<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>devtake.dev — #privacy</title><description>Articles tagged privacy on devtake.dev.</description><link>https://devtake.dev/</link><language>en-us</language><item><title>Brave&apos;s browser got bloated with crypto and AI. Origin strips it back for $60</title><link>https://devtake.dev/article/brave-origin-paid-browser/</link><guid isPermaLink="true">https://devtake.dev/article/brave-origin-paid-browser/</guid><description>Brave released Origin, a paid version of its browser that compiles out Leo AI, the crypto wallet, Rewards, Tor, and the VPN. A one-time $59.99 buys it, and Linux is free.</description><pubDate>Mon, 08 Jun 2026 09:00:00 GMT</pubDate><category>web</category><category>brave</category><category>web</category><category>browsers</category><category>privacy</category><category>chromium</category><author>naomi-park</author></item><item><title>A browser SSD timing trick can fingerprint your browsing, and cookies won&apos;t stop it</title><link>https://devtake.dev/article/ssd-activity-browser-side-channel/</link><guid isPermaLink="true">https://devtake.dev/article/ssd-activity-browser-side-channel/</guid><description>Graz researchers built FROST, a browser side-channel that times SSD activity to guess which sites and apps you&apos;re running. Here&apos;s how it works and what helps.</description><pubDate>Wed, 03 Jun 2026 11:30:00 GMT</pubDate><category>web</category><category>privacy</category><category>security</category><category>web</category><category>browser-security</category><category>fingerprinting</category><category>side-channel</category><category>supply-chain</category><author>naomi-park</author></item><item><title>Your car logs every hard brake, and the FTC just banned GM from selling it for five years</title><link>https://devtake.dev/article/connected-car-data-collection-privacy/</link><guid isPermaLink="true">https://devtake.dev/article/connected-car-data-collection-privacy/</guid><description>Connected cars collect location, driving behavior, in-cabin audio, and synced contacts, then route it to automaker clouds, brokers, and insurers. Here&apos;s how to stop it.</description><pubDate>Fri, 29 May 2026 06:35:00 GMT</pubDate><category>security</category><category>security</category><category>privacy</category><category>data-brokers</category><category>surveillance</category><category>connected-cars</category><category>automakers</category><category>ftc</category><author>luca-reinhardt</author></item><item><title>Adversaries are tracking US troops with the same phone-location data advertisers buy</title><link>https://devtake.dev/article/pentagon-troop-phone-location-tracking/</link><guid isPermaLink="true">https://devtake.dev/article/pentagon-troop-phone-location-tracking/</guid><description>A Wired investigation and a CENTCOM letter to Senator Wyden confirm enemies are tracking US troops through commercial phone location data. Here&apos;s how the broker pipeline works.</description><pubDate>Fri, 29 May 2026 05:50:00 GMT</pubDate><category>policy</category><category>policy</category><category>surveillance</category><category>data-brokers</category><category>privacy</category><category>national-security</category><category>pentagon</category><category>location-data</category><author>clara-wexler</author></item><item><title>Google said people love AI search. DuckDuckGo&apos;s installs jumped 30% the next week.</title><link>https://devtake.dev/article/duckduckgo-installs-surge-google-ai-search/</link><guid isPermaLink="true">https://devtake.dev/article/duckduckgo-installs-surge-google-ai-search/</guid><description>DuckDuckGo&apos;s US downloads climbed about 30% and its no-AI search page saw 28% more visits the week after Google&apos;s I/O push. The backlash is now measurable.</description><pubDate>Wed, 27 May 2026 19:20:00 GMT</pubDate><category>web</category><category>duckduckgo</category><category>google</category><category>ai-search</category><category>privacy</category><category>search-engines</category><category>gemini</category><category>web</category><author>naomi-park</author></item><item><title>iOS 26.5 brings encrypted texting between iPhone and Android. Group chats and metadata still leak.</title><link>https://devtake.dev/article/apple-google-encrypted-rcs-rollout/</link><guid isPermaLink="true">https://devtake.dev/article/apple-google-encrypted-rcs-rollout/</guid><description>Apple and Google began rolling out end-to-end encrypted RCS on May 11. The MLS-based encryption rides on GSMA Universal Profile 3.0, but EFF says the rollout leaves real gaps.