❌

Vue lecture

Podcast: Cops Can Use AI to Pinpoint Your Home with Just One Photo

Podcast: Cops Can Use AI to Pinpoint Your Home with Just One Photo

We start this week with Joseph’s article about Raven, previously known as Geospy. This is an AI tool that can geolocate photos, and now says it can pinpoint a specific house based just on one photo taken inside. After the break, Jason explains why a judge ruled a particular Flock search as unconstitutional. In the subscribers-only section, we talk about the wild AI video that has derailed a manslaughter case.

Listen to the weekly podcast on Apple Podcasts, Spotify, or YouTube. Become a paid subscriber for access to this episode's bonus content and to power our journalism. If you become a paid subscriber, check your inbox for an email from our podcast host Transistor for a link to the subscribers-only version! You can also add that subscribers feed to your podcast app of choice and never miss an episode that way. The email should also contain the subscribers-only link for the extended video version too. It will also be in the show notes in your podcast player.

  •  

Here’s What Telegram Giving Data to the U.S. Government Looks Like

Here’s What Telegram Giving Data to the U.S. Government Looks Like

This article was produced in collaboration with Court Watch, an independent outlet that unearths overlooked court records. Subscribe to them here.

Newly filed court records show exactly what happens when messaging app Telegram provides data to U.S. authorities.

A letter written by Telegram, and providing a specific user’s phone number, user ID, and IP address, reads:

  •  

Accenture Tells Employees They Can Now Spend Only $29 on Claude Per Month

Accenture Tells Employees They Can Now Spend Only $29 on Claude Per Month

Consulting giant Accenture has told many employees that the company will now only spend $29 a month per person on Claude. Employees subject to the cap, some of whom had been spending as much as $1,000 monthly, are scrambling to find ways to make sure they can keep spending as much as they already are.

The news is a snapshot of what continues to play out across all sorts of industries: companies have spent heavily on AI tools, and are now discovering that many users are burning or “chewing” through AI tokens at a rapid clip. In response, many companies have curbed their employees’ AI use. There is a special irony to Accenture doing much of the same, when it is a company that has encouraged its clients to invest heavily into AI.

  •  

ChatGPT Ads Target Your Phone Number, Email

ChatGPT Ads Target Your Phone Number, Email

There is a lot of stuff about how creepy ad targeting is in today’s newsletter. Our first story is one I did, about how advertisers — or really anyone with 5 minutes on their hands — can inject ads into your ChatGPT session based on your phone number or email address. This is pretty normal in the advertising world, but I seriously doubt that when most of ChatGPT’s many, many users see an ad, they realize that might be because someone, somewhere, uploaded their phone number into OpenAI’s systems. I made my own ad on ChatGPT (without using peoples’ personal data) to test out the system. Then, in other news, there is new research confirming, I think for the first time, that online ads are being used to deliver zero-click mercenary malware against targets.

  •  

How ChatGPT Targets Ads To You Based On Your Prompts, Phone Number, and Email

How ChatGPT Targets Ads To You Based On Your Prompts, Phone Number, and Email

OpenAI lets anyone inject ads into ChatGPT users’ sessions, targeting specific groups of people based on their email address, phone number, or a unique identifier on their phone, according to 404 Media’s own tests of ChatGPT’s advertising ecosystem.

While the ad targeting available in ChatGPT is somewhat standard practice across the advertising industry, the chatbot’s one billion monthly active users may not understand they, in some cases, are being specifically targeted because of their personal data the advertiser has uploaded to OpenAI. ChatGPT’s ad targeting is also novel in that it is also based on the prompts users enter into the chatbot, prompts that users may assume are private but which, as 404 Media has previously shown, may be reviewed by humans. Or in this case, used for ad targeting purposes.

  •  

AI Company Lets Cops Pinpoint Specific Houses Based on a Single Interior Photo

AI Company Lets Cops Pinpoint Specific Houses Based on a Single Interior Photo

An AI company now lets cops take a photo and nearly instantly figure out what specific home it was taken in, using only clues in the photo itself, and is clearly pulling data from sites like Zillow and Airbnb. 

