AntiMalware•August 26, 2026•🇷🇺Translated from Russian

DuckDuckGo Study Shows Users Confide Sensitive Personal Details in AI Chatbots Without Realizing Data Retention

Chatbots have quietly shifted from basic search assistants to digital confessors that store and recall deeply personal user disclosures. According to research conducted by DuckDuckGo, almost one-third of AI users have shared information with neural networks that they were not prepared to discuss with friends, relatives, colleagues, or medical professionals.

The trend is even more pronounced among dedicated users. Among those who consider themselves convinced supporters of artificial intelligence, the share rises to 56 percent. These users frequently treat AI systems as safe spaces for sensitive topics ranging from personal health concerns to relationship issues and professional dilemmas.

The study indicates that many participants do not fully understand that AI chatbots retain conversation history. This lack of awareness allows models to reference earlier statements in future interactions, effectively turning casual exchanges into permanent records. Privacy experts note that such retention can expose users to risks if data is later accessed by third parties or used to train future model versions.

Related articles

Habr•Privacy & Surveillance

Free Ad Blocker for iPhone, Android, and Desktop Uses DNS Parsing Without Libraries and Skips YouTube Influencer Ads From the First Second

A new free ad-blocking solution has been released for iPhone, Android, and desktop platforms. The tool relies on a lightweight DNS parser that operates without external libraries. It includes a dedicated mode for users who already run VPN connections. An accompanying browser extension automatically skips sponsored segments in YouTube videos, even when the advertisement begins at the zero-second mark. The developer describes the technical challenges encountered after launch and the fixes applied to maintain compatibility across operating systems. The project emphasizes user privacy by avoiding unnecessary data collection and third-party dependencies.

Habr•Privacy & Surveillance

Why Replace Proprietary BIOS and UEFI with the Fully Free GNU Boot Firmware

The Free Software Foundation announced in September 2026 that it is providing financial and legal support to the GNU Boot project, which aims to deliver a completely open-source replacement for traditional BIOS and UEFI firmware. GNU Boot builds on coreboot to initialize hardware at boot time and layers a free bootloader such as GRUB or SeaBIOS on top, ensuring no proprietary binary blobs are required. The initiative emerged after a 2022 split from Libreboot, which began accepting closed-source components to broaden hardware support, while GNU Boot strictly adheres to GNU licensing criteria that prohibit any non-free code. Supported platforms remain limited to older systems from roughly 2008–2012, including specific ThinkPad models, certain early Apple MacBooks, and a handful of AMD and Intel desktop boards, because newer Intel Boot Guard and AMD equivalent mechanisms enforce signed firmware that prevents unsigned replacements. Closed firmware from Intel Management Engine and AMD Platform Security Processor runs before the main operating system, possesses unrestricted memory access, and cannot be audited or disabled on most modern hardware. By offering reproducible builds and clearer installation instructions, GNU Boot seeks to lower the barrier for users who want to eliminate potential backdoors, Wi-Fi whitelist restrictions, and forced updates found in vendor firmware.

AntiMalware•Privacy & Surveillance

WhatsApp Help Pages Hid Secret Instructions Directing AI Bot to Avoid GDPR References

Researchers at Redact discovered hidden instructions embedded in WhatsApp's public help documentation that instructed the company's AI support chatbot to avoid recommending users contact data protection regulators. The instructions also prohibited the bot from referencing GDPR, LGPD, or CCPA when users mentioned legal proceedings or lawyers. The findings emerged after Redact analyzed 545 help pages and identified 102 concealed blocks across 80 of them. One directive explicitly told the bot not to suggest contacting supervisory authorities even when users had lost access to their phone number and could not delete their account, despite WhatsApp's own European privacy policy stating that such complaints are permitted. WhatsApp confirmed to WIRED that the blocks were intended solely for its internal chatbot and attributed their public exposure to an error. The company stated the restrictions aimed to prevent the bot from offering legal advice. All hidden blocks were removed by October 18.

Habr•Privacy & Surveillance

WhatsApp Secretly Instructed AI Support Bot to Suppress References to Data Regulators and Privacy Laws

Investigators discovered hidden instructions embedded in WhatsApp's public help pages that directed the company's AI chatbot to avoid recommending users contact data protection authorities. The instructions also prohibited the AI from citing privacy regulations such as GDPR, LGPD, or CCPA, even when users raised these topics themselves. The directives appeared on pages about account deletion and complaints, remaining invisible to human visitors but delivered to crawlers and the AI model. WhatsApp later confirmed the text was intended for its internal support chatbot and attributed the exposure to an error that has since been corrected. The findings highlight a gap between the company's publicly stated privacy policy and the operational guidance given to its AI systems.