This article explains data security fundamentals, the full data lifecycle, the 4A/5A security model, trust‑level goals, and a comprehensive tool framework covering identity authentication, permission control, asset protection, and governance strategies to protect data throughout its lifecycle.
This article explores HTTP cookies in depth, covering their definition, attributes, security settings, tracking mechanisms, third‑party usage, front‑end management practices, emerging standards like SameSite and SameParty, and future trends such as Chrome’s privacy sandbox and the Cookie Store API.
This article explains data masking, its importance for protecting sensitive information, and details both static and dynamic masking methods—including nullification, randomization, substitution, symmetric encryption, mean value, and offset rounding—along with practical examples and implementation considerations.
This article presents the background, industry challenges, design principles, architecture, core capabilities, and implementation details of JD Tech's privacy compliance detection system for mobile applications, highlighting both static and dynamic analysis techniques to identify and remediate personal data risks.
At the WISE2021 China Digital Innovation Summit, Zhongtong Express CTO Zhu Jingxi detailed the company's digital transformation journey, highlighting the impact of electronic waybills, data-driven operations, AI routing, and privacy security on reshaping the logistics supply chain and boosting efficiency.
Meta’s latest privacy tool lets users pre‑upload intimate images to generate a unique digital fingerprint that platforms match and delete if re‑uploaded, but its reliance on exact‑match hashing, similar to PhotoDNA, raises questions about effectiveness, privacy, and the broader challenges of end‑to‑end encryption delays at the company.
In today's big‑data era, excessive stress leads many to seek relief through risky online activities, but unauthorized app permissions and visits to dubious sites can expose personal information, so users must stay vigilant, limit permissions, avoid harmful sites, and use security tools to protect their mobile privacy.
This article compares Google Chrome and the open‑source Chromium browser, covering UI nuances, open‑source versus proprietary code, feature gaps such as sign‑in and media codecs, installation quirks across platforms, privacy implications, benchmark performance, and guidance on which browser best fits different user priorities.
The article examines how the Personal Information Protection Law creates a new authorization framework and introduces the “computable but not identifiable” concept, arguing that trusted‑computing technologies and controlled environments can reconcile strict privacy safeguards with the data‑driven needs of AI and other industries.
Swedish parents, frustrated by the costly and unusable official Skolplattformen app, reverse‑engineered its API and released the open‑source Öppna Skolplattformen, sparking legal battles, privacy debates, and a community‑driven alternative that now serves thousands of families.
Even when you use a browser’s incognito or private mode, your search queries, visited sites, and personal data can still be captured by browsers, cookies, your employer, ISP, and even input methods, making true online anonymity virtually impossible.
This tutorial explains how to build a custom Gradle Transform plugin, integrate ASM bytecode manipulation, and instrument Android applications to detect and report illegal privacy API calls, covering project setup, plugin implementation, ASM basics, and practical verification steps.
Recent reports reveal that foreign privacy‑tracking apps can cause major Chinese services like Meituan, major layoffs at Beike's Shanghai R&D team, and an FSF warning that Windows 11 undermines user freedom, highlighting growing concerns over data privacy, corporate restructuring, and open‑source advocacy.
This article introduces d18n, a Go‑based, cross‑platform data‑desensitization tool that supports multiple databases and file formats, explains common desensitization scenarios, details its sensitive‑data identification techniques—including keyword, regex, and NLP‑based DFA—and outlines six practical masking algorithms with export and import workflows.
This article presents an in‑depth overview of Baidu's Data Federation Platform, detailing its layered architecture, core technical capabilities, privacy‑preserving collaborative research on epidemic prediction and shared vehicle optimization, and explores federated learning types, PaddleFL implementations, and model explainability techniques.
GitHub Copilot, powered by the Codex model, recently generated a seemingly real Chinese ID number for Bilibili CEO Chen Rui, sparking concerns about privacy leaks, model training data, and the broader risks of AI code assistants inadvertently exposing personal information.
This article explains federated learning, its vertical and horizontal variants, the privacy risks of sample intersection in financial scenarios, reviews common de‑identification methods, and introduces the xID technique with generation‑mapping services to securely protect intersecting data while enabling collaborative AI modeling.
This article investigates whether a company can monitor WeChat conversations by analyzing the web and mobile protocols, detailing how SSL/TLS, MMTLS, private TCP connections, and embedded cryptographic keys affect the visibility of chat messages on corporate networks.
