buc.ci is a Fediverse instance that uses the ActivityPub protocol. In other words, users at this host can communicate with people that use software like Mastodon, Pleroma, Friendica, etc. all around the world.
This server runs the snac software and there is no automatic sign-up process.
I’m in the process of migrating away from GMail to Proton. All is going well this far, but am wondering:
Is there any sense in deleting all my emails from the GMail account? Will the data actually be removed, or will a copy be sitting on a Google server "for internal use and AI training only”?
I WILL delete if I trust the info to be gone, but otherwise, I’ll just be removing a backup of my email archive. Thankful for any insights you may have around this.
"Trust. Who do ya?” as the Prince track goes...
AI toy company Bondu exposed 50,000+ chat logs with kids to anyone with a Gmail account via an unprotected web console. 🧸
Researchers found children's names, birthdates, family details, and full transcripts—now fixed, but it spotlights weak child data protections. ⚠️
#TechNews #Privacy #AI #Kids #Data #Security #Toys #Children #Surveillance #IoT #Cybersecurity #Regulation #Parents #Tech #Accountability #Google #Gmail
Another reason to not use #Google - they'll readily share your data with the government and give you minimal opportunities to respond. It's not worth it.
https://newrepublic.com/post/206088/homeland-security-67-year-old-us-citizen-criticized-email
Web portal leaves kids' #chats with #AI toy open to anyone with #Gmail acct
With just a few min work, he & a web #security researcher friend made a startling discovery: #Bondu ‘s web-based portal, intended to allow parents to check on their children's conversations & for Bondu’s staff to #monitor the products’ use & performance, also let anyone with a Gmail acct access transcripts of virtually every #conversation Bondu's child users have ever had with the toy.
#privacy
The next #DIDay is coming soon. If you want to tackle #gmail , you might want to check out my gmail migration guide:
TL;DR: it's not that much effort.
https://www.locked.de/how-to-migrate-gmail-to-another-provider-without-breaking-the-mail-history/
Cybersecurity Experts Warn That Most Gmail Users Don’t Realize This AI Setting Is Already Turned On
Inbox https://www.inc.com/leila-sheridan/cybersecurity-experts-warn-that-most-gmail-users-dont-realize-this-ai-setting-is-already-turned-on/91292379 #cybersecurity #privacy #Gmail #AI #trainingdata
Stop posting affiliation links with hashtags #proton and #protonmail please. This is not what hashtags are for. People who subscribed or are searching for them are already aware that Proton Mail exists and most likely they already made their minds about it a while ago.
If you want to convince new people then use something like #outlook or #gmail, or just #email PLEASE 🙏
Jesus, my home feed exploded today.
Google's automatically opted you in to letting them use your emails to train their AI. Here's how you can opt out:
https://www.huffpost.com/entry/opt-out-gmail-ai-training-goog_l_69405837e4b0fa125e7f49a7
If you use #GMAIL, you should be aware that as of this post's timestamp, their spam detection is down and it is likely your emails aren't being scanned for spam, unverified senders, or harmful software.
"We advise the users to be extra diligent in lieu of missing spam checks." #Spam #Google
Google Status:
https://www.google.com/appsstatus/dashboard/incidents/NNnDkY9CJ36annsfytjQ
Google’s Gemini A.I. now scans your entire inbox to “help” you summarize, reply & organize. 📬
That’s not assistance — that’s surveillance wrapped in productivity branding. 🔍
If your emails need an opt‑out clause, maybe the feature shouldn’t exist by default. ⚠️
🔗 https://www.nytimes.com/2026/01/15/technology/personaltech/gmail-gemini-ai-email-inbox.html
#TechNews #Privacy #AI #Google #Gmail #Surveillance #Data #Security #UserRights #BigTech #DigitalEthics #OnlinePrivacy #TechPolicy #Accountability #AIethics #Cybersecurity #Gemini #Email
Kann es sein, dass #GMail auf #Android ein grundsätzliches Problem mit #Exchange-Konten hat?
