Director of Cybersecurity
Public Key
npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx Profile Code
nprofile1qqsrhfhexcslfawgj0du2aqhmsngud4kzmga7r4pu8lmmyg3kjy6zhcpz3mhxue69uhhyetvv9ujuerpd46hxtnfduqs6amnwvaz7tmwdaejumr0ds62uuw4
Show more details
Published at
2026-08-17T03:08:10Z Event JSON
{
"id": "7584c2b8188699e338a37dc03ff84c012620c5ff5a3e2119bc6490c0c6b2ccb5" ,
"pubkey": "3ba6f93621f4f5c893dbc57417dc268e36b616d1df0ea1e1ffbd9111b489a15f" ,
"created_at": 1786936090 ,
"kind": 0 ,
"tags": [
[
"proxy",
"https://hachyderm.io/users/evacide",
"activitypub"
],
[
"client",
"Mostr",
"31990:6be38f8c63df7dbf84db7ec4a6e6fbbd8d19dca3b980efad18585c46f04b26f9:mostr",
"wss://relay.ditto.pub"
]
],
"content": "{\"name\":\"evacide\",\"about\":\"Director of Cybersecurity\\n@EFF\\n/ Co-founder of\\n@stopstalkerware\\n/ These are my opinions, not my employers’ / I did a TED talk once\",\"picture\":\"https://media.hachyderm.io/accounts/avatars/110/023/534/681/636/317/original/592205ed198bf44a.jpg\",\"banner\":\"https://media.hachyderm.io/accounts/headers/110/023/534/681/636/317/original/3dfaf02bfcbcbd7b.jpeg\",\"nip05\":\"[email protected] \",\"fields\":[]}" ,
"sig": "2bf1852b0c263ca61fc0f2555a3879ce45f3939b6f3929e84fb3700d57dc3f26d9afbb59e05f8246e7c5b1bd55a3239ec5906a6e72565eafeeb6a0db2ac07202"
}
Last Notes npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide So you think you have solved your age verification problem with zero-knowledge proofs... https://www.eff.org/deeplinks/2026/08/zkps-arent-age-verification-silver-bullets npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide Flock makes a point of saying that their system can't track individuals. Wired continues to do the Lord's work, taking Flock software apart and demonstrating its new AI tool comes preloaded with prompts like "find me witness" and "find relatives." npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide I cannot overstate how much the revolution needs kind, reliable, people who show up when you need them and does not need drug-addled cut-rate Hunter S. Thompson impersonators. npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide Oh look, another police officer using Flock to stalk her ex-girlfriend: https://newbedfordlight.org/new-bedford-police-officer-accused-of-using-flock-cameras-to-track-and-follow-ex-romantic-partner/ npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide Today's Long Read is about how fringe far-right theories about the "censorship-industrial complex" became Trump policy: npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide You cannot make mass surveillance "safe" or "good" by adding more guardrails. The only way to make Flock safe is to get rid of Flock. npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide You would think that all of these people pushing for social media bans for kids would be interested in whether or not these bans actually work...but no, I guarantee we will keep on seeing age-gating bills. https://theconversation.com/more-than-80-of-kids-still-using-social-media-despite-ban-new-esafety-report-finds-288808 npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide Claude warns users that by hitting the "share button" anyone with the link can view the content, but it is not clear that they are creating a document that can be indexed by Google and will come up in searches. npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide The nice lady on Fillmore selling me pants today asked where I lived, and when I told her, she made a concerned face and asked "Is it safe there?" so I replied "I'm the most dangerous thing there," and this is the only answer I will be using from now on. npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide This matters a lot because people are constantly asking me if they should set up a duress passcode in order to fool law enforcement. npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide Really, it is bad. Other people build blocklists by going through the replies on my posts and just adding the people who are being jerks. npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide The other day I accidentally discovered that I have the 31st most-followed account on Mastodon and this goes a long way toward explaining why my mentions/replies are so weird and terrible. npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide ACLU of Massachusetts has put out a toolkit for lawyers to help them find out when digital surveillance has been used to build the case against their clients. Love to see it. https://www.aclum.org/news/digital-surveillance-criminal-defense/ npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide Sometimes the good guys win. And when this happens, we take the time to enjoy our victory because that is the only way to fight a long fight without burning out. https://www.eff.org/deeplinks/2026/07/victory-flock-ends-rollout-audio-distress-detection-human-voices npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide Inspired by @nprofile…gvek's work, my colleague Thorin looked into the state of privacy for smart watches, rings, and bands, and the vibes are rancid: https://www.eff.org/deeplinks/2026/07/most-smart-watches-rings-and-bands-lack-basic-transparency-reports-and-key-privacy npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide This Certo report on how abusers are using Chrome sync for stalking is an important reminder that tech-enabled abuse isn't just limited to stalkerware: https://www.certosoftware.com/insights/cyberstalkers-exploiting-chrome-sync-to-spy/ npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide An excellent piece from Vogue about Meta's continuing attempt to make their "smart glasses" fashionable and cool that makes all of the right points about the ways in which normalizing ubiquitous surveillance creates a world we don't want to live in. npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide Ford rehires "greybeard" engineers after its push for AI automation backfires. npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide Today is a good day to remember that authoritarianism is not inevitable, overthrowing fascists is possible, and good things can still happen. npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide One more time for the people in the back: npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide Of all of the jobs that headhunters have approached