Privacy & Policy blogs

Techdirt, founded by Mike Masnick, covers technology policy, free speech, copyright, and Section 230 law.

Top post: You've Been Referred Here Because You're Wrong About Section 230 of the CDA

A group blog on technology, digital rights, culture, and oddities, with Cory Doctorow as a frequent contributor.

Top post: Lockdown – The coming war on general-purpose computing (2012)

Bruce Schneier, a security technologist and cryptographer, writes about security, cryptography, privacy, and the policy around them.

Top post: Write Down Your Password

Mozilla's official blog, with Firefox announcements, browser policy, privacy positions, and company news.

Top post: Mozilla – We need more than deplatforming (2021)

Brian Krebs, a former Washington Post reporter, investigates cybercrime, data breaches, and fraud.

Top post: Try This One Weird Trick Russian Hackers Hate

Google's official corporate blog, covering product launches, policy statements, and company announcements from executives and engineers.

Top post: A new approach to China

Meta's corporate newsroom publishes announcements on products, layoffs, AI models, research, and policy and content moderation changes.

Top post: A new optional way to share and discover music tv and movies

The Signal Foundation's blog announces features and explains design choices for the Signal encrypted messenger, including privacy technology previews.

Top post: Why federated protocols don't work (2016)

The Chromium Blog is Google's official channel for Chrome and Chromium news on extensions, privacy, performance, and web platform changes.

Top post: From Chrome Apps to the Web

Troy Hunt is a security researcher and Microsoft MVP who writes about data breaches, HTTPS, passwords, and the Have I Been Pwned service.

Top post: "Pwned Passwords" V2 With Half a Billion Passwords

An independent journalist-owned outlet covering technology, surveillance, hacking, and AI, founded by former Vice Motherboard reporters including Joseph Cox.

Top post: The Pitch Deck for 'Active Listening' Ad Targeting

Richard Stallman's personal site, with his political notes, free software writing, and descriptions of how he computes.

Top post: How I do my computing

News site covering Firefox, browsers, Windows, and privacy tools, with practical how-tos on settings and extensions.

Top post: Each Firefox download has a unique identifier

Cory Doctorow's daily blog of links and essays on tech policy, monopoly power, copyright, and what he calls enshittification.

Top post: TikTok's Enshittification

Aaron Swartz's personal site, with essays on productivity, politics, media, programming, and hiring.

Top post: I Hate the News (2006)

The blog of Fastmail, a paid email hosting company, covering outages, pricing, privacy, and features like aliases and catchall addresses.

Top post: Pricing

The Tor Project's official blog covers the anonymity network, Tor Browser, security advisories, and privacy tools.

Top post: Tor security advisory: “relay early” traffic confirmation attack

Popehat is a legal blog by lawyers including Ken White, covering free speech, censorship, federal criminal law, and legal threats.

Top post: Three Generations of a Hackneyed Apologia for Censorship Are Enough

Matthew Green, a cryptography professor at Johns Hopkins, explains cryptographic engineering, encryption products, and surveillance topics.

Top post: What's the Matter with PGP?

Lawfare is a blog on national security law and policy, with posts on surveillance, cybersecurity, encryption, and executive power.

Top post: What Ben Franklin Said (2011)

The Internet Archive's official blog, covering the Wayback Machine, digitized books, web preservation policy, and legal disputes.

Top post: The Fight Continues

Robert Graham writes about cybersecurity, hacking, encryption and surveillance, often with a political angle.

Top post: How the Intercept Outed Reality Winner

SCOTUSblog covers the US Supreme Court, with news and analysis of cases, opinions, and oral arguments.

Top post: Supreme Court likely to discard Chevron

Groklaw was a site run by Pamela Jones (PJ) that covered legal cases affecting open source, notably SCO v. IBM and Oracle v. Google.

Top post: Forced Exposure

Terence Eden is a UK developer and open data advocate who writes about web standards, gadgets, security flaws and technology policy.

Top post: The unreasonable effectiveness of simple HTML

Bellingcat is an investigative group that uses open-source intelligence to identify people behind poisonings, military attacks and intelligence operations.

Top post: How We Identified Navalny's FSB Stalkers

The Open Whisper Systems blog, later Signal's, covering the Signal Protocol, the WhatsApp encryption partnership and private contact discovery.

Top post: Reflections: The ecosystem is moving

The Software Freedom Conservancy is a nonprofit that supports open source projects and pursues GPL compliance, including lawsuits against Vizio and Tesla.

Top post: Give Up GitHub

Vivaldi's company blog covers its Chromium-based browser, its business model, open-source status and positions on web standards like Manifest v3.

Top post: Source

Cory Doctorow is a science fiction author and digital rights activist whose site hosts his stories, novels and essays.

Top post: Spam Solutions

Freedom to Tinker is a Princeton CITP blog on security, privacy, tech policy and Bitcoin, with posts by Ed Felten and colleagues.

