London cops bring live facial recognition to West End

Google releases new privacy controls for activity history, personalization

Google bổ sung các điều khiển quyền riêng tư mới, tách biệt lịch sử hoạt động (Search Services History) và cá nhân hóa (Personalized Recommendations) cho Search cùng Google Play, thay vì gộp chung như trước. Theo mặc định, Google sẽ lưu trữ media (ảnh, âm thanh, video từ Google Lens, tìm kiếm bằng giọng nói) vào Search Services History nếu tính năng Web & App Activity đang bật, nhưng người dùng có thể tắt riêng mục này hoặc xóa từng mục đã lưu. Các cài đặt mới sẽ triển khai dần trong vài ngày tới.

Lập trình viên nên đọc để hiểu cách Google xử lý dữ liệu người dùng và cách bảo mật riêng tư trong ứng dụng, giúp họ phát triển các giải pháp bảo vệ dữ liệu hiệu quả hơn trong các sản phẩm công nghệ.

Our Research on Membership Inference Attacks and Preventing Privacy Leaks

JetBrains researchers present EZ MIA (Error Zone Membership Inference Attack), a lightweight method for detecting whether specific data was used to train fine-tuned LLMs. Unlike existing approaches that rely on aggregate sequence loss or expensive shadow model training, EZ MIA focuses on token-level error positions where memorization signals are most concentrated, requiring only two forward passes per sequence. Experiments on GPT-2, GPT-2-XL, and Llama-2 show EZ MIA outperforms baselines like LOSS, Min-K++, and SPV-MIA by up to 9x. The research also confirms that full fine-tuning creates significantly more membership leakage than LoRA-based fine-tuning, though LoRA does not eliminate the risk entirely — especially for larger models.

Cellebrite said it cut off Russia, but Russia used is tools anyway

Russian authorities used Cellebrite's UFED phone-unlocking tool to hack into the iPhone of opposition politician Andrey Pivovarov in June 2021 — three months after Cellebrite publicly announced it had cut off all sales and services to Russia. Researchers at the Citizen Lab found forensic evidence on Pivovarov's phone confirming the breach, and a Russian court document explicitly detailed the use of Cellebrite UFED to extract WhatsApp and Telegram messages. The case highlights a fundamental problem with surveillance technology exports: once hardware is in a customer's hands, revoking licenses or cutting ties does not reliably prevent continued abuse. Researchers are calling on Cellebrite to implement remote-disable capabilities and cryptographically-signed watermarks to enable accountability and enforcement.

I switched to a paid search engine, and I can't believe I'll never go back to Google

A personal account of switching from Google Search to Kagi, a paid ad-free search engine costing $10/month. The author highlights frustrations with Google's increasing clutter — sponsored results, AI Overviews pushing organic results down — and explains what Kagi does differently: no ads, custom search lenses (Forums, Academic), and a cleaner interface. Minor Kagi drawbacks are noted (missing Reddit post dates, underlined links), but the author concludes the paid model produces a better experience because Kagi's revenue isn't tied to advertising.