404 Media

2026-07-31 14:04:26

Company Offering Printed Books to Train AI Stops After 404 Media Coverage

Following 404 Media’s reporting that book database company ISBNdb claimed to source printed books to then sell to AI companies for AI training, the company deleted the part of its website offering the service and walked back claims that it would train AI models, and instead called it “a test of market interest.”

On July 30, nine days after 404 Media’s reporting, ISBNdb added a note to its homepage and an update on its news page about the change. “We've seen the recent coverage about a marketing landing page on our site, and we understand the concern it raised. The facts: ISBNdb has never purchased, scanned, or sold a book — for AI training or anything else,” ISBNdb wrote. “We don't train AI models, and we never have. The page was a test of market interest; no such service was ever brought to life. We've taken the page down. Our job is helping people find books. For more than two decades, ISBNdb has been the card catalog of the book world — the data behind how bookstores, libraries, and reading apps connect readers with titles. Data about books, not the books themselves. That hasn't changed.”

ISBNdb removed the landing page for “Printed Books Sourcing for Your AI LLMs Dataset Needs” on July 28. “It was part of exploring demand, and we've chosen to pivot away from that direction. Our main ISBNdb (book metadata API) services are unaffected and running as usual,” the site says.

ISBNdb replied to 404 Media's request for comment about the removed pages with the same note that's now on the homepage. The company has not replied to 404 Media's previous attempts to reach it for comment.

AI Companies Are Buying Tons of Old Books Because They’re Free of AI Slop
ISBNdb, a company that sources printed books for AI companies to turn into training data, tells clients “the optics problem is real.”
404 MediaEmanuel Maiberg

In one now-removed article on its site, ISBNdb said that printed books published before 2022 are ideal for AI training data because they don’t include AI generated text, and ingesting these books could prevent model collapse. The article also suggested that book authors who might be opposed to this use of their work could just write with manipulating and sabotaging AI models in mind.

404 Media spoke to booksellers and saw reports online detailing a sudden uptick in sales recently. “It's not just the quantity, but the weirdness of the orders,” one bookseller told 404 Media. “The type of books [...] there's no rhyme or reason to it. Also, there's a total disregard for the price of the book. I've had some books that sold through this way that were [...] greatly overpriced. That's kind of a tell for AI because they have just so much money.”

“Purchasing paper books at scale from the secondary market does not deprive any creator of income they would otherwise have received,” one of ISBNdb’s now-removed pages said. “These are books that have already fully discharged their financial obligation to their creators.”

In January, book authors filed a copyright lawsuit against Anthropic, revealing internal documents that showed Anthropic planned to obtain and scan millions of printed books and destroy them in the process. An investigation by the Washington Post found that Anthropic was buying books from a company called Better World Books, one of several marketplaces where libraries, retailers, and individuals sell books.

In ISBNdb’s now-removed marketing materials, it admitted that getting caught destroying printed books during the scanning process would not be a good look. “The optics problem is real,” ISBNdb’s site said. “‘AI company destroys two million books’ is not a headline that generates sympathy.”

Emanuel Maiberg contributed reporting to this story.

The Receipt is the New License: Physical Books Sourcing for AI Training - ISBNDB Blog

In 2025, a federal judge handed down one of the most consequential copyright rulings in AI history. Anthropic (Claude AI) had purchased and physically

^{Val Giordano (ISBNDB Blog)}

404 Media

2026-07-21 15:20:10

Apple Fixes Hide My Email Vulnerability After 404 Media Coverage

Apple says it has fixed a vulnerability in its Hide My Email feature which let essentially anyone figure out a user’s real email address which was supposed to be protected by the feature. Apple only fixed the vulnerability after 404 Media wrote about it at the start of July, despite Apple knowing about the issue for more than a year.

The news also follows the filing of a class action lawsuit against Apple over the vulnerability.

On Wednesday Apple told 404 Media it deployed a patch for the issue on July 3, which the company says has fully resolved the issue.

Hide My Email is part of Apple’s paid iCloud+ product. It lets customers quickly create a new, anonymous email address they can then use to sign up to websites, services, or email people with. The generated email addresses typically contain two random words followed by a number and the @icloud.com domain. I use it heavily so hackers may have a harder time cross-referencing my activity and accounts across data breaches, for example.