The tool, called Raven, shows the increasing power of AI capabilities available to local law enforcement agencies. 404 Media previously reported that both the Los Angeles Police Department and Miami-Dade Sheriff’s Office (MDSO) have bought access to Raven, which was previously called GeoSpy. Now, Raven, made by a company called Graylark Technologies, has added features that let cops analyze the interior of homes.

  •  

Podcast: Leak Show Cops Can Break into Locked iPhones

Podcast: Leak Show Cops Can Break into Locked iPhones

We start this week with a story from our old friend Lorenzo Franceschi-Bicchierai, about how cops can bypass the inactivity reboot on iPhones. After the break, Jason tells us how people are losing their minds over an LLM ‘torture’ prison. In the subscribers-only section, Sam explains what happened in a wild ChatGPT case in New Mexico.

Listen to the weekly podcast on Apple Podcasts, Spotify, or YouTube. Become a paid subscriber for access to this episode's bonus content and to power our journalism. If you become a paid subscriber, check your inbox for an email from our podcast host Transistor for a link to the subscribers-only version! You can also add that subscribers feed to your podcast app of choice and never miss an episode that way. The email should also contain the subscribers-only link for the extended video version too. It will also be in the show notes in your podcast player.

  •  

Lawmakers Introduce Multiple Laws to Curb Flock After 404 Media Coverage

Lawmakers Introduce Multiple Laws to Curb Flock After 404 Media Coverage

Multiple Democrat, Republican, and Independent lawmakers have introduced new pieces of legislation that, if passed, would dramatically curb federal agencies’ access to Flock cameras, with the lawmakers referencing reporting by 404 Media in their explanations for why the legislation is needed.

On Friday Senator Bernie Sanders (I-Vt.), Representative Alexandria Ocasio-Cortez (D-N.Y.), and Senator Jeff Merkley (D-Ore.) announced the Ban Flock Act, which would prohibit federal agencies from using automatic license plate readers (ALPRs) and block federal funding from state and local governments that use the cameras. It would also let Americans sue the federal government for violation of their rights through ALPRs.

“At a time of growing concern about the unchecked power of artificial intelligence, Flock is eviscerating the very notion of privacy by installing tens of thousands of cameras in communities across America without their consent,” Sanders said in the announcement posted to his website. “Going to the doctor? Flock knows. Dropping your kid off at school? Flock is tracking you. Flock is always watching. We cannot allow America to become a surveillance state where a handful of AI oligarchs profit by giving the government the power to track our every movement.”

💡
Do you know anything else about Flock? I would love to hear from you. Using a non-work device, you can message me securely on Signal at joseph.404 or send me an email at joseph@404media.co.

Ocasio-Cortez said, “AI-powered cameras are keeping track of our every move and weaponizing this data against working people to make record profits. The widespread integration of this technology into American society is unconscionable.” Merkley added, “No one should have this unchecked surveillance power at their fingertips, which is why I’m teaming up with Senator Sanders to rein in this dangerous technology.”

Sanders’ announcement says that one reason for the legislation is Flock has shared state information with federal immigration officials. In May 2025, 404 Media revealed local cops were doing lookups in Flock for Immigration and Customs Enforcement (ICE). After that report, Flock made dramatic changes to its product, including stopping other agencies searching cameras in Illinois, California, and Virginia. Flock said it also introduced a new tool that blocks impermissible searches in real time. 

The announcement also said law enforcement have used Flock data to investigate protests against ICE raids and ‘No Kings’ demonstrations. 404 Media revealed both of these, reporting that California cops investigated an “immigration protest” using Flock lookups, and, using data from the Electronic Frontier Foundation, that cops used Flock to monitor No Kings protests around the country. 404 Media also recently reported Flock itself taught cops how to surveil No Kings protesters in a company webinar.