Die lange problemlos funktionierende Synchronisation von #Mail und Kalender zwischen Android-Mobilgeräten und unserem #Tobit-#Mailserver (zickt schon länger und) streikt komplett seit 2. Januar (da habe ich das SSL-Zertifikat verlängert).
Firewall-Einstellungen und Zertifikat sind aber in Ordnung, denn der David-Webmailer auf dem selben Port ist erreichbar und der Kollege mit iOS hat auch kein Problem.
Unter Android wird die Verbindung auch erfolgreich getestet und bei manueller Synchronisation kein Fehler angezeigt - aber halt leider auch nix übertragen ...
The #email address is one of the most important services you have: It is not only used for communication, but as part of the login credential for nearly all other services it also serves as your digital identity and backup for most of your accounts (e.g. when you need to reset your password, etc.). That makes it your most important hub for all digital services, and becomes a detailed profile of your digital life in itself.
It therefore needs to be #secure - but also respect your #privacy. And it should be #reliable and support your #souvereignity.
The most used email provider #Gmail by #Google might be secure, but most definately neither respects your privacy, nor your #souvereignity as it is one of the #US #BigTech companies that would delete your account if their fascist leader wills it (plus Google's #SundarPichai and #SergeyBrin are openly supporting him).
Time to switch to an #EuropeanAlternative - after some reserach and evaluating the three biggest contenders, I chose to go with @mailbox_org. It'll cost you at least 1€/month, but this money ensures that they won't try to cover their costs by selling your data.
As a bonus, #mailbox_org also provides other services you know from Google, like Calendar, Contacts, Drive, Documents (Text, Tables and Presentations), Chat and Webcam Meetings, Polls and Shared Notes. There's a private and a corporate option, as well as a family option (that I have yet to explore - not quite sure how it works and what benefit it brings). But most importantly, it's #German company following #EU laws, has multiple certifications and simplifies the usage of #GPG for non-techi users, while giving techis the freedom they desire.
Switching one's email is a tedious endeavour - but I believe that this is the most important service to migrating. If there is only one service you want to migrate, let it be the one that gives you access to all other services - or practically cuts you off, if someone else gains access to it!
THIS IS IMPORTANT: DO NOT TRUST GOOGLE GEMINI, and it may already be enabled in your GMAIL BY DEFAULT.
DO NOT TRUST GOOGLE!
#Google says it may share your interactions with #Gemini #AI with law enforcement, including involving Gemini features in #Gmail. Given Google's CEO Sundar's enthusiastic embrace of the Fascist Trump administration and teaming Gemini with Hegseth's Department of Defense, I NO LONGER TRUST GOOGLE.
Pay attention to this. Google -- as always -- says they do not give user data to law enforcement except with a valid warrant. This has long been true, but I no longer trust Google to honor this position. A quick call from Trump to Sundar could well be enough to bypass those past protections. Discussing an anti-Trump demonstration? Abortion? Helping local immigrants? You can no longer trust Google to not treat your data as fodder for fascist Trump, irrespective of Google's public statements.
VERY IMPORTANT: It appears that if you have "Smart Features" enabled in Gmail -- which has long included a variety of features, you now probably (or soon will) also have Gemini scouring through your email. I STRONGLY RECOMMEND turning this off. Can we be sure Google will really honor this choice given their embrace of Trump? No, but it's important to have specified your choice on the record.
To turn off Gmail smart features (apparently including Gemini, though other ways to ostensibly turn off Gemini in Gmail may also be available):
Enter Gmail
Click the Gear icon at the upper right
Click "See all settings"
Stay on the "General" tab
Scroll down to "Smart features" -- make sure it is unchecked
Just below this (currently) is "Google Workspace smart features"
Click the "Manage Workspace smart feature settings" bubble
Make sure the toggles are OFF (to the left) for everything listed in the pop-up
that appears. Be SURE TO SCROLL DOWN -- there are currently TWO toggles
but the second may be completely hidden if you don't grab the little scrollbar on the right and pull it down. Again, make sure BOTH toggles are off.
