“Zero Data Retention” Wasn’t Zero

Summary

The report’s main story is the exposure of Notion AI chat transcripts through its AI infrastructure provider, Fireworks AI. After attackers accessed Fireworks systems, data connected to Notion’s AI Insights feature—including chats from about 1% of workspaces—was potentially exposed.

The presenter argues that Notion’s “zero data retention” (ZDR) description was misleading: it covered live requests to AI vendors, but not features that store chat history. Fireworks also reportedly failed to honor its own retention commitments. The takeaway is that AI features may send data to outside providers, ZDR should not be treated as a complete privacy guarantee, and users should avoid sharing secrets or sensitive information with online AI tools.

Other major stories

• Quad9 withdraws from France: A French court ordered the DNS provider to block sites accused of copyright infringement. Quad9 said it could not reliably limit the blocks to French users and faced further similar cases, so it withdrew from the country. The presenter criticizes DNS blocking as a blunt, downstream response that may inconvenience ordinary users without removing content, while expanding the infrastructure for internet censorship.
• More than 300 Tor exit nodes hijacked: Attackers redirected SSH connections through interception servers and targeted unencrypted email traffic. Users who ignored SSH host-key warnings risked exposing passwords and commands, and the attackers could install the Ebury Linux backdoor. Properly checked SSH connections, HTTPS, and onion services were not affected in the same way. The report recommends end-to-end encryption, SSH keys, and rejecting insecure fallbacks.
• Proton’s AI push: The presenter distinguishes a pro-AI manifesto by Proton’s CTO from CEO Andy Yen’s reported response to an employee who urged security testing before code releases. Yen reportedly called the suggestion “loser thinking” and encouraged faster development with AI. Plans to reassess employees’ AI use were canceled after staff and public backlash. The presenter sees the episode as a warning sign about a culture prioritizing speed and growth over careful testing and user-focused polish, though not as an immediate privacy breach.
• Secret court ruling on US surveillance: A FISA court reportedly found that tools used to search Section 702 data for Americans’ communications effectively amounted to searches of Americans and therefore had to meet legal limits. It ordered the tools rebuilt, yet Section 702 surveillance was renewed for another year. The ruling remained unreleased despite a missed deadline, prompting civil-liberties groups to urge Congress not to reauthorize the program without disclosure and accountability.

Breaches and security warnings

The report also covered:

• Flaws in UK government websites found using an ordinary laptop and AI tools.
• A Quest Diagnostics breach for which few details were disclosed.
• A Chainalysis breach exposing a customer list that included government, law-enforcement, financial, and crypto organizations.
• Incidents affecting Binance, Capcom, and Sega. Capcom said nearly 12 million accounts were affected, with some personal details exposed; Sega reported that more than two million email addresses were exposed.

Security alerts included an actively exploited SSH vulnerability affecting Linux devices, especially Alpine Linux; spyware warnings for German lawmakers’ iPhones; ransomware targeting outdated Synology systems; severe Plex vulnerabilities; Apple operating-system exploits; and a Tailscale SSH flaw that could allow root privilege escalation. The presenter urged users to update affected software.

Open-source and privacy-tool updates

The report noted updates to Tor Browser, Tails, and Mullvad Browser, including Mullvad Browser’s default encrypted Quad9 DNS and support for 64-bit ARM Linux.

Molly, a Signal fork, had gone months without updates while Signal fixed vulnerabilities. The presenter advised caution and recommended favoring software that stays closer to its upstream project. Delta Chat said it would drop unencrypted email support. Firefox’s built-in browser VPN was available with uncapped data through January 2027, though it is not a system-wide VPN.

Other updates included:

• KeePassXC 2.8.
• Brave Leo’s encrypted AI conversation pipeline.
• Privacy Badger for Safari.
• Improvements to Immich and Ente Photos.
• IVPN split tunneling on macOS.
• Addy.io mobile-app updates.
• LineageOS 24.

Google DeepMind also used an AI-based tool to formally verify key guarantees of the Signal protocol. The presenter welcomed the development while noting that the story was principally about the verification tool.

Presenters and contributors

• Presenter: Techlore host; not named in the subtitles.
• Referenced contributor: John Todd of Quad9, interviewed separately on Techlore Talks about the French blocking orders.