Category: Privacy

3 November 2026
ICC profile retention limits HEIC cleanup in mat2

mat2 HEIC support is useful, but only up to a point. Once an embedded ICC profile shows up, the cleaner stops short, and you are left with a partial scrub rather than the tidy wipe I wanted.

Read more
2 November 2026
DecryptAds and adtech tracking graphs

DecryptAds turns dull disclosure files into something readable, and a few odd joins are enough to make the adtech tracking graph look far less tidy than the paperwork suggests. I trust the data less, and the silence between the records more.

Read more
23 September 2026
Private by default for workers.dev URLs

Cloudflare Access for Workers finally fixes a mess I have tripped over more than once, where protection lived beside the Worker and drifted the moment a route or workers.dev URL changed. The new model is simpler, stricter, and far less likely to leave something open by accident.

Read more
8 September 2026
HEIC metadata removal in mat2 0.15.0

mat2 0.15.0 finally treats HEIC as the awkward format it is, and I prefer that honesty. If you are relying on clean metadata removal, the ICC profile is still there, so you need to check the file properly rather than assuming the tool has done the lot.

Read more
1 September 2026
Privacy boundaries when AI touches government records

AI governance gets awkward fast when government records are involved, because the model is rarely the problem. The problem is the sloppy boundary around it, the sort I have seen quietly turn a harmless prompt into a route through records nobody meant to expose.

Read more
31 August 2026
Federation trade-offs in self-hosted social feeds

Federation looks tidy until you let it touch the edges, and then the odd cases arrive fast. I prefer self-hosted social feeds that stay explicit about what is local, what is remote, and what should never have been pulled in at all.

Read more
30 August 2026
Self-hosted analytics without cross-site tracking

Plausible Analytics keeps the tracking honest enough for a homelab. It counts site use without the usual baggage, and the trade-offs are plain to see, which is more than I can say for most analytics stacks I’ve had to unpick.

Read more
26 August 2026
Retaining access logs for healthcare breach notifications

Healthcare breach notifications are only as solid as the logs behind them. I have seen enough broken audits to know that dashboards are no substitute for raw access records, especially when the notice lands weeks after the damage and everyone suddenly wants proof, not guesses.

Read more
2 July 2026
23andMe breach notification gaps and account risk

23andMe breach notification gaps are the part that still bothers me, because people were left guessing whether they had a password problem or something much wider. If you reused a login anywhere, treat the account as compromised, then check every linked recovery and privacy setting properly.

Read more
6 May 2026
Siri privacy settings for shared rooms and offices

Siri privacy settings are only useful if the microphone is not sitting in the wrong room, listening for the wrong thing. I trust fewer devices in shared spaces, because voice assistant privacy usually fails in the ordinary mess of offices, desks, and half-finished conversations.

Read more
21 April 2026
Privacy-first car telemetry: monitoring EV charging over MQTT

I took a glossy EV launch page and turned the useful bits into a Home Assistant MQTT car charging dashboard, then spent most of the time fighting the usual small failures, bad keys, vague output, and one model that clearly fancied writing prose instead of JSON.

Read more
9 April 2026
Personal health data needs local storage, not cloud

Health data inside a corporate platform means health data inside a jurisdiction you do not control, encrypted or not. Self-hosting it locally—with proper backups and audit trails—trades convenience for actual ownership; for medical records, that trade is worth making.

Read more
10 March 2026
Assessing surveillance risks with Microsoft AI tools

Explore the critical landscape of data privacy and compliance in surveillance, focusing on lessons from Microsoft and ICE's increasing data utilisation.

Read more
27 January 2026
Avoiding GDPR trouble with a sensible firewall

Secure your GDPR compliance with effective firewall strategies. As breaches rise, ensure proper configurations to mitigate risk and protect personal data efficiently.

Read more
27 January 2026
Privacy implications of age verification technology

Discover how to implement robust age verification in your homelab while prioritising privacy and security. Explore tiered approaches to safeguard personal data effectively.

Read more
25 January 2026
Navigating data sovereignty in AI for UK businesses

Data Sovereignty matters for your UK business using AI. Start a data inventory and map data flows. Label personal and sensitive fields. Apply encryption, customer-managed keys and strict IAM. Verify region, backups and training use with vendors. Log access, run DPIAs and keep audit-ready controls to meet UK law and keep control of derived...

Read more
17 January 2026
Inspecting privacy flaws in the Hubitat C8-Pro

I opened a Hubitat C8-Pro to see how private and secure it actually is. I wanted root access, a look through the files and services, and a set of fixes you can apply yourself. I focus on the steps I used, the facts I found, and short changes that reduce risk. I gained serial access […]

Read more
29 December 2025
Configuring privacy settings in Linux Mint for lawyers

I’ve used Linux Mint on client laptops and for sensitive files. Mint is fine for this sort of job if you configure it properly. Treat the machine as a tool, not a promise. Plan the disk layout, lock down networking, and decide where legal documents live before you start putting cases on it. Start with […]

Read more
13 December 2025
Understanding Apple’s privacy safeguards amid leadership changes

Apple’s senior changes can shift how privacy is defended at product level. Legal and policy moves can change priorities and public positions. Jennifer Newstead is slated to become Apple’s general counsel in March 2026, Kate Adams will hand over later next year, and Lisa Jackson will retire, with some teams moved to Sabih Khan. That […]

Read more
8 December 2025
Controlling camera access on MacOS devices

Learn how to securely grant USB camera access on a Mac for four specific users. Explore user permissions, camera settings, and effective management strategies.

Read more
19 November 2025
Use Microsoft Privacy Dashboard for data oversight

Use the Microsoft Privacy Dashboard to control account data. Adjust Windows 11 privacy settings, clear activity, and limit personalised ads. Verify changes in Settings. Sign out of Copilot or unlink OneDrive to reduce data sharing. Test each change on the device you use.

Read more
3 November 2025
Managing AI privacy settings in Microsoft Edge

Manage AI privacy settings in Microsoft Edge: lock permissions, use separate profiles, and enable strict tracking prevention. Clear your browsing data on exit, disable voice input, and log Copilot activity. Start small, audit changes, and require approvals before you enable Copilot on devices.

Read more
3 November 2025
Exploring alternatives to ad tracking in iOS

App Tracking Transparency may change in Europe. This guide gives practical alternatives for iOS. You can harden your iPhone. Block trackers on your network. Choose apps that request minimal data. Follow step-by-step settings and verify each change. Use Mail Privacy Protection, disable Background App Refresh and reset your advertising identifier.

Read more
2 November 2025
Navigating data privacy with OpenAI’s company knowledge

Key considerations for data privacy Assessing data access levels Start by mapping what Company Knowledge can reach. List every connector you plan to enable. Typical sources include Slack, SharePoint, Drive and GitHub. For each source, note: exact folders or channels to be indexed, which service accounts or scopes are granted, whether tokens are...

Read more
30 October 2025
Configuring Microsoft privacy settings under government scrutiny

Government scrutiny changes the risk profile Pressure from governments changes how a vendor handles procurement, audits and public scrutiny. That can mean different telemetry handling, different disclosure practices, or special treatment for certain contracts. Treat that as part of the operational picture. Map where data leaves your estate and...

Read more