Show notes
Three cracks opened up in Apple's privacy story this week: iCloud Private Relay leaking real IP addresses through DNS prefetching, WebTransport, and passkeys; Hide My Email exposing real addresses in bounce logs; and an unprecedented wave of spyware notifications going out to targeted users. Also this week: 737 fake VPN extensions sitting in the Chrome Web Store, Edge phasing out Manifest V2, a judge giving Google one week to fix its anticompetitive Play Store flow, and France's top court blocking the under-15 social media ban on free expression grounds.Stop handing out your real email address. addy.io gives every site an alias that forwards to your normal inbox. Open source, self-hostable, with browser extensions and mobile apps. 🚀 Get started for free: https://addy.io/?utm_source=techloreIn this episode:Highlight: Three Apple flaws worth acting on today: Private Relay's IP leaks, the Hide My Email exposure, the macOS screen-sharing bug, and the spyware alert wave737 fake VPN extensions impersonating Proton, Nord, Surfshark and Cloudflare in the Chrome Web Store, with 500+ still live after cleanupA judge gives Google one week to fix its anticompetitive Play Store flow after EpicFrance's top court blocks the under-15 social media ban, citing freedom of expression and privacyData Breaches: CareCloud (3.7M patients), a LiteLLM supply chain attack leaking terabytes of credentials, 3.6M Azure records, RingCentral (1.6M), Sakura Internet, Clarity Check's exposed face database, the French tax authority, SafePal, Trezor, and Pokémon CenterThreats: the Evooo1Bot Linux router botnet, Comcast adding motion sensing to millions of routers, Google buying bankrupt Spirit Airlines' customer data to train AI, DDoS attacks on Threema, and a Copilot prompt-injection disclosureFOSS+: Tor Browser 15.0.20, Waterfox 6.7 "Supernova," a native ad blocker in Firefox for iOS, Startpage arriving in Firefox, Brave 1.93's GPU fingerprinting protections, Proton Mail Categories, Proton's AI Paper Trail tool, Ente's post-quantum work, Linux kernel 7.2, the Fairphone Gen 6 Plus landing in the US, SimpleX's equity crowdfunding, and Pine64 halting Linux device production🧡 SUPPORT TECHLOREBecome a Techlorian and keep this show growing: ★ Support this podcast ★🔗 SOURCES & LINKSView all sources here: https://techlore.tech/apples-private-relay-is-leaking-your-ip-plus-fake-vpn-extensions-frances-big-win/⏱️ TIMESTAMPS(00:00) - WELCOME TO SURVEILLANCE REPORT
(00:38) - APPLE USERS SHOULD LISTEN UP
(09:04) - IMPORTANT BROWSER PRIVACY UPDATES
(13:34) - OUR SPONSOR: ADDY.IO
(15:06) - GOOGLE FORCED TO BEHAVE
(18:24) - A HUGE WIN IN FRANCE
(22:26) - DEFENSE BULLETIN: DATA BREACHES
(27:30) - DEFENSE BULLETIN: THREATS
(32:30) - DEFENSE BULLETIN: FOSS+🎥 VIDEOWatch on YouTube📰 ABOUT SURVEILLANCE REPORTYour essential weekly tech news podcast covering the latest threats to security, privacy, and digital freedom. Hosted by Henry Fisher from Techlore.