💡
Do you know about any other privacy issues like this? I would love to hear from you. Using a non-work device, you can message me securely on Signal at joseph.404 or send me an email at joseph@404media.co.

Tyler Murphy, co-founder of EasyOptOuts, discovered he was able to find the real email address of Hide My Email users. At the time, Murphy said, “We don't know the full scope of the issue, but in our limited tests with volunteers, 100% of Hide My Email addresses were exploitable.” That included mine, which we tested.

Murphy first reported the issue to Apple in June 2025. Over the subsequent months, Apple said it was looking into the issue and said it had fixed it; Murphy found it was still exploitable; and Apple again said it was looking into it. Murphy, thinking Apple may not fix the issue at all, then contacted 404 Media, around a year after Apple learned of the vulnerability.

When 404 Media first covered the issue several weeks ago, we did not include any details on how it worked because Apple had not fixed it. Meaning, if we published more specifics, third parties might figure out how to exploit it and reveal peoples’ real email addresses.
playlist.megaphone.fm?p=TBIEA2…
Now Apple says it has been fixed, we can add that, in simple terms, it required sending a target Hide My Email user a message that got rejected as spam. “We don't know how often hidden email addresses were leaked in email logs. For many major email hosts, the leak was triggered simply by an email being automatically rejected as spam, even if it was a legitimate message. Such emails probably didn't make it to your inbox, so you can’t review your spam folder to learn whether you were affected,” Murphy and EasyOptOut co-founder Ben Weiner said in a new statement.

“The bug that caused Apple's Hide My Email to leak hidden email addresses to senders has been fixed. However, we don't think the risk to Hide My Email users has been eliminated. Because non-malicious emails could bounce, revealing your hidden email address, and because mail transfer logs are often retained, we'd assume that any hidden email address linked to a Hide My Email address created before July 7, 2026, may have been exposed and could still be in third-party logs,” they added.

The class action lawsuit against Apple seeks full recovery of the subscription costs customers paid for the feature and an injunction against Apple for its “deceptive conduct,” PCMag reported.

EasyOptOuts - Personal Data Removal Service | Just $19.99/year

Remove your personal information from data brokers. 100% automated. Proven as effective as services costing 5-10x more.

^EasyOptOuts

404 Media

2026-06-04 18:34:16

Immigrant Rights Lawyers File Lawsuit Over Palantir’s ELITE

An immigrant rights and advocacy group has filed a lawsuit against Immigration and Customs Enforcement (ICE) seeking records related to the agency’s use of Palantir tools. 404 Media first revealed a tool called ELITE and its links to Palantir in January, based in part on a leaked user guide for ELITE. ICE uses ELITE to find which neighborhoods to raid, according to testimony from an ICE official.

“The requested records include information of great national significance, and will detail the ways Defendants have made use of Palantir’s technology products to centralize, analyze, and visualize data around individuals residing in the United States and their social relationships to identify target individuals and communities in highly publicized immigration raids,” Just Futures Law wrote in its complaint filed on Thursday.

💡
Do you know work at Palantir or ICE? I would love to hear from you. Using a non-work device, you can message me securely on Signal at joseph.404 or send me an email at joseph@404media.co.

The lawsuit follows a Just Futures Law Freedom of Information Act (FOIA) request seeking related documents. The lawsuit also targets the Department of Homeland Security (DHS).

Just Futures Law is seeking, among other things, unredacted copies of communications between ICE and Palantir discussing various tools and systems, including ImmigrationOS; communications between ICE and members of DOGE discussing the systems (DOGE was working on a “master database” to track immigrants, WIRED reported); memorandums of agreement and similar between ICE, DOGE, and other agencies; copies of the specific Palantir contracts; training material about ImmigrationOS; and presentations created by ICE discussing the systems.

As 404 Media reported, ELITE, or Enhanced Leads Identification & Targeting for Enforcement, populates a map with potential deportation targets, and provides ICE users with a dossier on each person. It also provides a “confidence score” on that person’s current address. Other criteria available on the map include “Bios & IDs,” “Location,” “Operations,” and “Criminality.”
playlist.megaphone.fm?p=TBIEA2…
404 Media purchased a transcript from a case in Oregon in which a deportation officer with ICE’s Fugitive Operations Unit, identified in the court records as JB, said ELITE is “basically a map of the United States. It’s kind of like Google Maps.”

