Least Authority recently conducted an AI-assisted security audit across several security-critical repositories in the Zcash ecosystem at the request of Zcash Community Grants (ZCG). The goal of this work was . . .
Read More
Highlights
Blog
Security audits, managed crowdsourced security platforms, and open bug bounty programs are often treated as interchangeable approaches to security testing. In practice, they serve different roles. While crowdsourced approaches and . . .
Read More
Consent is one of the six lawful bases for processing personal data under the GDPR (Article 6(1)(a) GDPR). To be valid, it must be freely given, specific, informed, and unambiguous, . . .
Read More
“AI won’t replace humans. But humans who use AI will replace those who don’t.” The line is widely repeated, and it has recently been attributed to Sam Altman in mainstream . . .
Read More
Data protection laws, such as the EU’s General Data Protection Regulation (GDPR), establish a comprehensive framework of individual rights intended to give data subjects greater control over the processing of . . .
Read More
Privacy depends on more than promises or compliance. This blog explains how policy creates obligations, but system architecture determines outcomes, shaping what data can be collected, linked, or exposed. Why . . .
Read More
Privacy is often treated as a feature or a promise. Add encryption, write a policy, or comply with a regulation, and privacy is assumed to follow. Our work this past . . .
Read More
Recently, we encountered a situation that underscored the importance of verifiable transparency. A modified version of one of our audit reports was shared online through an unauthorized link pointing to . . .
Read More
Data protection laws often do not apply to the lesser-known category of “anonymous data”. There are misleading claims and new risks. Privacy’s Newest Threat It’s no secret that in today’s . . .
Read More
What if Privacy Were the Default? Most digital services still require accounts, personal data, and behavioral tracking permissions, even for simple actions. It’s often assumed that convenience depends on identity. . . .
Read MoreVideos
Privacy vs Transparency
Individuals should have the right to choose what to reveal about themselves, while companies should be transparent about what they do on our behalf. Free and open source software makes this possible.
Decentralization and Distributed Systems
Decentralization in privacy enhancing technologies (PETs) eliminates the risk of a single point of failure. Privacy is about having the choice of what data and information you share with others.
Zero Knowledge Technology
Cryptography provides the building blocks for Zero Knowledge protocols and technology which is a powerful tool to build and implement privacy enhancing technologies.