Pete Recommends – Weekly highlights on cyber security issues, October 3, 2025

Subject: Microsoft cuts off Israeli military’s use of Azure for surveillance
Source: UPI.com
https://www.upi.com/Top_News/US/2025/09/26/microsoft-israeli-military-azure/3601758891051/

Sept. 26 (UPI) — Microsoft has ended a portion of the Israel Ministry of Defense’s access to technology it used to spy on Palestinian civilians’ phone calls in Gaza and the West Bank, calling it a violation of Microsoft’s terms of service.Late last week, Microsoft told Israeli officials that spy agency Unit 8200 were in violation of Microsoft’s terms of service by storing surveillance data in Azure, a cloud service, The Guardian reported.


Subject: Chatbots Are Trapping Us With Endless Engagement Prompts
Source: Newser
https://www.newser.com/story/375659/chatbots-are-trapping-us-with-endless-engagement-prompts.html

Chatbots have picked up a new trick: “chatbait.” If you’ve noticed your AI assistant dangling ever-more enticing follow-up questions or offers—”Want a 1-minute migraine hack?”—you’re in good company. In a recent experiment by Lila Shroff for the Atlantic, ChatGPT kept pitching rapid-fire headache relief techniques, each promising to be quicker than the last, and prodded Shroff to keep engaging. The same pattern popped up on platforms like Instagram, where AI bots slid into Shroff’s DMs with messages like “Hey bestie!” and “Miss me?,” all designed to keep the conversation flowing.This approach borrows a page from the clickbait playbook—those exaggerated headlines and thumbnails that dominate the internet—but now it lives in our chat windows. Some bots, like Google’s Gemini or Anthropic’s Claude, are less aggressive, sticking with straightforward answers, but ChatGPT often goes further, offering quizzes, emoji “signature combos,” or playlist links it can’t actually provide.

Earlier this year, Instagram co-founder Kevin Systrom aired his suspicions that AI companies were trying too hard to “juice engagement” over actually being helpful to customers, per TechCrunch.


Subject: AI ‘Workslop’ Is Killing Productivity and Making Workers Miserable
Source: 404 Media and Harvard Business Review
https://www.bespacific.com/ai-workslop-is-killing-productivity-and-making-workers-miserable/

404 Media – AI Work Slop is Killing Productivity and Making Workers MiserableA joint study by Stanford University researchers and a workplace performance consulting firm published in the Harvard Business Review details the plight of workers who have to fix their colleagues’ AI-generated “workslop,” which they describe as work content that “masquerades as good work, but lacks the substance to meaningfully advance a given task.” The research, based on a survey of 1,150 workers, is the latest analysis to suggest that the injection of AI tools into the workplace has not resulted in some magic productivity boom and instead has just increased the amount of time that workers say they spend fixing low-quality AI-generated “work.”

Abstracted from beSpacific
Copyright © 2025 beSpacific, All rights reserved.


Subject: Tile Tracking Tags Can Be Exploited by Tech-Savvy Stalkers, Researchers Say
Source: WIRED
https://www.wired.com/story/tile-tracking-tags-can-be-exploited-by-tech-savvy-stalkers-researchers-say/

A team of researchers found that, by not encrypting the data broadcast by Tile tags, users could be vulnerable to having their location information exposed to malicious actors. Tile trackers, used to locate everything from lost keys to stolen pets, are used by more than 88 million people worldwide, according to Tile’s parent company, Life360. But researchers who examined the tracking technology have found design flaws that would let stalkers—or potentially the manufacturer itself—track the location of Tile users and their devices, contrary to claims the company has made about the security and privacy of its devices.

The researchers—Akshaya Kumar, Anna Raymaker, and Michael Specter of Georgia Institute of Technology—found that each tag broadcasts an unencrypted MAC address and unique ID that can be picked up by other Bluetooth devices or radio-frequency antennas in a tag’s vicinity to track the movements of the tag and its owner. The location of a tag, its MAC address, and unique ID also get sent unencrypted to Tile’s servers, where the researchers believe this information is stored in cleartext, giving Tile the ability to track the location of tags and their owners, even though the company claims it does not have this capability.

The researchers say this would give Tile the ability to conduct “mass surveillance” on its users and potentially provide that information to law enforcement and others.

The researchers also found that Tile’s anti-stalking protection can be easily undermined if a stalker enables an anti-theft feature that Tile offers with its tags. Additionally, someone could falsely frame a Tile owner for stalking by recording the unencrypted broadcasts their Tile device makes and replaying these broadcasts in the vicinity of another Tile user, making it seem like the former is stalking the latter.

Law enforcement could potentially use this to identify anyone in an area that has a Tile tag or Tile-enabled device. And because this location information seems likely to be stored unencrypted on Tile’s server, researchers say, Tile could also track the location of tags or share this information with any third party.

“These issues transform Tile’s infrastructure into a global tracking network,” the researchers claim in a paper they wrote about their findings.

