Privacy and data protection

New Cloudflare marketplace to help websites profit from AI scraping

Cloudflare is launching a marketplace that will let websites charge AI companies for scraping their content, aiming to give smaller publishers more control over how AI models use their data. Large AI models scrape thousands of websites to train their systems, often without compensating the content creators, which could threaten the business models of many smaller websites. The marketplace, launching next year, will allow website owners to negotiate deals with AI model providers, charging them based on how often they scrape the site or by setting their terms.

Cloudflare’s launch of AI Audit is a big step for website owners to gain better control over AI bot activity on their sites. Providing detailed analytics on which AI bots access their content empowers site owners to make informed decisions about managing bot traffic. The ability to block specific bots while allowing others can help mitigate issues related to unwanted scraping, which can negatively impact performance and increase operational costs. This tool could be handy for businesses and content creators who rely on their online presence and want to safeguard their resources.

Cloudflare’s CEO, Matthew Prince, believes this marketplace will create a more sustainable system for publishers and AI companies. While some AI firms may resist paying for currently free content, Prince argues that compensating creators is crucial for ensuring the continued production of quality content. The initiative could help balance the relationship between AI companies and content creators, allowing even small publishers to profit from their data in the AI age.

Snapchat’s balance between user safety and growth remains a challenge

Snapchat is positioning itself as a healthier social media alternative for teens, with CEO Evan Spiegel emphasising the platform’s different approach at the company’s annual conference. Recent research from the University of Amsterdam supports this view, showing that while platforms like TikTok and Instagram negatively affect youth mental health, Snapchat use appears to have positive effects on friendships and well-being.

However, critics argue that Snapchat’s disappearing messages feature can facilitate illegal activities. Matthew Bergman, an advocate for social media victims, claimed the platform has been used by drug dealers, citing instances of children dying from fentanyl poisoning after buying drugs via the app. Despite these concerns, Snapchat remains popular, particularly with younger users.

Industry analysts recognise the platform’s efforts but highlight its ongoing challenges. As Snapchat continues to grow its user base, balancing privacy and safety with revenue generation remains a key issue, especially as it struggles to compete with bigger players like TikTok, Meta, and Google for advertising.

Snapchat’s appeal lies in its low-pressure environment, with features like disappearing stories and augmented reality filters. Young users, like 14-year-old Lily, appreciate the casual nature of communication on the platform, while content creators praise its ability to offer more freedom and reduce social pressure compared to other social media platforms.

Amazon and Nokia face off in court over patent infringement

A German court has ruled that Amazon is using Nokia’s patented video technologies without obtaining a proper licence, according to a statement from Nokia. The decision, made by the Munich Regional Court, found that Amazon’s streaming devices are illegally utilising Nokia’s patented video-related technologies, which the Finnish company holds rights to.

Nokia’s Chief Licensing Officer, Arvin Patel, expressed satisfaction with the ruling, stating that Amazon has been selling these devices without the necessary licences in place. The ruling highlights ongoing disputes between tech giants over intellectual property.

In response to Nokia’s legal actions, Amazon filed a lawsuit in July in a Delaware federal court, accusing the company from Finland of infringing on a dozen Amazon patents related to cloud-computing technology.

This legal battle is part of a broader pattern of disputes between major tech companies, as patent rights continue to play a critical role in the development of new technologies and services.

Telegram used to leak medical data

Data from millions of Star Health customers, including sensitive medical information, is being accessed and sold via Telegram chatbots. The breach comes just weeks after Telegram’s founder was criticised for failing to prevent criminal activity on the platform. The hacker responsible claims to possess data from over 31 million customers, with some available for free through the chatbots and bulk data offered for sale.

Star Health, one of India’s largest health insurers, stated that it has reported the breach to local authorities but reassured customers that sensitive data remains secure. Initial assessments revealed no evidence of a widespread compromise, despite reports of leaked documents including medical diagnoses, tax details, and ID copies.