JB said ELITE is what ICE uses to track the apparent density of people in a particular location. “You’re going to go to a more dense population rather than [...] like, if there’s one pin at a house and the likelihood of them actually living there is like 10 percent [...] you’re not going to go there,” he added.

Organizations and journalists sometimes file FOIA lawsuits as a way to force an agency to comply with their legal obligations to provide the requested records in a timely manner. 404 Media recently published records from our ongoing lawsuit against ICE regarding its $2 million spyware contract.

DOGE Is Building a Master Database to Surveil and Track Immigrants

DOGE is knitting together data from the Department of Homeland Security, Social Security Administration, an IRS that could create a surveillance tool of unprecedented scope.

^{Makena Kelly (WIRED)}

404 Media

2026-04-29 13:01:22

Apple Fixes Bug That Let FBI Extract Deleted Signal Messages After 404 Media Coverage

Last week Apple fixed an issue that let the FBI forensically extract copies of incoming Signal messages from a defendant’s iPhone, even after the app had been deleted, because copies of those messages were stored in the iPhone’s notification database. The move comes directly in response to 404 Media’s coverage of a case in which the FBI was able to extract a suspect’s deleted Signal messages. Apple’s fix means iPhones should no longer save copies of deleted messages from Signal or other apps, and Apple said the patch also purges already saved and related notifications.

This post is for subscribers only

Become a member to get access to all content
Subscribe now

Apple Fixes Bug That Let FBI Extract Deleted Signal Messages After 404 Media Coverage

^{Joseph Cox (404 Media)}

404 Media

2026-04-16 00:09:26

Thomson Reuters Shareholders Demand Investigation into ICE Contracts

On Wednesday shareholders in Thomson Reuters demanded the company’s board launch an investigation into whether its products have contributed to human rights violations, specifically with regards to Thomson Reuters’ ongoing sale of peoples’ personal data to Immigration and Customs Enforcement (ICE).

Thomson Reuters sells access to the CLEAR investigative database, which can include peoples’ names, addresses, car registration information, Social Security numbers, and details on someone’s ethnicity. 404 Media has repeatedly shown how CLEAR is integrated with ICE tools, including one ICE uses to find neighborhoods to target.

The move is the latest piece of growing pressure against the company concerning its contracts with ICE and the Department of Homeland Security (DHS). It follows an internal protest in which more than 200 Thomson Reuters employees sent leadership a letter expressing their concern with those contracts. As 404 Media reported on Tuesday, Thomson Reuters fired the worker who led that effort, according to a newly filed lawsuit.

💡
Do you work at Thomson Reuters or know anything else about CLEAR? I would love to hear from you. Using a non-work device, you can message me securely on Signal at joseph.404 or send me an email at joseph@404media.co.

This post is for subscribers only

Become a member to get access to all content
Subscribe now

Thomson Reuters Shareholders Demand Investigation into ICE Contracts

^{Joseph Cox (404 Media)}

404 Media

2026-02-27 16:10:27

Lawmakers Demand DHS Define ‘Domestic Terrorist’ As It Uses Vast Array of Surveillance Tools

A group of more than a dozen Democratic lawmakers have demanded the Department of Homeland Security (DHS) provide its definition of “domestic terrorist,” after the agency labelled U.S. citizens Renée Good and Alex Pretti, which DHS officers killed, as such. The move also comes as DHS and its various components purchase and deploy a wide range of surveillance technologies and demand sensitive information from tech companies to unmask people criticizing ICE.

This post is for subscribers only

Become a member to get access to all content
Subscribe now

Lawmakers Demand DHS Define ‘Domestic Terrorist’ As It Uses Vast Array of Surveillance Tools

Rep. Bennie G. Thompson and a host of other Democrats made the demand in a letter to DHS Secretary Kristi Noem. “Your actions are abhorrent, blatantly unconstitutional, and corrosive to the functioning of a peaceful society.”

^{Joseph Cox (404 Media)}