me for, I have never turned one down faster than a "privacy executive" position at NEOM. Reader, I recoiled in horror. npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide In other news, sometimes shame works: https://www.wired.com/story/meta-removes-face-recognition-code-meta-ai-app-smart-glasses/ npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide You can tell a lot about a person by how they behave when someone they like or that they need something from is accused of sexual assault. npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide Throwing one more story into the "Is AI going to replace all jobs?" folder. npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide When I do a web search, I do not want Google to go to the websites for me, pull the information, and interpret it for me. I want it to give me a list of websites that I can read and evaluate myself because AI is frequently wrong: https://techcrunch.com/2026/05/19/google-search-as-you-know-it-is-over/ npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide If you are in your late thirties to mid-forties right now, there is a good chance that you have spent most of your life in a cycle of making some sort of home on the internet only to have it crumble beneath you like chalk and having to start over. npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide The English language needs a word for the rage I feel when the company that makes the pants I like discontinues them. npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide When you have laws with which it is impossible to comply, you end up with selective enforcement that only punishes the opponents of people in power. Just sayin'. npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide As foretold by prophecy, LAPD used their "first responder" drones to spy on No Kings protests and anti-ICE protests: https://theintercept.com/2026/04/20/lapd-skydio-drone-surveillance-no-kings-protest-ice/ npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide Your push notifications can betray your privacy. Here are the settings you can enable to do something about that: https://www.eff.org/deeplinks/2026/04/how-push-notifications-can-betray-your-privacy-and-what-do-about-it npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide I have started to write a new section of my AI talk on what AI is doing to vuln discovery, bug bounties, and defense and oh no it is 45 extra minutes of content. npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide EFF is finally leaving X and here is a blog post about why: https://www.eff.org/deeplinks/2026/04/eff-leaving-x npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide I was really hoping to go through life without needing to know what the plural of "apocalypse" is. npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide "I'm just going to let people be wrong on the internet" remains the single most difficult New Year's Resolution I have ever made, hands down. Nothing else comes close. npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide Several years after I locked up my account and stopped using twitter, I have finally updated my staff bio by deleting my Twitter username and adding the URL for my Mastodon account. It feels like the end of an era. npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide Sometimes I wonder if working from home for so long has turned me into a goblin who cannot be trusted to interact with other people without making it weird. Then I remember that I have always been a goblin who cannot be trusted to interact with other people without making it weird. npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide Good news for people with older iPhones. Patch your stuff. npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide EFF's Cindy Cohn sat down to talk to Jon Stewart on the Daily Show about 30 years of fighting for digital privacy. I think that's pretty cool. https://www.youtube.com/watch?v=QkC1aK7jfLo npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide My open tabs indicate that I got halfway through ordering a pair of high-waisted black sequinned booty shorts last night and then fell asleep. Let it never be said that I don't know how to party. npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide There is a reason why most of my advice is phrased "If you are concerned about X...you may want to consider doing Y." It's not because I just love using a bunch of extra words. npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide Yael's post demonstrates something about digital privacy/security that I think a lot of people miss: there is no right answer, just a series of trade-offs. And every person has to make their own decisions about which trade-offs are worthwhile. https://blog.yaelwrites.com/options-for-phones-at-protests/ npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide If you are traveling to or through Hong Kong, here is a new thing to consider when you are deciding whether or not to take your devices with you and how you should set them up. npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide No really, I am not kidding when I say that the data broker industry must be destroyed: https://www.npr.org/2026/03/25/nx-s1-5752369/ice-surveillance-data-brokers-congress-anthropic npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide EFF announces its new Executive Director, Nicole Ozer: https://www.eff.org/press/releases/nicole-ozer-named-electronic-frontier-foundations-executive-director npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide People will react to news of major security vulns with "The only way to stay secure is to live as a hermit and throw your devices into the sea" and then keep chattering on the internet in a deeply unhermitlike manner while not throwing their devices into the sea. npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide If you have an iPhone, today is a good day to make sure you are running the latest software. https://techcrunch.com/2026/03/23/someone-has-publicly-leaked-an-exploit-kit-that-can-hack-millions-of-iphones/ npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide @nprofile…s8xx It is possible that for some threat models, a burner phone for DEFCON is appropriate. But I have been to 20ish DEFCONs and I have never felt the need to bring one. npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide