Google can now use your Gmail data for ads: How to turn it off
Google’s Gmail settings can allow email data to inform ad personalization. Users can turn off the relevant personalization and smart-feature settings to limit that use. (proton.me)
TrendAI researchers used digital advertising data to identify an unusual campaign targeting Starlink users. They concluded that Israeli ad-tech firm Discover-Tech was one of the world’s largest bidders for ads shown to Starlink customers, ranking first in more than 100 countries. The researchers viewed the pattern as evidence of tracking or surveillance rather than ordinary advertising. Their report, published October 15, used the codename “Shadow-Earth-79”; people familiar with the work identified the company as Discover-Tech. The report also found it was the top ad buyer in Syria, Libya, Yemen and South Sudan, and ranked second in Afghanistan, despite little apparent demand for legitimate Western advertising in those markets. Researchers considered naming Discover-Tech, but sources say executives raised legal concerns. TrendAI said its cautious attribution practices are intended to reduce the risk of mistaken identification.
Separate investigations by Citizen Lab and ad-tech firm Confiant named Discover-Tech and said it exploited advertising auctions, which can expose user data to bidders. That information can be combined to identify people, track them online or potentially target them with surveillance software. The groups found ads in sensitive networks, including those of media organizations, governments and technology firms. Google, Comcast and other companies removed Discover-Tech from their ad platforms, while a US technology company and an international organization began inquiries into possible employee targeting. The scrutiny reflects Starlink’s ability to bypass local telecom controls and its importance in restricted or conflict zones, including Ukraine.
Summary generated by AI from the linked article. hn.today is not affiliated with Hacker News or Y Combinator.
Google’s Gmail settings can allow email data to inform ad personalization. Users can turn off the relevant personalization and smart-feature settings to limit that use. (proton.me)
A viral post claims Claude Code found TikTok, Instagram, Facebook, and Snapchat recording conversations in the background, but provides no verifiable evidence. The allegations are unsubstantiated; users can review microphone permissions and background activity in their phone settings. (twitter.com)
Discover-Tech, previously linked to zero-click spyware delivery, was the top bidder for Starlink ad impressions in 105 countries, prompting researchers to warn of a possible surveillance operation targeting users. The activity may focus on countries where Starlink is banned or restricted, though the findings do not establish who is behind the effort or its exact purpose. (gizmodo.com)
A critical memory-corruption flaw in TianoCore EDK II UEFI firmware lets attackers run code during startup, before defenses such as Secure Boot take effect. The flaw affects firmware used by most server vendors and data centers, and attackers could use it to install persistent boot-time malware. (arstechnica.com)
Anthropic says its unreleased Claude model found and chained critical vulnerabilities in widely used software, including a one-click Chrome exploit that achieved remote code execution. The company reported the flaws to vendors; Google assigned and patched 62 related Chrome CVEs. (anthropic.com)
Tailscale is investigating security vulnerabilities affecting Tailscale SSH and has shared an update on its findings and remediation efforts. The company is also providing guidance for customers. (tailscale.com)
Today's best Hacker News stories, summarized and screenshotted, one email a day.