Data Privacy
Ongoing coverage on Data Privacy.
Latest coverage
Evening Safety Dance
Over 100 Google Chrome extensions were discovered to be injecting ads and harvesting user data. Separately, Microsoft addressed a prompt injection vulnerability in Copilot Studio, though data exfiltration still occurred.
Seems like opting out of website cookies doesn't actually guarantee you are opted out of website cookies
A recent audit by webXray found that major technology companies, including Google, Meta, and Microsoft, often ignore global opt-out signals for website cookies. The report indicates that many cookie banners fail to prevent tracking, leading to potential legal liabilities for companies.
'Who on Earth Would Want This?': Almost 90% of PS5 Fans Not Interested in New 'Playerbase' Program
Sony's new 'Playerbase' program, designed to celebrate the PlayStation community, has been met with significant backlash from fans. A poll indicated that almost 90% of PlayStation 5 owners are not interested, with many citing security concerns about the use of their likeness and data. The initiative, which starts with Gran Turismo 7, is criticized for being out of touch with the fanbase's desires.
UK Meta employee reportedly downloaded 30,000 private photos from Facebook users
A former Meta employee in the UK is under investigation for allegedly downloading approximately 30,000 private photos from Facebook users using a custom software program. Meta discovered the breach over a year ago, terminated the employee, notified affected users, and referred the case to law enforcement for investigation by the London Metropolitan police's cybercrime unit.
Opinion: Sony's 'Playerbase' Is a Weak and Weird Way to Celebrate PS5 Fans
Sony's new 'Playerbase' initiative, which offers fans a chance to have their likeness scanned for Gran Turismo 7 or potentially appear in other games, is criticized as a weak and unusual way to celebrate the PlayStation community. The author questions the transparency around data usage and suggests alternative methods like PS Stars for genuine fan recognition.
OkCupid settles FTC case on alleged misuse of its users' personal data
OkCupid and its parent company Match Group have settled a lawsuit with the Federal Trade Commission regarding alleged misuse of user data in 2014. The dating service was accused of sharing three million user photos and location information with a third-party AI company, Clarifai, without proper user consent. The settlement prohibits future misrepresentation of data collection practices and consumer choices, with OkCupid stating current practices are strengthened.
Here's how not to leak military information with your Strava run
The sports tracking app Strava has become a security risk, with recent incidents involving a French sailor leaking the location of an aircraft carrier and past instances of US military bases and Secret Service agents being identified. The article provides advice on how users can protect their privacy by adjusting app settings, using alternative running apps with caution, or running without a phone.
Morning Safety Dance
Meta is reportedly ending end-to-end encryption for Instagram direct messages, raising concerns about data privacy. Separately, federal agencies have disrupted large IoT botnets responsible for significant DDoS attacks.
Evening Legal Briefs
The FBI has confirmed its acquisition of American location data. This news was reported by Engadget, raising concerns about data privacy.
Over 48% of unreleased games have a Discord server, and I'm sure this is all fine and normal and I don't miss…
The article discusses the increasing prevalence of Discord servers for video games, with over 48% of unreleased titles having a server. It highlights concerns about game companies relying on Discord for their entire news cycle and the potential risks associated with data privacy and dependence on a single tech company.
Valve says loot boxes are just like "Pokemon, Magic the Gathering, and Labubu" as it pushes back against New York lawsuit, claims it's being pressured to "collect more personal data" for "additional age verification"
Valve is pushing back against a lawsuit from the New York Attorney General's office that claims its loot boxes constitute gambling. The company argues that these "mystery boxes" are akin to collectible card games and has expressed concerns about demands for increased personal data collection for age verification. Valve states it will comply with any future legislation but intends to fight the current lawsuit.
Valve posted a statement on the New York lootbox lawsuit
Valve has issued a statement addressing the New York Attorney General's lawsuit concerning lootboxes in Counter-Strike 2, Dota 2, and Team Fortress 2. The company argues that these mystery boxes do not violate gambling laws and compares them to tangible collectible items like baseball or Pokemon cards. Valve also expressed concerns about the Attorney General's demands for increased personal data collection for age verification and the proposed removal of item transferability.
Evening Legal Briefs
Elon Musk has failed in his attempt to block a California data disclosure law that he fears could harm his company xAI. Ars Technica reported on the legal proceedings, highlighting Musk's concerns about the potential ruinous effects of the law on his AI venture.
Morning Legal Briefs
Meta is facing a class-action lawsuit regarding privacy concerns associated with its AI glasses. Separately, Proton Mail has reportedly handed over protester data to the police, raising further privacy issues.
Arc Raiders accused of logging private Discord chats in privacy scare
Arc Raiders is facing scrutiny after reports indicated its client logged private Discord messages and authentication tokens. Embark Studios has released a hotfix to disable excessive logging and stated that private data was not sent externally. The developer has also promised a system audit following the incident.
Arc Raiders Was Recording Private Discord DMs
Embark Studios' game Arc Raiders was found to be recording and storing players' private Discord direct messages locally on their PCs. The company has acknowledged the issue, released a hotfix, and stated that the messages were not reviewed or stored externally. An audit will be conducted to prevent future incidents.
MMO Business Roundup: Sony pulls back from PC ports, US considers compelling Tencent divestment
Sony is reportedly ceasing PC ports for PlayStation 5 games due to concerns over weak sales and brand dilution, though multiplayer titles like Marvel Tokon and Marathon are unaffected. Separately, the U.S. government is considering compelling Tencent to divest from western gaming investments amid data privacy and potential military links concerns.
US government reportedly debating whether to force Tencent to give up its US-based game holdings
The US government is reportedly considering forcing Tencent to divest its stakes in US and Finnish game companies due to national security concerns. Tencent holds significant shares in numerous major developers, raising fears of potential access to personal data of US citizens. This debate has been ongoing since 2020, with a recent meeting on the matter postponed.
Trump Administration Debating Allowing Chinese Company Tencent to Keep Its Stakes in U.S. Gaming Companies Such as Fortnite Maker Epic and League Dev Riot - IGN
The Trump administration is reportedly debating whether to force Chinese company Tencent to divest its stakes in U.S. gaming firms like Epic Games and Riot Games due to national security concerns. Officials are assessing the risk posed by Tencent's investments, including its ownership of Riot Games and a significant stake in Epic Games, ahead of a meeting with China's president. The U.S. Department of Defense previously classified Tencent as a Chinese military company.
Report: US government may compel Tencent to divest gaming investments
The US government, under the Trump administration, is reportedly considering forcing Tencent to divest its gaming investments due to national security and data privacy concerns. Investigations initiated under the Biden administration have raised questions about Tencent's access to data from millions of American players through its stakes in companies like Epic Games and Riot Games.
