buc.ci is a Fediverse instance that uses the ActivityPub protocol. In other words, users at this host can communicate with people that use software like Mastodon, Pleroma, Friendica, etc. all around the world.

This server runs the snac software and there is no automatic sign-up process.

Admin email
abucci@bucci.onl
Admin account
@abucci@buc.ci

Search results for tag #gmail

[?]Tormod » 🌐
@airwhale@beige.party

I’m in the process of migrating away from GMail to Proton. All is going well this far, but am wondering:

Is there any sense in deleting all my emails from the GMail account? Will the data actually be removed, or will a copy be sitting on a Google server "for internal use and AI training only”?

I WILL delete if I trust the info to be gone, but otherwise, I’ll just be removing a backup of my email archive. Thankful for any insights you may have around this.

"Trust. Who do ya?” as the Prince track goes...

    [?]knoppix » 🌐
    @knoppix95@mastodon.social

    AI toy company Bondu exposed 50,000+ chat logs with kids to anyone with a Gmail account via an unprotected web console. 🧸
    Researchers found children's names, birthdates, family details, and full transcripts—now fixed, but it spotlights weak child data protections. ⚠️

    🔗 wired.com/story/an-ai-toy-expo

      AodeRelay boosted

      [?]Nithin Coca నితిన్ » 🌐
      @ncoca@social.coop

      Another reason to not use - they'll readily share your data with the government and give you minimal opportunities to respond. It's not worth it.

      newrepublic.com/post/206088/ho

        AodeRelay boosted

        [?]PrivacyDigest » 🌐
        @PrivacyDigest@mas.to

        Web portal leaves kids' with toy open to anyone with acct

        With just a few min work, he & a web researcher friend made a startling discovery: ‘s web-based portal, intended to allow parents to check on their children's conversations & for Bondu’s staff to the products’ use & performance, also let anyone with a Gmail acct access transcripts of virtually every Bondu's child users have ever had with the toy.

        arstechnica.com/security/2026/

          AodeRelay boosted

          [?]The New Oil » 🤖 🌐
          @thenewoil@mastodon.thenewoil.org

          AodeRelay boosted

          [?]Franz Graf » 🌐
          @hikingdude@mastodon.social

          The next is coming soon. If you want to tackle , you might want to check out my gmail migration guide:

          TL;DR: it's not that much effort.

          locked.de/how-to-migrate-gmail

            AodeRelay boosted

            [?]Bob Carver » 🌐
            @cybersecboardrm@infosec.exchange

            AodeRelay boosted

            [?]Æ Sea F. » 🌐
            @hcf@infosec.exchange

            Stop posting affiliation links with hashtags and please. This is not what hashtags are for. People who subscribed or are searching for them are already aware that Proton Mail exists and most likely they already made their minds about it a while ago.

            If you want to convince new people then use something like or , or just PLEASE 🙏

            Jesus, my home feed exploded today.

              AodeRelay boosted

              [?]Quasit » 🌐
              @Quasit@kolektiva.social

              Google's automatically opted you in to letting them use your emails to train their AI. Here's how you can opt out:

              huffpost.com/entry/opt-out-gma

                AodeRelay boosted

                [?]Paul Chambers🚧 » 🌐
                @paul@oldfriends.live

                If you use , you should be aware that as of this post's timestamp, their spam detection is down and it is likely your emails aren't being scanned for spam, unverified senders, or harmful software.

                "We advise the users to be extra diligent in lieu of missing spam checks."

                Google Status:
                google.com/appsstatus/dashboar

                  AodeRelay boosted

                  [?]knoppix » 🌐
                  @knoppix95@mastodon.social

                  Google’s Gemini A.I. now scans your entire inbox to “help” you summarize, reply & organize. 📬
                  That’s not assistance — that’s surveillance wrapped in productivity branding. 🔍

                  If your emails need an opt‑out clause, maybe the feature shouldn’t exist by default. ⚠️

                  🔗 nytimes.com/2026/01/15/technol

                    AodeRelay boosted

                    [?]vhs Karlsruhe » 🌐
                    @karlsruhe@vhs.social

                    Kann es sein, dass auf ein grundsätzliches Problem mit -Konten hat?
                    Die lange problemlos funktionierende Synchronisation von und Kalender zwischen Android-Mobilgeräten und unserem - (zickt schon länger und) streikt komplett seit 2. Januar (da habe ich das SSL-Zertifikat verlängert).
                    Firewall-Einstellungen und Zertifikat sind aber in Ordnung, denn der David-Webmailer auf dem selben Port ist erreichbar und der Kollege mit iOS hat auch kein Problem.
                    Unter Android wird die Verbindung auch erfolgreich getestet und bei manueller Synchronisation kein Fehler angezeigt - aber halt leider auch nix übertragen ...

