Is This The End of Anonymous Reddit?

Our top stories this week:

  • Reddit is putting more limits on Old.Reddit.com
  • Cops Can Bypass iPhone’s Automatic Reboot to Get Into Locked Phones, Leaked Video Claims
  • This study looks at how and with whom connected cars share your data
  • New Attack Can Track You Across Operating Systems Without Elevated Privileges

TWIP Live 🔴


Updates from the Team

Privacy.com Situation is Insane

Recently, fellow YouTuber and digital rights activist Louis Rossmann revoked his endorsement of privacy.com over their partnership with Persona. This sparked some discussion on our forum, and in turn made us want to discuss the larger picture: problematic KYC laws and what we can do about it.

Is Louis Rossmann Right About Privacy.com?
Recently, digital rights activist and YouTuber Louis Rossmann revoked his endorsement of privacy.com. But we think this might be a problem bigger than one provider. Rossmann’s video: https://www.yo…

News Briefs

Fria absolutely crushed it this week in regard to staying on top of breaking news. If you're not subscribed to our news briefs yet, I highly recommend it. This week he wrote about

Privacy & Security News
The latest news in data privacy, cybersecurity, and consumer rights brought to you by Privacy Guides.

Site Changes Coming Soon

This week we had three commits that will appear in the next update. We revised our Android app installation guidance to recommend F-Droid Basic over Classic, we improved our wording in the Tor overview, and we removed the custom domain requirement on the email page after a recent pull accidentally re-added it. You can see all those changes and the discussions/reasons behind them on GitHub.

Commits · privacyguides/privacyguides.org
Protect your data against global mass surveillance programs. - Commits · privacyguides/privacyguides.org

Sources

Reddit is putting more limits on Old.Reddit.com

A few weeks ago, Reddit announced that people would no longer be able to use old.reddit.com unless they were signed in. Now Reddit has further tightened down and said that only accounts who have used it in the last six months can do so. Furthermore, Reddit is removing RSS compatibility. Unfortunately Reddit is still a useful source of news, commentary, and is primarily used by many privacy projects instead of an open forum, so this is a privacy hit.

Reddit is putting more limits on Old.Reddit.com
Reddit says it’s fighting “automated abuse.”

Cops Can Bypass iPhone’s Automatic Reboot to Get Into Locked Phones, Leaked Video Claims

In 2024, Apple quietly rolled out a new feature that automatically rebooted an iPhone if it hadn't been unlocked for more than 72 hours, thus putting it in the ultra-secure "Before First Unlock" state and making it harder to hack. A mobile forensics company now claims that they've been able to create a tool that prevents this from happening and preserves the phone's weaker "After First Unlock" state to help law enforcement access the device

Cops Can Bypass iPhone’s Automatic Reboot to Get Into Locked Phones, Leaked Video Claims
Magent Forensics, the owner of the GrayKey phone unlocking tool, says it can bypass an iPhone rebooting feature that was locking cops out.

This study looks at how and with whom connected cars share your data

Privacy veterans may remember that in 2023, Mozilla examined the privacy policies of numerous popular car manufacturers and declared it "the worst product category we have ever reviewed for privacy.” A new study took this a step further by actually observing the traffic of various cars and seeing what domains they connect to. It was exactly as bad as promised, but at least now we have more data.

This study looks at how and with whom connected cars share your data
Between the cars and their companion apps, you’re exposed to a lot of trackers.

New Attack Can Track You Across Operating Systems Without Elevated Privileges

Researchers from Graz University of Technology in Austria have discovered a new attack that doesn't require any sort of hacking or vulnerability. It abuses the built-in subsystem monitors built in to all operating systems and uses that to extract sensitive information ranging from what sites you visit or files you have on your device all the way up to stealing passwords and private messages.

New Attack Can Track You Across Operating Systems Without Elevated Privileges
Researchers at the Graz University of Technology Austria demonstrated a new attack that can track you via file change events “on all systems,” allowing for various data leaks.

Forum Updates

Chat Control 2.0 — 6th Trilogue done, negotiators not falling for fake targeting workaround — 7th Trilogue on the horizon in Nov
Post-Trilogue update (short preliminary version, might add more later): The plan below to work around the “targeting” limitation has been blocked. In his update on his homepage Patrick Breyer accredits success besides trilogue shadows’ steadfastness to efforts of civil society. This means “you”. Read his summary and more details in his article, as I would only repost his condensed overview. (It’s shorter this time. 😉) There seem to be agreements on publicly available data and crawling th…
How often are people sending encrypted emails?
I guess I’m trying to understand in case my experience isn’t representative. As an individual, almost every person I know uses Gmail or possibly outlook.com. They’ve never heard of PGP, much less ever set it up. Similarly, proton/tuta emails will also arrive unencrypted. From a practical standpoint, it’s much easier to get personal contacts to use Signal or another e2ee messenger instead, which is better for privacy anyway. I also rarely send emails using my personal email account, especially…