Hajar Hammado, senior policy advisor at activist and progressive policy group Demand Progress, said in a press release “The Ban Flock Act is the gold standard for any legislation working to fight invasive Flock cameras on the federal level. Flock and other ALPR companies have wormed their way into communities across the nation and drastic, all-encompassing action is needed to root them out.”

Senator Josh Hawley (R-Mo.) announced his own piece of proposed legislation late last month. The Stop Flock Abuse Act would require a written approval process for each search; force agencies to delete driver data after ten days, with exceptions for active investigations; and ban ALPR networks from incorporating facial recognition technology. During a recent senate hearing, Hawley pointed to 404 Media’s reporting specifically.

Separately, Representatives Greg Casar and Shontel Brown recently wrote to FBI Director Kash Patel asking how the agency plans to acquire nationwide access to ALPR data, Semafor reported. 404 Media first revealed this plan in May. The letter also referenced 404 Media’s reporting which revealed a cop in Texas used Flock to search ALPRs nationwide for a woman who self-administered an abortion.

  •  

Podcast: The FBI Was Hacked. We’ve Seen the Data

Podcast: The FBI Was Hacked. We’ve Seen the Data

We start this week with Joseph’s stories on the massive FBI hack. 404 Media broke this news and continued to cover the breach of data on all FBI employees and their spouses. After the break, Jason tells us how a surveillance company is telling cops it wants to add facial recognition tech to Flock camera data. In the subscribers-only section, Jason and Joseph chat all about Muse, Meta’s new agentic AI, and how humans are actually behind some of the tasks. Because of course.

Listen to the weekly podcast on Apple Podcasts, Spotify, or YouTube. Become a paid subscriber for access to this episode's bonus content and to power our journalism. If you become a paid subscriber, check your inbox for an email from our podcast host Transistor for a link to the subscribers-only version! You can also add that subscribers feed to your podcast app of choice and never miss an episode that way. The email should also contain the subscribers-only unlisted YouTube link for the extended video version too. It will also be in the show notes in your podcast player.

  •  

USPS To Put Cameras in Trucks That Scan Roads for ‘Community Safety’

USPS To Put Cameras in Trucks That Scan Roads for ‘Community Safety’

The United States Postal Service is running a pilot program to put cameras in its mail carrier trucks that continuously scan roads and signs, map roadways and sidewalks, and improve “community safety,” according to a letter posted by a labor union and a statement from the agency to 404 Media. The idea is that, since the trucks are constantly traveling anyway, they can be used as a way to collect data, eventually potentially across the nation.

“The purpose of this pilot is to leverage the Postal Service’s unique ability to collect this valuable data due to the scale and frequency with which our fleet of postal vehicles travel the streets of every community across the country,” the letter, posted by NALC Branch 238 to Facebook, reads.

The letter, written by the United States Postal Service (USPS) Labor Relations to Brian Renfroe, the president of the National Association of Letter Carriers, says the USPS will partner with Next Base, a dashcam company, for the pilot. At the moment, the cameras will be used in the Washington, DC area, and will be installed on a hundred vehicles, the letter says.

On its website, Next Base offers a variety of dash cams, marketed to ordinary drivers, fleet operators, and ride share drivers. Its website says Next Base’s cameras record in up to 4K, and can capture every “license plate” with precision. The cameras don’t run automatic license plate reader (ALPR) software, though.

USPS To Put Cameras in Trucks That Scan Roads for ‘Community Safety’
A company of the letter from NALC Branch 238.

The letter continues, “Next Base cameras will scan and analyze roads, signage, maps roadways [sic] and sidewalks.” It says the cameras will be forward-facing, installed inside the trucks, and will begin recording as soon as the vehicle is in drive and away from the postal facility. “The cameras will not hinder the vehicle operator’s field of vision, nor does it record audio,” it adds.

The pilot was slated to start on September 21, and is expected to last several months, the letter says.

A spokesperson for the USPS told 404 Media in an email “The Postal Service is conducting a limited pilot to assess whether vehicle-mounted cameras can help identify roadway conditions and support community safety. The pilot includes privacy safeguards and requires no additional action from employees. Findings will inform any future decisions.”

