The Privacy Company • End-to-End Encryption • Cloud Storage and Communication • Privacy by Design
127.0.0.1
- Tweets 5,402
- Following 1
- Followers 101,408
- Likes 1,445
Pinned Tweet
Mainstream cloud storage like Google Drive and Dropbox costs around $5 to $6 per TB. Should privacy-first alternatives cost more? 💸
Privacy shouldn't come at a premium. After all, it should be the standard.
Full breakdown of secure cloud storage in 2026 here 👉blog.mega.io/best-secure-clo…
17
11
95
24,448
If you use Hide My Email because you care about your privacy... it's not working 🫣
Here's what Apple's Hide My Email is supposed to do: instead of handing out your real email when you sign up for something, you share a random alias so your real address stays private.
Here's what's actually happening: someone can look up that alias and find your real email anyway.
Security researcher Tyler Murphy discovered the flaw in June 2025 and reported it to Apple. Apple said it fixed it in March 2026, but it clearly hadn't. Every address Murphy tested was exploitable. The flaw is still live today, more than a year later.
It seems privacy is not a priority for Apple
‼️ BREAKING: Apple's Hide My Email lets almost anyone uncover the real address behind a "hidden" alias, and Apple has left it unpatched for over a year.
It was reported to Apple in June 2025 by Tyler Murphy of EasyOptOuts. He says every Hide My Email address checked in limited volunteer tests was exploitable.
If you use Hide My Email to keep a real address off people-search sites or away from someone dangerous, treat that anonymity as unreliable.
8
27
161
12,918
Microsoft charges €99/year for 1 TB of storage that Copilot can read.
We charge the same for 3 TB of secure cloud storage that literally no one can read, not even us.
Make it make sense 🙄
Full breakdown here mega.io/alternative-to-onedr…
5
10
87
6,461
After quietly dropping Persona following a breach, Discord partners with Incode to process your data during verification 🫥
Discord says Incode processes your biometric data on-device without storing it server-side. But that's exactly what they said about Persona until researchers found nearly 2,500 files sitting exposed on a government-connected server in February.
And this is the same platform that had 70,000 government ID photos exposed in a data breach just last October.
Their CTO says this is legally required in countries like the UK and that more vendor options are coming. That's fair. But a platform asking for your face and your ID, with that track record?
Would you still trust it?
Discord is beginning to implement Incode for age verification, a move that is already sparking serious privacy concerns among users. While Discord claims that Incode processes biometric data locally via on-device AI without permanent server-side logging, sharing sensitive IDs and selfies with any third-party vendor remains a massive red flag for many. Given Incode's controversial history with platforms like TikTok, where the vendor was heavily criticized for long retention periods and storing biometric data server-side, users who expect strict privacy are highly skeptical about handing over their biometrics, regardless of Discord's current technology claims.
55
604
3,343
141,199
To recap: Google asks for your camera to verify you're human, makes you do hand gestures, and... you can beat it with a stock photo 😂
As expected, the privacy invasion of this reCAPTCHA is real, but the security and effectiveness? Not so much.
What do you think is the next verification 'solution' Google will think of? blog.mega.io/google-hand-ges…
4
15
84
6,587
Do yourself a favor and get the generous, secure free storage you actually deserve mega.nz/register?mct=jun26x
5
8
63
8,013
*Google gives you 5 GB free, then 10 GB more AFTER your give them your phone number
Look for alternatives that give you storage without giving away your privacy mega.io/alternative-to-googl…
Why do you want that?
Google gives you 15GB for free, syncs with all other Google workspace apps and it's very reliable.
I think building it is a waste of time, doesn't provide any value other than being opensource and no one is going to use it. Even you.
7
7
73
45,723
Step 1: #deGoogle
Step 2: Sign up for free 20 GB encrypted storage at MEGA mega.io/?mct=jun23x
Breaking: Google permanently locks people out of their accounts with no warning and no way to reach a human.
Gmail, Photos, Drive, every login. Gone, with no appeal.
Here is the backup that protects you, in under an hour:
2
8
49
5,237
Wait until Google implements hand gesture reCAPTCHA 🫣
Spoiler alert: it will be way worse.
3
9
60
6,338
You can now personalise your MEGA app dashboard
Home Customisation is a new way to personalise your MEGA app experience. Rearrange your dashboard, choose what matters most, and make your Home truly yours. 😉
How would you customise your Home?
1
7
31
3,281
To access a website, you now need to open your camera and wave 👋
Yes, Google is testing a new reCAPTCHA that asks you to make hand gestures at your camera instead of clicking traffic lights.
Your browser requests camera access, records a short video of your hand movement, and sends it to Google to verify you're human.
Of course, Google says they don't retain any data. But this is also the company whose entire business model runs on knowing everything about you, so. 🤷
And don't worry, the normal reCAPTCHA methods are still there, for now...
Google is testing a new reCAPTCHA system that asks users to make simple hand gestures in front of their camera instead of solving image puzzles.
When used, the browser requests camera permission and records a short video of the user’s hand movements.
According to Google, it does not record audio and deletes the video after the check is complete, don’t believe them.
The new method aims to stop bots and AI tools that have become better at solving traditional CAPTCHAs. By verifying real hand movements, Google hopes to make it harder for automated attacks to create fake accounts or abuse websites.
Google says hand-gesture verification is an optional feature and will not replace existing image and audio challenges.
209
768
6,483
2,794,797
Is MEGA good cloud storage for business? Yes.
Zero-knowledge encryption, GDPR-consistent, full control over team access. MEGA is built for businesses that take privacy seriously.
See how MEGA protects your business data: blog.mega.io/cloud-storage-f…
1
6
27
3,169
Apple is downgrading the feature that helps you stay private on the web 👎
Hide My Email creates a fake email address you can give to apps and websites instead of your real one, so they never actually know who you are.
But not for long. Later this year, Apple is rolling out a change that moves new Hide My Email addresses to a format that makes it obvious you're hiding your identity. Any app or website can now block it entirely, and you're back to handing over your real email.
Why does Big Tech keep downgrading privacy features at the exact moment we need them most?
Apple just nuked Hide My Email’s best privacy trick. New aliases are now (at)private(dot)icloud(dot)com - literally labeling them “this user wants to stay anonymous.”
Services can now mass-block every single one with one domain filter, while leaving regular (at)icloud
.com untouched.
The plausible deniability that made Hide My Email useful, the inability for a service to prove an address was anonymous, disappears.
32
130
1,578
188,419
ICYMI: One click on a legitimate Microsoft link handed attackers your emails, MFA codes, calendar, and files.
The link pointed to a real Microsoft domain, and Copilot aka Microsoft's own AI did the stealing. Here's what happened 🧵
2
4
34
2,948
This isn't the first time. Varonis found a near-identical exploit in Copilot Personal earlier this year.
The issue isn't just this specific flaw. AI assistants with access to everything have become the highest-value target today.
Microsoft has patched this one, but how long before the next Copilot vulnerability?
Would you still trust Micro-slop with your company's data? 💀
1
9
1,564
If your business runs on Microsoft 365, your files sit inside a system an AI can query on demand, and as we've just seen, so can attackers.
With MEGA for Business, files are end-to-end encrypted before they leave your device. Even we can't read them.
And unlike Microsoft 365, there's no AI with standing access to everything you've ever stored blog.mega.io/cloud-storage-f…
2
1,241