A Tsinghua University RealAI team demonstrated that by exploiting a face‑recognition vulnerability they could unlock 19 different domestic smartphones within 15 minutes, revealing severe security risks for biometric authentication across low‑end and flagship devices.
In the era of big data, Meituan-Dianping implements a comprehensive security management system—including organizational safeguards, deep defense architecture, encryption, and data desensitization—to meet regulatory demands and protect billions of users' privacy and information security.
This week’s roundup covers the Shenzhen court ruling that WeChat friend lists are not personal privacy, Microsoft’s removal of legacy Edge, the formation of the Rust Foundation, a novel supply‑chain attack on 35 tech firms, Linux floppy driver updates, Go generics progress, and other notable industry developments.
This article explains how QuNar’s front‑end team built a comprehensive Android SDK privacy monitoring system using a custom Transform, ASM bytecode manipulation, and annotation‑driven hook configurations, detailing both basic and advanced solutions for globally intercepting sensitive API calls and ensuring extensible, version‑independent protection.
The article examines how reliance on facial‑recognition technology has led to wrongful arrests of individuals like Jamal Owens and Nijeer Parks in the United States, highlights technical limitations, legal controversies, and privacy concerns, and questions whether the technology should be used at all.
The article exposes how the promise of big‑data convenience masks rampant privacy violations—from celebrity photo leaks and app data sales to weak legal penalties—illustrating that ordinary users’ personal information has become a cheap commodity with little protection.
GitHub announced the removal of unnecessary cookies, reflecting GDPR-driven privacy shifts and showing how modern web platforms can reduce data collection while still tracking essential performance metrics without third‑party trackers.
This article explains the evolution of federated learning, contrasts Google’s cross‑device horizontal approach with China’s cross‑silo vertical implementations, analyzes their security vulnerabilities, and demonstrates how secure multi‑party computation—including differential privacy, secure aggregation, and secret‑sharing techniques—can address these challenges while highlighting performance trade‑offs.
This article explains the fundamentals of federated learning and secure multi‑party computation, compares their security and performance trade‑offs, discusses the differences between Google’s cross‑device FL and China’s cross‑silo FL, and presents Alibaba’s recent advances and practical solutions for privacy‑preserving collaborative modeling.
This article introduces Secure Multi‑Party Computation and its two‑party variant, explains Yao’s garbled circuit technique, details a complete garbled‑circuit protocol, and walks through a concrete millionaire‑problem example to illustrate privacy‑preserving computation.
This article explains the new iOS 14 privacy permission model and provides detailed adaptation guidance for photo‑library limited access, camera/microphone usage indicators, precise location handling, local‑network authorization, Wi‑Fi address randomisation, IDFA tracking restrictions, and clipboard access notifications.
A Beijing Internet Court case ruled that Baidu must pay nominal damages after failing to remove a user’s ID photo, uploaded to a defunct alumni site, which the search engine indexed and displayed at the top of results, highlighting legal responsibilities for personal data handling.
This article reviews the model structure of federated transfer learning and details three secure training approaches—additive homomorphic encryption, ABY, and SPDZ—combined with polynomial approximation, explaining their protocols, steps, and the role of federated transfer learning within the broader federated learning landscape.
A misconfigured ElasticSearch server owned by Microsoft leaked millions of Bing mobile app search queries, location data, device IDs and other details, exposing users worldwide to phishing, ransomware and even robbery risks, while Microsoft claims the breach affected only a small amount of non‑identifiable data.
This article introduces the fundamentals of transfer learning and federated transfer learning, explains domain adaptation for sentiment analysis, presents two illustrative examples—mid-level image feature transfer and text-to-image transfer—and outlines the model architecture and loss functions of federated transfer learning frameworks.
A recent investigation uncovered a 1.2 TB leak containing personal data of up to 20 million users from seven VPN services that claim to keep no logs, revealing email addresses, passwords, IPs, device details, and connection logs, and prompting urgent security recommendations.
This article outlines how Ant Group’s shared‑intelligence platform combines differential privacy, trusted execution environments, and secure multi‑party computation to enable privacy‑preserving AI and data collaboration across financial scenarios, addressing regulatory demands, technical challenges, and real‑world deployment cases.
The article examines how AI-driven mosaic removal tools, leveraging GAN technology, are reviving uncensored adult video content, sparking privacy, copyright, and ethical debates while detailing the technical challenges, industry reactions, and the rise of related software among Chinese users.
This guide explains how to protect your personal phone number and email from spam by using a cloud‑based virtual SMS service and a temporary 10‑minute email service, detailing their URLs, usage steps, advantages, and limitations.