USPS trucks already have 360 degree cameras that capture the outside of the vehicle for a period of time.

  •  

How the Feds Get Your Data

How the Feds Get Your Data

Surveillance isn’t just about who is collecting the data. Surveillance is, of course, also about who that data ends up with. A great story from Jason today looks at that with Flock and other automatic license plate reader (ALPR) data: some local cops are being forced to feed their ALPR data into obscure federal systems where that data may be kept for much longer than usual, and searched by many more people and agencies than the residents being surveilled probably realize.

And, we now know which birds are the two loudest on the planet. Maybe. Welcome back to our new experiment with daily newsletters. If you like this, subscribe here.

How Cities Are Forced to Funnel License Plate Data to a Massive Federal Surveillance Program

The Trump administration is using an anti-drug trafficking grant program from the 1980s to force cities around the country to funnel their ongoing collection of automated license plate reader data into large federal surveillance centers that fall under the White House’s jurisdiction, according to public records and court documents reviewed by 404 Media.

  •  

FBI Hackers Say They Won’t Publish Massive Trove of FBI Employee Data

FBI Hackers Say They Won’t Publish Massive Trove of FBI Employee Data

The hackers behind the massive FBI breach told 404 Media on Monday they do not intend to publish the data.

The breach, in which the hackers stole personal information on “all FBI employees and applicants” including physical addresses, job roles, names of spouses, and medical records, represents a significant national security and counterintelligence threat. Criminals in the same ecosystem as the hacking group, called ShinyHunters, have previously used hacked phone data to track and harass the FBI agents investigating them. When 404 Media first broke news of the breach, the group sent the personal data of an agent and their spouse who they said was investigating the group.

  •  

The End of Privacy Is Here (with Kashmir Hill)

The End of Privacy Is Here (with Kashmir Hill)

Facial recognition is everywhere now. It’s in surveillance cameras; it’s soon going to be in Meta’s RayBan pervert glasses, and some students already did that. You now have massively viral accounts that take clips of people, run them through facial recognition software, and then post their name and other personal info for everyone to see. We haven’t fully come to terms with what it means to live in a world where anyone can basically dox anyone else now.

To talk through this, Joseph spoke to Kashmir Hill. She’s a reporter at the New York Times, and the author of ⁠Your Face Belongs to Us: A Tale of AI, a Secretive Startup, and the End of Privacy⁠.

Listen to the weekly podcast on Apple Podcasts, Spotify, or YouTube. Become a paid subscriber for early access to these interview episodes and to power our journalism.If you become a paid subscriber, check your inbox for an email from our podcast host Transistor for a link to the subscribers-only version! You can also add that subscribers feed to your podcast app of choice and never miss an episode that way. The email should also contain the subscribers-only unlisted YouTube link for the extended video version too. It will also be in the show notes in your podcast player.

  •  

Humans Are Reading Copilot Prompts — And They're Horrified

Humans Are Reading Copilot Prompts — And They're Horrified

This piece contains references to eating disorders. If you or someone you know needs help, support is available.

Human contractors hired to improve Microsoft’s Copilot AI chatbot are constantly bombarded with lewd or sexually explicit photo editing requests and images that users have uploaded, including upskirt photos or putting women into sexual positions. These contractors are then asked to review whether the generated image successfully fulfilled the prompt — such as, did the image generator make the woman’s AI-enlarged breasts big enough.

  •  

Podcast: OpenAI Admits AI is Killing the Internet

Podcast: OpenAI Admits AI is Killing the Internet

We start this week with Jason’s story about OpenAI and Microsoft’s big admissions from court records that they are destroying the internet in all sorts of ways, and stealing intellectual property on an unprecedented scale. He admit it. After the break, Emanuel explains how he hijacked a real band’s Spotify page with AI-generated slop. In the subscribers-only section, we hear all about iLands, the AI agent platform that is basically just spam.

