LIVE · cybersecurity feed
Live wire
breach

Is Online Privacy Possible? How Digital Identities Can Help

The internet's prevailing business model, often described as surveillance capitalism, relies on collecting extensive personal data from users. This system aggregates information from various online activities, including app usage, account creation, website visits, and form submissions, to build detailed profiles that are then monetized. Data brokers play a significant role in this process,…

ZeroDay News ·

Source: BleepingComputer

The internet's prevailing business model, often described as surveillance capitalism, relies on collecting extensive personal data from users. This system aggregates information from various online activities, including app usage, account creation, website visits, and form submissions, to build detailed profiles that are then monetized. Data brokers play a significant role in this process, purchasing, selling, and cross-referencing fragments of personal information to construct comprehensive user profiles, often without the individual's awareness or consent.

This data aggregation, which is inherent to the default internet, allows a single email address to link diverse aspects of a user's life, such as shopping habits, health searches, location history, and social connections. The resulting profiles are then used for purposes like targeted advertising, price discrimination, and can contribute to identity theft. The rise of artificial intelligence has further exacerbated this issue, enabling data brokers to correlate disparate actions and create even more valuable profiles from vast amounts of information.

In response to this pervasive data collection, a strategy known as compartmentalization has emerged as a countermeasure. This approach advocates for breaking the correlating identifiers that tie all online activities back to a single individual. Instead of using one set of credentials—such as a single email, phone number, or payment method—across all online interactions, users deliberately create separate, purpose-built digital identities, or "personas," for different contexts.

For example, a user might employ one persona for online shopping, another for dating applications, a third for travel, and yet another for newsletter subscriptions. Each persona operates as a self-contained identity, equipped with its own unique email address, phone number, payment method, browser, and communication handle. The crucial aspect of this method is that these personas are designed to be disconnected from each other and from the user's actual identity, making it difficult for data brokers or advertisers to link them.

Should one of these personas be compromised in a data breach, attract spam, or be sold to a marketing list, the damage is contained within that specific persona and cannot be easily traced back to the user's overarching identity. This differs from traditional security tools that focus on protecting a single identity with stronger passwords or encryption; compartmentalization assumes that any single identity is eventually susceptible to correlation and mitigates risk by ensuring that no single identity holds all of a user's valuable information.

Anonyome Labs has developed and patented several concepts related to online personas and compartmentalization, including methods for supporting telephonic synthetic identities (US9374689), email applications for synthetic identities (US9729519), identifying and warning of synthetic identity behavior that reduces user privacy (US10178106), providing persona masking in a computer network (US10320753), and administering proxy identities (US10356052).

The company's product, MySudo, is designed to implement this compartmentalization paradigm for typical users. It allows individuals to create up to nine distinct personas, or "Sudos." Each Sudo provides a unique phone number for calls and SMS, an email inbox for sending and receiving messages, a virtual payment card for online purchases, a communication handle for end-to-end encrypted messaging, voice, and video calls, and a separate browser for isolated browsing. MySudo is available as a mobile app for iOS and Android, and a desktop companion app for Windows and Mac, with additional features planned for the desktop version. Anonyome Labs also offers a privacy-focused VPN and has a password manager in development.

breach
ShareXLinkedInWhatsAppFacebook

More News

view all →
breach

Criminal IP Introduces AITEM as the Next Evolution of Attack Surface Management

AI SPERA, the company behind the cyber threat intelligence platform Criminal IP, has announced AITEM (AI-Powered Threat Exposure Management), an expansion of its Attack Surface Management (ASM) offerings. AITEM aims to move beyond traditional asset discovery to provide a more comprehensive approach to understanding, prioritizing, and responding to security exposures. The platform is scheduled…

security

Canadian cybersecurity executive arrested in federal extortion case

A Canadian cybersecurity executive was arrested in Pennsylvania on Thursday, facing federal charges of conspiracy to commit extortion. Edward Dubrovsky, 54, a co-founder and former Chief Operating Officer of CYPFER, a firm specializing in ransomware negotiation, is charged with conspiring to threaten the confidentiality of information for extortion and conspiring to commit Hobbs Act extortion,…

ai

AI Is Getting Really Good at Messing With Cybercriminals

Anti-cybercrime initiatives are increasingly deploying artificial intelligence to disrupt scammers by engaging them with lifelike bots, which the criminals mistake for genuine victims. This strategy aims to waste scammers' time and resources while gathering intelligence on their operations.

ransomware

FBI Arrests Ransomware Negotiation Firm Co-Founder in ShinyHunters Probe

The Federal Bureau of Investigation (FBI) has reportedly arrested Edward Dubrovsky, a co-founder of the ransomware negotiation firm Cypfer and currently associated with CyberSteward. The arrest is said to be part of the ongoing ShinyHunters investigation, specifically in connection with an incident involving FBI job applicant data.

ai

The Third-Party Agent Problem: Why Security Built for AI You Chose Misses the Agents You Didn't

A new report highlights a significant blind spot in enterprise security architectures concerning the proliferation of third-party AI agents. The forthcoming 2026 State of Agent Security Report indicates that current security models, often designed to protect AI systems directly chosen and deployed by an organization, frequently fail to account for AI capabilities embedded within third-party…

security

Insider Cyber Extortion Plot Against Industrial Firm Lands Engineer in Prison

A former core infrastructure engineer has been sentenced to prison for an attempted cyber extortion plot against an industrial firm. The engineer reportedly deleted administrative accounts and reset hundreds of user passwords, subsequently demanding a ransom of 20 Bitcoin to prevent further disruption to the company's servers.