A good thread of questions — not small ones…— about what remains murky with W's vulnerability. @anna.wsocial.eu: we've both been privacy professionals, so you know exactly how serious this is. What's the plan?
Public Disclosure
W Identity (widentity.eu) asks people to hand over passport scans, a biometric selfie and their date of birth to prove who they are. The reflected XSS vulnerability let attacker-controlled JavaScript run on your site's own origin. For an identity provider, your response is way too relaxed.
Jun 19, 2026 at 8:15 AM
Security risks overshadow the debut of Europe’s X rival, W
W, Europe’s answer to X (formerly Twitter), has an unconventional approach to privacy, prompting security researchers to question how safe the platform really is.
Vulnerability Reports Are Not Special Anymore
We needed the insight and confidentiality to protect our users, but now that anyone can get the same results from LLM?
Blue Skies Ahead: Social Media's Quiet User Revolution
In a digital landscape increasingly defined by user concerns over privacy and control, a quiet revolution is taking shape.
Privacy, human rights, and Tornado Cash
I am more worried about privacy than crypto crime.
Why Meta is retreating from encryption
In 2019, Mark Zuckerberg called privacy the future of social networking. Not anymore
Just a rumour of a bug is enough to find a security exploit these days
Thinking through how the conventional OSS security embargoes no longer buy us time, and what open source maintainers might do instead to respond
The Hacker and the State: Cyber Attacks and the New Nor…
Packed with insider information based on interviews, de…
We’re in the middle of a perfect storm for rollback of the “open web” and burgeoning online surveillance
Looking at fallout of the KOSA hearings today — and subsequent commentary — I remain optimistic for the development of social technology & communication but I’m beginning to think the ope…
The web should remain anonymous by default | The Mozilla Blog
The unique architecture of the web enables a much higher degree of user privacy than exists on other platforms. Many factors contribute to this, but an ess
Questionable - Coming Soon? (@questionable.fyi)
Questions, Answers, Asks, and more! Currently under development by @thisismissem.social https://questionable.fyi (soon)
Web Crypto’s SubtleCrypto: A Masterclass in Developer Hostility and How It Strangles the Modern Web
Not Subtle, Just Sabotage — An API Against the Web
@henryyuen.bsky.social I have heard you commented on the recent announcement by OpenAI on X, about one of the 10 problems very, very close to your own research. Would you be OK discussing it here as well?
Dear friends of W, Thank you for the incredible feedback since launch. We've received many questions about W's business model, technical setup, privacy, and commitment to the AT Protocol. We've expanded our FAQ and will continue updating it as W evolves. Read more: wsocial.news/faq
W - The European social network for verified humans
wsocial.newsDear friends of W, Thank you for the incredible feedback since launch. We've received many questions about W's business model, technical setup, privacy, and commitment to the AT Protocol. We've expanded our FAQ and will continue updating it as W evolves. Read more: wsocial.news/faq
W - The European social network for verified humans
wsocial.newsFighting Bad Internet Bills (US-centric for now)
News, analysis, discussion, and actions about KOSA, the KIDS Act, age verification bills, and other bills that would surveil and censor the internet.
Activism makes a difference: the SCREEN Act unexpectedly fails in committee! But KOSA advances, so keep up the pressure
Congress Wants To Hand Your Parenting to Big Tech
Should Have Known Is the Wrong Standard for Kids’ Safety Laws
The SCREEN Act is a Christian Nationalist Nightmare
The Senate Should Reject KOSA's Privacy Risks
"The S is for surveillance": fighting KOSA and bad internet bills in the ATmosphere and the fediverses
privacy - bad examples
Everyone knows your location