</description><pubDate>Fri, 15 May 2026 10:00:00 GMT</pubDate><category>apple</category><category>apple</category><category>google</category><category>rcs</category><category>end-to-end-encryption</category><category>imessage</category><category>ios-26</category><category>privacy</category><category>mls</category><author>naomi-park</author></item><item><title>Palantir contractors are getting &apos;unlimited access&apos; to NHS patient data before it&apos;s anonymized</title><link>https://devtake.dev/article/palantir-nhs-unlimited-patient-data-access/</link><guid isPermaLink="true">https://devtake.dev/article/palantir-nhs-unlimited-patient-data-access/</guid><description>NHS England created an admin role giving Palantir staff access to identifiable patient data. The £330M contract&apos;s break clause arrives in March 2027.</description><pubDate>Tue, 12 May 2026 10:45:00 GMT</pubDate><category>policy</category><category>palantir</category><category>nhs</category><category>privacy</category><category>health-data</category><category>uk</category><category>policy</category><category>federated-data-platform</category><category>regulation</category><author>clara-wexler</author></item><item><title>The EU called VPNs &apos;a loophole that needs closing.&apos; Proton&apos;s UK signups rose 1,800%.</title><link>https://devtake.dev/article/eu-vpn-loophole-age-verification/</link><guid isPermaLink="true">https://devtake.dev/article/eu-vpn-loophole-age-verification/</guid><description>An EU Parliament briefing and Executive VP Henna Virkkunen both flagged VPN circumvention of age verification. The UK&apos;s attempt to solve it backfired into record VPN adoption.</description><pubDate>Sat, 09 May 2026 08:15:00 GMT</pubDate><category>policy</category><category>policy</category><category>regulation</category><category>privacy</category><category>eu</category><category>vpn</category><category>age-verification</category><category>encryption</category><author>clara-wexler</author></item><item><title>380,000 vibe-coded apps are sitting on the open web. 5,000 of them are leaking real data.</title><link>https://devtake.dev/article/vibe-coded-apps-expose-corporate-data/</link><guid isPermaLink="true">https://devtake.dev/article/vibe-coded-apps-expose-corporate-data/</guid><description>RedAccess found that AI coding tools like Lovable, Base44, and Replit default to public hosting, leaving medical records, bank internals, and corporate secrets indexed by Google.</description><pubDate>Sat, 09 May 2026 08:00:00 GMT</pubDate><category>security</category><category>security</category><category>ai-security</category><category>ai-agents</category><category>dev-tools</category><category>supply-chain</category><category>privacy</category><category>credential-theft</category><author>luca-reinhardt</author></item><item><title>Meta pulled encryption from Instagram DMs today. WhatsApp and Messenger keep theirs.</title><link>https://devtake.dev/article/instagram-encrypted-messaging-ends-may-2026/</link><guid isPermaLink="true">https://devtake.dev/article/instagram-encrypted-messaging-ends-may-2026/</guid><description>End-to-end encryption is gone from Instagram DMs as of May 8. Meta cited low adoption for a feature it never turned on by default.</description><pubDate>Fri, 08 May 2026 10:00:00 GMT</pubDate><category>policy</category><category>meta</category><category>instagram</category><category>encryption</category><category>privacy</category><category>end-to-end-encryption</category><category>policy</category><category>take-it-down-act</category><category>child-safety</category><author>clara-wexler</author></item><item><title>Microsoft Edge keeps every saved password in cleartext memory. Microsoft calls it &apos;by design&apos;.</title><link>https://devtake.dev/article/microsoft-edge-cleartext-passwords-memory/</link><guid isPermaLink="true">https://devtake.dev/article/microsoft-edge-cleartext-passwords-memory/</guid><description>A researcher showed Edge decrypts the entire password vault at launch and leaves it in process memory. Chrome decrypts on demand. Microsoft says it&apos;s intentional.</description><pubDate>Tue, 05 May 2026 08:45:00 GMT</pubDate><category>security</category><category>security</category><category>microsoft</category><category>edge</category><category>browser-security</category><category>credential-theft</category><category>chromium</category><category>passwords</category><category>privacy</category><author>luca-reinhardt</author></item><item><title>OpenAI&apos;s Privacy Filter is a 1.5B PII redactor that ships under Apache 2.0. Here&apos;s what it actually does.</title><link>https://devtake.dev/article/openai-privacy-filter/</link><guid isPermaLink="true">https://devtake.dev/article/openai-privacy-filter/</guid><description>OpenAI released Privacy Filter on April 22 as an open-weight on-device model for masking eight types of PII. F1 of 96%. Runs in a browser. Here&apos;s the catch.</description><pubDate>Sun, 26 Apr 2026 13:00:00 GMT</pubDate><category>ai</category><category>openai</category><category>privacy</category><category>pii</category><category>open-weights</category><category>ai-models</category><category>llm</category><category>hugging-face</category><category>data-privacy</category><author>dieter-morelli</author></item></channel></rss>