                    Screenshot der Kontosynchronisierungseinstellungen vom GMail für gutmann@vhs-karlsruhe.de (ein Exchange-Konto)
Mail- und Kalendersynchro sind aktiviert, und es werden letzte Synchronisationen für 11:34 bzw. 11:25 angezeigt.

                    Alt...Screenshot der Kontosynchronisierungseinstellungen vom GMail für gutmann@vhs-karlsruhe.de (ein Exchange-Konto) Mail- und Kalendersynchro sind aktiviert, und es werden letzte Synchronisationen für 11:34 bzw. 11:25 angezeigt.

                      AodeRelay boosted

                      [?]Led By Gilded Fools » 🌐
                      @MHowell@kolektiva.social

                      Why you should turn off Google Gemini AI in Gmail.
                      proton.me/blog/turn-off-gemini

                        AodeRelay boosted

                        [?]ピゴスパ » 🌐
                        @pygospa@social.linux.pizza

                        The address is one of the most important services you have: It is not only used for communication, but as part of the login credential for nearly all other services it also serves as your digital identity and backup for most of your accounts (e.g. when you need to reset your password, etc.). That makes it your most important hub for all digital services, and becomes a detailed profile of your digital life in itself.

                        It therefore needs to be - but also respect your . And it should be and support your .

                        The most used email provider by might be secure, but most definately neither respects your privacy, nor your as it is one of the companies that would delete your account if their fascist leader wills it (plus Google's and are openly supporting him).

                        Time to switch to an - after some reserach and evaluating the three biggest contenders, I chose to go with @mailbox_org. It'll cost you at least 1€/month, but this money ensures that they won't try to cover their costs by selling your data.

                        As a bonus, also provides other services you know from Google, like Calendar, Contacts, Drive, Documents (Text, Tables and Presentations), Chat and Webcam Meetings, Polls and Shared Notes. There's a private and a corporate option, as well as a family option (that I have yet to explore - not quite sure how it works and what benefit it brings). But most importantly, it's company following laws, has multiple certifications and simplifies the usage of for non-techi users, while giving techis the freedom they desire.

                        Switching one's email is a tedious endeavour - but I believe that this is the most important service to migrating. If there is only one service you want to migrate, let it be the one that gives you access to all other services - or practically cuts you off, if someone else gains access to it!

                          AodeRelay boosted

                          [?]Lauren Weinstein » 🌐
                          @lauren@mastodon.laurenweinstein.org

                          THIS IS IMPORTANT: DO NOT TRUST GOOGLE GEMINI, and it may already be enabled in your GMAIL BY DEFAULT.

                          DO NOT TRUST GOOGLE!

                          says it may share your interactions with with law enforcement, including involving Gemini features in . Given Google's CEO Sundar's enthusiastic embrace of the Fascist Trump administration and teaming Gemini with Hegseth's Department of Defense, I NO LONGER TRUST GOOGLE.

                          Pay attention to this. Google -- as always -- says they do not give user data to law enforcement except with a valid warrant. This has long been true, but I no longer trust Google to honor this position. A quick call from Trump to Sundar could well be enough to bypass those past protections. Discussing an anti-Trump demonstration? Abortion? Helping local immigrants? You can no longer trust Google to not treat your data as fodder for fascist Trump, irrespective of Google's public statements.

                          VERY IMPORTANT: It appears that if you have "Smart Features" enabled in Gmail -- which has long included a variety of features, you now probably (or soon will) also have Gemini scouring through your email. I STRONGLY RECOMMEND turning this off. Can we be sure Google will really honor this choice given their embrace of Trump? No, but it's important to have specified your choice on the record.

                          To turn off Gmail smart features (apparently including Gemini, though other ways to ostensibly turn off Gemini in Gmail may also be available):

                          Enter Gmail

                          Click the Gear icon at the upper right

                          Click "See all settings"

                          Stay on the "General" tab

                          Scroll down to "Smart features" -- make sure it is unchecked

                          Just below this (currently) is "Google Workspace smart features"

                          Click the "Manage Workspace smart feature settings" bubble

                          Make sure the toggles are OFF (to the left) for everything listed in the pop-up
                          that appears. Be SURE TO SCROLL DOWN -- there are currently TWO toggles
                          but the second may be completely hidden if you don't grab the little scrollbar on the right and pull it down. Again, make sure BOTH toggles are off.

