Amazon faces a class action lawsuit over Ring's Familiar Faces feature. Filed in Seattle by Virginia resident Charles Sigwalt, the complaint claims the feature stores images of passersby without consent. The available excerpt does not state whether a court has certified the class, which laws are cited, or how Amazon has responded.
Google's new 24/7 AI agent, Gemini Spark, can take on tasks for users and continue working on them. After receiving access last week, The Verge's reviewer found that Spark can perform surprisingly well, roughly matching Google's demo. The remaining question is whether that capability justifies the financial cost and potential privacy tradeoffs.
TechCrunch frames 2026’s browser competition around alternatives to Chrome and Safari. The roundup covers AI-centric browsers like Perplexity Comet, Dia, Opera Neon, OpenAI Atlas, and Aside, alongside privacy-focused options such as Brave, DuckDuckGo, Ladybird, and Vivaldi. It also highlights niche products including Opera Air, SigmaOS, and Zen Browser, showing how browsers are becoming AI assistants, productivity hubs, privacy layers, and wellness-oriented tools.
The Verge reports that AI training startup Shift is offering to clean New Yorkers’ homes for free, with plans to expand to cities including London. The catch is that Shift wants footage of people doing chores and cleaning at home. The story highlights how tech companies are seeking real-world household data for AI and robotics training, raising questions about privacy and consent in domestic spaces.
AI training startup Shift is offering free home cleanings while workers wear head-mounted cameras that record household chores. The footage is intended to become training data for domestic robots and related AI systems. The model highlights rising demand for real-world robotics data, while raising privacy questions about recording inside homes.
AI training startup Shift is offering to clean homes for free, with a significant condition: it records cleaners at work. The footage captures tasks like scrubbing, vacuuming, dusting, tidying, and washing. Shift says the material will be used to train future robots, raising clear questions about data collection inside private homes.
Using the Grab acquisition debate as context, the article says offshore data storage is now normal for digital services. The real issue is not whether data stays in Taiwan, but whether the storage jurisdiction has strong legal protections, oversight, and remedies. Singapore is presented as a case worth examining for Asia-Pacific data deployment and cross-border transfer risk assessment.
Hugging Face published a tutorial for running Reachy Mini conversations without cloud audio processing or API keys. The setup uses its speech-to-speech library as a cascaded VAD, STT, LLM, and TTS pipeline exposed through a Realtime API-compatible WebSocket. Recommended defaults include llama.cpp with Gemma 4, Silero VAD, Parakeet-TDT, and Qwen3-TTS, while allowing swaps to vLLM, MLX, Transformers, or hosted Responses API providers.
Ars Technica reports that early Take It Down Act arrests show how easily investigators can identify alleged nonconsensual AI porn posters. One suspect was linked through Instagram saves, PayPal, IP, and iCloud records; another allegedly used his own photo as a porn-site profile image. The FTC is also warning nudify services and major platforms to offer 48-hour removal processes or face penalties.
TechCrunch reviewed Amazon's new "Bee" AI wearable, highlighting its potential for seamless ambient computing. While the device offers impressive convenience by constantly listening and assisting, it also triggers significant privacy concerns. Like previous AI pins and pendants, Bee forces users to balance the benefits of an always-on assistant against the anxiety of constant surveillance.
近期有民眾利用 AI 技術,將美國國家運輸安全委員會(NTSB)公開的駕駛艙錄音「聲學頻譜圖(Spectrogram)」影像,成功逆向還原出已故飛行員的生前語音。由於駕駛艙語音記錄(CVR)涉及高度隱私,過去僅公開文字逐字稿,如今 AI 的還原能力打破了這項保護機制。為防止隱私進一步洩漏,NTSB 已緊急暫時關閉其公開案件卷宗系統。
The FTC has settled with Cox Media Group and two other firms for $1 million over deceptive "Active Listening" marketing claims. Although the companies pitched that they used AI to listen to real-time conversations via smart devices, the FTC revealed they actually just resold marked-up email lists. The FTC also clarified that burying voice-data consent in standard Terms of Service is legally inadequate.