Since 2018, Firefox has lost 46 million monthly active users, dropping from 244 million to 198 million, as users favor Chromium‑based browsers for better performance, default status, and privacy concerns, prompting a call for continued support of Firefox as a vital anti‑monopoly alternative.
The article explains how browser incognito or private‑browsing modes work, clarifies common misconceptions, details why they do not provide true anonymity, and explores technical detection methods and fingerprinting techniques—including code examples—while offering guidance on protecting personal privacy.
This article surveys essential front‑end knowledge, covering a comprehensive JavaScript algorithm curriculum, browser‑fingerprinting privacy concerns, collaborative design platforms like Figma, the Markdown‑to‑PPT tool Slidev, and a step‑by‑step guide to implementing the SLIC pixel‑art algorithm.
This article explains how Aspect‑Oriented Programming is applied in Android development to achieve non‑intrusive privacy compliance checks and thread‑usage optimization, detailing the use of compile‑time ASM bytecode instrumentation and runtime Xposed/epic hooks, along with code examples and measured performance gains.
Facial recognition technology, now common in payments, transport and law enforcement, often captures more than just the face, uploading full‑camera images to back‑ends where human reviewers may see users in vulnerable situations, raising serious privacy and security concerns.
Facial recognition technology, now ubiquitous in payments, transportation and identity verification, often records the entire camera view and forwards full images to human reviewers, raising serious privacy concerns, especially in third‑party apps that may expose users in vulnerable situations.
The article examines how increasing privacy regulations—especially after iOS 14—challenge personalized advertising by focusing on the technical core of user identification, the risks of cross‑domain data sharing, and a range of mitigation strategies such as fingerprint protection, third‑party cookie blocking, and privacy‑preserving attribution frameworks like PCM, SKAdNetwork, AEM, and FLoC.
A recent exposé reveals that many facial‑recognition systems capture the entire camera view and send images to backend staff for manual review, exposing users—often in vulnerable moments—to privacy breaches and sparking widespread concern across social media.
In September 2022, Nantong police uncovered China's first nationwide case of illegal WeChat user data harvesting using a "clean fan" application, leading to the arrest of eight suspects who were convicted for illegally obtaining computer system data and controlling systems, highlighting severe information security risks.
This comprehensive guide walks you through selecting a secure Linux distribution, configuring kernel and sysctl parameters, applying boot‑time hardening, managing network and firewall rules, restricting root access, enabling MAC policies, sandboxing applications, and employing advanced memory and entropy techniques to dramatically improve system privacy and resilience against attacks.
This comprehensive guide explains how to dramatically improve Linux security and privacy by selecting hardened distributions, configuring kernel and boot parameters, applying sysctl tweaks, disabling unnecessary services, using MAC frameworks, sandboxing applications, hardening memory allocation, and following best‑practice system administration steps.
This article explains what data masking (also called data de‑identification) is, why it is essential for protecting personal data in sectors like finance and healthcare, and details static and dynamic masking methods along with common techniques such as truncation, randomization, replacement, encryption, averaging and offsetting.
This article explains how data islands hinder AI progress, introduces federated learning as a privacy‑preserving solution, details JD.com’s 9N‑FL platform—including its architecture, features, classification, privacy‑preserving techniques, and algorithm support—and demonstrates its successful application in e‑commerce advertising that yielded over 15% revenue growth.
This report investigates the malicious “Le Bao” Android application that masquerades as a WeChat‑like chat tool, detailing its sample characteristics, hidden QR‑code group‑joining mechanism, membership‑based porn livestream access, promotion methods, profit model, and comprehensive traceability of servers, payment channels, and social accounts.
This article reviews nine major data breach incidents—from Clearview AI to Yahoo—detailing their scope, compromised data types, and impact, and emphasizes the importance of robust security practices for developers to prevent such losses.
A leaked early draft of Google’s Android 12 documentation shows a flatter UI with more white space and rounded corners, a redesigned notification panel, new privacy indicators for camera and microphone use, and a small “Conversation” widget that may become mandatory on all devices.
A Tsinghua University RealAI team demonstrated that by exploiting a face‑recognition vulnerability they could unlock 19 different domestic smartphones within 15 minutes, revealing severe security risks for biometric authentication across low‑end and flagship devices.
In the era of big data, Meituan-Dianping implements a comprehensive security management system—including organizational safeguards, deep defense architecture, encryption, and data desensitization—to meet regulatory demands and protect billions of users' privacy and information security.