                          Click Save

                          Now back on the General Tab, scroll all the way to the bottom of the page and click Save Changes if that button is not already greyed out and unclickable.

                          That's what I have for you for now, based on the information I have right now.
                          More as I learn more.

                          It's a terrible situation that pains me greatly. Before you ask, I do not at this time have a recommendation for other major email providers.

                          How you proceed is up to you, of course.

                          Take care.

                          L

                            AodeRelay boosted

                            [?]Franz Graf » 🌐
                            @hikingdude@mastodon.social

                            Finally! I wanted to document this since quite a while: The labeling system kept me quite a while from moving my mails away from Google.
                            In the end it wasn't too complicated -- if you know hw to do it ... (as usual)

                            Anyways, I've finally written it down. Maybe it helps somebody who want's to get off GMail.

                            (And damn, I was surprised that it took so much time to write it down)

                            locked.de/how-to-migrate-gmail

                              AodeRelay boosted

                              [?]Scott Wilson » 🌐
                              @scottwilson@infosec.exchange

                              Has anyone recently migrated from Gmail to Tuta?

                              I’m curious if there is a simple way to move/copy all my emails over.

                              Tuta logo

                              Alt...Tuta logo

                                AodeRelay boosted

                                [?]Teach Honest History » 🌐
                                @Cliftographer@mindly.social

                                God damn it all, I DO NOT WANT inserting itself into all my tools. My was working just find. Just signed in and see this crap.

                                Screen capture with announcement 'New:  Gmail is entering the Gemini era", and "AI-powered email for everyone"

                                Alt...Screen capture with announcement 'New: Gmail is entering the Gemini era", and "AI-powered email for everyone"

                                  [?]PrivacyDigest » 🌐
                                  @PrivacyDigest@mas.to

                                  AodeRelay boosted

                                  [?]Paul Chambers🚧 » 🌐
                                  @paul@oldfriends.live

                                  Starting January 2026, If you use Gmail to check and fetch external email accounts, fetching emails from third-party accounts into your Gmail account, with POP, will no longer be supported.

                                  You will need to migrate your email data into a Google Workspace account. At some point, the option to "Check mail from other accounts" will no longer be available in Gmail

                                  You can continue to read and send emails from your other accounts in the Gmail app for Android, iPhone, and iPad, which uses a standard IMAP connection

                                  Google gave very little notice to this

                                  🔗 Learn about upcoming changes to Gmailify & POP in Gmail
                                  support.google.com/mail/answer

                                  🔗 New Support Page: Data migration
                                  support.google.com/a/topic/140

                                  Learn about upcoming changes to Gmailify & POP in Gmail
Starting January 2026, Gmail will no longer provide support for the following features:

Gmailify: This feature allows you to get special features like spam protection or inbox organization applied to your third-party email account. Learn more about Gmailify.
Check mail from other accounts: Fetching emails from third-party accounts into your Gmail account, with POP, will no longer be supported.

                                  Alt...Learn about upcoming changes to Gmailify & POP in Gmail Starting January 2026, Gmail will no longer provide support for the following features: Gmailify: This feature allows you to get special features like spam protection or inbox organization applied to your third-party email account. Learn more about Gmailify. Check mail from other accounts: Fetching emails from third-party accounts into your Gmail account, with POP, will no longer be supported.

                                    AodeRelay boosted

                                    [?]Ralf Stockmann » 🌐
                                    @rstockm@chaos.social

                                    Eigentlich wollte ich zum heutigen ein gönnerhaftes Posting absetzen was ich alles seit Jahren migriert habe. Dann hat mich aber dieses doch tolle Blogpost von @pallenberg mitgerissen: ja, E-Mail ist der Kern des Ganzen:
                                    metacheles.de/digital-independ
                                    Also heute Wechsel von zu @mailbox_org… (1/6)

                                      AodeRelay boosted

                                      [?]TechNadu » 🌐
                                      @technadu@infosec.exchange

                                      Google appears to be testing a feature that allows users to change their @gmail.com address or add a new alias, based on a support document.

                                      • No official announcement yet
                                      • Limited rollout suspected
                                      • Original address likely remains active

                                      From a security and identity perspective, how do you view flexible email identities?

                                      Join the discussion and follow @technadu for measured tech updates.

