Episode Details

Three cracks opened up in Apple's privacy story this week: iCloud Private Relay leaking real IP addresses through DNS prefetching, WebTransport, and passkeys; Hide My Email exposing real addresses in bounce logs; and an unprecedented wave of spyware notifications going out to targeted users. Also this week: 737 fake VPN extensions sitting in the Chrome Web Store, Edge phasing out Manifest V2, a judge giving Google one week to fix its anticompetitive Play Store flow, and France's top court blocking the under-15 social media ban on free expression grounds.

Stop handing out your real email address. addy.io gives every site an alias that forwards to your normal inbox. Open source, self-hostable, with browser extensions and mobile apps. 🚀 Get started for free: https://addy.io/?utm_source=techlore

In this episode:

• Highlight: Three Apple flaws worth acting on today: Private Relay's IP leaks, the Hide My Email exposure, the macOS screen-sharing bug, and the spyware alert wave
• 737 fake VPN extensions impersonating Proton, Nord, Surfshark and Cloudflare in the Chrome Web Store, with 500+ still live after cleanup
• A judge gives Google one week to fix its anticompetitive Play Store flow after Epic
• France's top court blocks the under-15 social media ban, citing freedom of expression and privacy
• Data Breaches: CareCloud (3.7M patients), a LiteLLM supply chain attack leaking terabytes of credentials, 3.6M Azure records, RingCentral (1.6M), Sakura Internet, Clarity Check's exposed face database, the French tax authority, SafePal, Trezor, and Pokémon Center
• Threats: the Evooo1Bot Linux router botnet, Comcast adding motion sensing to millions of routers, Google buying bankrupt Spirit Airlines' customer data to train AI, DDoS attacks on Threema, and a Copilot prompt-injection disclosure
• FOSS+: Tor Browser 15.0.20, Waterfox 6.7 "Supernova," a native ad blocker in Firefox for iOS, Startpage arriving in Firefox, Brave 1.93's GPU fingerprinting protections, Proton Mail Categories, Proton's AI Paper Trail tool, Ente's post-quantum work, Linux kernel 7.2, the Fairphone Gen 6 Plus landing in the US, SimpleX's equity crowdfunding, and Pine64 halting Linux device production

🧡 SUPPORT TECHLORE
Become a Techlorian and keep this show growing: ★ Support this podcast ★
🔗 SOURCES & LINKS
View all sources here: https://techlore.tech/apples-private-relay-is-leaking-your-ip-plus-fake-vpn-extensions-frances-big-win/

⏱️ TIMESTAMPS

• (00:00) - WELCOME TO SURVEILLANCE REPORT
• (00:38) - APPLE USERS SHOULD LISTEN UP
• (09:04) - IMPORTANT BROWSER PRIVACY UPDATES
• (13:34) - OUR SPONSOR: ADDY.IO
• (15:06) - GOOGLE FORCED TO BEHAVE
• (18:24) - A HUGE WIN IN FRANCE
• (22:26) - DEFENSE BULLETIN: DATA BREACHES
• (27:30) - DEFENSE BULLETIN: THREATS
• (32:30) - DEFENSE BULLETIN: FOSS+

🎥 VIDEO
Watch on YouTube

📰 ABOUT SURVEILLANCE REPORT
Your essential weekly tech news podcast covering the latest threats to security, privacy, and digital freedom. Hosted by Henry Fisher from Techlore.