#Data Privacy and Security Concerns

[bob3160]

DeepSeek App - Privacy concerns

[terra-the-grim]

[Image description: A tweet by WindowsLatest that says, "Microsoft announces "Recall" AI for Windows 11, a new feature that runs in the background and records everything you see and do in your PC: https://www.windowslatest.com/2024/05/20/microsoft-confirms-windows-11-recall-ai-hardware-requirements/", with the hashtag Windows11. cosmicmatt retweeted with a screenshot from Spongebob of a dismayed fish, captioned, "Oh, that's spyware built into windows". /End ID]

[Image description: Text that says:

Click the Windows button on your keyboard

Open the Settings app and go to Privacy & Security > Recall & Snapshots

Disable the Save Snapshots option

If you already have snapshots taken, you can delete them by clicking the "Delete Snapshots."

/End ID]

[vague-humanoid]

At the California Institute of the Arts, it all started with a videoconference between the registrar’s office and a nonprofit.

One of the nonprofit’s representatives had enabled an AI note-taking tool from Read AI. At the end of the meeting, it emailed a summary to all attendees, said Allan Chen, the institute’s chief technology officer. They could have a copy of the notes, if they wanted — they just needed to create their own account.

Next thing Chen knew, Read AI’s bot had popped up inabout a dozen of his meetings over a one-week span. It was in one-on-one check-ins. Project meetings. “Everything.”

The spread “was very aggressive,” recalled Chen, who also serves as vice president for institute technology. And it “took us by surprise.”

The scenariounderscores a growing challenge for colleges: Tech adoption and experimentation among students, faculty, and staff — especially as it pertains to AI — are outpacing institutions’ governance of these technologies and may even violate their data-privacy and security policies.

That has been the case with note-taking tools from companies including Read AI, Otter.ai, and Fireflies.ai.They can integrate with platforms like Zoom, Google Meet, and Microsoft Teamsto provide live transcriptions, meeting summaries, audio and video recordings, and other services.

Higher-ed interest in these products isn’t surprising.For those bogged down with virtual rendezvouses, a tool that can ingest long, winding conversations and spit outkey takeaways and action items is alluring. These services can also aid people with disabilities, including those who are deaf.

But the tools can quickly propagate unchecked across a university. They can auto-join any virtual meetings on a user’s calendar — even if that person is not in attendance. And that’s a concern, administrators say, if it means third-party productsthat an institution hasn’t reviewedmay be capturing and analyzing personal information, proprietary material, or confidential communications.

“What keeps me up at night is the ability for individual users to do things that are very powerful, but they don’t realize what they’re doing,” Chen said. “You may not realize you’re opening a can of worms.“

The Chronicle documented both individual and universitywide instances of this trend. At Tidewater Community College, in Virginia, Heather Brown, an instructional designer, unwittingly gave Otter.ai’s tool access to her calendar, and it joined a Faculty Senate meeting she didn’t end up attending. “One of our [associate vice presidents] reached out to inform me,” she wrote in a message. “I was mortified!”

[anuraxx]

Delete your DNA from 23andMe right now

read more....

[political-us]

Google putting profits over protection

[netincomesource]

Is the AMDB Charge on Your Credit Card Legit? Here's What to Know

Wondering if the AMDB charge on your credit card is legit? Discover how to check your bank statement for potential fraud and ensure your account is secure. Hey If you’ve spotted an unfamiliar “AMDB” charge on your bank statements credit card or PayPal statement, it’s natural to feel concerned. This article will help you understand what the AMDB charge means, whether it’s legit, and what steps you…

[gagande]

PureCode AI review | HTML formatting tools

As you utilize online HTML formatting tools, the security and privacy of your data emerge as key concerns. The good news is that this online tool, an HTML formatter, takes this very seriously.

[projectchampionz]

POLICE INTELLIGENCE AND HUMAN RIGHTS

POLICE INTELLIGENCE AND HUMAN RIGHTS: BALANCING SECURITY AND PRIVACY CONCERNS 1.1 Introduction The role of police intelligence in maintaining national security, preventing crime, and ensuring public safety is increasingly essential in today’s complex and interconnected world. However, the use of intelligence gathering by law enforcement raises important human rights concerns, particularly in…

[ahalts]

Data Security and Privacy Concerns in HRMS Systems

Data security and privacy are critical concerns in HRMS systems, as they store sensitive employee information such as personal details, payroll data, and performance records. A breach in security can lead to identity theft, financial fraud, or misuse of confidential information. To mitigate these risks, HRMS platforms use encryption, multi-factor authentication, and regular security audits to protect data. Compliance with regulations such as GDPR and local labor laws is also essential to ensure employee privacy. By implementing robust security measures and adhering to data protection standards, organizations can safely manage employee data and maintain trust.