Listen to the weekly podcast on Apple Podcasts, Spotify, or YouTube. Become a paid subscriber for access to this episode's bonus content and to power our journalism. If you become a paid subscriber, check your inbox for an email from our podcast host Transistor for a link to the subscribers-only version! You can also add that subscribers feed to your podcast app of choice and never miss an episode that way. The email should also contain the subscribers-only unlisted YouTube link for the extended video version too. It will also be in the show notes in your podcast player.

  •  

FBI Hack Exposed FBI’s Own Hacking Unit

FBI Hack Exposed FBI’s Own Hacking Unit

The catastrophic hack of at least thousands of FBI officials’ personal data, including their addresses, phone numbers, and even their spouses, includes members of the FBI’s secretive hacking team, potentially revealing who exactly is in that unit, 404 Media has found.

The findings further highlight how sensitive the stolen data is, and how valuable it may be to criminals or to foreign intelligence agencies. There is very little public information about the FBI’s hacking unit, including the operations it conducts, the tools it uses, or which agents are part of it.

💡
Do you work at the FBI? Do you know anything else about this hack? I would love to hear from you. Using a non-work device, you can message me securely on Signal at joseph.404 or send me an email at joseph@404media.co.
  •  

‘We Hacked the FBI:’ Hackers Say They Have Data on All FBI Employees

‘We Hacked the FBI:’ Hackers Say They Have Data on All FBI Employees

A high profile hacking group claims it has breached multiple FBI-related services and stolen data “on all FBI employees and applicants.” A representative of the group, called ShinyHunters, told 404 Media the data includes FBI agents’ names, home addresses, phone number, and information on their spouse.

The data breach could be massively significant and may have all sorts of national security and counterintelligence implications. Criminals from the same ecosystem as ShinyHunters have previously used hacked data like phone records to track, intimidate, and harass the FBI agents investigating them. The highly sensitive data could also be a boon to foreign intelligence agencies who want to better understand how one of the most important law enforcement and intelligence agencies in the U.S. operates. And if the data fell into the hands of more criminals, FBI agents and their spouses could face serious threats to their safety.

“We hacked the FBI. We hold data on all FBI employees and applicants,” the representative of the group told 404 Media.

💡
Do you work at the FBI? Do you know anything else about this hack? I would love to hear from you. Using a non-work device, you can message me securely on Signal at joseph.404 or send me an email at joseph@404media.co.
  •  

People Training OpenAI’s AI Fired for Using AI to Train the AI

People Training OpenAI’s AI Fired for Using AI to Train the AI

OpenAI has an army of contractors who read real ChatGPT users’ prompts and other data to help improve the chatbot’s responses. The idea is that the contractors provide an, obviously, human touch to OpenAI’s models. Well, not all of the contractors are doing that. 404 Media has found multiple contractors hired to improve OpenAI’s models have been fired for using AI to train the AI. That’s not great for the models themselves, but there is also obviously a great irony in AI training companies working for OpenAI firing people for using AI when OpenAI’s whole thing is to make people use AI at work.

Some AI models already exhibit signs of “model collapse,” which is where AI models further trained on AI-generated text can become worse and worse. In this case, some of the people hired to partially stop that happening are themselves using AI-generated responses to train OpenAI’s models.

One contractor said they see people using AI “all the time and people are let go for it all the time, it’s pretty much the one thing that will get you kicked off ASAP.” The person said, “in a group of thousands there are tons that have been caught.” 

💡
Do you work as a prompt reviewer for OpenAI, Anthropic, or another AI company? I would love to hear from you. Using a non-work device, you can message me securely on Signal at joseph.404 or send me an email at joseph@404media.co.
  •  

Is Your City Using Axon License Plate Cameras? We Need Your Help

Is Your City Using Axon License Plate Cameras? We Need Your Help

Cities around the country are ditching Flock’s automatic license plate reader (ALPR) cameras, and replacing them with equivalent cameras from law enforcement contracting giant Axon. That move in large part comes in response to 404 Media’s coverage of how local cops performed lookups in Flock for Immigration and Customs Enforcement (ICE), and how a cop in Texas searched Flock cameras nationwide to look for a woman who self-administered an abortion.

