The UK's Online Safety Bill defeat, data breaches at various companies, Montana's genetic privacy law, illegal use of Pegasus spyware in Poland, partnership between Tail Scale and Molvad VPN, LastPass breach, and privacy concerns with cars.
The UK government has abandoned plans to enforce the spy clause in the online safety bill, acknowledging the lack of technology to scan encrypted messages without violating privacy, although concerns remain about potential future encryption-breaking surveillance.
A recent Mozilla study highlights significant privacy risks in cars, with 84% of car brands sharing and selling user data, and 92% lacking the ability to request data deletion, raising concerns about data security and privacy safeguards in car telematics.
Deep dives
UK admits defeat on online safety bill
The UK government has abandoned plans to enforce the so-called spy clause in the online safety bill, a move that would have compromised end-to-end encryption. The government conceded that the technology to scan encrypted messaging for child sexual abuse material without violating privacy does not yet exist. However, experts argue that the controversial clauses in the bill could still allow for encryption-breaking surveillance in the future.
Privacy risks in cars
A recent Mozilla study revealed that cars pose significant privacy risks, collecting intimate data from users such as medical information, driving habits, and even aspects of their sex lives. The study found that 84% of car brands share and sell user data, while 92% do not provide the ability to request data deletion. Privacy safeguards and encryption in car telematics are largely lacking, raising concerns about data security.
Montana's commitment to privacy protection
Over the past 10 years, Montana has passed a series of privacy-focused laws, aiming to safeguard its residents' privacy in the face of new technologies. The most recent addition is the Genetic Information Privacy Act, which provides comprehensive privacy and consent requirements for companies processing genetic data. These laws cover a range of areas, from prohibiting government surveillance to providing stronger privacy rights for online data and restricting the use of facial recognition technology.
Potential risks in LastPass breach
A security researcher expressed concern that stolen keys from the LastPass breach may be exploited by criminals. The researcher noticed a correlation between LastPass users and cryptocurrency theft, with victims showing reasonable security practices and heavy involvement in cryptocurrencies. While not directly proven, the connection raises suspicions regarding the security of LastPass and emphasizes the importance of migrating to more secure password managers.