                                        AodeRelay boosted

                                        [?]Brian Greenberg :verified: » 🌐
                                        @brian_greenberg@infosec.exchange

                                        This Gmail hack is unsettling not because it’s flashy, but because it’s bureaucratic. Attackers aren’t breaking encryption or outsmarting algorithms. They’re filling out forms. By changing an account’s age and abusing Google’s Family Link feature, they can quietly reclassify an adult user as a “child” and assume parental control. At that point, the rightful owner isn’t hacked so much as administratively erased.

                                        The clever part is that everything happens inside legitimate features. Passwords are changed. Two-factor settings are altered. Recovery options are overwritten. And when the user tries to get back in, Google’s automated systems see a supervised child account and do exactly what they were designed to do: say no.

                                        Google says it’s looking into the issue, which suggests this wasn’t how the system was supposed to work. But it’s a reminder of an old lesson. Security failures often happen when protective mechanisms are combined in ways no one quite imagined. The tools aren’t broken. The assumptions are.

                                        There’s no dramatic fix here, only mildly annoying advice that suddenly feels urgent. Review recovery settings. Lock down account changes. Use passkeys. Because once an attacker controls the recovery layer, proving you’re you can become surprisingly difficult.

                                        TL;DR
                                        🧠 Family safety tools are being weaponized
                                        ⚡ Account recovery can be shut down entirely
                                        🎓 Legitimate features enable the lockout
                                        🔍 Prevention matters more than appeals

                                        forbes.com/sites/daveywinder/2

                                          AodeRelay boosted

                                          [?]Parleur » 🌐
                                          @parleur@mastodon.parleur.net

                                          Ha, j'ai quand-même une micro-bonne nouvelle sur le traitement des données personnelles : il y a un an ou deux j'avais râlé auprès d'une qui demandait qu'on lui envoie les ordonnances sur son adresse / .

                                          J'ai râlé à deux reprises. Je n'ai pas eu de réponse. Je n'y suis plus retourné.

                                          Jusqu'à la semaine dernière.

                                          Et là j'ai vu que ça y est : la pharmacie a maintenant une boîte mail avec un prestataire spécialisé. 🎆

                                            AodeRelay boosted

                                            [?]Mark » 🌐
                                            @MarkBrigham@universeodon.com

                                            I turned off "smart features" (aka ) in my gmail account. Doing that means instead of parsing the inbox into Primary, Social, and Promotions, it's now all one big inbox.

                                            Now, I spend time each day Unsubscribing from email lists I'm on. Also unsubscribing to most substacks.

                                            I had no idea how bad it was, as I generally avoided the Social and Promotions folders. There's a lot of junk email in this world, and I seem to have opted into most of it.

                                              AodeRelay boosted

                                              [?]Tuta » 🌐
                                              @Tutanota@mastodon.social

                                              Big Tech's love to preach "privacy this" & "privacy that" but in reality they track & collect your data.

                                              Today we take a look at what privacy washing is, and why companies like & use it to gain your trust 👉 tuta.com/blog/big-tech-privacy

                                              Screenshot of the App privacy info of the Gmail app with speech bubble:
"We care about your privacy"

                                              Alt...Screenshot of the App privacy info of the Gmail app with speech bubble: "We care about your privacy"

                                                AodeRelay boosted

                                                [?]Tuta » 🌐
                                                @Tutanota@mastodon.social

                                                Chat Control is back, but slightly changed:

                                                ❌ No backdoor of encryption
                                                ❌ No forced scanning
                                                🚨 But: Age verification (no anonymity)

                                                The update just quietly passed in the EU Council & now needs to be discussed with the EU Parliament.

                                                👁️Big Techs like and will continue to scan your data.

                                                Will you keep fighting against ?

                                                  [?]The New Oil » 🤖 🌐
                                                  @thenewoil@mastodon.thenewoil.org

                                                  AodeRelay boosted

                                                  [?]Crazypedia won't Comply » 🌐
                                                  @Crazypedia@mypocketpals.online

                                                  forcing me to disable smart features to keep them from feeding everything I get into their big slop machine has helped me for more newsletters and promotional emails in the last week than I have in the last 2 years 😅

                                                    AodeRelay boosted

                                                    [?]David August ❌👑 » 🌐
                                                    @davidaugust@mastodon.online

                                                    In case you had not yet seen this elsewhere.

                                                    screenshot of a 2 post thread: 

@ash.renee411 

Gmail rolled out an update on October 10, 2025, and a lot of people didn't notice what it actually does. 
Google's Gemini can now automatically scan everything in your inbox - emails, attachments, receipts, financial docs, all of it - to train their Al and build ad profiles. 
If you don't want that, you can turn it off. 