More info: https://ahalts.com/solutions/hr-services

[mehmetyildizmelbourne-blog]

The Surprising Danger Lurking in Your Smart Glasses: A Wake-Up Call for Privacy

How Brilliant Innovations Can Be Misused and Abused, Causing Unnecessary Stress to the Public As a retired scientist and health advocate in many countries, I’ve had the privilege of witnessing incredible technological advances throughout my 53-year career in the healthcare industry. Privacy issues have always concerned me as they affect our mental health.  From early computing systems to the…

[trainsinanime]

I've seen a number of people worried and concerned about this language on Ao3s current "agree to these terms of service" page. The short version is:

Don't worry. This isn't anything bad. Checking that box just means you forgive them for being US American.

Long version: This text makes perfect sense if you're familiar with the issues around GDPR and in particular the uncertainty about Privacy Shield and SCCs after Schrems II. But I suspect most people aren't, so let's get into it, with the caveat that this is a Eurocentric (and in particular EU centric) view of this.

The basic outline is that Europeans in the EU have a right to privacy under the EU's General Data Protection Regulation (GDPR), an EU directive (let's simplify things and call it an EU law) that regulates how various entities, including companies and the government, may acquire, store and process data about you.

The list of what counts as data about you is enormous. It includes things like your name and birthday, but also your email address, your computers IP address, user names, whatever. If an advertiser could want it, it's on the list.

The general rule is that they can't, unless you give explicit permission, or it's for one of a number of enumerated reasons (not all of which are as clear as would be desirable, but that's another topic). You have a right to request a copy of the data, you have a right to force them to delete their data and so on. It's not quite on the level of constitutional rights, but it is a pretty big deal.

In contrast, the US, home of most of the world's internet companies, has no such right at a federal level. If someone has your data, it is fundamentally theirs. American police, FBI, CIA and so on also have far more rights to request your data than the ones in Europe.

So how can an American website provide services to persons in the EU? Well… Honestly, there's an argument to be made that they can't.

US websites can promise in their terms and conditions that they will keep your data as safe as a European site would. In fact, they have to, unless they start specifically excluding Europeans. The EU even provides Standard Contract Clauses (SCCs) that they can use for this.

However, e.g. Facebook's T&Cs can't bind the US government. Facebook can't promise that it'll keep your data as secure as it is in the EU even if they wanted to (which they absolutely don't), because the US government can get to it easily, and EU citizens can't even sue the US government over it.

Despite the importance that US companies have in Europe, this is not a theoretical concern at all. There have been two successive international agreements between the US and the EU about this, and both were struck down by the EU court as being in violation of EU law, in the Schrems I and Schrems II decisions (named after Max Schrems, an Austrian privacy activist who sued in both cases).

A third international agreement is currently being prepared, and in the meantime the previous agreement (known as "Privacy Shield") remains tentatively in place. The problem is that the US government does not want to offer EU citizens equivalent protection as they have under EU law; they don't even want to offer US citizens these protections. They just love spying on foreigners too much. The previous agreements tried to hide that under flowery language, but couldn't actually solve it. It's unclear and in my opinion unlikely that they'll manage to get a version that survives judicial review this time. Max Schrems is waiting.

So what is a site like Ao3 to do? They're arguably not part of the problem, Max Schrems keeps suing Meta, not the OTW, but they are subject to the rules because they process stuff like your email address.

Their solution is this checkbox. You agree that they can process your data even though they're in the US, and they can't guarantee you that the US government won't spy on you in ways that would be illegal for the government of e.g. Belgium. Is that legal under EU law? …probably as legal as fan fiction in general, I suppose, which is to say let's hope nobody sues to try and find out.

But what's important is that nothing changed, just the language. Ao3 has always stored your user name and email address on servers in the US, subject to whatever the FBI, CIA, NSA and FRA may want to do it. They're just making it more clear now.

[intelliatech]

Future Of AI In Software Development

The usage of AI in Software Development has seen a boom in recent years and it will further continue to redefine the IT industry. In this blog post, we’ll be sharing the existing scenario of AI, its impacts and benefits for software engineers, future trends and challenge areas to help you give a bigger picture of the performance of artificial intelligence (AI). This trend has grown to the extent that it has become an important part of the software development process. With the rapid evolvements happening in the software industry, AI is surely going to dominate.

Read More