LIVE · cybersecurity feed
Live wire
breach

Is Online Privacy Possible? How Digital Identities Can Help

Using the same email, phone number, payment method, and other identifiers makes it easier for data brokers and attackers to profile your activity. Anonyome Labs explains how separate digital personas can reduce correlation and limit the impact of breaches, spam, and identity theft. [...]

zeroday.news ·

The internet's prevailing business model, often described as surveillance capitalism, relies on collecting extensive personal data from users. This system aggregates information from various online activities, including app usage, account creation, website visits, and form submissions, to build detailed profiles that are then monetized. Data brokers play a significant role in this process, purchasing, selling, and cross-referencing fragments of personal information to construct comprehensive user profiles, often without the individual's awareness or consent.

This data aggregation, which is inherent to the default internet, allows a single email address to link diverse aspects of a user's life, such as shopping habits, health searches, location history, and social connections. The resulting profiles are then used for purposes like targeted advertising, price discrimination, and can contribute to identity theft. The rise of artificial intelligence has further exacerbated this issue, enabling data brokers to correlate disparate actions and create even more valuable profiles from vast amounts of information.

In response to this pervasive data collection, a strategy known as compartmentalization has emerged as a countermeasure. This approach advocates for breaking the correlating identifiers that tie all online activities back to a single individual. Instead of using one set of credentials—such as a single email, phone number, or payment method—across all online interactions, users deliberately create separate, purpose-built digital identities, or "personas," for different contexts.

For example, a user might employ one persona for online shopping, another for dating applications, a third for travel, and yet another for newsletter subscriptions. Each persona operates as a self-contained identity, equipped with its own unique email address, phone number, payment method, browser, and communication handle. The crucial aspect of this method is that these personas are designed to be disconnected from each other and from the user's actual identity, making it difficult for data brokers or advertisers to link them.

Should one of these personas be compromised in a data breach, attract spam, or be sold to a marketing list, the damage is contained within that specific persona and cannot be easily traced back to the user's overarching identity. This differs from traditional security tools that focus on protecting a single identity with stronger passwords or encryption; compartmentalization assumes that any single identity is eventually susceptible to correlation and mitigates risk by ensuring that no single identity holds all of a user's valuable information.

Anonyome Labs has developed and patented several concepts related to online personas and compartmentalization, including methods for supporting telephonic synthetic identities (US9374689), email applications for synthetic identities (US9729519), identifying and warning of synthetic identity behavior that reduces user privacy (US10178106), providing persona masking in a computer network (US10320753), and administering proxy identities (US10356052).

The company's product, MySudo, is designed to implement this compartmentalization paradigm for typical users. It allows individuals to create up to nine distinct personas, or "Sudos." Each Sudo provides a unique phone number for calls and SMS, an email inbox for sending and receiving messages, a virtual payment card for online purchases, a communication handle for end-to-end encrypted messaging, voice, and video calls, and a separate browser for isolated browsing. MySudo is available as a mobile app for iOS and Android, and a desktop companion app for Windows and Mac, with additional features planned for the desktop version. Anonyome Labs also offers a privacy-focused VPN and has a password manager in development.

breach
ShareXLinkedInWhatsAppFacebook

More News

view all →
breach

Apollo discloses data breach from ongoing wave of attacks hitting financial sector

The private equity firm said attackers broke into some of its cloud platforms during a five-day period in early July, compromising sensitive personal data. The post Apollo discloses data breach from ongoing wave of attacks hitting financial sector appeared first on CyberScoop.

patch

Friday Squid Blogging: Neon Flying Squid

The neon flying squid can fly in formation. The shoal of about 100 squid rose unexpectedly from a patch of the Pacific Ocean around 370 miles from Tokyo and glided near the boat for about 30 metres. The astonished researchers were the first to capture photographs of such a thing, which looked like the early stages of an alien invasion. They were probably neon flying squid (Ommastrephes bartramii),

security

Lawmakers call for investigation into impact of CISA staffing cuts

Lawmakers say little is known about how recent cuts have impacted CISA and how the knowledge that was lost has been replaced.

security

Your Shredded Visa Card May Still Work at the Checkout

UMass Amherst researchers showed expired Visa contactless cards can make real purchases by exploiting an unsigned expiry field in Visa’s EMV kernel. Researchers at the University of Massachusetts Amherst demonstrated at USENIX Security 2026 in Baltimore that expired Visa contactless credit cards can complete real purchases, including transactions at live retail and grocery merchants, by […]

phishing

New SynkLoader malware pushed in Microsoft Teams phishing campaign

A previously unknown malware family dubbed SynkLoader is being distributed in Microsoft Teams phishing campaigns to steal credentials via a fake lock screen. [...]

ai

OWASP Flags Top AI Skill Risks in New Security Blueprint

The Open Worldwide Application Security Project has a brand-new top 10 security list tailored for the modern era, and it debuts a Universal Skill Format to add consistency and security to the AI add-ons.