If know one has let me explain my idea, presume if no one has because I can't find anything like that

Well, simply enough

Your input the data that has been leaked, (and nothing more unless you're an idiot') and it purposefully releases your data on to the web mixed with a metric sh ite load of data that doesn't match. kinda like torrenting it mixes your data with other peoples and randomly generated data making the whole set practically completely worthless. although if it is leaking other people's data mixed with your own I suppose that would be a pretty big security risk d:

The end program would kinda end up looking like torrenting backwards, where so many outputs traced back end up completely untraceable and so many inputs end up as a pile of garbage that your actual data ends up in

FYI I won't lie, I don't have the computing skills and I have a big enough mistrust (and pure unbridled hatred) of ai to create the program myself

Please let me know what you think :)

Hello!

I saw some people mention that projects like pihole aren't blocking all Windows or android telemetry since those operating systems will just switch to directly sending data to IP-adresses after too many failed DNS lookup attempts.

Now the thing is I couldn't find much about that. I was able to find a list for Windows, but that seemed to primarily consist of the IPs that the telemetry domains resolve to. For Google there was nothing.

So is it true? And if yes, where can I find a list?

Is this appropriate for a general inquiry? Whatever I put into Firefox browser for a search, this comes up. I just turned my computer on, put an extremely innocuous query, and "Our systems have detected unusual traffic from your computer network. This page checks to see if it's really you sending the requests, and not a robot". This is absurd. I use this machine very little, and a robot is not going to maliciously search for 'work coveralls' or the definition of a word.

Just checked the permissions some of my apps have and it's kinda creepy, you should go check too and disable some

For everyone that is in the Apple ecosystem, I’m wondering if you received an email this week stating that starting in November, there will be a new requirement to verify your identity in order to reload your Apple Cash balance?

• Starting on November 9, Green Dot Bank will begin requiring users to verify their identity in order to reload their Apple Cash balance. You can do so at any time from your device by going to Settings > Wallet & Apple Pay > Apple Cash.

On the site they link to in the email, they said that a state id is required:

https://support.apple.com/en-us/109312
I’m wondering if anything of this has to do with the ID verification requirements that seem to be taking effect globally, or if this is something different? I am in a US state where no ID verification is required…yet, though I can only imagine it will be a matter of time. I think this is a bit sad, and part of me would just rather purchase a gift card with crypto, but Apple Cash can be so so convenient. I already have a linked bank, so why they need this verification is a bit perplexing. Anyone else get this notification?

Northeastern University and Consumer Reports recently tested 21 newer connected cars, and 19 of them contacted third-party domains. More than half were connecting to advertising, or analytics services.

I mean... it’s a car

At this point, do we just assume anything connected to the internet is tracking us somehow?

And would stuff like this actually affect which car you buy, or is privacy pretty far down the list when choosing a car?

i am an indie dev and after struggling with some project code i found github chunks of code to patch my sinking boat of a project. its all good now however i cant for the life of me figure out why this code is working

basically dark side of the moon and fat chance to reverse engineer these dependencies

is it basically safe to say everything on github is safe to use? They wouldnt host malware? The dev is also very niche since the game code he made isnt even his main thing as he works with engineering machine software rather than an active game dev. looks like a side project he did in uni(?). is even the same cybersecurity principle able to be applied for absolutely different programming types? like engineering which i assume is offline machinery and a multiplayer game?

p.s. my game will have networking involved for multiplayer coop and I plan to have open lobbies which is why i am hesitant to use the file in particular. antivirus scan said it was ok though

I kept thinking about finally paying for a proper password manager instead of just relying on my browser and was wondering if Keeper has any good black friday deals for 2026? Is it a good time to get it?

I’ve never really felt the need to pay for one before, but I’m starting to have way too many logins spread across different devices. One of my coworkers recommended 1Password, another mentioned Bitwarden, but a few of my friends got Keeper during last years BF sale and didnt have any complaints so I wonder if this year i should get it. 

Ive seen other brands black friday deals for this year, but havent seen one for Keeper yet,  soo maybe anyone here been using Keeper for a while? And have you seen any black friday deals for Keeper?

Whenever a site is asking me for an address I give a vague approximation.. I keep my hometown though I set it to Street St 67-9 something random. I also notice that the shipping address pops up with a separate request for some so I always figured this means nothing

Are there any cases where I might face issues by not using my address?

Feels like more issues would come from me using the actual address than not

Any examples where I might face issues with this?

Hey everyone, so as the title mentioned i am thinking right now can you track a phone that is turned off or does turning it off kill all location signals completely?