[…]

Filed: https://www.wired.com/category/security/


Subject: School systems are remaking the old yellow bus into a high-tech machine
Source: Stateline
https://stateline.org/2025/09/29/school-systems-are-remaking-the-old-yellow-bus-into-a-high-tech-machine/

Live cameras, GPS tracking and navigation have reshaped the school bus experience for students and drivers.

[Note discussion on privacy. Also, I wonder about child shared custody concerns related to traking /pmw1]


Subject: Meta Will Start Using Your AI Chats to Target Ads at You
Source: tech.com
https://tech.co/news/meta-your-ai-chats-target-ads
Meta will be hyper-targeting ads for users in most countries by the end of the year, with no opting out.

Key takeaways:

  • Meta will start relying on data from user conversations with its AI chatbot to personalize its ads and other content.
  • It starts in December 16, and users can’t opt out of it.
  • Certain conversational topics will not be included in the data, including religion, politics, health, race, or sexual orientation.

In other words, if you mention to the generative AI chat tool on Facebook that you like pizza, you might start seeing more Domino’s ads on Instagram. The changes will take effect on December 16. Users cannot opt out. Some Sensitive Content Will Be Excluded.

Will Anyone Push Back on Hyper-Targeting? Even given these exceptions, Meta’s further integration of user data into advertising efforts is worth highlighting. Reporting on the new use of data, the Wall Street Journal has called it “the crossing of a new frontier in digital privacy.”

Other commenters have offered responses ranging from refusals to accept the change (“Do not use Meta’s chat functions”) to flat irony (“Never thought the free products with ads company would use another free product to sell more ads, this is beyond shocking”).

[…]

Tags


Subject: California Hopes A New AI Safety Law Will Control AI
Source: Cord Cutters News
https://cordcuttersnews.com/california-hopes-a-new-ai-safety-law-will-control-ai/

California Governor Gavin Newsom signed a groundbreaking law on September 29, 2025, requiring major artificial intelligence companies to disclose their safety protocols, marking a significant step in regulating the rapidly evolving AI industry. The legislation, known as SB 53, is the first of its kind in the United States and positions California as a leader in balancing technological innovation with public safety. The move follows a prolonged lobbying battle with prominent tech firms, including OpenAI and Meta, and sets a potential blueprint for national AI regulation.
Introduced by San Francisco Democratic state Senator Scott Wiener, the law mandates that certain AI developers publicly share their safety and security measures. It also establishes a mechanism for companies and the public to report significant safety incidents to the state. Additional provisions include whistleblower protections for AI industry employees and the foundation for a state-run cloud computing initiative called CalCompute. These measures aim to foster transparency and accountability in an industry that has seen explosive growth but also raised concerns about risks such as autonomous cyberattacks and deceptive AI behavior.

Subject: How to deactivate AI on your Android phone
Source: Android Central
https://www.androidcentral.com/apps-software/how-to-deactivate-ai-on-your-android-phone

Don’t care about all the new AI features on your Android phone? Here’s how you can turn it all off.

While AI is pervasive, it doesn’t actually do much. That hasn’t prevented phone brands from leaning heavily into AI, positioning it as a dubious differentiator on their latest phones. If you’re like me and are ambivalent towards generative AI, here’s how to disable it on your phone.In this guide, I’m highlighting Google and Samsung phones as they’re the two brands that have full-fledged AI suites. Chinese brands are just getting started with AI on their phones, so I’m not focusing on Funtouch OS or ColorOS at the moment, instead talking about Pixel and Galaxy devices.

I’m using the Pixel 10 Pro XL and Galaxy Z Fold 7 in the steps outlined below, but any recent Pixel or Galaxy phone will have the same flow.

How to disable AI features on your Google Pixel – Let’s start with Gemini, Google’s latest digital assistant. It comes pre-installed on latest Pixels, and cannot be uninstalled as a result. If you don’t see yourself using Gemini, you can disable it — that’s the closest you can come to uninstalling it. Here’s how to do that:[I did do many of these features, though I did not have Gemini installed]


Subject: Apple, Google Remove ICE Tracking Apps
Source: Phone Scoop
https://www.phonescoop.com/articles/article.php

Apple and Google have both removed apps from their app stores that let people report and see the locations of ICE agents. US Attorney General Pam Bondi said in a statement that “ICEBlock is designed to put ICE agents at risk just for doing their jobs” and “we reached out to Apple [Thursday] demanding they remove the ICEBlock app from their App Store — and Apple did so”. Apple says “We created the App Store to be a safe and trusted place to discover apps. … Based on information we’ve received from law enforcement about the safety risks associated with ICEBlock, we have removed it and similar apps from the App Store”. Separately but just one day later, Google says it “removed similar apps for violations of our policies”. Google says it was not contacted by the Justice Department about the apps. Joshua Aaron, the developer of ICEBlock, says he designed the app to help immigrants who are afraid of being deported. ICEBlock was downloaded more than 1 million times before it was banned.
Posted in: AI, Civil Liberties, Cybercrime, Cybersecurity, Free Speech, Privacy, Social Media