1/2 

@ash.renee411 

1. Open Gmail in your browser 
2. Go to All Settings 
3. Under General, scroll to Smart features and personalization 
4. Uncheck the box 
5. Then go to Google Workspace → Smart features → Manage Workspace and toggle off both smart-feature settings. 

That's it - you've opted out. 

2/2

                                                    Alt...screenshot of a 2 post thread: @ash.renee411 Gmail rolled out an update on October 10, 2025, and a lot of people didn't notice what it actually does. Google's Gemini can now automatically scan everything in your inbox - emails, attachments, receipts, financial docs, all of it - to train their Al and build ad profiles. If you don't want that, you can turn it off. 1/2 @ash.renee411 1. Open Gmail in your browser 2. Go to All Settings 3. Under General, scroll to Smart features and personalization 4. Uncheck the box 5. Then go to Google Workspace → Smart features → Manage Workspace and toggle off both smart-feature settings. That's it - you've opted out. 2/2

                                                      [?]Harry Sintonen » 🌐
                                                      @harrysintonen@infosec.exchange

                                                      tying Inbox categories to AI features is a classic case of feature tie-in. You have a feature you want to push, and know that it will cause pushback. Solution: Tie it in with some basic functionality that users really find useful. Presto: Users are far more likely to bear with the inconvenient feature now that disabling it would make them lose the useful feature, too.

                                                        AodeRelay boosted

                                                        [?]Miguel Afonso Caetano » 🌐
                                                        @remixtures@tldr.nettime.org

                                                        "Under the radar, Google has added features that allow Gmail to access all private messages and attachments for training its AI models.

                                                        If you use Gmail, you need to be aware of an important change that’s quietly rolling out. Reportedly, Google has recently started automatically opting users in to allow Gmail to access all private messages and attachments for training its AI models. This means your emails could be analyzed to improve Google’s AI assistants, like Smart Compose or AI-generated replies. Unless you decide to take action.

                                                        The reason behind this is Google’s push to power new Gmail features with its Gemini AI, helping you write emails faster and manage your inbox more efficiently. To do that, Google is using real email content, including attachments, to train and refine its AI models. Some users are now reporting that these settings are switched on by default instead of asking for explicit opt-in.

                                                        Which means that if you don’t manually turn these setting off, your private messages may be used for AI training behind the scenes. Even though Google promises strong privacy measures like anonymization and data security during AI training, for anyone handling sensitive or confidential information, that may not feel reassuring."

                                                        malwarebytes.com/blog/news/202

                                                          [?]⚯ Michel de Cryptadamus ⚯ » 🌐
                                                          @cryptadamist@universeodon.com

                                                          someone took all of jeffrey eptein's emails and created a site "Jmail", which is just like Gmail if you were logged in as a man named Jeffrey Epstein.

                                                          (said more clearly you can read all Epstein's emails from the latest tranche of documents through what feels like a gmail interface)

                                                          jmail.world/

                                                            Alex Feinman boosted

                                                            [?]The Human Capybara » 🌐
                                                            @aSweetGentleman@mstdn.social

                                                            "Gmail can read your emails and attachments to train its AI, unless you opt out"

                                                            And that means if you don't use Gmail but you write to a Gmail address your email will be used if the person didn't opt out.

                                                            malwarebytes.com/blog/news/202

                                                              [?]Yogi Jaeger » 🌐
                                                              @yoginho@spore.social

                                                              RE: mastodon.social/@Tutanota/1155

                                                              Sneaky fuckers.

                                                              AodeRelay boosted

                                                              [?]Tuta » 🌐
                                                              @Tutanota@mastodon.social

                                                              🚨 BREAKING just activated on - without asking you.

                                                              Turn it off now; here's how!
                                                              tuta.com/blog/how-to-disable-g

                                                              ✊️ Fight AI & fight Google

                                                              You have to manually turn off Smart Features in the Setting menu in TWO locations.

                                                              Share so everyone is aware. ❤️

                                                              “We’ve activated Gemini on Android, Gmail, Chrome, Photos, and Google apps”  With a reply, "No Thanks! Learn how to  disable Gemini on Android, Gmail, Chrome, Photos, & Google apps on the  Tuta blog. "

                                                              Alt...“We’ve activated Gemini on Android, Gmail, Chrome, Photos, and Google apps” With a reply, "No Thanks! Learn how to disable Gemini on Android, Gmail, Chrome, Photos, & Google apps on the Tuta blog. "

                                                              Turn off smart features in Gmail, Chat & Meet: Screenshot of the google settings you need to navigate to turn off smart features. Next to Smart features click the box to turn off smart features in Gmail, Chat and Meet. Click on Manage Workspace smart feature settings and toggle these setting off.