Telegram’s role in enabling chatbots has made it one of the most popular messaging apps globally, with over 900 million users. However, security concerns continue to grow, particularly following the recent arrest of its founder in France. While Telegram denies any wrongdoing, it faces mounting pressure over its moderation policies.

The hacker, who operates under the alias xenZen, claimed responsibility for creating the chatbots and for holding 7.24 terabytes of data. UK-based researcher Jason Parker, who discovered the breach, revealed that the stolen data has been accessible since early August, with the chatbots distributing small samples for free.

US FTC highlights privacy concerns with social media data

A recent report from the US Federal Trade Commission (FTC) has criticised social media platforms for lacking transparency in how they manage user data. Companies such as Meta, TikTok, and Twitch have been highlighted for inadequate data retention policies, raising significant privacy concerns.

Social platforms collect large amounts of data using tracking technologies and by purchasing information from data brokers, often without users’ knowledge. Much of this data fuels the development of AI, with little control given to users. Data privacy for teenagers remains a pressing issue, leading to recent legislative moves in Congress.

Some companies, including X (formerly Twitter), responded by saying that they have improved their data practices since 2020. Others failed to comment. Advertising industry groups defended data collection, claiming it supports free access to online services.

FTC officials are concerned about the risks posed to individuals, especially those not even using the platforms, due to widespread data collection. Inadequate data management by social platforms may expose users to privacy breaches and identity theft.

Hack exposes Disney data, leading to Slack phase-out

Disney is phasing out its use of Slack for workplace collaboration after a significant data breach. A hacking group, NullBulge, leaked over a terabyte of Disney’s internal data, affecting thousands of Slack channels, according to reports. This breach included sensitive information like computer code and unreleased projects.

Disney’s Chief Financial Officer, Hugh Johnston, confirmed most departments will stop using Slack by the end of the year. Several teams have already begun transitioning to alternative tools for enterprise-wide collaboration, aiming to improve security and workflow.

The incident, reported in July by the Wall Street Journal, involved over 44 million messages from Slack channels. The company launched an investigation into the unauthorised release of data in August.

NullBulge, known for targeting software supply chains, exploits coding platforms like GitHub and Hugging Face to deceive users into downloading malicious files. Neither an American multinational mass media and entertainment conglomerate nor Slack provided immediate responses to requests for comment.

Telegram to share user data with authorities

Telegram apparently decided to alleviate its policy restrictions and to provide users’ IP addresses and phone numbers to authorities in response to valid legal requests. The shift in policy, announced by CEO Pavel Durov, marks a significant change for the platform, which has long been known for its resistance to government data demands. The update comes in the wake of Durov’s recent legal troubles in France, where he is facing charges related to the spread of child abuse materials on the platform.

Durov, under investigation since his arrest in France last month, says the new measures are part of broader efforts to deter criminal activity on Telegram. Historically, Telegram has been criticised for its lax approach to moderation, often ignoring government requests to remove illegal content or share information on suspected criminals. Now, with AI and human moderators, the app conceals problematic content from search results.

The case against Durov has intensified scrutiny of Telegram’s role in facilitating illegal activities. French authorities have accused Durov of refusing to cooperate with law enforcement by not providing data for wiretaps related to criminal investigations. Durov denies the charges despite these accusations and has remained in France in the inquiry.

Why does this matter?

Telegram has long been a tool for activists and dissidents, especially in countries like Russia and Iran, where it has been used to challenge authoritarian regimes. However, the platform has also attracted extremists, conspiracy theorists, and white supremacists. In some cases, Telegram has been used to coordinate real-world attacks, leading to mounting pressure on the company to take greater responsibility.

In response to these challenges, Telegram has introduced several policy changes. Earlier this month, the platform disabled new media uploads to combat bots and scammers. These moves signal a new chapter for Telegram as it navigates the delicate balance between privacy, free speech, and public safety.