My younger sister went out with friends last night and hasnt made it home yet. its going straight to voicemail and im lowkey panicking trying to figure out what to do.. i thought that someone here could have some advices before i contact police (im not sure they will do anything instantly as she is not missing for a long time and is not a minor)

Here is basically where we are at right now:

-her iphone has been offline for like 7 hours now
-last ping on find my was near a diner around 2am
-tried calling her friends but nobody is picking up their phones either
-mom is pacing around the house freaking out so im trying to handle this logically

I tried googling but getting mixed answers about bluetooth networks and offline pinging. so im curious can you track a phone that is turned off using apples find my network or if that only works when the battery isnt 100% dead?

If anyone knows if this actually works or has dealt with a situation like this, please tell me can you track a phone that is turned off or are we seriously just helpless until she turns it back on? im honestly terrified right now, any advice helps

I got the “ASOS HACKED” notification from the app earlier and thought it was some weird scam at first. Looked it up and apparently other people got it too, with whoever sent it claiming they compromised ASOS Snowflake instance

There doesn’t seem to be any confirmation yet about what customer data, if any, was actually accessed. I changed my ASOS password just in case, but should I be doing anything else right now?

So it might sound dumb but honest question guys can someone see you through your smart tv?? because im lowkey losing my mind a bit over this and need some tech savvy people to tell me if im crazy or not

Okay so for context i bought this new 4k smart tv like two weeks ago (got it on sale off amazon). last night around 2am i was sitting on my couch in dark watching netflix, eating snacks in my boxers, and i randomly looked up at the top edge of the screen. theres this weird little glass circle thing right in the middle of the frame. at first i thought it was just the red power light indicator but it literally looks like a tiny phone camera lens staring right at me... and now i cant unsee it

I started panicking a little bit and reading up on privacy stuff online. i keep hearing stories about how everything is connected to the internet now and how hackers can hijack webcams and stuff. but like can someone see you through your smart tv if it doesnt explicitly say it has a camera on the box? or do these new tvs actually have hidden cameras built in for voice control or tracking what you watch?

I tried searching in the settings menu but theres like 50 different privacy policies and terms of service that i didnt read when i set it up, and all the options have confusing names. im really not a technical person at all so i dont know if this is just an infrared sensor for the remote or if im literally broadcasting myself to some creep on the internet

Idk maybe im just overthinking it after watching too many creepy tech videos on youtube late at night. but seriously can someone see you through your smart tv or should i just put a piece of electrical tape over the sensor and call it a day?? would appreciate any info thanks

Ayudaaaa urgente

Cómo utilizar la PC corporativa sin monitoreos ni restricciones

* Si se puede sin que nunca se den cuenta o poder decir que paso sin yo saber?

I’m a security engineer at a mid-sized SaaS company. We have tools. SAST. DAST. Dependency scanning. We run them in CI. We get reports. We fix the findings.

But I’m starting to wonder if we’re actually secure. Or just compliant.

Here’s the thing. Automated scanners are good at finding patterns. Known vulnerabilities. Misconfigurations. They’re fast. They’re cheap. They run on every commit. They give you a checklist.

But they don’t find business logic flaws. They don’t find attack chains. They don’t find the stuff that actually gets you breached

Example. We have an API endpoint that lets users export their data. SAST says it’s fine. DAST says it’s fine. No injection. No auth bypass. But what if a user can manipulate the request to export someone else’s data? What if the authorization check is missing on a specific parameter? A scanner won’t catch that. A human will

That’s the gap

I’ve been reading about external AppSec firms. I heard iosentrix emphasizes manual business logic analysis. Not just automated scans. Actual humans. Thinking like attackers. Looking at how the app is supposed to work and finding ways to break the rules

I haven’t used them. I don’t know if it’s worth the money. We already spend a lot on tools. Adding a retainer or a project fee feels like a lot

But I also don’t want to be the guy who said “we have scanners, we’re fine” right before a breach.

Has anyone hired external AppSec on top of their tools? Did it actually find things the scanners missed?

Wanted to share some recent things I heard.

Felix Kjellberg aka as Pewdiepie on Youtube made headlines after revealing that OpenAI suspended his account several times during the development of his new locally hosted less restrictive AI model

The reason cited in an account deactivation email shown by Kjellberg was distillation. This is the process of using outputs from a larger, proprietary model(ex. ChatGPT) to train or fine-tune a smaller and more efficient local model

While OpenAI ToS explicitly prohibit using its outputs to build competing models. Its not just an 'oh my god look at the youtuber I liked getting blocked' but it is about the staggering hypocrisy of closed-source AI giants strictly enforcing data boundaries against everyday developers while they themselves leech copyrighted content while building their own business.