Some tips on giving digital privacy/security advice: if you tell people they absolutely need to do a long list of difficult and expensive things before they travel, people will nod and smile and then not do it at all. This is why my advice focuses on harm reduction and understanding trade-offs. npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide For people who are concerned about having their devices seized at US airports starting Monday when ICE "assists" the TSA, EFF has this guide: https://www.eff.org/deeplinks/2025/06/journalist-security-checklist-preparing-devices-travel-through-us-border npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide The data broker industry must be destroyed: https://www.theverge.com/news/897145/kash-patel-ron-wyden-fbi-location-data-no-warrant npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide Hey, why is everyone talking about Caesar Chavez all of the sudden? npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide It sure is a cool and normal time to be working at a civil liberties non-profit in the United States. npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide If you leave the infrastructure of surveillance in place, people in power will inevitably find an excuse to resume using it. You have to take that shit down. npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide Attribution is hard. And there is a difference between getting a contractor on the record attributing the toolkit and a bunch of infosec dudes sitting around pontificating about how "everyone knows." npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide Pakistan's main APT group has switched from off-the-shelf low quality malware tools to vibe-coded custom malware. npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide Do you work in fundraising? Do you want a job that isn't evil? Signal is hiring a director of major gifts: https://jobs.lever.co/signal/68f75269-fe43-4d25-8d82-69439351f14d npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide Obviously, age verification laws are bad and this is especially bad and laughable, but most importantly, I need you to know that I owe my career to having been an underage person using Linux. https://www.pcgamer.com/software/operating-systems/a-new-california-law-says-all-operating-systems-including-linux-need-to-have-some-form-of-age-verification-at-account-setup/ npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide I aspire to one day have a fraction of the confidence of a mediocre white man sitting down to do an interview with Isaac Chotiner. npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide The data from your Meta Ray Bans is used to train Meta's AI, which most people don't understand means that humans are looking at the most intimate details of their lives. https://www.svd.se/a/K8nrV4/metas-ai-smart-glasses-and-data-privacy-concerns-workers-say-we-see-everything npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide I'm reading a bunch of Coruna reports after dinner because I am a cool person who knows how to party. Of particular interest: not only does Coruna not work against iOS in lockdown mode, but if it even detects lockdown mode running, it bails. This is why I talk about lockdown mode so damn much. npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide What a stupid time to have a degree in International Relations. npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide When we talk about the problems with Bluetooth-enabled physical trackers, we usually talk about AirTags, but let us save some rage for Tile, powered by this paper discussing Tile's privacy, security, and accountability problems: https://arxiv.org/abs/2510.00350v1 npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide I have come away from my last conference cautiously optimistic about how useful AI can be in reversing malware and extremely scared about all of the new attack surface being created in the use and deployment of AI tools. npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide The greatest joke that my brain chemistry plays on me is that every few years I get an idea for a novel, which I will outline, write several chapters for, and then never touch again. npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide I'm just a girl, incrementing the counter on the number of times I have been sent a plaintext email from a Protonmail user telling me that the message is encrypted. npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide When I am made God Emperor, the people who design hotel bathrooms so that you cannot see your face up close in a mirror and also have somewhere to put your makeup will be piled up and set ablaze. npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide Hacktivists tried to find a workaround to Discord’s age-verification software, Persona. Instead, they found its frontend exposed to the open internet, and that was just the beginning. npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide Anonymously threatening a security researcher seems like a shooting-yourself-in-the-dick level bad decision. Kudos to Allison Nixon for not taking any shit. npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide How do you organize safely and effectively in the golden age of surveillance? I have some thoughts and Wired does too: https://www.wired.com/story/how-to-organize-safely-in-the-age-of-surveillance/ npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide The most monstrous lie that I regularly tell myself is "I'll get that work done while I'm on the plane." npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide If you're a journalist who covers law enforcement, don't let their claims about slick and effective technology go unchallenged. npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide I can be angry about rising fascism and also angry about facial recognition built into surveillance glasses at the same time, not only because these things are directly related, but because I contain fucking multitudes and all them are mad all the goddamn time. npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide Meta thinks now is a great time to launch facial recognition surveillance tech in their creepy glasses because EFF will be too distracted by fascism to notice. npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide Russia fully blocks WhatsApp and