Claroc security research on apps made with Grok's Build mode. The researchers report that publishing defaulted to anyone-with-the-link access, that most of 37,571 reachable app addresses opened without sign-in, and that open apps held internal data from dozens of organizations. Findings are the researchers' own.
Ramona C. Truta examines Alignerr's interview terms and privacy policy and raises concerns about rights to applicant recordings and data. This freely readable commentary presents the author's interpretation and allegations, not an adjudicated legal finding or individualized legal advice.
#ai-hiring#privacy#data-rights
ramonactruta.substack.comAdded Nov 11, 20260 opens
Anthropic introduces read-only bank and card connections through Plaid for questions about balances and transactions. The feature cannot move or invest money and begins as a U.S. beta on paid Pro, Max and Ultra plans; this announcement is free to read.
A free, no-sign-up walkthrough from AI Endgame with click-by-click steps for setting up a password manager and securing email, phone number, bank, credit and government accounts against AI-enabled scams such as cloned voices. The site estimates under five hours.
An IBTimes UK article on companies selling workplace emails, Slack messages, and documents to AI developers, and the questions this raises about employee privacy, consent, and who profits.
An ACM paper examining how conversational AI memory features build what the authors call an "algorithmic self-portrait" from information users disclose in private chats, and the questions this raises about data sensitivity and user agency.
A blog from Tinfoil covering confidential computing and privacy-preserving AI infrastructure, with posts on how the company secures AI workloads and related technical developments.
An independent nonprofit offering research and programs on emerging technology topics including networked incitement, privacy and community safety, surveillance overreach, and digital harms that threaten democracy.
A Thinking On Paper podcast episode with Carissa Véliz, an Oxford associate professor working on AI ethics. She describes privacy as an ability, a right and a duty, explains what companies can infer from location data, and discusses algorithmic decisions that cannot be explained or appealed, decentralized identity, and choosing tools such as Signal and DuckDuckGo. Free to listen or watch.
A personal AI assistant for email, calendar, meeting notes, dictation and errands that runs 100% locally on your own device for privacy. Invite-only beta for Mac and Windows, with Linux, iPhone and Android planned. Backed by Andreessen Horowitz and Khosla Ventures.
A regulatory summary of the revision to Japan's Act on the Protection of Personal Information passed by the Diet on July 10, 2026. It describes the country's first administrative surcharge for serious violations and a consent exception for statistics creation and AI model development, and notes the law is enacted but not yet in force.
The National Institute of Standards and Technology's hub for cybersecurity and privacy standards, guidelines and best practices, including the Cybersecurity Framework and AI risk work, for industry, agencies and the public.
Reports that a breach of the Defense Manpower Data Center exposed unencrypted names, contact information, dates of birth, Social Security numbers and military job records of nearly 2.8 million living and 294,000 deceased people with U.S. military ties. Unauthorized access lasted from October 2025 to July 2026 through a file-sharing system vulnerability.
Future of Privacy Forum explainer on Connecticut SB 5, the 39-section AI bill signed by Governor Lamont, summarizing its new requirements across several areas of AI policy.
A free tool that strips tracking parameters from links before you share them, so the people you send a link to aren't followed across the web. Paste a link, get a clean version back.
Ben Hylak argues that as AI agents start negotiating with each other on our behalf, our privacy will depend on how well those agents handle social situations.
Why I recommend it: An opinion essay by a startup founder, not research. Good prompt for thinking about what you let an agent share.
OpenAI help article on Trusted Contact: an optional adult (18+) feature that may notify one person you choose if automated systems and trained reviewers detect a serious suicide-related safety concern.
Why I recommend it: Worth reading before you turn it on: it involves human reviewers reading flagged conversations and sharing an alert with someone else. OpenAI says it is not an emergency service. Not available in Business, Enterprise, or Edu workspaces.
A duty-by-duty walkthrough of California's automated decisionmaking technology rules — approved 23 September 2025, in effect from 1 January 2026, with ADMT obligations from 1 January 2027 — and where each duty can actually be enforced in a system. Covers pre-use notice, opt-out, human review, appeals and per-decision record keeping. The rules apply when computation replaces human judgment on a significant decision about work, money, housing, education or health.
Why I recommend it: The clearest free explanation I have found of what these rules require, and the section on significant decisions is directly relevant if an employer screens you by machine — you get notice, an opt-out and a route to a human. Read it knowing DeepInspect sells the kind of control it describes, so the framing pushes toward buying a product; the legal dates and duties are checkable against the state agency's own page, which it links.
A full AI assistant — writing, images, web search, memory, file uploads — where every conversation is end-to-end encrypted on your device, so the company says it cannot read your chats, train on them, hand them to partners, or produce anything but scrambled text in response to a subpoena. Built by Moxie Marlinspike, the cryptographer who created Signal. Free to start with no credit card; the encryption and private inference designs are written up publicly and the code is open source so the claims can be checked.
Why I recommend it: This is the one to reach for when you are about to type something into an AI that you would not want read back to you — money trouble, health, a manager, a visa problem. Two honest things. It is free to start, which is not the same as free forever, so read the plan page before you rely on it. And encryption protects the message, not your judgment: anything you paste in that belongs to an employer or a client is still their information, whoever can or cannot read it.