Schneier on Security

JANUARY 11, 2021

Some of the data that WhatsApp collects includes: User phone numbers. Diagnostic data collected from app logs. Under the new terms, Facebook reserves the right to share collected data with its family of companies. Other people’s phone numbers stored in address books. Profile names.

Data collection 359

Data collection Accountability 359

Tech Republic Security

SEPTEMBER 14, 2023

Red Box provides the open architecture for data capture. Uniphore then feeds that data into U-Capture, its conversational AI automation tool.

Data collection 204

Data collection Architecture Artificial Intelligence Big data 204

The Hacker News

MAY 9, 2025

billion to settle two lawsuits that accused the company of tracking users' personal location and maintaining their facial recognition data without consent. Google has agreed to pay the U.S. state of Texas nearly $1.4 The $1.375 billion payment dwarfs the fines the tech giant has paid to settle similar lawsuits brought by other U.S.

Data collection 137

Data collection 137

Schneier on Security

APRIL 3, 2024

The Incognito splash page will explicitly state that Google collects data from third-party websites “regardless of which browsing or browser mode you use,” and stipulate that “third-party sites and apps that integrate our services may still share information with Google,” among other changes.

Data collection 337

Data collection 337

WIRED Threat Level

JUNE 4, 2024

Windows Recall takes a screenshot every five seconds. Cybersecurity researchers say the system is simple to abuse—and one ethical hacker has already built a tool to show how easy it really is.

Data collection 145

Data collection Cybersecurity Hacking 145

Schneier on Security

DECEMBER 13, 2023

This is not about mass surveillance of mail , this is about sorts of targeted surveillance the US Postal Inspection Service uses to catch mail thieves : To track down an alleged mail thief, a US postal inspector used license plate reader technology, GPS data collected by a rental car company, and, most damning of all, hid a camera inside one of the (..)

Surveillance 322

Surveillance Data collection Technology 322

Security Boulevard

DECEMBER 10, 2024

Auguria today at the Black Hat Europe conference, in addition to providing five additional integrations with other platforms, revealed it has added an explainability graph capability that makes it simple to understand why log data collected is either irrelevant or warrants further investigation.

Data collection 113

Data collection Cybersecurity 113

Malwarebytes

FEBRUARY 12, 2025

This data was automatically transferred when loading the webpage, before users could even accept or decline the use of their data. The data collection resulted in the reporterwho said they never once agreed to the use of their data for marketing purposes being inundated with ads for gambling websites.

Data collection 124

Data collection Marketing Data privacy VPN 124

The Hacker News

JULY 30, 2024

state of Texas over allegations that it illegally collected biometric data of millions of users without their permission, marking one of the largest penalties levied by regulators against the tech giant. Meta, the parent company of Facebook, Instagram, and WhatsApp, agreed to a record $1.4 billion settlement with the U.S.

Data collection 135

Data collection 135

Security Affairs

DECEMBER 23, 2024

Italy’s data protection watchdog fined OpenAI 15 million for ChatGPT’s improper collection of personal data. Italys privacy watchdog, Garante Privacy, fined OpenAI 15M after investigating ChatGPT’s personal data collection practices.

Artificial Intelligence 108

Artificial Intelligence Data collection Data breaches Hacking 108

Security Affairs

OCTOBER 12, 2024

The threat actors used exploits for the above issues in attacks against organizations in various sectors globally, allowing the APT group to access sensitive data and deploy infrastructure for ongoing data collection. The joint advisory includes a list of known vulnerabilities that should be addressed as soon as possible.

Data collection 137

Data collection Authentication Hacking Government 137

Adam Levin

JANUARY 27, 2020

According to the Motherboard article, “multiple Avast users… were not aware Avast sold browsing data, raising questions about how informed that consent is.”. The primary method of Avast’s data collection was initially via web browser plugins distributed through subsidiaries such as AVG.