Click Save
Now back on the General Tab, scroll all the way to the bottom of the page and click Save Changes if that button is not already greyed out and unclickable.
That's what I have for you for now, based on the information I have right now.
More as I learn more.
It's a terrible situation that pains me greatly. Before you ask, I do not at this time have a recommendation for other major email providers.
How you proceed is up to you, of course.
Take care.
L
Finally! I wanted to document this since quite a while: The #Gmail labeling system kept me quite a while from moving my mails away from Google.
In the end it wasn't too complicated -- if you know hw to do it ... (as usual)
Anyways, I've finally written it down. Maybe it helps somebody who want's to get off GMail.
(And damn, I was surprised that it took so much time to write it down)
https://www.locked.de/how-to-migrate-gmail-to-another-provider-without-breaking-the-mail-history/
#Google announces #AI Overviews in #Gmail search, experimental AI-organized inbox https://arstechnica.com/google/2026/01/google-announces-ai-overviews-in-gmail-search-experimental-ai-organized-inbox/
Starting January 2026, If you use Gmail to check and fetch external email accounts, fetching emails from third-party accounts into your Gmail account, with POP, will no longer be supported.
You will need to migrate your email data into a Google Workspace account. At some point, the option to "Check mail from other accounts" will no longer be available in Gmail
You can continue to read and send emails from your other accounts in the Gmail app for Android, iPhone, and iPad, which uses a standard IMAP connection #Google #Email #Gmail
Google gave very little notice to this #Enshittification
🔗 Learn about upcoming changes to Gmailify & POP in Gmail
https://support.google.com/mail/answer/16604719
🔗 New Support Page: Data migration
https://support.google.com/a/topic/14012345
Eigentlich wollte ich zum heutigen #DiDit #dutGemacht ein gönnerhaftes Posting absetzen was ich alles seit Jahren migriert habe. Dann hat mich aber dieses doch tolle Blogpost von @pallenberg mitgerissen: ja, E-Mail ist der Kern des Ganzen:
https://www.metacheles.de/digital-independence-day-1-email-anbieter-einfach-wechseln/
Also heute Wechsel von #gmail zu @mailbox_org… (1/6)
Google appears to be testing a feature that allows users to change their @gmail.com address or add a new alias, based on a support document.
• No official announcement yet
• Limited rollout suspected
• Original address likely remains active
From a security and identity perspective, how do you view flexible email identities?
Join the discussion and follow @technadu for measured tech updates.
#Gmail #DigitalIdentity #AccountSecurity #EmailManagement #TechNadu
This Gmail hack is unsettling not because it’s flashy, but because it’s bureaucratic. Attackers aren’t breaking encryption or outsmarting algorithms. They’re filling out forms. By changing an account’s age and abusing Google’s Family Link feature, they can quietly reclassify an adult user as a “child” and assume parental control. At that point, the rightful owner isn’t hacked so much as administratively erased.
The clever part is that everything happens inside legitimate features. Passwords are changed. Two-factor settings are altered. Recovery options are overwritten. And when the user tries to get back in, Google’s automated systems see a supervised child account and do exactly what they were designed to do: say no.
Google says it’s looking into the issue, which suggests this wasn’t how the system was supposed to work. But it’s a reminder of an old lesson. Security failures often happen when protective mechanisms are combined in ways no one quite imagined. The tools aren’t broken. The assumptions are.
There’s no dramatic fix here, only mildly annoying advice that suddenly feels urgent. Review recovery settings. Lock down account changes. Use passkeys. Because once an attacker controls the recovery layer, proving you’re you can become surprisingly difficult.
TL;DR
🧠 Family safety tools are being weaponized
⚡ Account recovery can be shut down entirely
🎓 Legitimate features enable the lockout
🔍 Prevention matters more than appeals
#Cybersecurity #Gmail #IdentitySecurity #AccountRecovery #DigitalRisk #security #privacy #cloud #infosec
Ha, j'ai quand-même une micro-bonne nouvelle sur le traitement des données personnelles : il y a un an ou deux j'avais râlé auprès d'une #pharmacie qui demandait qu'on lui envoie les ordonnances sur son adresse #Gmail / #Google.