This week’s roundup covers the Shenzhen court ruling that WeChat friend lists are not personal privacy, Microsoft’s removal of legacy Edge, the formation of the Rust Foundation, a novel supply‑chain attack on 35 tech firms, Linux floppy driver updates, Go generics progress, and other notable industry developments.
This article explains how QuNar’s front‑end team built a comprehensive Android SDK privacy monitoring system using a custom Transform, ASM bytecode manipulation, and annotation‑driven hook configurations, detailing both basic and advanced solutions for globally intercepting sensitive API calls and ensuring extensible, version‑independent protection.
The article examines how reliance on facial‑recognition technology has led to wrongful arrests of individuals like Jamal Owens and Nijeer Parks in the United States, highlights technical limitations, legal controversies, and privacy concerns, and questions whether the technology should be used at all.
The article exposes how the promise of big‑data convenience masks rampant privacy violations—from celebrity photo leaks and app data sales to weak legal penalties—illustrating that ordinary users’ personal information has become a cheap commodity with little protection.
GitHub announced the removal of unnecessary cookies, reflecting GDPR-driven privacy shifts and showing how modern web platforms can reduce data collection while still tracking essential performance metrics without third‑party trackers.
This article explains the evolution of federated learning, contrasts Google’s cross‑device horizontal approach with China’s cross‑silo vertical implementations, analyzes their security vulnerabilities, and demonstrates how secure multi‑party computation—including differential privacy, secure aggregation, and secret‑sharing techniques—can address these challenges while highlighting performance trade‑offs.
This article explains the fundamentals of federated learning and secure multi‑party computation, compares their security and performance trade‑offs, discusses the differences between Google’s cross‑device FL and China’s cross‑silo FL, and presents Alibaba’s recent advances and practical solutions for privacy‑preserving collaborative modeling.
This article introduces Secure Multi‑Party Computation and its two‑party variant, explains Yao’s garbled circuit technique, details a complete garbled‑circuit protocol, and walks through a concrete millionaire‑problem example to illustrate privacy‑preserving computation.
This article explains the new iOS 14 privacy permission model and provides detailed adaptation guidance for photo‑library limited access, camera/microphone usage indicators, precise location handling, local‑network authorization, Wi‑Fi address randomisation, IDFA tracking restrictions, and clipboard access notifications.
A Beijing Internet Court case ruled that Baidu must pay nominal damages after failing to remove a user’s ID photo, uploaded to a defunct alumni site, which the search engine indexed and displayed at the top of results, highlighting legal responsibilities for personal data handling.
This article reviews the model structure of federated transfer learning and details three secure training approaches—additive homomorphic encryption, ABY, and SPDZ—combined with polynomial approximation, explaining their protocols, steps, and the role of federated transfer learning within the broader federated learning landscape.
A misconfigured ElasticSearch server owned by Microsoft leaked millions of Bing mobile app search queries, location data, device IDs and other details, exposing users worldwide to phishing, ransomware and even robbery risks, while Microsoft claims the breach affected only a small amount of non‑identifiable data.
This article introduces the fundamentals of transfer learning and federated transfer learning, explains domain adaptation for sentiment analysis, presents two illustrative examples—mid-level image feature transfer and text-to-image transfer—and outlines the model architecture and loss functions of federated transfer learning frameworks.
A recent investigation uncovered a 1.2 TB leak containing personal data of up to 20 million users from seven VPN services that claim to keep no logs, revealing email addresses, passwords, IPs, device details, and connection logs, and prompting urgent security recommendations.
This article outlines how Ant Group’s shared‑intelligence platform combines differential privacy, trusted execution environments, and secure multi‑party computation to enable privacy‑preserving AI and data collaboration across financial scenarios, addressing regulatory demands, technical challenges, and real‑world deployment cases.
The article examines how AI-driven mosaic removal tools, leveraging GAN technology, are reviving uncensored adult video content, sparking privacy, copyright, and ethical debates while detailing the technical challenges, industry reactions, and the rise of related software among Chinese users.
This guide explains how to protect your personal phone number and email from spam by using a cloud‑based virtual SMS service and a temporary 10‑minute email service, detailing their URLs, usage steps, advantages, and limitations.
The article examines the rise of AI‑generated deepfake media, its legal treatment under China's new Civil Code and other regulations, the technical ease of creating such content, and the combined efforts of detection technology, ethical education, and legislation to curb its harmful impact.