That brings up questions: what are cities and law enforcement agencies using Axon ALPRs for? And who are they in turn sharing that data with? 404 Media has started to find out, but needs the help of local residents and community members to figure out what is happening across the country.

👮
Have you obtained Axon ALPR activity logs? We think this information is important so we can learn how police are using Axon's surveillance cameras. Please feel free to send the files to us! You can email joseph@404media.co.

Over the last few weeks, 404 Media has filed requests with various cities and police departments for Axon “activity reports” and “sharing reports.” These show in granular detail when a police officer searched Axon’s ALPRs, the name of the officer, their badge number, the license plate they reached, and, most importantly, the stated reason why. These activity reports are essentially Axon’s version of Flock’s “network audits,” which has been the basis of much of 404 Media’s Flock reporting, and local and national media outlets’ around the country. You can see an example of one here:

Is Your City Using Axon License Plate Cameras? We Need Your Help
404 Media redacted the plates in this screenshot.
Is Your City Using Axon License Plate Cameras? We Need Your Help
Another screenshot from an Axon activity report.

So far, 404 Media has obtained activity reports from the Benton County Sheriff's Office, WA; Falmouth Police Department, ME; Johns Creek Police Department, GA; Ocean Shores Police Department, WA; Pleasanton Police Department, TX; and Red Wing Police Department, MN.

But we need your help. Has your local police department or city switched to Axon ALPR cameras? Were they already using Axon? And do you want to know what they’re using those cameras for?

We’re asking interested readers to file the below public records request. You can simply copy this language, tweak it a little if necessary to apply to your state, then file the request with the relevant agency. You can do this by finding their relevant public records request email address, or by filing it through Muckrock. This is the platform we use for sending and organizing our records requests.

The Internal ALPR Activity report is the one shown above. The Network ALPR Activity report shows what other agencies the police department or city shares their data with. The ALPR Data Sharing report provides a history of when other agencies were invited, or removed, to receive the data. And the ALPR Hostlist Management Audit report details changes made to alerts the agency may receive.

If you file a request and get data back, please feel free to email it to us at joseph@404media.co. We’ve seen with the nationwide conversation about Flock that local residents can do a lot to reveal how surveillance technology is being used in their own communities. We hope we can find out a bit more about how agencies are using Axon’s cameras too.

To Whom It May Concern:

Pursuant to the [YOUR STATE’S PUBLIC RECORDS LAW], I hereby request the following records:

1. Internal ALPR Activity report in Axon.

The report should include data logged from the period of January 1, 2025, to the date this request is processed. Per Axon's documentation, the Internal ALPR Activity report is available within the LPR > ALPR Search > LPR Audit menu. You can find instructions to locate this here: https://www.axon.com/help/fusus/software/fusus/alpr/alpr-audit.htm

2. Network ALPR Activity report in Axon.

The report should include data logged from the period of January 1, 2025, to the date this request is processed. Per Axon's documentation, the Network ALPR Activity report is available within the LPR > ALPR Search > LPR Audit menu. You can find instructions to locate this here: https://www.axon.com/help/fusus/software/fusus/alpr/alpr-audit.htm

3. ALPR Data Sharing report in Axon.

The report should include data logged from the period of January 1, 2025, to the date this request is processed. Per Axon's documentation, the ALPR Data Sharing report is available within the LPR > ALPR Search > LPR Audit menu. You can find instructions to locate this here: https://www.axon.com/help/fusus/software/fusus/alpr/alpr-audit.htm

4. ALPR Hotlist Management Audit report in Axon.

The report should include data logged from the period of January 1, 2025, to the date this request is processed. Per Axon's documentation, the ALPR Hotlist Management Audit report is available within the LPR > ALPR Search > LPR Audit menu. You can find instructions to locate this here: https://www.axon.com/help/fusus/software/fusus/alpr/alpr-audit.htm

The requested documents will be made available to the general public, and this request is not being made for commercial purposes.