J'ai râlé à deux reprises. Je n'ai pas eu de réponse. Je n'y suis plus retourné.
Jusqu'à la semaine dernière.
Et là j'ai vu que ça y est : la pharmacie a maintenant une boîte mail avec un prestataire spécialisé. 🎆
I turned off "smart features" (aka #AI) in my gmail account. Doing that means instead of parsing the inbox into Primary, Social, and Promotions, it's now all one big inbox.
Now, I spend time each day Unsubscribing from email lists I'm on. Also unsubscribing to most substacks.
I had no idea how bad it was, as I generally avoided the Social and Promotions folders. There's a lot of junk email in this world, and I seem to have opted into most of it.
Big Tech's love to preach "privacy this" & "privacy that" but in reality they track & collect your data.
Today we take a look at what privacy washing is, and why companies like #Gmail & #Facebook use it to gain your trust 👉 https://tuta.com/blog/big-tech-privacy-washing
Chat Control is back, but slightly changed:
❌ No backdoor of encryption
❌ No forced scanning
🚨 But: Age verification (no anonymity)
The update just quietly passed in the EU Council & now needs to be discussed with the EU Parliament.
👁️Big Techs like #Gmail and #WhatsApp will continue to scan your data.
Will you keep fighting against #ChatControl?
#Gmail forcing me to disable smart features to keep them from feeding everything I get into their big slop machine has helped me #Unsubscribe for more newsletters and promotional emails in the last week than I have in the last 2 years 😅
#Gmail tying Inbox categories to AI features is a classic case of feature tie-in. You have a feature you want to push, and know that it will cause pushback. Solution: Tie it in with some basic functionality that users really find useful. Presto: Users are far more likely to bear with the inconvenient feature now that disabling it would make them lose the useful feature, too.
"Under the radar, Google has added features that allow Gmail to access all private messages and attachments for training its AI models.
If you use Gmail, you need to be aware of an important change that’s quietly rolling out. Reportedly, Google has recently started automatically opting users in to allow Gmail to access all private messages and attachments for training its AI models. This means your emails could be analyzed to improve Google’s AI assistants, like Smart Compose or AI-generated replies. Unless you decide to take action.
The reason behind this is Google’s push to power new Gmail features with its Gemini AI, helping you write emails faster and manage your inbox more efficiently. To do that, Google is using real email content, including attachments, to train and refine its AI models. Some users are now reporting that these settings are switched on by default instead of asking for explicit opt-in.
Which means that if you don’t manually turn these setting off, your private messages may be used for AI training behind the scenes. Even though Google promises strong privacy measures like anonymization and data security during AI training, for anyone handling sensitive or confidential information, that may not feel reassuring."
someone took all of jeffrey eptein's emails and created a site "Jmail", which is just like Gmail if you were logged in as a man named Jeffrey Epstein.
(said more clearly you can read all Epstein's emails from the latest tranche of documents through what feels like a gmail interface)
#Epstein #uspol #MAGA #JeffreyEpstein #EpsteinFiles #gmail #SteveBannon #Bannon
"Gmail can read your emails and attachments to train its AI, unless you opt out"
And that means if you don't use Gmail but you write to a Gmail address your email will be used if the person didn't opt out.
RE: https://mastodon.social/@Tutanota/115586481225235662
Sneaky fuckers.
#Google #Alphabet #Gemini #Gmail
AodeRelay boosted🚨 BREAKING #Google just activated #Gemini on #Gmail - without asking you.
Turn it off now; here's how!
https://tuta.com/blog/how-to-disable-gemini-on-android✊️ Fight AI & fight Google
You have to manually turn off Smart Features in the Setting menu in TWO locations.
Share so everyone is aware. ❤️
Considering very seriously (again) to refuse to exchange emails with people who are using #Gmail.