                                                              Alt...Turn off smart features in Gmail, Chat & Meet: Screenshot of the google settings you need to navigate to turn off smart features. Next to Smart features click the box to turn off smart features in Gmail, Chat and Meet. Click on Manage Workspace smart feature settings and toggle these setting off.

                                                                  AodeRelay boosted

                                                                  [?]Anne Roth » 🌐
                                                                  @anneroth@systemli.social

                                                                  Considering very seriously (again) to refuse to exchange emails with people who are using .

                                                                  Gmail can read your emails and attachments to train its AI, unless you opt out
                                                                  malwarebytes.com/blog/news/202

                                                                    AodeRelay boosted

                                                                    [?]Tuta » 🌐
                                                                    @Tutanota@mastodon.social

                                                                    🚨 BREAKING just activated on - without asking you.

                                                                    Turn it off now; here's how!
                                                                    tuta.com/blog/how-to-disable-g

                                                                    ✊️ Fight AI & fight Google

                                                                    You have to manually turn off Smart Features in the Setting menu in TWO locations.

                                                                    Share so everyone is aware. ❤️

                                                                    “We’ve activated Gemini on Android, Gmail, Chrome, Photos, and Google apps”  With a reply, "No Thanks! Learn how to  disable Gemini on Android, Gmail, Chrome, Photos, & Google apps on the  Tuta blog. "

                                                                    Alt...“We’ve activated Gemini on Android, Gmail, Chrome, Photos, and Google apps” With a reply, "No Thanks! Learn how to disable Gemini on Android, Gmail, Chrome, Photos, & Google apps on the Tuta blog. "

                                                                    Turn off smart features in Gmail, Chat & Meet: Screenshot of the google settings you need to navigate to turn off smart features. Next to Smart features click the box to turn off smart features in Gmail, Chat and Meet. Click on Manage Workspace smart feature settings and toggle these setting off.

                                                                    Alt...Turn off smart features in Gmail, Chat & Meet: Screenshot of the google settings you need to navigate to turn off smart features. Next to Smart features click the box to turn off smart features in Gmail, Chat and Meet. Click on Manage Workspace smart feature settings and toggle these setting off.

                                                                      AodeRelay boosted

                                                                      [?]Jérémy -Jeey- » 🌐
                                                                      @jeeynet@framapiaf.org

                                                                      Gmail peut lire vos emails et vos pièces jointes pour entraîner leur , à moins que vous ne refusiez
                                                                      malwarebytes.com/blog/news/202

                                                                      Et moi, qui ne veut pas alimenter encore et encore et encore moins son , je fais comment ? Parce que si mon ou ma correspondant·e utilise Gmail, je n'ai qu'à croiser les doigts en espérant qu'iel ait fait le nécessaire pour refuser (ce qui n'est pas tout à fait ma définition d'un consentement actif et positif au passage)...

                                                                        AodeRelay boosted

                                                                        [?]Coach Pāṇini ® » 🌐
                                                                        @paninid@mastodon.world

                                                                        linkedin.com/posts/alex-turnbu

                                                                        WARNING: Do NOT ignore 's new scanning default settings. 1.8 billion users automatically opted in to allow Gmail access to all private messages & attachments to train AI models since June 2024.

                                                                        Here's what happened:

                                                                        1. Gmail enabled "Smart Features" by default for ALL users without clear notification.

                                                                        2. They tied basic functionality like spell checking to AI scanning (i.e., if want spell check you need to accept full email analysis).

                                                                        (1/4)

                                                                          AodeRelay boosted

                                                                          [?]Stefan Bohacek » 🌐
                                                                          @stefan@stefanbohacek.online

                                                                          PSA to anyone who uses Gmail!

                                                                          "Reportedly, Google has recently started automatically opting users in to allow Gmail to access all private messages and attachments for training its AI models. This means your emails could be analyzed to improve Google’s AI assistants, like Smart Compose or AI-generated replies. Unless you decide to take action."

                                                                          malwarebytes.com/blog/news/202

                                                                            AodeRelay boosted

                                                                            [?]Kevin Karhan :verified: » 🌐
                                                                            @kkarhan@infosec.space

                                                                            @Mux always has been...