Top post: The Linux Backdoor Attempt of 2003 (2013)

Howard Oakley writes about how macOS works, covering Apple Silicon, virtualisation, security checks, Time Machine and system behaviour.

Top post: Virtualisation on Apple Silicon

noyb is the European privacy group led by Max Schrems, which files GDPR complaints against tech companies.

Top post: Noyb aims to end “cookie banner terror” and issues more than 500 GDPR complaints

Malwarebytes, a security software company, writes news and analysis on malware, scams, privacy issues, and data breaches.

Top post: GrayKey iPhone unlocker poses serious security concerns

Gabriel Weinberg, founder of DuckDuckGo, writes about startups, traction, search engine architecture, privacy, and open source funding.

Top post: Ask YC/HN Archive

Reclaim The Net is a news site covering online free speech, censorship by tech platforms, and digital privacy.

Top post: Google is now applying its coronavirus misinformation policies to personal files

Bert Hubert, a Dutch engineer, writes on telecom security, European digital sovereignty, open source regulation, and technical reverse engineering.

Top post: Reverse Engineering the Source Code of the BioNTech/Pfizer SARS-CoV-2 Vaccine

Florian Mueller covers patent litigation in tech, especially Apple, Samsung, Google, Oracle and Nokia disputes, and software patent law.

Top post: These tables show HOW Android infringes Apple's two HTC-beater patents

Matt Stoller writes a newsletter on antitrust, monopoly power, and corporate consolidation in the US economy.

Top post: Why Wall Street Gets a Bailout and You Don't

Platformer is Casey Newton's newsletter on social media companies, big tech, and platform policy.

Top post: AI researcher Timnit Gebru resigns from Google

Moxie Marlinspike, the founder of Signal, writes about cryptography, privacy, TLS, GPG, and web3.

Top post: My First Impressions of Web3

The Plausible blog covers the privacy-focused, open source web analytics product, its licensing, GDPR approach, and business growth.

Top post: Data policy

Ansuz is the personal blog of Ben Sooke, covering software, copyright, fonts and social topics, best known for an essay on bits.

Top post: What colour are your bits? (2004)

Andy Baio, a writer and technologist, covers internet culture, copyright, and AI training data, and created Kind of Bloop.

Top post: Kind of Screwed

Glenn Greenwald, a journalist, writes about politics, media, censorship, and big tech on Substack.

Top post: Emails with Intercept Editors Showing Censorship of My Joe Biden Article

Official WhatsApp company blog with product announcements, engineering notes on server scaling, and statements on ads and encryption.

Top post: Why we don't sell ads (2012)

Legal and policy analysis site covering national security, international law, surveillance and U.S. government actions, written by lawyers and academics.

Top post: Litigation Tracker: Legal Challenges to Trump Administration Actions

Neal Krawetz writes on image forensics, fake photo detection, online abuse material detection, Tor and other security topics.

Top post: One Bad Apple

A group blog by law professors, including Orrin Kerr, on constitutional law, criminal law, surveillance, and court rulings.

Top post: The Criminal Charges Against Aaron Swartz – Part 2: Prosecutorial Discretion

Samy Kamkar, a security researcher, shows hacking projects, including Evercookie, PoisonTap, NAT Slipstreaming, and hardware attack devices.

Top post: NAT Slipstreaming

Matt Taibbi, an investigative journalist, writes on media, politics, censorship and press criticism, including Russiagate and mass media bias.

Top post: The American Press Is Destroying Itself

1Password's company blog covers product news on passkeys, virtual cards, SSH integration, and the security design of its password manager.

Top post: 1Password introduces virtual Credit Cards

Apple's security team publishes technical write-ups on Private Cloud Compute, iMessage encryption, memory safety, and its security research program.

Top post: Private Cloud Compute: A new frontier for AI privacy in the cloud

DuckDuckGo's blog covers its privacy-focused search engine and products like email protection and app tracking protection, plus privacy tips.

Top post: Email Protection: The easy way to block email trackers and hide your address

The Wikimedia Foundation's blog reports on Wikipedia's technical work and policy, including infrastructure, HTTPS, search and link repair.

Top post: Wikipedia Adopts MariaDB

Kagi's blog covers its paid, ad-free search engine, with posts on AI features, privacy, the Orion browser and company growth.

Top post: Kagi Small Web (2023)

Technical writer covering Linux, browser privacy, systemd hardening, GDPR, and web standards, with how-to guides for desktop users.

Top post: First-party isolation in Firefox: what breaks if you enable it?

LastPass's company blog, where it posts product updates and security notices, including those about its breaches and vulnerabilities.

Top post: Lastpass Security Incident

Rick Falkvinge, founder of the Swedish Pirate Party, writes about privacy, copyright, surveillance, and Bitcoin.

Top post: Why I’m Putting All My Savings Into Bitcoin

Jeff Johnson is a Mac developer who writes about macOS behavior, Apple's privacy and security decisions, and software bugs.

Top post: Catalina is checking notarization of unsigned executables