Legal Tech News

Meta has blocked human rights organizations, including the Saudi-focused ALQST, from reaching audiences in Saudi Arabia and the United Arab Emirates. The social media company's restrictions prevent these independent grassroots groups from promoting and protecting human rights in the region. This action has raised significant concerns about digital censorship and the suppression of independent advocacy on major tech platforms.

A Tennessee man who was jailed for 37 days over a Trump meme has won a settlement after filing a federal civil rights lawsuit. Larry Bushart sued Perry County for violating his constitutional rights, arguing that his imprisonment was unlawful retaliation for his protected speech.

Apple recently delayed the App Store approval for an app named Inkwell, likely due to a trademark conflict with the name itself. Reader discussions also highlight other frequent rejection reasons for independent apps, such as mishandling the Sign in with Apple feature and failing to properly display privacy policies. Ultimately, the issue underscores the ongoing friction between small developers and Apple's rigid App Store review guidelines.

Pokémon Central Wiki, a prominent Italian fan site, has virtually disappeared from Google search results after more than 15 years of operation. The administrators expressed frustration over the sudden drop in visibility, accusing the search giant of unfairly suppressing their long-standing content.

Infomaniak has transferred the majority of its voting rights to a Swiss public-benefit foundation to permanently safeguard user data privacy. This structural transition ensures that the company's cloud services will remain sovereign, independent, and committed to their core privacy values.

Minnesota is the first state to officially ban prediction markets, passing a law that makes it a felony for platforms like Kalshi and Polymarket to operate within its borders. Although dozens of states have previously taken legal action against the controversial industry, this marks the first comprehensive legislative ban on event contracts in the United States.

A CISA contractor exposed highly privileged AWS GovCloud credentials and access to numerous internal systems on a public GitHub repository. The sensitive keys remained publicly accessible until they were discovered and removed this past weekend. The incident has prompted security experts to raise concerns regarding the federal agency's operational security practices.

A new command-line tool and Python library called Remove-AI-Watermarks enables users to strip both visible and invisible AI watermarks from images. The utility specifically targets provenance metadata and embedded trackers, including SynthID, C2PA, and Nano Banana sparkle.

A compromised npm maintainer account recently published over 600 malicious versions across more than 300 popular packages in an attack dubbed Mini Shai-Hulud. This widespread supply chain incident impacts over 15 million monthly downloads by injecting malicious code into widely used libraries like size-sensor and timeago.js. Developers are advised to immediately audit their dependencies and ensure they are running secure versions.

Gentoo Linux has released a security advisory warning users about three new kernel vulnerabilities dubbed Copy Fail, Dirty Frag, and Fragnesia. System administrators are urged to update their kernels immediately to protect against potential exploitation.

Tesla's nearly $1 billion lithium refinery, which began operations in December 2024, is discharging 231,000 gallons of polluted wastewater daily. The dark liquid is being released directly from the facility's discharge pipes as the new plant continues its operations.

Elon Musk has lost his lawsuit against Sam Altman and OpenAI after a California jury unanimously ruled that his claims were filed too late. The decision effectively dismisses his allegations of mistreatment by his former co-founders at the AI company.

A retrospective discussion on a 1979 paper regarding the Provably Secure Operating System highlights early NSA-funded efforts to build formally verified, highly secure computer systems. Commenters note that despite pioneering advancements in formal specifications, these early secure operating systems were ultimately abandoned due to hardware limitations, rigid government testing criteria, and the commercial market's shift toward faster, less secure off-the-shelf products.

The 2016 browser game Click offers an interactive exploration of online profiling and digital tracking. By simulating real-time data collection, the project highlights the hidden privacy implications of everyday internet usage. It serves as an educational tool to help users understand how their digital footprints are monitored and utilized by algorithms.

Iran has launched an insurance service backed by Bitcoin for shipping companies seeking to transit the Strait of Hormuz. The semi-official Fars news agency reported the initiative, citing documents from the country's Ministry of Economy and Financial Affairs.