                                                                            Ask @tomscott about !

                                                                            takes cover

                                                                              AodeRelay boosted

                                                                              [?]Jon Snow » 🌐
                                                                              @jonsnow@mastodon.online

                                                                              Google says Search AI Mode will know everything about you

                                                                              AI Mode will pull details from your emails, documents, and other Google apps to give truly customized responses.

                                                                              bleepingcomputer.com/news/goog

                                                                                [?]Giacomo Tesio » 🌐
                                                                                @giacomo@snac.tesio.it

                                                                                @electrostep@mammut.gogreenit.net
                                                                                0-RTT handshake..
                                                                                Preventing the handshake is the whole selling point of 0-RTT in .

                                                                                It's there to track users, obviously, but its genuine innovation that make it suitable for server to server communications is the reducted connection time (no handshake and no handshake).

                                                                                is bound to the same domain
                                                                                Sure.
                                                                                It would not work fpr tracking across different domains
                                                                                Not needed if you control all of those different domains.

                                                                                Let's make an example.

                                                                                In your you login in gmail and in another browser open establishing a connection over . Google know you are from IP X so he can record your google search activity with your identity.

                                                                                Google also save the pre shared keys (PSK) assigned to each of your QUIC connections in your profile. ¹

                                                                                Then you disconnect, and clear browser cookies logging out of .

                                                                                Then you connect to a brand new network, recieve a new public IP and make a new search on Google search.
                                                                                To establich a connection QUICly (pun intended) the browser send to www.google.com the PSK from the last session.

                                                                                So Google can simply identify you by looking for the PSK in the database, on the very first IP packet even if you removed all cookies and changed IP.

                                                                                And obviuouly, once Google know you have an active QUIC connection from the new IP, that IP will be enough to track you on all sites you visit on their servers and on all sites you visit that use their (, , and so on), whatever the browser.

                                                                                You change IP again? Not an problem: the next connection will leak your identity again.

                                                                                it changes as frequently as IP address could, right?
                                                                                This question is incorrect.

                                                                                The pre shared key is bound to a session that can span different IP over time as the user move among networks. That's the whole point of it, what allows the zero in 0-RTT: the first packet is used to resume a previous existing TLS connection.

                                                                                and is not persistent
                                                                                It must persist enough to be useful.
                                                                                ____
                                                                                ¹ Google does not need to save such data to restore the QUIC connection since your browsers will send the PSK encrypted with the Google's public key in the first QUIC packet. BUT saving the PSKs in your profile (or an hash, don't focus on details) Google is then able to reidentify you like if you were sending a cookie.

                                                                                @bagder@mastodon.social @daniel@gultsch.social @lorenzo@snac.bobadin.icu

                                                                                  [?]Aral Balkan » 🌐
                                                                                  @aral@mastodon.ar.al

                                                                                  Damn, y’all, I’d have expected better from a trillion-dollar People Farmer that’s helping Israel commit genocide in Palestine…

                                                                                  Maybe we should talk to their Chief Ethics Officer or something?

                                                                                  daveverse.org/2025/11/07/gmail

                                                                                    🗳

                                                                                    [?]Matty » 🌐
                                                                                    @cavanholi@kind.social

                                                                                    Wondering how many people use email not provided by google/microsoft such as proton.

                                                                                    Not me:10
                                                                                    Yes (Proton):12
                                                                                    Yes (other -comment?):37
                                                                                      AodeRelay boosted

                                                                                      [?]Pete Orrall » 🌐
                                                                                      @peteorrall@mastodon.bsd.cafe

                                                                                      @nuintari F-Droid has been great. After moving from to I switched my mobile mail app to and have been using the apps. While they may not have the most features, they are minimal and that's appreciated.

                                                                                      I still have some work to do in . or another solution as well as finding a alternative.

                                                                                      has been overall a positive experience. It reminds me of from circa 2011.

                                                                                        AodeRelay boosted

                                                                                        [?]Xavier «X» Santolaria :verified_paw: :donor: » 🌐
                                                                                        @0x58@infosec.exchange

                                                                                        🔥 Latest issue of my curated and list of resources for week #44/2025 is out!