Data collection 243

Data collection Antivirus Software Malware 243

Joseph Steinberg

FEBRUARY 2, 2021

While we have become somewhat accustomed to the data collection practices of online retailers seeking to analyze our purchase histories in order to better target their marketing efforts, many people may not realize that even some well-known retailers also use data provided by people whose purchases the retailer itself cancelled.

Retail 249

Retail Data collection Artificial Intelligence Marketing 249

Schneier on Security

JUNE 14, 2021

Reached for comment, TikTok could not confirm what product developments necessitated the addition of biometric data to its list of disclosures about the information it automatically collects from users, but said it would ask for consent in the case such data collection practices began.

Data collection 279

Data collection Media 279

Adam Levin

SEPTEMBER 4, 2020

Bush in the wake of the September 11 attacks, but had been phased out by the NSA between 2018 and 2019 after disuse and technical issues had rendered the data collected unusable. . “[T]he

Surveillance 260

Surveillance Data collection Government Cybersecurity 260

Schneier on Security

NOVEMBER 4, 2020

We then comprehensively evaluate[d] both the keystroke/typing detection and text inference frameworks using data collected from a large number of participants.” He says the “text inference framework that uses the keystrokes detected from the video … predict[s] words that were most likely typed by the target user.

Data collection 363

Data collection Software 363

Tech Republic Security

AUGUST 17, 2021

People surveyed by KPMG reported feeling increasingly uneasy about the data collection practices of corporations.

Data privacy 214

Data privacy Data collection 214

Schneier on Security

MARCH 2, 2020

Recently announced Off-Facebook feature comes with similar issues, giving little insight into how advertisers collect your personal data and how to prevent such data collection. Many are surprised at what the companies know about them.

Advertising 271

Advertising Data collection Cybersecurity 271

Security Affairs

OCTOBER 10, 2024

. “ The Mongolian Skimmer uses common techniques: DOM monitoring for sensitive input changes, data exfiltration via encoded tracking pixels, DevTools detection to evade debugging, data collection on page unload, cross-browser compatibility, and anti-debugging measures to avoid code tampering.

Data collection 128

Data collection Engineering Malware Hacking 128

Schneier on Security

NOVEMBER 9, 2018

The boundaries between research and grey data are blurring, making it more difficult to assess the risks and responsibilities associated with any data collection. Many sets of data, both research and grey, fall outside privacy regulations such as HIPAA, FERPA, and PII.

Data collection 231

Data collection Cyber Risk Risk Government 231

Schneier on Security

MARCH 20, 2020

With that in mind, the EFF has some good thinking on how to balance public safety with civil liberties: Thus, any data collection and digital monitoring of potential carriers of COVID-19 should take into consideration and commit to these principles: Privacy intrusions must be necessary and proportionate.

Surveillance 275

Surveillance Big data Data collection Government 275

Malwarebytes

NOVEMBER 7, 2024

They will continue to enjoy our streamlined, integrated user experience, and our no-log service will never track, store, or share any user network data. AzireVPN customers will also continue to enjoy the same privacy-focused VPN service – no logs, no data collection, no bandwidth limitations.

VPN 135

VPN Data collection Internet Internet 135

Schneier on Security

JULY 1, 2021

The interventions recommended here are still relatively light, and reflect the fact that cyber insurance is only a potential incentive for managing societal cyber risk.They include: developing guidance for minimum security standards for underwriting; expanding data collection and data sharing; mandating cyber insurance for government suppliers; and (..)

Insurance 331

Insurance Cyber Insurance Ransomware Marketing 331

Tech Republic Security

JANUARY 4, 2023

Meta has violated GDPR with illegal personal data collection practices for targeted ads. Learn about this latest violation and Meta's rocky GDPR history. The post Meta violates GDPR with non-compliant targeted ad practices, earns over $400 million in fines appeared first on TechRepublic.

Data collection 180

Data collection Big data VPN 180

Schneier on Security

AUGUST 25, 2020

Wethen find that for users who visited 50 or more distinct do-mains in the two-week data collection period, ~50% can be reidentified using the top 10k sites. Our work replicates the original paper's core findings by identifying 48,919 distinct browsing profiles, of which 99% are unique.