The FBI is seeking to purchase nationwide access to automated license plate reader networks to expand its investigative capabilities. Due to the massive scale and technical requirements of this project, only a few vendors, primarily Flock and Motorola, are likely capable of fulfilling the contract.

The new macOS utility Auto-identity-remove automates the tedious process of opting out of data brokers and people-search websites. Running on a monthly schedule, the open-source tool continuously removes personal information from over 30 different databases to help protect user privacy.

Mozilla has urged UK regulators to recognize VPNs as essential tools for protecting online privacy and security. The company made its case to the Department for Science, Innovation and Technology during ongoing consultations regarding digital safety measures for young people.

Security researcher Nightmare-Eclipse alleges that Microsoft intentionally built a backdoor into Bitlocker encryption and released an exploit called YellowKey to prove the claim. The researcher explained that this unusual vulnerability can be reproduced by copying a specific FsTx folder.

After a student caused a campus-wide network outage by enumerating DNS records to discover and gain control of every projector and camera on campus, university IT issued a surprisingly polite warning. This lenient response to the network exploitation sparked a debate among readers regarding the appropriate disciplinary measures for students who disrupt academic infrastructure.

A recent satirical tech commentary highlights the rampant supply chain vulnerabilities plaguing a major software package manager where malicious uploads are a frequent occurrence. Application security engineer Kevin Patel of NISC emphasizes the industry's resigned attitude toward these regular breaches, noting the frustrating lack of effective preventative measures. The piece serves as a sharp critique of the inadequate security oversight and automated publishing processes inherent in popular open-source ecosystems.

Security researchers have uncovered a new zero-click exploit chain for the Google Pixel 10 that grants attackers full root access. Building on similar findings from the Pixel 9, this demonstrates that modern Android devices can still be completely compromised without any user interaction.

California lawmakers are advancing a bill that would prevent game publishers from completely shutting down online multiplayer titles. Under the proposed legislation, companies must either release a patch allowing independent play or issue refunds to consumers when official game servers are deactivated.

The U.S. Department of Justice is demanding that Apple and Google reveal the personal data of over 100,000 users who downloaded the EZ Lynk Auto Agent car-tinkering app. Federal authorities are seeking to unmask these drivers in order to investigate the use of the vehicle modification software.

The preprint server arXiv has implemented a new policy that issues a one-year ban for authors who submit papers containing hallucinated references generated by AI. The platform emphasized that under its Code of Conduct, authors remain fully responsible for all content within their submissions regardless of how the material was generated.

Privacy-focused VPN provider Mullvad is addressing a vulnerability where its exit IP addresses were predictably assigned, making users identifiable. The company is rolling out a fix that scrambles exit IP positions based on user public keys to resolve the tracking issue. This update preserves Mullvad's strategy of utilizing multiple exit IPs per server to prevent strict website rate limits and IP blocks.

The Open Vehicle Monitoring System project is gaining traction as electric vehicle owners seek to bypass restrictive OEM CAN gateway modules that limit standard OBD-II ports to read-only access. While manufacturers claim these lockouts improve security, critics argue they are primarily designed to monetize telemetry data and force users into proprietary software subscriptions. Consequently, drivers are increasingly turning to open-source tools and hardware workarounds to regain full diagnostic control and privacy for their vehicles.

Despite Apple spending five years fortifying its systems against memory corruption, security researchers have developed the first public macOS kernel exploit for the new M5 chip. Working alongside Mythos Preview, an engineering team successfully built a functional exploit in just five days.

Readers reminisce about bypassing early shareware DRM and payment enforcement in classic games like Scorched Earth and Escape Velocity by editing game files or altering system clocks. The discussion highlights the forgiving attitudes of early software creators toward piracy and local cheating. Additionally, the thread mourns the passing of Escape Velocity co-creator Peter Cartwright, noting that his Kickstarter to remaster the game was successfully funded after his death.

Twin brothers wiped 96 government databases just minutes after being terminated from their jobs. This retaliatory data destruction highlights the critical need for organizations to revoke employee system credentials before conducting staff dismissals.