We start this week with Joseph’s article about Samuel Tunick, the man charged with allegedly wiping his phone before DHS officials could search it. It’s a wild case with a lot to unpack. After the break, Jason tells us all about a TikTok Shop scheme powered by AI. In the subscribers-only section, we talk about possibly the dumbest AI tool ever made.

Listen to the weekly podcast on Apple Podcasts, Spotify, or YouTube. Become a paid subscriber for access to this episode's bonus content and to power our journalism. If you become a paid subscriber, check your inbox for an email from our podcast host Transistor for a link to the subscribers-only version! You can also add that subscribers feed to your podcast app of choice and never miss an episode that way. The email should also contain the subscribers-only unlisted YouTube link for the extended video version too. It will also be in the show notes in your podcast player.

• ⁠You're Invited: 404 Media's Third Anniversary Live Podcast and Party!⁠
• ⁠‘The Government Hopes To Set a Precedent’: An Interview With the Man Charged for Allegedly Wiping His GrapheneOS Phone⁠
• ⁠Inside an AI TikTok Shop Slop Factory That Shills Supplements Recalled By the FDA⁠
• ⁠Google Earth’s New AI Lets Anyone Fabricate Completely Bullshit Satellite Images⁠

A series of issues in Apple’s web browser engine — the tech underlying all browsers on iOS — means that Apple’s iCloud Private Relay tool, which is supposed to hide a user’s IP address, in many cases doesn’t actually work. Instead, the issues mean a malicious attacker can set up a website to learn a Private Relay user’s real IP address, or that many websites have also already collected this information incidentally. The issues also impact OnionBrowser, an iOS app for browsing the web through the Tor anonymity network, the researchers who discovered the issues say.

The Private Relay leak is the second issue to recently impact Apple’s paid-for privacy products. Last month 404 Media reported a bug in Apple’s Hide My Email feature was actually revealing peoples’ real email addresses. Apple knew about that issue for more than a year before fixing it.