Gmail can read your emails and attachments to train its AI, unless you opt out
https://www.malwarebytes.com/blog/news/2025/11/gmail-is-reading-your-emails-and-attachments-to-train-its-ai-unless-you-turn-it-off
🚨 BREAKING #Google just activated #Gemini on #Gmail - without asking you.
Turn it off now; here's how!
https://tuta.com/blog/how-to-disable-gemini-on-android
✊️ Fight AI & fight Google
You have to manually turn off Smart Features in the Setting menu in TWO locations.
Share so everyone is aware. ❤️
Gmail peut lire vos emails et vos pièces jointes pour entraîner leur #IA, à moins que vous ne refusiez
https://www.malwarebytes.com/blog/news/2025/11/gmail-is-reading-your-emails-and-attachments-to-train-its-ai-unless-you-turn-it-off
Et moi, qui ne veut pas alimenter encore et encore #Google et encore moins son #IA, je fais comment ? Parce que si mon ou ma correspondant·e utilise Gmail, je n'ai qu'à croiser les doigts en espérant qu'iel ait fait le nécessaire pour refuser (ce qui n'est pas tout à fait ma définition d'un consentement actif et positif au passage)...
WARNING: Do NOT ignore #Gmail's new #AI scanning default settings. 1.8 billion users automatically opted in to allow Gmail access to all private messages & attachments to train AI models since June 2024.
Here's what happened:
1. Gmail enabled "Smart Features" by default for ALL users without clear notification.
2. They tied basic functionality like spell checking to AI scanning (i.e., if want spell check you need to accept full email analysis).
(1/4)
PSA to anyone who uses Gmail!
"Reportedly, Google has recently started automatically opting users in to allow Gmail to access all private messages and attachments for training its AI models. This means your emails could be analyzed to improve Google’s AI assistants, like Smart Compose or AI-generated replies. Unless you decide to take action."
Google says Search AI Mode will know everything about you
AI Mode will pull details from your emails, documents, and other Google apps to give truly customized responses.
#Google #AI #Gmail #Gdrive #privacy #surveillance #enshittification #technology #dystopia
0-RTT handshake..Preventing the handshake is the whole selling point of 0-RTT in #QUIC.
It's there to track users, obviously, but its genuine innovation that make it suitable for server to server communications is the reducted connection time (no #TCP handshake and no #TLS handshake).
is bound to the same domainSure.
It would not work fpr tracking across different domainsNot needed if you control all of those different domains.
Let's make an example.
In your #openwashing #firefox you login in gmail and in another browser open #GoogleSearch establishing a #HTTP3 connection over #QUIC. Google know you are from IP X so he can record your google search activity with your identity.
Google also save the pre shared keys (PSK) assigned to each of your QUIC connections in your profile. ¹
Then you disconnect, and clear browser cookies logging out of #gmail.
Then you connect to a brand new network, recieve a new public IP and make a new search on Google search.
To establich a connection QUICly (pun intended) the browser send to www.google.com the PSK from the last session.
So Google can simply identify you by looking for the PSK in the database, on the very first IP packet even if you removed all cookies and changed IP.
And obviuouly, once Google know you have an active QUIC connection from the new IP, that IP will be enough to track you on all sites you visit on their #cloud servers and on all sites you visit that use their #spyware (#GoogleFonts, #GoogleAnalytics, #DoubleClick and so on), whatever the browser.
You change IP again? Not an problem: the next #HTTP3 connection will leak your identity again.
it changes as frequently as IP address could, right?This question is incorrect.
The pre shared key is bound to a session that can span different IP over time as the user move among networks. That's the whole point of it, what allows the zero in 0-RTT: the first packet is used to resume a previous existing TLS connection.
and is not persistentIt must persist enough to be useful.
@bagder@mastodon.social @daniel@gultsch.social @lorenzo@snac.bobadin.icu
Damn, y’all, I’d have expected better from a trillion-dollar People Farmer that’s helping Israel commit genocide in Palestine…
Maybe we should talk to their Chief Ethics Officer or something?