encourages Russians to use home-grown surveillance-compliant Max: https://thehill.com/policy/international/5736203-russia-blocks-whatsapp-meta/ npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide I've spent the last year learning Spanish just so I could understand Bad Bunny lyrics. npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide Trying to explain compartmentalization to activists, but the biggest stumbling block is that most people become activists by accident, so their activism is deeply enmeshed with all of their existing accounts, platforms, and devices. npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide Hey, remember that time I said that pointing out that AI is giving bad data to ICE is missing the point because ICE doesn't actually care if the data is good? Check out how right I am. npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide Every once in a while, someone gets the genius idea of impersonating me online and I spend an afternoon looking for the most chaotic way to make them regret that choice. npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide Sometimes I get a really good quote in. npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide Notepad++ publishes a blog post saying they caught a probably-Chinese state actor hijacking their product in an attack against highly-selective targets that began last June: https://notepad-plus-plus.org/news/hijacked-incident-info-update/ npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide Why do your organizing over Signal? So that you don't do your organizing on an app that hasn't been tested or reviewed, run by a guy who doesn't tell his users about data breaches and security problems. npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide Planning to film ICE? Wired has a guide for that: https://www.wired.com/story/how-to-film-ice/ npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide How many people here would be interested if I did a digital security/privacy advice blog somewhere? npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide This is your regular reminder that I do not owe you an argument defending a position that you have decided that I hold. Indeed, I do not owe you an argument about anything. npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide EFF will be closed Friday, Jan. 30 as part of the national shutdown in opposition to ICE and CBP and the brutality and terror they and other federal agencies continue to inflict on immigrant communities and any who stand with them. npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide Hello, it's me. I'm the one training the resistance in the diabolically professional OPSEC of setting disappearing messages in the Signal group chat. npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide You don't need superspy-level OPSEC in order to protest fascism. But protest does involve risk. My goal when I teach people about digital privacy/security is to make sure that people understand what risks they're taking so they can make appropriate mitigations while still accomplishing their goals. npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide It's Friday night and I'm outlining a 12-minute talk about the Opium Wars because, as you are aware, I know how to party. npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide Do not store your Bitlocker encryption keys on Microsoft's servers if your threat model includes governments or law enforcement. As this article points out, this is the result of a design choice Microsoft made. It didn't have to be this way. npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide Trying to protect everything from everyone all the time will drive you crazy. Here is what you should do about your digital privacy and security instead. I talked to KQED's Close All Tabs about threat modeling: https://www.kqed.org/news/12070531/your-digital-footprint-reveals-more-than-you-think npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide Every once in a while, the devil shows up and tells me what he thinks my soul is worth. I won't do it, but it's comforting to see the number tick up. npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide Trying to protect everything from everyone all the time is a good way to drive yourself crazy. This is why we threat model. Here is EFF's Surveillance Self Defense guide to putting together your security plan, also known as threat modeling: https://ssd.eff.org/module/your-security-plan npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide If you are organizing folks in Minneapolis right now, you may find this guide to Signal for beginners by @nprofile…upkm useful: https://freedom.press/digisec/blog/signal-beginners/ npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide Once again, I have been asked to give a conference talk about AI. Once again, I ask how much I am allowed to swear on stage. npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide Project Zero releases a 0-click exploit chain for the Pixel 9. This one targets the Pixel, but the 0-click bug and exploit techniques used also apply to most other Android devices. npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide The Trump administration takes national security leaks very seriously when it's time to bully and intimidate reporters. Not so much when classified documents are piled up in the Mar-a-Lago bathrooms. https://pressfreedomtracker.us/all-incidents/washington-post-reporters-home-searched-by-fbi-devices-seized/ npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide In addition to its internet blackout, the Iranian government is jamming Starlink to prevent news protests and crackdowns from getting out: https://restofworld.org/2026/iran-starlink-internet-shutdown/ npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide This is your regular reminder that authoritarianism is just domestic abuse writ large. npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide Sometimes I read the threads that experienced activists write about how to behave at protests because it reminds me that the kinds of replies I get when I give digital privacy/security advice aren't just for me. npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide We are 9 days into 2026 and my New Years' Resolution to just let people be wrong on the internet is already is truly testing the limits of my willpower.
