privacy vulnerabilities