Hugging Face 釋出最新指南,探討如何利用 OpenAI 的 Privacy Filter 建立安全且具擴展性的 Web 應用。文章深入分析了隱私過濾器在處理個人識別資訊(PII)與企業敏感數據時的角色,並提供結合 Hugging Face 生態系與後端架構的實作建議,幫助開發者在兼顧隱私合規與系統效能的前提下進行大規模部署。
Vercel 宣布為其 AI Gateway 推出「零數據留存 (Zero Data Retention)」功能。此更新確保開發者在透過 Vercel 介接各家 AI 模型時,所有的 Prompt 和 Completion 數據皆不會被 Vercel 伺服器留存。這項安全升級能幫助企業輕鬆符合 GDPR、SOC2 等嚴格的隱私合規標準,消除企業將敏感數據送往 AI 網關時的資安疑慮。
Vercel 宣布為其 AI Gateway 推出團隊級的「零數據殘留(Zero Data Retention)」與「禁止 Prompt 訓練」控制功能。這項更新讓企業與開發團隊能夠集中管理隱私設定,確保所有通過 Gateway 的 AI 請求都不會被儲存,且不會被 LLM 供應商用於模型訓練,大幅提升企業級應用的合規性與安全性。
本期 Import AI 聚焦於兩個核心議題:首先是「你就是你的對話歷史」,研究指出使用者的 LLM 對話紀錄具有高度獨特性,足以像指紋一樣識別個人身分並洩露隱私;其次是「網路安全能力過剩(Cyber Capability Overhang)」,指出當前 AI 模型可能已具備強大的網路攻擊潛力,只是因缺乏適當的鷹架工具(Scaffolding)或提示而尚未顯現,這種潛在威脅如同無聲的警報,隨時可能被觸發。
Hugging Face 與開源密碼學公司 Zama 合作,介紹如何在 Hugging Face Endpoints 上部署全同態加密(FHE)模型。透過 FHE 技術,用戶的敏感數據在傳輸與計算過程中皆保持加密狀態,雲端伺服器可在不解密的情況下完成推理。此方案為醫療、金融等高隱私需求行業提供了一種安全使用雲端 AI 算力的新途徑。
Hugging Face 推出針對企業設計的 SafeCoder 程式碼助手,旨在解決使用 GitHub Copilot 等閉源工具時的隱私與智慧財產權疑慮。SafeCoder 基於開源的 StarCoder 模型,支援在企業內部的 VPC 或地端環境部署,並允許企業使用私有程式碼進行微調。這項方案不僅確保程式碼不外流,還能提供高度客製化的開發輔助體驗。
Hugging Face 宣布推出 SafeCoder,這是一套專為企業打造的程式碼寫作助手解決方案。SafeCoder 主打高度隱私與合規性,允許企業在自有的 VPC 或本地環境中部署,並能使用私有程式碼庫進行微調。該方案基於開源的 StarCoder 模型,旨在為企業提供一個可完全掌控、安全且不洩漏敏感資料的 GitHub Copilot 替代方案。
Hugging Face 與密碼學安全公司 Zama 合作,發表了利用全同態加密(FHE)運行大語言模型(LLM)的技術方案。該技術允許用戶將加密的 Prompt 發送到雲端,雲端模型在完全不解密的情況下進行推論並返回加密結果,確保數據隱私。雖然目前面臨運算延遲高與需要極低位元量化等挑戰,但這為金融與醫療等高隱私需求領域開闢了全新可能。
法國資料保護監管機構 CNIL 宣布將 Hugging Face 納入其「加強支援計劃」。該計劃旨在協助具備系統重要性的數位創新企業符合 GDPR 規範。雙方將密切合作,針對開源 AI 模型訓練、數據集隱私及開源社群的合規性,共同探索並建立具體的最佳實踐指南。
Vercel 宣布 Web Analytics 功能正式進入一般可用(GA)階段。此服務主打隱私友善、無需 Cookie 且符合 GDPR 規範,能與 Next.js 等框架無縫整合。開發者只需簡單配置即可在 Vercel 控制面板中即時查看網站流量、熱門頁面及來源管道,並提供免費額度供所有用戶體驗。
Owkin 開源的聯邦學習框架 Substra 已託管於 LF AI & Data 基金會。該框架允許開發者在分散且不公開的數據集上協同訓練 AI 模型,特別適合醫療等高隱私需求領域。本文介紹如何結合 Substra 與 Hugging Face 生態系,實現可追溯、安全且合規的隱私保護機器學習。
本文介紹如何整合 Hugging Face 與開源聯邦學習框架 Flower,實現保護隱私的分散式模型訓練。透過 Flower,開發者可以在不共享原始數據的情況下,協同微調 Hugging Face 上的 Transformer 模型。文中提供具體的實作步驟,包含定義 Flower Client、設定伺服器聚合演算法(如 FedAvg)以及評估模型效能。
本文介紹了如何使用全同態加密(FHE)技術對加密數據進行情緒分析。透過 Zama 開源的 Concrete ML 工具包,開發者可以將 Hugging Face 的機器學習模型轉化為 FHE 版本。這使得用戶可以將加密後的文本傳送到雲端進行推理,雲端伺服器在完全無法得知原文內容的情況下完成情緒分析,並回傳加密的預測結果,完美兼顧雲端運算便利性與用戶隱私。