This article introduces the challenges of traditional centralized recommendation systems, explains the principles and implementations of federated recommendation algorithms—including vertical and horizontal federated matrix factorization and factorization machines—using WeBank’s open-source FATE platform, and discusses cloud services, practical use cases, and performance benefits.
Apple and Google announced a joint Bluetooth‑based "Tracing Key" system that alerts smartphone users when they have been near confirmed COVID‑19 cases, detailing its privacy‑focused design, technical key structure, and collaboration with health authorities.
The article explains the recent Weibo data breach, describing how attackers used credential‑stuffing (撞库), data leakage (漏水), database dumping (拖库) and data laundering (洗库) to obtain millions of user records, the technical steps involved, and the security implications for both users and platforms.
Google’s surprise early release of the Android 11 Developer Preview brings Pixel‑only support, a detailed rollout schedule, and six major enhancements—including 5G‑ready connectivity, native cut‑out and waterfall screen APIs, chat bubbles, upgraded privacy controls, screen recording, and Pixel 4 motion‑sense gestures.
This guide reviews Signal Messenger’s privacy‑focused features—including disappearing messages, screen security, safety numbers, and locked notifications—explains how to install the desktop client on Ubuntu/Linux via terminal commands, and offers a brief personal assessment of its usability compared to WhatsApp and Telegram.
This guide introduces Signal Messenger as a privacy‑focused open‑source alternative to mainstream apps, outlines its key security features, and provides step‑by‑step commands to install the desktop client on Ubuntu/Linux.
Microsoft’s January 2020 launch of the Chromium‑based Edge browser brings cross‑platform support, Chrome extension compatibility, enhanced privacy controls, and a new design, while also addressing early language‑pack issues and signaling a strategic shift toward embracing Chromium across Windows devices.
A recent test showed that a printed photo can bypass facial‑recognition parcel lockers, sparking concerns about privacy, data security, and the reliability of AI‑driven biometric systems as they become more widespread.
The popular Windows file‑search tool Everything includes an HTTP server that, when left unsecured, lets anyone who knows your IP and port browse and download every file on your computer, exposing personal data that can even be indexed by search engines, but simple configuration changes can close the leak.
The talk outlines how recent privacy regulations like GDPR expose data sovereignty, jurisdiction, and fines, then explains how blockchain’s distributed ledger, consensus, smart contracts, and cryptographic techniques—including homomorphic encryption and zero‑knowledge proofs—address trust gaps and privacy challenges, illustrated with real‑world financial use cases and a telecom‑backed BaaS platform.
A personal account describes how the author used IP‑lookup services, a short‑link trick, and a self‑made Android APK to extract his girlfriend’s location, call logs, and contacts, ultimately uncovering her infidelity through a series of social‑engineering steps.
This article presents a comprehensive overview of federated learning, covering its motivation, vertical and horizontal variants, privacy‑preserving technologies, real‑world use cases, and the industrial‑grade open‑source platform FATE that enables secure cross‑organization machine learning.
The article explains how data islands and privacy concerns hinder AI development and describes Ant Financial's shared machine learning approach, which combines Trusted Execution Environments (TEE) and Multi‑Party Computation (MPC) to enable secure, privacy‑preserving data sharing and collaborative model training across organizations.
The article examines the rapid rise of FaceApp, an AI-driven photo‑editing tool that can age or rejuvenate faces, discusses its technical foundations such as autoencoders, and analyzes the privacy and security concerns raised by governments and users worldwide.
Recent reports reveal that many Android apps secretly collect location and identifier data despite denied permissions, a zero‑day Zoom flaw lets any website hijack Mac cameras, and Didi adjusts its pricing, while a man released after splashing water on Baidu's CEO highlights broader tech‑related news.
At F8 2023, Facebook unveiled a “Private Vision” emphasizing encrypted data and limited content visibility, introduced a “secret crush” dating tool, rolled out the ultra‑lightweight Lightspeed Messenger, highlighted community‑centric Groups and cross‑app integration, and signaled major AR/VR/AI investments while showcasing research on user well‑being and new business‑enablement capabilities for developers.
Android Q brings a comprehensive set of enhancements—including stronger privacy controls, refined location permissions, shared shortcuts, a settings panel API, dynamic depth imaging, new audio/video codecs, native MIDI support, and ART performance improvements—designed to empower developers and improve user experience across a wide range of modern mobile devices.