Ukraine bans Telegram for officials amid spy fears

Ukraine has banned the Telegram messaging app for government officials and critical workers due to concerns about Russian espionage. The National Security and Defence Council implemented these restrictions after Kyrylo Budanov, head of the military intelligence agency, presented evidence indicating that Russian special services could access Telegram messages, including deleted ones.

The ban only affects official devices, allowing government personnel to use personal phones without restriction. Despite its risks, Telegram has played a crucial role in communication and information sharing since the onset of the war in February 2022, with a significant portion of the Ukrainian population relying on the app for updates.

Pavel Durov, the founder of Telegram, has denied claims that the platform shares user data with any country, including Russia. He emphasised that deleted messages are permanently erased and cannot be recovered. However, Ukrainian security officials maintain that the national security implications necessitate this decision.

President Volodymyr Zelenskiy and various officials regularly use Telegram to communicate vital updates. With approximately 75% of people in Ukraine using the app, the restrictions mark a significant shift in the approach to information security amid ongoing conflict.

UK user data pulled from LinkedIn’s AI development

LinkedIn has paused the use of UK user data to train its AI models after concerns were raised by the Information Commissioner’s Office (ICO). The Microsoft-owned social network had quietly opted users worldwide into data collection for AI purposes but has now responded to the UK regulator’s scrutiny. LinkedIn acknowledged the concerns and expressed willingness to engage with the ICO further.

The decision to halt AI training with UK data follows growing privacy regulations in the UK and the European Union. These rules limit how tech companies, including LinkedIn, can use personal data to develop generative AI tools like chatbots and writing assistants. Like other platforms, LinkedIn had been leveraging user-generated content to enhance these AI models but has now introduced an opt-out mechanism for UK users to regain control over their data.

Regulatory bodies like the ICO continue to monitor big tech companies, emphasising the importance of privacy rights in the development of AI. As a result, LinkedIn and other platforms may face extended reviews before resuming AI-related activities that involve user data in the UK.

US moves to ban Chinese tech in smart vehicles

The US Commerce Department is set to introduce a new regulation to ban Chinese software and hardware in autonomous and connected vehicles in the country, citing national security concerns. The proposal, expected to be announced soon, reflects growing worries from the Biden administration about the potential risks posed by Chinese companies collecting sensitive data on US drivers and infrastructure. Additionally, there are fears that foreign actors could manipulate connected vehicles, potentially creating significant security threats.

The proposed restrictions would apply to Chinese-made vehicles with communication or autonomous driving systems, escalating trade tensions between the US and China. The proposal follows last week’s move by the Biden administration to impose steep tariffs on Chinese imports, including electric vehicles and key components like batteries. Commerce Secretary Gina Raimondo has been vocal about the potential dangers of Chinese technology in US vehicles, stressing the catastrophic risks if critical software were turned off in large numbers of cars.

President Joe Biden had already initiated a review of whether Chinese vehicle imports posed security threats due to their integration with connected-car technology. The new rules could come into effect gradually, with software restrictions starting as early as the 2027 model year and hardware prohibitions beginning in 2029 or 2030. These measures would cover vehicles equipped with specific Bluetooth, satellite, wireless features and fully autonomous cars capable of operating without drivers.

Why does this matter?

US lawmakers have raised concerns about Chinese companies gathering sensitive data, and the proposed restrictions would also extend to other foreign adversaries like Russia. However, automakers, including major companies like General Motors and Toyota, have expressed worries about the time and complexity required to replace existing systems, noting that vehicle components undergo extensive testing and cannot easily be swapped.

Although Chinese-made vehicles currently make up a small fraction of US imports, the new rule aims to ensure the long-term security of connected cars on US roads. The White House recently approved the final proposal, which would not apply to specialised vehicles like those used in agriculture or mining but will impact all other sectors. The move seems a clear effort to protect the US supply chain in an increasingly connected world where cars function as ‘smartphones on wheels.’