A good thread of questions — not small ones…— about what remains murky with W's vulnerability. @anna.wsocial.eu: we've both been privacy professionals, so you know exactly how serious this is. What's the plan?
Public Disclosure
W Identity (widentity.eu) asks people to hand over passport scans, a biometric selfie and their date of birth to prove who they are. The reflected XSS vulnerability let attacker-controlled JavaScript run on your site's own origin. For an identity provider, your response is way too relaxed.
Jun 19, 2026 at 8:15 AM
We Shouldn’t Wait Another Fifteen Years for a Conversation About
With high-profile hacks in the headlines and government officials trying to reopen a long-settled debate about encryption, information security has become a mainstream issue. But we feel that one
Security risks overshadow the debut of Europe’s X rival, W
W, Europe’s answer to X (formerly Twitter), has an unconventional approach to privacy, prompting security researchers to question how safe the platform really is.
Vulnerability Reports Are Not Special Anymore
We needed the insight and confidentiality to protect our users, but now that anyone can get the same results from LLM?
Blue Skies Ahead: Social Media's Quiet User Revolution
In a digital landscape increasingly defined by user concerns over privacy and control, a quiet revolution is taking shape.
Privacy, human rights, and Tornado Cash
I am more worried about privacy than crypto crime.
Why Meta is retreating from encryption
In 2019, Mark Zuckerberg called privacy the future of social networking. Not anymore
Just a rumour of a bug is enough to find a security exploit these days
Thinking through how the conventional OSS security embargoes no longer buy us time, and what open source maintainers might do instead to respond
The Hacker and the State: Cyber Attacks and the New Nor…
Packed with insider information based on interviews, de…
We’re in the middle of a perfect storm for rollback of the “open web” and burgeoning online surveillance
Looking at fallout of the KOSA hearings today — and subsequent commentary — I remain optimistic for the development of social technology & communication but I’m beginning to think the ope…
@henryyuen.bsky.social I have heard you commented on the recent announcement by OpenAI on X, about one of the 10 problems very, very close to your own research. Would you be OK discussing it here as well?
I understand perfectly well. My questions concern the people behind the flood of content about W since we launched our beta in June. Who are they? Who funds them? What other financial interests might they have? And why is the site anonymous? Those are reasonable questions about transparency.
Have you been Wned? W Social says it respects your #privacy. But how much of your personally identifiable information is published by them to the open web for anyone to find? wdonthavetime.tngl.io/wsocial-wned/ #WSocialFacts #WSocial
Have you been Wned: Has W Social made your personal information public?
wdonthavetime.tngl.ioDear friends of W, Thank you for the incredible feedback since launch. We've received many questions about W's business model, technical setup, privacy, and commitment to the AT Protocol. We've expanded our FAQ and will continue updating it as W evolves. Read more: wsocial.news/faq
W - The European social network for verified humans
wsocial.newsDear friends of W, Thank you for the incredible feedback since launch. We've received many questions about W's business model, technical setup, privacy, and commitment to the AT Protocol. We've expanded our FAQ and will continue updating it as W evolves. Read more: wsocial.news/faq
W - The European social network for verified humans
wsocial.news