In the event that there are fees, I would be grateful if you would inform me of the total charges in advance of fulfilling my request. I would prefer the request filled electronically, by e-mail attachment if available or CD-ROM if not.

Thank you in advance for your anticipated cooperation in this matter. I look forward to receiving your response within the time period that the statute requires.

Sincerely,

[YOUR NAME]

  •  

University Rescinds Job Offer to Activist Who Allegedly Wiped Phone Before DHS Could Search It

University Rescinds Job Offer to Activist Who Allegedly Wiped Phone Before DHS Could Search It

Georgia State University has rescinded a job offer given to a high profile activist who is currently fighting a case in which he allegedly wiped a security-focused Android phone before Customs and Border Protection (CBP) could search it. The case, which 404 Media first covered and has now received widespread and national attention, has important ramifications for privacy and when someone can still be charged with an offense even if authorities don’t have suspicion of any specific crime.

Earlier this month, activist Samuel Tunick and a group of supporters delivered a “demand letter” to the university. That letter, which Tunick shared with 404 Media, says he explained to the university he was facing a pending charge, which he describes as “an instance of textbook political repression, and a high profile civil liberties case.”

While delivering the letter, supporters held signs saying, “GSU sides with Trump,” and “Digital Privacy Under Attack!”

💡
Do you know anything else about this case? I would love to hear from you. Using a non-work device, you can message me securely on Signal at joseph.404 or send me an email at joseph@404media.co.

Tunick told 404 Media he was supposed to start his Teaching Assistant job on August 25. Then six hours before his first lab, Tunick received an automated email saying he had not passed the required background check. The letter says Tunick’s head of department asked the university for more information about the relevant hiring policy, “and she was told that there actually aren’t any.” Instead, in Tunick’s telling, “this was a subjective, and essentially arbitrary decision made for reasons that have not been made clear to me or other faculty.”

Tunick was also planning to pursue a M.S. of Geosciences at Georgia State, and was going to receive a tuition waiver and wages for his work as a Teaching Assistant. “Now I have had both my tuition waiver and source of income pulled out from under me at the drop of a hat, my economic security and academic career threatened due to a single absurd charge, to which I have pleaded ‘not guilty,’” the letter continues. 

Tunick shared screenshots of emails between him and various faculty. One sent by the department head said, “I was told that the ‘Background Check Committee’ denied the approval for your hire, the Dean of Students denied the approval, and the legal department denied your approval.” That email reiterated there is no policy to be pointed to, and that each hire “undergoes a risk assessment on a case-by-case basis.” In another email, Tunick notes he had a misdemeanor in Fulton County, but these charges were dismissed.

Georgia State University did not respond to a request for comment.

404 Media first broke news of Tunick’s case in December and published an interview with Tunick and one of his lawyers, Matthew Dodge, in July. The airport encounter that led to the charge happened in January 2025, when Tunick was returning to the U.S. after a vacation in the Dominican Republic. Department of Homeland Security (DHS) officials called the airport ahead of time and asked agents there to stop Tunick, Dodge said.

The officers asked to search Tunick’s bags and pat him down, both of which he refused. Agents searched him and found nothing improper, Dodge said. Then, the agents said they wanted to search Tunick’s phone. Tunick provided them a code, which an officer then typed into the device. Rather than unlocking the phone, the device “went to a blank screen” and displayed the logo of GrapheneOS. In other words, the code wiped the device.

GrapheneOS is a security- and privacy-focused operating system, which includes all sorts of additional features. One of those is the duress password feature that “will irreversibly wipe the device,” according to GrapheneOS’s website. 

Tunick participated in the Stop Cop City movement in Atlanta, and in a previous interview with 404 Media, Tunick put his prosecution for wiping his phone squarely in the context of other cases against the movement. Before the airport encounter, Tunick found out from his lawyer a tracker had been placed on his car. He also learned authorities subpoenaed his cellphone records and Gmail data. Tunick previously failed a background check for a job on a Christmas tree lot which involved going onto the property of a school, he previously said. When he asked the Atlanta Public Schools office about it, he was directed to the FBI.