The article examines the rise of AI‑generated deepfake media, its legal treatment under China's new Civil Code and other regulations, the technical ease of creating such content, and the combined efforts of detection technology, ethical education, and legislation to curb its harmful impact.
This article introduces the challenges of traditional centralized recommendation systems, explains the principles and implementations of federated recommendation algorithms—including vertical and horizontal federated matrix factorization and factorization machines—using WeBank’s open-source FATE platform, and discusses cloud services, practical use cases, and performance benefits.
Apple and Google announced a joint Bluetooth‑based "Tracing Key" system that alerts smartphone users when they have been near confirmed COVID‑19 cases, detailing its privacy‑focused design, technical key structure, and collaboration with health authorities.
The article explains the recent Weibo data breach, describing how attackers used credential‑stuffing (撞库), data leakage (漏水), database dumping (拖库) and data laundering (洗库) to obtain millions of user records, the technical steps involved, and the security implications for both users and platforms.
Google’s surprise early release of the Android 11 Developer Preview brings Pixel‑only support, a detailed rollout schedule, and six major enhancements—including 5G‑ready connectivity, native cut‑out and waterfall screen APIs, chat bubbles, upgraded privacy controls, screen recording, and Pixel 4 motion‑sense gestures.
This guide reviews Signal Messenger’s privacy‑focused features—including disappearing messages, screen security, safety numbers, and locked notifications—explains how to install the desktop client on Ubuntu/Linux via terminal commands, and offers a brief personal assessment of its usability compared to WhatsApp and Telegram.
This guide introduces Signal Messenger as a privacy‑focused open‑source alternative to mainstream apps, outlines its key security features, and provides step‑by‑step commands to install the desktop client on Ubuntu/Linux.
Microsoft’s January 2020 launch of the Chromium‑based Edge browser brings cross‑platform support, Chrome extension compatibility, enhanced privacy controls, and a new design, while also addressing early language‑pack issues and signaling a strategic shift toward embracing Chromium across Windows devices.
A recent test showed that a printed photo can bypass facial‑recognition parcel lockers, sparking concerns about privacy, data security, and the reliability of AI‑driven biometric systems as they become more widespread.
The popular Windows file‑search tool Everything includes an HTTP server that, when left unsecured, lets anyone who knows your IP and port browse and download every file on your computer, exposing personal data that can even be indexed by search engines, but simple configuration changes can close the leak.
The talk outlines how recent privacy regulations like GDPR expose data sovereignty, jurisdiction, and fines, then explains how blockchain’s distributed ledger, consensus, smart contracts, and cryptographic techniques—including homomorphic encryption and zero‑knowledge proofs—address trust gaps and privacy challenges, illustrated with real‑world financial use cases and a telecom‑backed BaaS platform.
A personal account describes how the author used IP‑lookup services, a short‑link trick, and a self‑made Android APK to extract his girlfriend’s location, call logs, and contacts, ultimately uncovering her infidelity through a series of social‑engineering steps.
This article presents a comprehensive overview of federated learning, covering its motivation, vertical and horizontal variants, privacy‑preserving technologies, real‑world use cases, and the industrial‑grade open‑source platform FATE that enables secure cross‑organization machine learning.
The article explains how data islands and privacy concerns hinder AI development and describes Ant Financial's shared machine learning approach, which combines Trusted Execution Environments (TEE) and Multi‑Party Computation (MPC) to enable secure, privacy‑preserving data sharing and collaborative model training across organizations.
The article examines the rapid rise of FaceApp, an AI-driven photo‑editing tool that can age or rejuvenate faces, discusses its technical foundations such as autoencoders, and analyzes the privacy and security concerns raised by governments and users worldwide.
Recent reports reveal that many Android apps secretly collect location and identifier data despite denied permissions, a zero‑day Zoom flaw lets any website hijack Mac cameras, and Didi adjusts its pricing, while a man released after splashing water on Baidu's CEO highlights broader tech‑related news.
At F8 2023, Facebook unveiled a “Private Vision” emphasizing encrypted data and limited content visibility, introduced a “secret crush” dating tool, rolled out the ultra‑lightweight Lightspeed Messenger, highlighted community‑centric Groups and cross‑app integration, and signaled major AR/VR/AI investments while showcasing research on user well‑being and new business‑enablement capabilities for developers.
Android Q brings a comprehensive set of enhancements—including stronger privacy controls, refined location permissions, shared shortcuts, a settings panel API, dynamic depth imaging, new audio/video codecs, native MIDI support, and ART performance improvements—designed to empower developers and improve user experience across a wide range of modern mobile devices.