#google #gmail #genocide #israel #Gaza #Palestine #fascism #technofascism #BigTech https://daveverse.org/2025/11/07/gmail-ai-gets-even-more-intrusive/
Wondering how many people use email not provided by google/microsoft such as proton.
#fedi #fediverse #email #gmail #protonmail
| Not me: | 10 |
| Yes (Proton): | 12 |
| Yes (other -comment?): | 37 |
@nuintari F-Droid has been great. After moving from #gmail to #mailbox_org I switched my mobile mail app to #K9 and have been using the #Fossify apps. While they may not have the most features, they are minimal and that's appreciated.
I still have some work to do in #deGoogling. #Nextcloud or another solution as well as finding a #googlevoice alternative.
#fdroid has been overall a positive experience. It reminds me of #googleplay from circa 2011.
🔥 Latest issue of my curated #cybersecurity and #infosec list of resources for week #44/2025 is out!
→ It includes the following and much more:
💌 #Google disputes false claims of massive #Gmail data breach;
🇪🇺 The #EU says #Facebook and #Instagram broke Digital Services Act (DSA) rules;
🇺🇸 🇷🇺 Former US Defense Contractor Executive Admits to Selling Exploits to #Russia;
🤔 #F5 says a nation-state attacker had long-term access to its systems;
🧰 🩹 #OpenAI releases ‘#Aardvark’ security and patching model;
--
👉 NEVER MISS my curations and updates on information security and cybersecurity news and challenges 📨 Subscribe to the #infosecMASHUP newsletter to have it piping hot in your inbox every week-end ⬇️
https://infosec-mashup.santolaria.net/p/infosec-mashup-44-2025
»Millionen Gmail-#Passwort'er gestohlen: Ist eures darunter?
Laut dem #Cybersecurity-Experten Troy Hunt, der das #Datenleck aufgedeckt hat, könnten 3,5 Terabyte an #Daten betroffen sein. Ein Datensatz aus 183 Millionen gestohlener #Mail-Passwöter mehrerer Anbieter ist im April 2025 aufgetaucht. Millionen davon sollen mit #Gmail-Konten verbunden sein.«
Ich frage mich immer wieder weshalb fast alle #Web-Service Provider die #EMail's & PW "unsicher" speichern?
📧 https://futurezone.at/digital-life/gmail-passwoerter-datenleak-pwned-cybersecurity/403097518
🚨 Google debunks Gmail breach rumors.
No compromise of Gmail systems - data came from infostealer dumps, not Google.
Users urged to enable MFA & passkeys.
🔗 https://www.technadu.com/google-debunks-gmail-data-breach-reports-that-said-183-million-user-account-credentials-leaked/612074/
I've had my #Gmail account since 2004 back when it was invite only. As per their suggestion, I never worried about deleting or managing stuff.
Until now. They zoinked my free tb of storage and I'm not paying them to store trash. So I've spent the past few days removing everything from photos (never really used it) and drive. Plus emails w/ attachments >5 megs. Still was way over the now 15 gig limit.
So I deleted all emails before 2017. That seems to have done the trick. Yeesh.
#Google #GoogleClassroom #Gmail #spam #MonopolistsDontInnovate
This post is not an invitation to scold me for using Google products or to suggest alternatives. It is also not a request for technical support.
🤖 Gemini’s Gmail summaries were just caught parroting phishing scams. A security researcher embedded hidden prompts in email text (w/ white font, zero size) to make Gemini falsely claim the user's Gmail password was compromised and suggest calling a fake Google number. It's patched now, but the bigger issue remains: AI tools that interpret or summarize content can be manipulated just like humans. Attackers know this and will keep probing for prompt injection weaknesses.
TL;DR
⚠️ Invisible prompts misled Gemini
📩 AI summaries spoofed Gmail alerts
🔍 Prompt injection worked cleanly
🔐 Google patched, but risk remains
https://www.pcmag.com/news/google-gemini-bug-turns-gmail-summaries-into-phishing-attack
#cybersecurity #promptinjection #AIrisks #Gmail #security #privacy #cloud #infosec #AI