Arm’s 2019 IoT outlook highlights the rise of smart home devices, personalized delivery using GPS and sensors, AI‑enhanced healthcare and city services, while noting growing consumer concerns over data privacy and security, backed by a survey of 2,000 global respondents.
Google Public DNS now fully supports DNS over HTTPS, enhancing privacy and security with minimal performance impact, while the article explains why DNS needs encryption, how DoH works, browser support, and practical considerations for adoption.
A recent dark‑web sale revealed that over 500 million records from dozens of Huazhu hotel brands—including personal IDs, booking details, and login credentials—were compromised, prompting urgent security advice and highlighting the growing risks of large‑scale data breaches.
The article summarizes WWDC 2018 highlights, covering Apple's focus on stability, performance, and security across iOS, macOS, Xcode, Swift, ARKit, and Machine Learning, while also noting new developer tools, privacy requirements, and recruitment opportunities at Liulishuo.
An in‑depth overview explains how blockchain, homomorphic encryption, zero‑knowledge proofs, group and ring signatures, and differential privacy collectively secure data flow, enabling trusted sharing while preserving ownership and privacy across providers, consumers, and algorithm services.
The article outlines a comprehensive, layered data‑security lifecycle—from secure traffic and authentication through encrypted storage, role‑based access, audit logging, and safe production‑to‑test data handling—emphasizing privacy‑compliant practices, anti‑scraping measures, secure deletion, and incremental ROI‑driven adoption for enterprises.
This article explains the fundamentals of web tracking, distinguishing first- and third-party trackers, detailing technical mechanisms such as cookies, browser fingerprinting, and web beacons, and offers practical tools like Lightbeam to detect and visualize trackers, highlighting privacy implications for users and operators.
The Facebook‑Cambridge Analytica scandal exposed the illicit harvesting of 50 million users' data, political manipulation allegations, multiple investigations, a sharp stock plunge, executive resignations, and heightened global scrutiny of data‑privacy practices.
The article explores the collaborative relationship between Chrome teams and the web development community, outlining high‑level goals for accessibility, performance, security, privacy, overall platform openness, and calls for transparent cooperation, best‑practice guides, and shared tools to build a faster, more reliable web for everyone.
The article explains Monero’s mysterious origins, its strong privacy technologies that differentiate it from Bitcoin, recent security concerns involving malicious mining, market performance, and upcoming initiatives like the Coral Reef project while also noting competition from other privacy‑focused cryptocurrencies.
This article summarizes a AAAI 2018 paper that introduces a privacy‑preserving, decentralized matrix‑factorization approach for point‑of‑interest recommendation, detailing its problem definition, model design, random‑walk based user interaction, experimental evaluation on Foursquare and Alipay datasets, and future research directions.
The article explains how various companies use technologies such as ultrasonic audio, facial recognition, smart TV monitoring, and image analysis to collect personal data, outlines the common pathways of information leakage, and offers practical advice for safeguarding online privacy.
At the 2016 China Big Data Industry Summit, Ctrip's CTO explained how the company's massive travel data and predictive analytics improve tourism planning, marketing, and privacy protection, illustrating the practical value of big data for users, platforms, and suppliers.
The article outlines nine practical advantages of open‑source software—zero cost, instant availability, rapid security fixes, higher security, comprehensive community support, user‑centric customization, extended hardware lifespan, enhanced privacy, and superior overall quality—explaining why it remains a strong competitor to proprietary solutions.
The article explores historical privacy tactics of the USSR and the United States, offers practical habits for protecting personal information online, explains how to detect leaked data using search engines and social‑media checks, and suggests strategies for mitigating exposure and crafting false identities.
The article chronicles Pavel Durov’s journey from creating Russia’s VK social network to founding Telegram, highlighting his libertarian philosophy, clashes with authorities, and the technical design choices—such as the open‑source MTProto protocol, privacy focus, zero‑ads policy, and high performance—that make Telegram a unique secure messaging service.
This article explains the many data points browsers expose—such as IP, cookies, language, hardware, and HTML5 APIs—that enable device fingerprinting, describes how fingerprinting scripts operate, and outlines practical countermeasures like disabling JavaScript, using privacy extensions, and configuring browser settings.
With third‑party cookies dying, Facebook, Google, and Apple are replacing them by leveraging their own login ecosystems—Facebook’s SSO and Atlas platform, Google’s Ad ID across Android and services, and Apple’s IDFA tied to Apple IDs—while third‑party data firms supplement detail, and users can still disable most tracking.
