HeadFlash

Privacy

Vizio smart TVs keep sending viewing data even after users opt out, study finds

A Northeastern study of 5,943 experiments finds ACR opt-outs fail on most smart TV platforms, with Vizio traffic persisting in every opted-out test.

Listen

This edition was produced with artificial intelligence. Text and voice are generated automatically.

Study: smart TV opt-outs often fail to stop viewing-data traffic

A Northeastern study running 5,943 experiments across twelve commercial smart TV devices found that advertised automatic content recognition (ACR) opt-outs fully suppress ACR-attributable traffic on only four operating systems. On Vizio SmartCast, a content-correlated endpoint hosted on Amazon Kinesis kept receiving traffic in 100% of opted-out scenarios, though encryption blocked payload inspection. On Samsung Tizen, ACR-like traffic persisted in over 60% of cases. Roku ignores opt-outs on its own channels. VIDAA OS, used by Hisense and Toshiba, sends ACR data over unencrypted MQTT, including a permanent Client ID, channel and audio fingerprint, with ACR seen in a kids app. Vizio paid a $2.2 million FTC fine in 2017 over undisclosed TV tracking.

Study Claims Vizio Simply Ignores ‘Smart’ TV Spying Opt Out Requests →

Topics: Smart devices privacyOnline tracking

Ford pledges not to sell driving data to brokers

Ford has promised not to sell customer driving data to third-party data brokers as part of a new privacy commitment, saying it will rely on aggregation and anonymization and give customers clearer information about how their data is used. Chief privacy officer Kristin Jones wrote that trust is earned and protecting personal information is one way to earn it. The pledge follows General Motors agreeing to pay $220 million to settle claims it illegally sold driver and location data to brokers, requiring express consent before collection. Ford surveyed over 1,000 US customers, with 41 percent extremely or very concerned about auto-industry data privacy. A public promise is not a legal contract, and Ford’s privacy policy still allows sharing in some cases.

Ford promises not to sell your driving habits to data brokers →

Topics: Data brokersLocation tracking

ChatGPT launches PIN-protected Locked Chats

OpenAI has added Locked Chats to ChatGPT, letting users protect conversations with a four-digit PIN. Locked chats move to a separate section and vanish from regular history, pinned chats and search results; users unlock them with the PIN or, on supported devices, Face ID, Touch ID or the phone unlock method. The feature works across Free, Go, Plus, Pro, Business, Enterprise and Edu plans on web, iOS, Android and desktop, but not ChatGPT for Healthcare. Locking does not add end-to-end encryption or change retention, and the Improve the model setting stays as configured. Resetting a forgotten PIN permanently deletes all locked chats and memories, and previously shared links must be deleted manually.

ChatGPT Adds Ability To Hide Private Chats Using A PIN →

Topics: ChatGPTAI chatbot privacy and data leaks

Putin orders private data centers to reserve 10% of capacity for the state

Vladimir Putin signed a decree requiring owners of private data centers in Russia to reserve 10% of available space and capacity for state needs, to be used when necessary to support information resources. A special government commission will decide on use of the reserved capacity, and with consent of Russia’s Federal Security Service it may also authorize use of data centers located abroad. Putin linked the decree to the need for urgent measures in response to unfriendly actions by certain foreign states. It has entered into force, and data center owners have 10 days to comply. Ukrainian drones struck data centers belonging to Yandex, Sber and VK in October.

Putin orders private data centers in Russia to reserve 10% of their capacity for the state — Meduza →

Daily tech-news flash

The flash, every weekday.

Five minutes on AI, privacy and security — one short email per niche you pick, with a podcast to match.

Your niches