Habr•September 5, 2026•🇷🇺Translated from Russian

pg_anon Open-Source Tool Receives Major Updates for PostgreSQL Data Masking and Partial Database Operations

pg_anon, an open-source tool developed by Tantor Labs for masking personal data in PostgreSQL, has received significant updates over the past year. The new version 1.11.0 introduces packaging as a standard Python package, support for partial database dumps and restores, enhanced handling of complex schemas, and a REST API for automation.

The tool addresses a common challenge in organizations that need to create copies of production databases for developers, analysts, or contractors without exposing real personal data. Direct copying of production databases risks violating internal security policies and data protection laws such as 152-FZ and GDPR. pg_anon performs masking by replacing field values with plausible alternatives while keeping table structures and referential integrity intact, resulting in a pseudonymized dataset.

Installation and New CLI Structure

Installation now uses standard pip commands with optional dependency groups. Users can install the base package or add support for the REST API and development tools. Two commands are provided after installation: pg_anon for core operations and pg_anon_api for running the REST service. Each operation mode is now a separate subcommand, improving usability compared to the previous single-entry-point approach.

Partial Dump and Restore Capabilities

A major addition is support for partial dumps and restores. Administrators can specify tables to include or exclude using dictionary files passed via command-line options. The tool automatically collects DDL for dependent objects such as custom types, domains, and functions to ensure successful restoration on a clean target database without manual pre-creation of supporting objects.

Performance and Schema Improvements

The dump engine was rewritten using asyncio instead of multiprocessing. Metadata collection now uses a single query instead of per-table connections, dramatically reducing preparation time on databases with thousands of tables. Compression was changed to a streaming model with lower gzip levels, eliminating memory leaks on large JSON-heavy tables. Support was added for partitioned tables, inherited tables, generated columns, identity sequences, and object names containing special characters.

REST API and Automation

The new REST API enables integration into automated pipelines. Standardized error codes, operation identifiers, custom headers, and log retrieval features support use in CI/CD systems that refresh masked database copies on a schedule without human intervention.

The release maintains backward compatibility with older command syntax while providing a more structured and extensible foundation for data masking workflows in regulated environments.

Related articles

Habr•Privacy & Surveillance

AI as a Control System: How States, Intelligence Agencies and Scammers Manipulate Consciousness Through Data and Personalization

Specialized AI models now reach exceptional accuracy in narrow domains and are deployed across marketing, banking, law enforcement, modeling and research. These systems do more than recommend products; they can predict a user’s intention to switch providers weeks in advance, build detailed psychological profiles, and select the optimal key to influence behavior through preferred services and content. Corporations collect telemetry including clicks, input-device movements, retinal reactions, spoken words and typing patterns, creating unique behavioral signatures comparable to fingerprints. By combining data from insurance records, credit bureaus, medical files, diaries, maps and gaming platforms, companies construct individual portraits that allow them to infer sensitive attributes even when direct records are missing. The article explains how aggregated data improves model generalization while individualized data enables ever more precise targeting, turning information itself into a product that can implant fears, desires and even compel people to defend foreign interests at personal cost. It warns that repeated exposure to surveillance warnings leads to desensitization, making it essential to re-examine the power these datasets confer.

Habr•Privacy & Surveillance

Personal AI Assistants Build Detailed Profiles on Friends and Family Raising Privacy Concerns

New generation AI agents such as Muse from Meta and Dots from OpenAI are gaining extensive access to user data including emails, messengers, and financial accounts. These agents operate with broad permissions to perform actions on behalf of users while automatically collecting personal information. Security researchers discovered that Muse creates detailed profiles on every person in a user's life including family members, partners, friends, and colleagues. The profiles include sections on facts, history, relationships, and strategies for strengthening connections using real evidence only. Data collection occurs through hourly background processes and nightly dream-like analysis that stores information in Markdown files and PostgreSQL databases. The architecture includes isolated VMs designed by Moxie Marlinspike to prevent swarm formation among agents but does not address third-party data exposure. This development expands existing social graphs maintained by major technology companies through previous generations of web services.

Securitylab•Privacy & Surveillance

VPN vs Proxy: Technical Comparison of Data Protection Technologies

VPN and proxy servers are frequently viewed as interchangeable tools for routing internet traffic and masking IP addresses, yet their core mechanisms diverge sharply after the initial redirection step. VPN technology establishes an encrypted tunnel between the device and a remote server, protecting data from local network observers, while proxies primarily forward connections without inherent encryption. The article examines differences in encryption, traffic scope, anonymity limitations, performance impacts, and appropriate use cases for each technology. It also highlights risks associated with free services, including the 911 S5 criminal proxy network that compromised millions of devices. Detailed breakdowns cover HTTP, HTTPS, and SOCKS5 proxies, split tunneling in VPNs, DNS leakage risks, and configuration best practices for Windows 11, macOS, Firefox, and Chrome. The comparison concludes that selection depends on specific tasks rather than one technology being universally superior.

Securitylab•Privacy & Surveillance

Maximizing iPhone Privacy: Essential Settings to Enable, Disable, and Verify Immediately

The article provides a detailed guide on strengthening iPhone privacy by limiting unauthorized access to messages, location data, photos, and cloud backups. It explains how to set a strong alphanumeric passcode, enable Stolen Device Protection, and restrict lock screen notifications and widgets. Users are advised to review Apple ID security, enable Advanced Data Protection for iCloud, and minimize app permissions for location, contacts, and camera. Additional steps include turning off cross-app tracking, using private Wi-Fi addresses, and activating Lockdown Mode for high-risk scenarios. The guide emphasizes regular updates, encrypted local backups, and periodic audits of shared access and active sessions to maintain long-term protection.