<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Privacy on HackingPassion.com : root@HackingPassion.com-[~]</title><link>https://hackingpassion.com/tags/privacy/</link><description>Recent content in Privacy on HackingPassion.com : root@HackingPassion.com-[~]</description><generator>Hugo</generator><language>en</language><lastBuildDate>Wed, 08 Jul 2026 11:29:27 +0200</lastBuildDate><atom:link href="https://hackingpassion.com/tags/privacy/index.xml" rel="self" type="application/rss+xml"/><item><title>Windows Hands Your Name to the Police Through One Hidden Number</title><link>https://hackingpassion.com/windows-gdid-tracking/</link><pubDate>Wed, 08 Jul 2026 11:29:27 +0200</pubDate><guid>https://hackingpassion.com/windows-gdid-tracking/</guid><description>&lt;p>You are &lt;strong>completely anonymous&lt;/strong> and think no one can trace you. But Windows put a &lt;strong>permanent number on your machine&lt;/strong>, it never turns off, and that number is where the police start when they want your name. That is exactly &lt;strong>how the FBI&lt;/strong> just caught a 19-year-old hacker who thought he had &lt;strong>covered every track&lt;/strong>.&lt;/p>
&lt;p>On July 1, US prosecutors in Chicago made their case public against a 19-year-old named &lt;strong>Peter Stokes&lt;/strong>, who holds both a US and an Estonian passport. They say he runs with &lt;strong>Scattered Spider&lt;/strong>, one of the biggest crews in cybercrime, the kind that breaks into companies and then demands money to leave them alone. He has not been found guilty of anything, and under the law he stays &lt;strong>innocent until a court says otherwise&lt;/strong>.&lt;/p></description></item><item><title>Why a Vpn Is Not Privacy</title><link>https://hackingpassion.com/why-a-vpn-is-not-privacy/</link><pubDate>Mon, 06 Jul 2026 14:26:26 +0200</pubDate><guid>https://hackingpassion.com/why-a-vpn-is-not-privacy/</guid><description>&lt;p>The absolutely useless idea of using a VPN for privacy on the internet. &lt;strong>A VPN becomes a honeypot.&lt;/strong> 🧐&lt;/p>
&lt;p>Yes, you read that right.&lt;/p>
&lt;p>First, what a VPN does. You install an app. The app builds an encrypted tunnel from your device to a server owned by the VPN company. Your traffic travels through that tunnel, and from the VPN server it continues to the sites you visit. The sites see the address of the VPN server instead of your home address. Your internet provider sees an encrypted stream to one server and nothing more.&lt;/p></description></item><item><title>Does Google Control Your Email?</title><link>https://hackingpassion.com/does-google-control-your-email/</link><pubDate>Wed, 24 Jun 2026 12:52:27 +0200</pubDate><guid>https://hackingpassion.com/does-google-control-your-email/</guid><description>&lt;p>Anyone on the internet can send an email that looks like it came from your bank, your boss, or you, and the system that delivers it will not check whether that is true.&lt;/p>
&lt;p>The reason is not a bug someone forgot to fix. Email was built in 1982 to trust whoever was talking, back when a few hundred computers were online and the people running them knew each other, and that trust was never taken back out.&lt;/p></description></item><item><title>Google Chrome Silently Installs a 4 GB AI Model on Your Machine Without Asking</title><link>https://hackingpassion.com/chrome-gemini-nano-silent-install/</link><pubDate>Wed, 06 May 2026 13:41:41 +0200</pubDate><guid>https://hackingpassion.com/chrome-gemini-nano-silent-install/</guid><description>&lt;p>Google Chrome installed a &lt;strong>4 GB AI model&lt;/strong> on your machine without asking. The pitch is that it runs locally, keeping your data off Google&amp;rsquo;s servers. The AI button you actually see in your browser sends everything to Google anyway.&lt;/p>
&lt;p>Privacy researcher &lt;strong>Alexander Hanff&lt;/strong> found this during a routine web audit in late April and published his full analysis on 4 May 2026, two days ago. He had built a Chrome profile to run automated tests, the kind where software loads web pages in the background and measures what happens. The profile received no human input whatsoever: nobody moved the mouse, hit a key, or touched the address bar. Chrome just ran quietly in the background doing its thing.&lt;/p></description></item><item><title>Notion AI Leaks Data Before You Click OK: Prompt Injection Hits 100 Million Users</title><link>https://hackingpassion.com/notion-ai-prompt-injection-data-exfiltration/</link><pubDate>Thu, 08 Jan 2026 15:28:25 +0100</pubDate><guid>https://hackingpassion.com/notion-ai-prompt-injection-data-exfiltration/</guid><description>&lt;p>Notion AI steals data before the user clicks OK. 100 million users. 4 million paying customers. Amazon. Nike. Uber. Pixar. More than half of Fortune 500 companies trust this $10 billion platform with their documents. And a hidden PDF can extract everything. 😏 Two major vulnerabilities since September 2025. Notion&amp;rsquo;s response to the latest one: &amp;ldquo;Not Applicable.&amp;rdquo;&lt;/p>
&lt;p>Someone uploads a document to Notion AI. A resume, a customer report, anything. Looks completely normal. But hidden inside is white text on white background, 1-point font size, with a white square image placed over it for good measure. Invisible to humans. The AI reads it perfectly.&lt;/p></description></item><item><title>Malicious Chrome Extensions Steal ChatGPT Conversations from 900,000 Users</title><link>https://hackingpassion.com/chrome-extensions-steal-chatgpt-conversations/</link><pubDate>Thu, 08 Jan 2026 09:56:23 +0100</pubDate><guid>https://hackingpassion.com/chrome-extensions-steal-chatgpt-conversations/</guid><description>&lt;p>Two Chrome extensions. 900,000 users. Every ChatGPT and DeepSeek conversation stolen. Sent to attacker servers every 30 minutes. Google gave one of them a Featured badge. The extensions are still live in the Chrome Web Store right now. 🤔&lt;/p>
&lt;p>This is the third major case in three weeks. First the sleeper extensions that waited 7 years before activating. Then Urban VPN selling 8 million users&amp;rsquo; AI chats to data brokers. Now this. Security researchers have a name for it: &amp;ldquo;Prompt Poaching.&amp;rdquo; And it&amp;rsquo;s becoming a gold rush.&lt;/p></description></item><item><title>Your Smart TV is spying on you, and most people don't know. But YOU will!</title><link>https://hackingpassion.com/smart-tv-spying-acr-tracking/</link><pubDate>Sat, 15 Nov 2025 12:00:15 +0100</pubDate><guid>https://hackingpassion.com/smart-tv-spying-acr-tracking/</guid><description>&lt;p>Nearly every modern Smart TV has ACR technology. You&amp;rsquo;ve probably never heard of it. (Most people haven&amp;rsquo;t. Stick with me&amp;hellip;) It&amp;rsquo;s there. On almost every Smart TV. And it&amp;rsquo;s tracking everything on your screen.&lt;/p>
&lt;p>Not just Netflix. Not just YouTube. EVERYTHING.&lt;/p>
&lt;p>→ Playing PlayStation? Tracked.
→ Watching cable TV? Tracked.
→ Using Chromecast or Fire Stick? Tracked.
→ Private security camera footage? Tracked.&lt;/p>
&lt;p>If it appears on your screen, your TV is watching it, recording it, and sending that data somewhere else.&lt;/p></description></item></channel></rss>