A Consent-First Phone Privacy Triage Flow for Support Teams
Privacy incidents on personal phones often begin with a vague report: battery drain, unfamiliar login alerts, a device listed in a messaging account, …
Testing & QA
⚑ Report a ProblemLatest Testing & QA news from Tech News
All topics
agents
ai
api
architecture
automation
aws
backend
beginners
career
claude
cybersecurity
database
devchallenge
devops
javascript
llm
machinelearning
mcp
opensource
performance
productivity
programming
python
security
showdev
softwareengineering
testing
tutorial
typescript
webdev
The Phone Behind the Flour Sacks: How a $0 Camera Cleared the New Hire Everyone Blamed
The register came up short on a Friday, and by Monday everyone on the schedule had already decided whose fault it was. Marisol ran a small bakery — si…
I’ve been working on an open-source P2P file sharing app called MeshDrop (early beta, looking for honest feedback)
Hey everyone, For the past few months I've been working on a side project called MeshDrop. The idea started because I wanted a simple way to send file…
Before Grok Build Uploads Your Repo, Show the Outbound Receipt
Coding agents create an awkward security moment. A developer can understand the task they typed and still have no compact answer to a more important q…
Building SnipTools: A Client-Side, Privacy-Focused Developer Utility Suite
Hello community, We are Perception, a team of five second-year computer science students. Over the past few months, we noticed a recurring issue in ou…
Age Checks Are Going Digital. They Should Go Zero-Knowledge.
On June 30, 2026, the UK Home Office laid regulations allowing licensed premises in England and Wales to accept digital proof of age for alcohol sales…
Treat Health-Data Revocation as a Distributed Convergence Protocol
Counterexample: a connector grant is revoked at epoch 8, but an import message created under epoch 7 is delayed. The primary store deletes its copy, t…
Test Apple Health Permission Revocation Across the iOS App Lifecycle
Start with one device and one transition: permission is available, the app enters the background, the person changes access, and the app returns to th…
Run a Connected Health Record Pipeline Incident Without Guessing at the Data
At 09:14, successful connector jobs drop while queue age rises. At 09:17, dashboard reads remain normal because cached records are still available. Is…
Learn Data Minimization With a Tiny Python Health-Record Filter
Expected transformation: input keys: date, steps, sleep_minutes, medication, note purpose: activity_summary output keys: date, steps The learning ques…
Build a Local Health Export Redaction Validator CLI
The small-tool goal is simple: inspect a JSON health export locally and fail closed if it contains fields the recipient did not request. This is not a…
How I Built a Privacy-Friendly Image Converter That Runs Entirely in the Browser
Converting an image should be a simple task. However, many online image converters require users to upload their files to a remote server. This can cr…
Letting a stranger contact a car owner without giving them the number
Letting a stranger contact a car owner without giving them the number There is a small, very common problem in Indian cities that turns out to be a su…
I Built 100+ Browser-Based Tools That Never Upload Your Files
I Built 100+ Browser-Based Tools That Never Upload Your Files Every time I wanted to merge a PDF, compress an image, convert a file, or format JSON, I…
A Practical Privacy Threat Model for Consumer Companion Robots
A companion robot is not one device from a privacy perspective. It is a small distributed system inside a home. The physical shell may contain cameras…
Prove Your Mobile Upload Removed EXIF GPS Before the Retry Queue Keeps a Copy
A user selects a photo containing GPS coordinates, capture time, and orientation. The preview looks clean, but the background retry queue still holds …
Blinding the State Informant: How Axiom Shield Weaponizes Client-Side Sandboxing Against EU Chat Control
The regulatory push for EU Chat Control 2.0 has exposed a fundamental architectural vulnerability in modern operating systems. Governments have realiz…
I built 50+ free browser tools that run without uploads, servers, or accounts
I built 50+ free browser tools that run without uploads, servers, or accounts I spent the last few months building NexaTools — a suite of 50+ browser-…
Off-the-Record Messaging: Where Deniable Encryption Started
In 2004, three researchers published a paper with a pointed subtitle: "Why Not To Use PGP." Their argument was that encrypting instant messages with P…
Building a Confidential Cross-Chain Identity Protocol with Oasis Sapphire, ENS & Base
The biggest paradox in Web3 identity is that while we demand privacy in the real world, our on-chain infrastructure defaults to absolute transparency.…
Audit an AI Coding CLI Before It Uploads Your Home Directory
Reports that a coding CLI transmitted unexpectedly broad local data are trending today. A social post is a lead, not a verdict, so the useful response…
A Voice AI Feature Needs a Permission-Loss Test Plan
A voice bot demo usually starts with permission already granted, a quiet room, a stable network, and the app in the foreground. Mobile users get phone…
Stop logging PII: a configurable Node.js sanitizer logger
Originally published on my blog: https://blog.bajonczak.com/stop-logging-pii-a-configurable-node-js-sanitizer-logger/ Logging is one of those topics t…
314 Lawmakers Voted Against EU Chat Control. It Passed Anyway. Here's What That Means for Your Messages.
On July 9, 2026, the European Parliament reauthorized a law that lets tech companies scan your private messages without a warrant. Here is the part th…
Verifiable Contribution Without Global Deanonymization
AI changes the cost structure of public work. Code, summaries, tests, listings, translations, and operational decisions are becoming easier to produce…
How I built a Chrome extension that reads Terms of Service using AI — and what I found
The problem that made me build this Every time I signed up for a new app or service, I clicked "I Agree" without reading a single line. Nobody reads T…
I built a privacy-first alternative to jwt.io, regex101 and every other dev tool that phones home
The dirty secret of online dev tools Every dev tool lives on a different website. jwt.io for JWT decoding. regex101 for regex testing. Some random sit…
How to Anonymize PII in Text with an API
What Is Data Masking? Data masking is a technique that replaces sensitive information with realistic but fictitious data, preserving the format and st…
TLS Interception: How Corporate Proxies Read Your Encrypted Traffic
The padlock in your browser tells you the connection is encrypted. It does not tell you who is on the other end of that encryption. On millions of cor…
How to check your browser's privacy with 30 lines of JavaScript — and what I learned
What most people don't know about their browser Your browser leaks more than you think — and you don't need a third-party tool to check it. Most of th…