Data collection 252

Data collection Risk 252

Schneier on Security

APRIL 28, 2025

The company doesn’t keep logs, so couldn’t turn over data : Windscribe, a globally used privacy-first VPN service, announced today that its founder, Yegor Sak, has been fully acquitted by a court in Athens, Greece, following a two-year legal battle in which Sak was personally charged in connection with an alleged internet offence by an (..)

VPN 249

VPN Internet Internet Data collection 249

Schneier on Security

MARCH 30, 2020

Above all, we must make sure that these measures end and that the data collected for these purposes is not re-purposed for either governmental or commercial ends. I worry that in our haste and fear, we will fail to do any of that. More from EFF.

Surveillance 278

Surveillance Data collection Technology 278

WIRED Threat Level

JULY 24, 2024

A former Google engineer has built a search engine, WebXray, that aims to find illicit online data collection and tracking—with the goal of becoming “the Henry Ford of tech lawsuits.”

Data collection 145

Data collection Engineering 145

The Last Watchdog

JUNE 10, 2024

For instance, it helps online tax services prevent leakage of taxpayers’ personal information via pixels, those imperceptible JavaScripts embedded in a web page to collect information about the user’s interactions.

Data collection 261

Data collection Internet Internet Technology 261

Troy Hunt

NOVEMBER 13, 2024

Apparently, before a child reaches the age of 13, advertisers will have gathered more 72 million data points on them. I knew I'd seen a metric about this sometime recently, so I went looking for "7,000", which perfectly illustrates how unaware we are of the extent of data collection on all of us.

Data breaches 327

Data breaches Passwords B2B Technology 327

Schneier on Security

OCTOBER 3, 2019

Data Collected: 22 Vendors 1,294 Products 4,956 Firmware versions 3,333,411 Binaries analyzed Date range of data: 2003-03-24 to 2019-01-24 (varies by vendor, most up to 2018 releases). [.]. This dataset contains products such as home routers, enterprise equipment, smart cameras, security devices, and more.

IoT 230

IoT Firmware Data collection Architecture 230

Malwarebytes

JANUARY 24, 2025

In April of 2024, Texas Attorney General Ken Paxton sent civil investigative demands to Kia, General Motors, Subaru and Mitsubishi seeking details of their data collection and sharing practices. And in August, Paxton sued General Motors for selling customer driving data to third parties.

Manufacturing 116

Manufacturing Insurance Data collection Data privacy 116

Schneier on Security

DECEMBER 15, 2017

This is a good example of how powerful synthesizing information from disparate data sources can be. We spend too much time worried about individual data collection systems, and not enough about analysis techniques of those systems. It only took 12 turns before the app knew exactly where the car was. Research paper.

Data collection 279

Data collection 279

Schneier on Security

APRIL 3, 2025

Success will require following practical guidelines for maintaining data integrity throughout the AI lifecycle—from data collection through model training and finally to deployment, use, and evolution. In the future, we will need the same assurances for integrity.

Artificial Intelligence 262

Artificial Intelligence Architecture Internet Internet 262

Malwarebytes

JANUARY 20, 2025

Understand how the company will be using your data Block web tracking wherever you can. Malwarebytes Browser Guard automatically declines the cookie consent banners you see on websites, opting you out of data collection performed by tracking cookies (and it’s free).

Surveillance 120

Surveillance Artificial Intelligence Consumer Protection Retail 120

Security Affairs

DECEMBER 5, 2024

Automating Repetitive Tasks AI can also automate many of the tasks that make being a SOC analyst so mind-numbing, including data collection, cross-referencing information, and running queries.

Artificial Intelligence 136

Artificial Intelligence Data collection Cybersecurity Risk 136

Schneier on Security

APRIL 24, 2024

As to privacy, consent authorizes and legitimizes a wide range of data collection and processing. As Professor Heidi Hurd aptly said, consent works “moral magic”—it transforms things that would be illegal and immoral into lawful and legitimate activities. There are generally two approaches to consent in privacy law.

Data collection 325

Data collection Risk 325