                                                                                        → It includes the following and much more:

                                                                                        💌 disputes false claims of massive data breach;

                                                                                        🇪🇺 The says and broke Digital Services Act (DSA) rules;

                                                                                        🇺🇸 🇷🇺 Former US Defense Contractor Executive Admits to Selling Exploits to ;

                                                                                        🤔 says a nation-state attacker had long-term access to its systems;

                                                                                        🧰 🩹 releases ‘’ security and patching model;

                                                                                        --

                                                                                        👉 NEVER MISS my curations and updates on information security and cybersecurity news and challenges 📨 Subscribe to the newsletter to have it piping hot in your inbox every week-end ⬇️

                                                                                        infosec-mashup.santolaria.net/

                                                                                          1 ★ 2 ↺

                                                                                          [?]Anthony » 🌐
                                                                                          @abucci@buc.ci

                                                                                          I do consider most emanations from Google to be spam. But I did not tell my Gmail account that.


                                                                                          Screenshot of a Google Mail inbox showing a recent Google-generated verification email sitting in the spam folder. I did not put it there, nor do I recall ever telling Google to mark Google emails as spam.

                                                                                          Alt...Screenshot of a Google Mail inbox showing a recent Google-generated verification email sitting in the spam folder. I did not put it there, nor do I recall ever telling Google to mark Google emails as spam.

                                                                                            AodeRelay boosted

                                                                                            [?]𝕂𝚞𝚋𝚒𝚔ℙ𝚒𝚡𝚎𝚕 » 🌐
                                                                                            @kubikpixel@chaos.social

                                                                                            »Millionen Gmail-'er gestohlen: Ist eures darunter?
                                                                                            Laut dem -Experten Troy Hunt, der das aufgedeckt hat, könnten 3,5 Terabyte an betroffen sein. Ein Datensatz aus 183 Millionen gestohlener -Passwöter mehrerer Anbieter ist im April 2025 aufgetaucht. Millionen davon sollen mit -Konten verbunden sein.«

                                                                                            Ich frage mich immer wieder weshalb fast alle -Service Provider die 's & PW "unsicher" speichern?

                                                                                            📧 futurezone.at/digital-life/gma

                                                                                              AodeRelay boosted

                                                                                              [?]TechNadu » 🌐
                                                                                              @technadu@infosec.exchange

                                                                                              🚨 Google debunks Gmail breach rumors.
                                                                                              No compromise of Gmail systems - data came from infostealer dumps, not Google.

                                                                                              Users urged to enable MFA & passkeys.
                                                                                              🔗 technadu.com/google-debunks-gm

                                                                                              Google Debunks Gmail Data Breach Reports That Said 183 Million User Account Credentials Leaked

                                                                                              Alt...Google Debunks Gmail Data Breach Reports That Said 183 Million User Account Credentials Leaked

                                                                                                AodeRelay boosted

                                                                                                [?]JL Johnson :veri_mast: » 🌐
                                                                                                @User47@vmst.io

                                                                                                I've had my account since 2004 back when it was invite only. As per their suggestion, I never worried about deleting or managing stuff.

                                                                                                Until now. They zoinked my free tb of storage and I'm not paying them to store trash. So I've spent the past few days removing everything from photos (never really used it) and drive. Plus emails w/ attachments >5 megs. Still was way over the now 15 gig limit.

                                                                                                So I deleted all emails before 2017. That seems to have done the trick. Yeesh.

                                                                                                  5 ★ 2 ↺

                                                                                                  [?]Anthony » 🌐
                                                                                                  @abucci@buc.ci

                                                                                                  I am using Google Classroom, and Gmail is marking all email notifications from my Google classroom as spam. It's email generated by one Google product going into another Google product. What on earth is happening to flag the notification as spam?

                                                                                                  This post is not an invitation to scold me for using Google products or to suggest alternatives. It is also not a request for technical support.

                                                                                                    AodeRelay boosted

                                                                                                    [?]Brian Greenberg :verified: » 🌐
                                                                                                    @brian_greenberg@infosec.exchange

                                                                                                    🤖 Gemini’s Gmail summaries were just caught parroting phishing scams. A security researcher embedded hidden prompts in email text (w/ white font, zero size) to make Gemini falsely claim the user's Gmail password was compromised and suggest calling a fake Google number. It's patched now, but the bigger issue remains: AI tools that interpret or summarize content can be manipulated just like humans. Attackers know this and will keep probing for prompt injection weaknesses.

                                                                                                    TL;DR
                                                                                                    ⚠️ Invisible prompts misled Gemini
                                                                                                    📩 AI summaries spoofed Gmail alerts
                                                                                                    🔍 Prompt injection worked cleanly
                                                                                                    🔐 Google patched, but risk remains

                                                                                                    pcmag.com/news/google-gemini-b