Fidaro

Coming soon 🔜

Private AI Conversations

100% Private. Encrypted. Yours.

[Fidaro @FidaroAI]

https://t.co/40ZinCDYfX

[Fidaro @FidaroAI]

A hacker is selling 340 million @OnlyFans user records.

OnlyFans wasn't breached. The seller built the database by combining old breaches and public profiles through one shared field: the email address.

Your privacy on any single platform is only as strong as the weakest one that has your email.

[Fidaro @FidaroAI]

https://t.co/Ze47vuS13y

[Fidaro @FidaroAI]

👇 if you're using a Windows machine

BitLocker "on" and BitLocker actually protecting you aren't the same thing.

Most Windows machines run TPM-only mode by default.

That's the setting a newly disclosed exploit called YellowKey bypasses with a USB drive and a reboot.

The fix:
Switch to TPM+PIN.
A PIN will be required at startup, and it stops this cold.

🔗 Mitigation guide in the replies.

[Fidaro @FidaroAI]

. @Meta launched Incognito AI chats on @WhatsApp this week.

Tagline: "no one can read your conversation, not even us."

Same week, they removed end-to-end encryption from Instagram DMs entirely.

Anything you send there is now readable by Meta.

One hand giveth. The other hand (quietly) taketh away...

[Fidaro @FidaroAI]

https://t.co/N3m35UIC7w

[Fidaro @FidaroAI]

.@ZARA confirms: 197,000 customers exposed. No names, no addresses, no passwords, no or payment data.
Just emails, purchase history, locations, and support tickets.

The breach summary makes it sound mild. It's not. That's the exact mix needed to send phishing emails that quote your last order.

[Fidaro @FidaroAI]

You search "Claude mac download."

The @Google ad is legitimate. The link goes to https://t.co/AuU2Pqq4xV.

But someone had created a shared @claudeai chat and dressed it up to look like an official Apple Support install guide. That's what you land on.

It tells you to open Terminal and paste a command to install the app. You do it – because the URL is real, the page looks official, and nothing has flagged yet.

The command installs malware.

Hackers didn't build a fake website. They built a fake conversation. On a real one.

https://t.co/j21KqjVRBg

[Fidaro @FidaroAI]

Signal just added a "name not verified" notice to every profile.

Display names have always been whatever the account holder typed.
"Your Bank", "Signal Support", "Mom"

That's true on most platforms.

Signal is just the first one to say it out loud.

https://t.co/C9NFSZKydJ

[Fidaro @FidaroAI]

Up to 275 million students and teachers had their Canvas data exposed.

Names, emails, student IDs. And the messages they sent each other.

The next phishing email won't come from a stranger. It will reference your real classes, your real teachers, your real conversations.

https://t.co/DAHmiOZXh5

[Fidaro @FidaroAI]

The 10 work apps on your phone collect an average of 19 data types each.

@gmail collects 26. @MicrosoftTeams 25. @Zoom 23.

Location. App interactions. User IDs. Shared with outside parties for advertising.

Your work phone is your personal phone. Whoever sees one, sees the other.

[Fidaro @FidaroAI]

82 Chrome extensions are collecting and selling your browsing data. 6.5 million users affected.

These aren't malware. The data collection is written in their privacy policies. It's legal.

Nobody reads them. That's the point.

https://t.co/oDn85uTikT

[Fidaro @FidaroAI]

"Built with AI in a weekend" sounds impressive until you remember what that actually means.

No code review. No security audit. No backup strategy.

Last week, an AI agent deleted an entire company's database in 9 seconds. Three months of customer data gone.

https://t.co/eh2GR3fM14

[Fidaro @FidaroAI]

You install a browser extension to download a TikTok video. It takes 5 seconds.

That extension now has access to everything you do in your browser. Passwords. Messages. Banking.

12 fake TikTok downloaders. 130,000 users. Some were marked "Featured" by Chrome and Edge.

https://t.co/rSnuqz1zco

[Fidaro @FidaroAI]

When you connect an AI tool to your Google account, it asks for access to your Drive, Gmail, or Calendar.

You click "Allow." Once.

That access stays until you manually revoke it. Most people never do.

Google Account → Security → Third-party apps. Check it now.

[Fidaro @FidaroAI]

You didn't decide to tell ChatGPT your therapist's name. It just came up.
Same with the job you hate. The health thing you're still figuring out. The relationship that's complicated.
ChatGPT, Claude, and Gemini can remember all of it between conversations – on by default.

Most people have never looked.
Settings → Memory. It's worth a few minutes.

But what you see there isn't where your data lives.
It's just the version they decided to show you.

[Fidaro @FidaroAI]

The New York Times sued OpenAI and asked the court to force them to keep all ChatGPT user data indefinitely. The court agreed.

For months, every conversation on ChatGPT was being retained, not because OpenAI wanted to, but because a judge said so.

OpenAI fought it and returned to 30-day deletion. But the precedent exists: a lawsuit you have nothing to do with can decide what happens to your data.

https://t.co/PWa3iuoeZy

[Fidaro @FidaroAI]

There is a difference between something that cares about you and something optimized to make you feel that way.

The scary part is, tens of millions of people currently cannot tell which one they're talking to...

https://t.co/e7KlFURVXu

[Fidaro @FidaroAI]

Attorney-client privilege is one of the strongest legal protections that exists.
A U.S. court ruled it disappears the moment a conversation touches an AI tool.

The reason: the data went to a third party.
Privilege waived. Doesn't matter what you intended. Doesn't matter how sensitive it was.

The law now treats your AI conversations the way it treats a postcard. Readable by anyone it passes through.

If a legal conversation loses protection the moment it touches an AI tool, think about what that means for everything else you share.

https://t.co/RAIZ9LVPTG

[Fidaro @FidaroAI]

You meant to share one paragraph.
But here's what actually travels when you upload a document to an AI tool:

1️⃣ A PDF carries the author's name, the company, the creation date, the edit history, and sometimes comments people were certain they'd deleted.
2️⃣ A spreadsheet brings tab names referencing internal projects. Formulas pointing to systems that were never meant to leave the building. A timestamp showing exactly who touched it last.
3️⃣ A screenshot captures everything on screen at that moment. The notification bar. The open tabs. The message in the background you didn't notice.

AI tools don't read the part you care about.
They process the whole file.

AI tools don't read the part you care about.
They process the whole file.
Copy the text. Leave the file behind.