Swimming Pools, Pee, and Trying to Delete Your Data From the Internet

Offen Fair Web Analytics

Công cụ phân tích web miễn phí, mã nguồn mở và tự lưu trữ Offen Fair Web Analytics bảo vệ quyền riêng tư dữ liệu theo GDPR, cho phép người dùng toàn quyền kiểm soát dữ liệu của mình thông qua tùy chọn opt-in/opt-out.

Lập trình viên nên đọc bài này để tìm hiểu cách xây dựng giải pháp phân tích web riêng lẻ, tuân thủ GDPR và bảo vệ quyền riêng tư người dùng bằng công nghệ tự chủ, từ đó có thể tích hợp vào dự án của mình.

NIH unveils world's largest genomics-health database

NIH's All of Us research program has released the world's largest integrated genomics and health database, covering 747,000 participants with 535,000 whole genome sequences linked to nearly 482,000 electronic health records and over 1.3 billion genetic variants. Notably, more than 86% of participants come from groups historically underrepresented in medical research, addressing a major gap compared to datasets like the UK Biobank. The database has already contributed to 1,400+ peer-reviewed papers and is positioned as foundational raw material for AI-driven drug discovery and diagnostics. However, the program faces a 72% budget cut since 2023 and a key funding stream set to expire, raising serious concerns about its future despite its scientific value.

Amazon fined $2.25M for withholding evidence from fraud victims

The FTC has fined Amazon $2.25 million for violating the Fair Credit Reporting Act by blocking identity theft victims from accessing records of fraudulent transactions made in their names. Amazon customer service agents denied requests citing 'privacy' or 'security' reasons, refused to comply even when law enforcement submitted authorized requests on behalf of victims, and when records were shared, they were provided outside the required 30-day window. Under the proposed settlement order, Amazon must provide lawfully requested records within 30 days and notify consumers who requested records since April 2024 but never received them. This follows a pattern of regulatory penalties for Amazon, including a $25 million fine for Alexa children's privacy violations and a $2.5 billion Prime membership lawsuit settlement.

New BioShocking attack manipulates AI browser into data theft

Researchers at LayerX have disclosed a prompt injection attack called 'BioShocking' that manipulates AI-powered browsers by embedding malicious instructions inside a fictional game scenario. By teaching the browser agent that 'wrong' actions are acceptable within the game context, the attack bypasses safety guardrails and can cause the agent to exfiltrate sensitive data such as credentials. The PoC was tested against six agentic browsers including ChatGPT Atlas, Comet, Fellou, Genspark, Sigma, and the Claude Chrome plugin — all six failed to detect the malicious final step. Only OpenAI implemented a working fix; Anthropic's patch was ineffective, and Perplexity closed the report without action. Recommended mitigations include explicit user confirmation for sensitive actions, stronger context checks, and scope limits for agentic sessions.

Irish court tells regulator to reconsider TikTok’s China data-transfer ban

Tòa án tối cao Ireland giữ nguyên phạt 530 triệu euro cho TikTok vì chuyển dữ liệu người dùng châu Âu sang Trung Quốc vi phạm GDPR, nhưng yêu cầu cơ quan quản lý xem xét lại lệnh cấm chuyển dữ liệu trong tương lai để tạo điều kiện hoạt động cho TikTok. Vụ việc làm nổi bật căng thẳng giữa vai trò "thiên đường công nghệ" và trách nhiệm quản lý của Ireland trong bối cảnh nhiệm kỳ Chủ tịch Hội đồng EU mới.

Một lập trình viên cần đọc bài này để hiểu rõ cách GDPR và các quy định bảo mật dữ liệu ảnh hưởng đến thiết kế hệ thống xử lý dữ liệu quốc tế, đặc biệt khi phải đối mặt với các vấn đề về chuyển dữ liệu sang nước ngoài như trong trường hợp TikTok.

New in NetBox Validation: A HIPAA Security Rule Compliance Pack

NetBox Validation has added a HIPAA Security Rule compliance pack as its ninth framework pack. The pack includes 20 network checks mapped to specific CFR citations, covering network architecture, segmentation, documentation, and resilience. It runs entirely offline against NetBox data before deployment — no SSH or device credentials required. The timing is driven by the proposed 2026 HIPAA Security Rule overhaul, which eliminates the 'addressable' loophole and for the first time mandates explicit network segmentation and a current network map. Organizations will have roughly 240 days to comply once the rule is finalized. The pack is available now in NetBox Cloud Premium tier as part of the public preview.

Schneier on Security

Papa Johns partnered with NBCUniversal, Instacart, and media agency Carat to build a surveillance-based ad targeting system that predicts when consumers are running low on groceries. By analyzing Instacart purchase patterns for staples like eggs, milk, and produce, the system estimates which days specific consumers are likely to have an empty fridge and serves them targeted ads on NBCU streaming. Bruce Schneier draws a parallel to Target's 2012 pregnancy-detection campaign, noting that the strategy for avoiding the 'creepy' label is to deliberately introduce some wrong predictions to obscure the depth of surveillance.