Arm’s 2019 IoT outlook highlights the rise of smart home devices, personalized delivery using GPS and sensors, AI‑enhanced healthcare and city services, while noting growing consumer concerns over data privacy and security, backed by a survey of 2,000 global respondents.
Google Public DNS now fully supports DNS over HTTPS, enhancing privacy and security with minimal performance impact, while the article explains why DNS needs encryption, how DoH works, browser support, and practical considerations for adoption.
A recent dark‑web sale revealed that over 500 million records from dozens of Huazhu hotel brands—including personal IDs, booking details, and login credentials—were compromised, prompting urgent security advice and highlighting the growing risks of large‑scale data breaches.
The article summarizes WWDC 2018 highlights, covering Apple's focus on stability, performance, and security across iOS, macOS, Xcode, Swift, ARKit, and Machine Learning, while also noting new developer tools, privacy requirements, and recruitment opportunities at Liulishuo.
An in‑depth overview explains how blockchain, homomorphic encryption, zero‑knowledge proofs, group and ring signatures, and differential privacy collectively secure data flow, enabling trusted sharing while preserving ownership and privacy across providers, consumers, and algorithm services.
The article outlines a comprehensive, layered data‑security lifecycle—from secure traffic and authentication through encrypted storage, role‑based access, audit logging, and safe production‑to‑test data handling—emphasizing privacy‑compliant practices, anti‑scraping measures, secure deletion, and incremental ROI‑driven adoption for enterprises.
This article explains the fundamentals of web tracking, distinguishing first- and third-party trackers, detailing technical mechanisms such as cookies, browser fingerprinting, and web beacons, and offers practical tools like Lightbeam to detect and visualize trackers, highlighting privacy implications for users and operators.
The Facebook‑Cambridge Analytica scandal exposed the illicit harvesting of 50 million users' data, political manipulation allegations, multiple investigations, a sharp stock plunge, executive resignations, and heightened global scrutiny of data‑privacy practices.
The article explores the collaborative relationship between Chrome teams and the web development community, outlining high‑level goals for accessibility, performance, security, privacy, overall platform openness, and calls for transparent cooperation, best‑practice guides, and shared tools to build a faster, more reliable web for everyone.
The article explains Monero’s mysterious origins, its strong privacy technologies that differentiate it from Bitcoin, recent security concerns involving malicious mining, market performance, and upcoming initiatives like the Coral Reef project while also noting competition from other privacy‑focused cryptocurrencies.
This article summarizes a AAAI 2018 paper that introduces a privacy‑preserving, decentralized matrix‑factorization approach for point‑of‑interest recommendation, detailing its problem definition, model design, random‑walk based user interaction, experimental evaluation on Foursquare and Alipay datasets, and future research directions.
The article explains how various companies use technologies such as ultrasonic audio, facial recognition, smart TV monitoring, and image analysis to collect personal data, outlines the common pathways of information leakage, and offers practical advice for safeguarding online privacy.
At the 2016 China Big Data Industry Summit, Ctrip's CTO explained how the company's massive travel data and predictive analytics improve tourism planning, marketing, and privacy protection, illustrating the practical value of big data for users, platforms, and suppliers.
The article outlines nine practical advantages of open‑source software—zero cost, instant availability, rapid security fixes, higher security, comprehensive community support, user‑centric customization, extended hardware lifespan, enhanced privacy, and superior overall quality—explaining why it remains a strong competitor to proprietary solutions.
The article explores historical privacy tactics of the USSR and the United States, offers practical habits for protecting personal information online, explains how to detect leaked data using search engines and social‑media checks, and suggests strategies for mitigating exposure and crafting false identities.
The article chronicles Pavel Durov’s journey from creating Russia’s VK social network to founding Telegram, highlighting his libertarian philosophy, clashes with authorities, and the technical design choices—such as the open‑source MTProto protocol, privacy focus, zero‑ads policy, and high performance—that make Telegram a unique secure messaging service.
This article explains the many data points browsers expose—such as IP, cookies, language, hardware, and HTML5 APIs—that enable device fingerprinting, describes how fingerprinting scripts operate, and outlines practical countermeasures like disabling JavaScript, using privacy extensions, and configuring browser settings.
With third‑party cookies dying, Facebook, Google, and Apple are replacing them by leveraging their own login ecosystems—Facebook’s SSO and Atlas platform, Google’s Ad ID across Android and services, and Apple’s IDFA tied to Apple IDs—while third‑party data firms supplement detail, and users can still disable most tracking.