The authorities “really just tried to dig up anything they could on me and they didn’t find anything,” Tunick previously told 404 Media. “At this point, it almost seems like it’s just intended to make my life miserable and discourage participation in any sort of advocacy or activism.”

The letter demands that Georgia State reinstate Tunick’s employment and/or the tuition waiver; provide more information about the hiring and background review process; and apply an “innocent until proven guilty” principle on hiring decisions.

  •  

Podcast: Humans Are Reading Your ChatGPT Conversations

Podcast: Humans Are Reading Your ChatGPT Conversations

We start this week with Joseph’s story about the people who are reading real ChatGPT users’ prompts and conversations. He got a bunch of documents all about these contractors and saw real prompts himself. After the break, Sam tells us all about the Automattic CEO getting kicked out. Then coming back again. In the subscribers-only section, Emanuel tells us why a16z thinks enshittification is not real.

Listen to the weekly podcast on Apple Podcasts, Spotify, or YouTube. Become a paid subscriber for access to this episode's bonus content and to power our journalism. If you become a paid subscriber, check your inbox for an email from our podcast host Transistor for a link to the subscribers-only version! You can also add that subscribers feed to your podcast app of choice and never miss an episode that way. The email should also contain the subscribers-only unlisted YouTube link for the extended video version too. It will also be in the show notes in your podcast player.

  •  

Hackers Stole Flock’s Camera Software, Revealing How the Company Tracks Cars and People

Hackers Stole Flock’s Camera Software, Revealing How the Company Tracks Cars and People

This article was produced in collaboration with WIRED. You can read their version of the article here.

Hackers ripped down a Flock camera above a roadway, made a near-complete copy of the data stored inside it, and shared the files with 404 Media and WIRED, revealing in new detail how exactly Flock Safety’s cameras track the movements of both vehicles and people. The hackers say they are also publishing details on how they managed to obtain the software, in the hopes that other people may copy them.

  •  

Inside ‘Project Lily’: The Humans Reading Your ChatGPT Chats

Inside ‘Project Lily’: The Humans Reading Your ChatGPT Chats

OpenAI is hiring hundreds of contractors who read a massive stream of real users’ ChatGPT prompts, with the prompts sometimes including sensitive personal information, 404 Media has learned. The prompts these people review can include whole conversations between users and the chatbot, conversations that most of ChatGPT’s more than 900 million users probably don’t realize may be read by actual people.

The goal of these prompt review teams is to improve the responses ChatGPT gives to its users, with the contractors rating and critiquing the chatbot’s generated replies. Internal documents seen by 404 Media show contractors training ChatGPT to not anthropomorphize itself, and to be less sycophantic, a key problem for OpenAI whose over-sycophantic 4o model led in part to multiple peoples’ suicides, according to various lawsuits.

💡
Do you work as a prompt reviewer for OpenAI or Anthropic? I would love to hear from you. Using a non-work device, you can message me securely on Signal at joseph.404 or send me an email at joseph@404media.co.

The news presents a major privacy risk for ChatGPT’s users, with people often using ChatGPT as a therapist, professional assistant, or digital friend, and providing it with all sorts of intimate details about their lives. The contractors don’t see ChatGPT usernames, and OpenAI says it tries to remove personal information before prompts reach the reviewers, but the company acknowledged sensitive details can still get through. 

The news also dispels the misconception that these models are improving only because of OpenAI’s mass scraping of the internet, the talent of its well-paid engineering and AI teams, or the power of its newer models. An important and overlooked part are the outside contractors paid to read and review ChatGPT responses to real prompts over and over again. Anthropic confirmed to 404 Media it is also using human review to improve its models.

“No,” someone who works with the prompts said when asked if they think ChatGPT users know that humans are reading their chats. “I don’t think they would imagine some contractor somewhere [...] is analyzing the conversations.”

  •  
❌