Director of Cybersecurity @EFF / Co-founder of @stopstalkerware / These are my opinions, not my employers’ / I did a TED talk once
Public Key
npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx Profile Code
nprofile1qqsrhfhexcslfawgj0du2aqhmsngud4kzmga7r4pu8lmmyg3kjy6zhcpz3mhxue69uhhyetvv9ujuerpd46hxtnfduqs6amnwvaz7tmwdaejumr0ds62uuw4
Show more details
Published at
2026-08-17T05:08:10+02:00 Event JSON
{
"id": "7584c2b8188699e338a37dc03ff84c012620c5ff5a3e2119bc6490c0c6b2ccb5" ,
"pubkey": "3ba6f93621f4f5c893dbc57417dc268e36b616d1df0ea1e1ffbd9111b489a15f" ,
"created_at": 1786936090 ,
"kind": 0 ,
"tags": [
[
"proxy",
"https://hachyderm.io/users/evacide",
"activitypub"
],
[
"client",
"Mostr",
"31990:6be38f8c63df7dbf84db7ec4a6e6fbbd8d19dca3b980efad18585c46f04b26f9:mostr",
"wss://relay.ditto.pub"
]
],
"content": "{\"name\":\"evacide\",\"about\":\"Director of Cybersecurity\\n@EFF\\n/ Co-founder of\\n@stopstalkerware\\n/ These are my opinions, not my employers’ / I did a TED talk once\",\"picture\":\"https://media.hachyderm.io/accounts/avatars/110/023/534/681/636/317/original/592205ed198bf44a.jpg\",\"banner\":\"https://media.hachyderm.io/accounts/headers/110/023/534/681/636/317/original/3dfaf02bfcbcbd7b.jpeg\",\"nip05\":\"[email protected] \",\"fields\":[]}" ,
"sig": "2bf1852b0c263ca61fc0f2555a3879ce45f3939b6f3929e84fb3700d57dc3f26d9afbb59e05f8246e7c5b1bd55a3239ec5906a6e72565eafeeb6a0db2ac07202"
}
Last Notes npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide So you think you have solved your age verification problem with zero-knowledge proofs... https://www.eff.org/deeplinks/2026/08/zkps-arent-age-verification-silver-bullets npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide Flock makes a point of saying that their system can't track individuals. Wired continues to do the Lord's work, taking Flock software apart and demonstrating its new AI tool comes preloaded with prompts like "find me witness" and "find relatives." https://www.wired.com/story/flock-safety-os-investigate/ npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide I cannot overstate how much the revolution needs kind, reliable, people who show up when you need them and does not need drug-addled cut-rate Hunter S. Thompson impersonators. npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide Today's Long Read is about how fringe far-right theories about the "censorship-industrial complex" became Trump policy: https://www.technologyreview.com/2026/08/07/1141105/how-ideas-of-a-vast-censorship-network-moved-from-the-online-fringe-to-trump-policy/ npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide You cannot make mass surveillance "safe" or "good" by adding more guardrails. The only way to make Flock safe is to get rid of Flock. https://www.gpb.org/news/2026/08/05/analysis-more-guardrails-needed-prevent-police-misuse-of-flock-cameras npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide This matters a lot because people are constantly asking me if they should set up a duress passcode in order to fool law enforcement. https://techcrunch.com/2026/07/24/us-accuses-american-of-allegedly-wiping-his-phone-using-a-duress-password-during-border-search/ npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide The other day I accidentally discovered that I have the 31st most-followed account on Mastodon and this goes a long way toward explaining why my mentions/replies are so weird and terrible. npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide Sometimes the good guys win. And when this happens, we take the time to enjoy our victory because that is the only way to fight a long fight without burning out. https://www.eff.org/deeplinks/2026/07/victory-flock-ends-rollout-audio-distress-detection-human-voices npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide Inspired by @nprofile…gvek's work, my colleague Thorin looked into the state of privacy for smart watches, rings, and bands, and the vibes are rancid: https://www.eff.org/deeplinks/2026/07/most-smart-watches-rings-and-bands-lack-basic-transparency-reports-and-key-privacy npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide Today is a good day to remember that authoritarianism is not inevitable, overthrowing fascists is possible, and good things can still happen. https://www.pbs.org/newshour/world/tens-of-thousands-march-in-the-first-budapest-pride-since-viktor-orban-was-voted-out npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide Of all of the jobs that headhunters have approached me for, I have never turned one down faster than a "privacy executive" position at NEOM. Reader, I recoiled in horror. npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide Throwing one more story into the "Is AI going to replace all jobs?" folder. https://finance.yahoo.com/sectors/technology/articles/starbucks-quietly-retired-ai-agent-192259096.html npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide The English language needs a word for the rage I feel when the company that makes the pants I like discontinues them. npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide When you have laws with which it is impossible to comply, you end up with selective enforcement that only punishes the opponents of people in power. Just sayin'. https://www.kuer.org/politics-government/2026-05-07/utahs-online-porn-age-verification-law-now-includes-vpns-critics-say-it-wont-work npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide As foretold by prophecy, LAPD used their "first responder" drones to spy on No Kings protests and anti-ICE protests: https://theintercept.com/2026/04/20/lapd-skydio-drone-surveillance-no-kings-protest-ice/ npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide Good news for people with older iPhones. Patch your stuff. https://www.wired.com/story/apple-will-push-out-rare-backported-patches-to-protect-ios-18-users-from-darksword-hacking-tool/ npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide No really, I am not kidding when I say that the data broker industry must be destroyed: https://www.npr.org/2026/03/25/nx-s1-5752369/ice-surveillance-data-brokers-congress-anthropic npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide For people who are concerned about having their devices seized at US airports starting Monday when ICE "assists" the TSA, EFF has this guide: https://www.eff.org/deeplinks/2025/06/journalist-security-checklist-preparing-devices-travel-through-us-border npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide What a stupid time to have a degree in International Relations. npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide When we talk about the problems with Bluetooth-enabled physical trackers, we usually talk about AirTags, but let us save some rage for Tile, powered by this paper discussing Tile's privacy, security, and accountability problems: https://arxiv.org/abs/2510.00350v1 npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide The greatest joke that my brain chemistry plays on me is that every few years I get an idea for a novel, which I will outline, write several chapters for, and then never touch again. npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide When I am made God Emperor, the people who design hotel bathrooms so that you cannot see your face up close in a mirror and also have somewhere to put your makeup will be piled up and set ablaze. npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide Hacktivists tried to find a workaround to Discord’s age-verification software, Persona. Instead, they found its frontend exposed to the open internet, and that was just the beginning. https://www.therage.co/persona-age-verification/ npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide Anonymously threatening a security researcher seems like a shooting-yourself-in-the-dick level bad decision. Kudos to Allison Nixon for not taking any shit. https://www.technologyreview.com/2026/02/16/1132526/allison-nixon-hackers-security-researcher npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide How do you organize safely and effectively in the golden age of surveillance? I have some thoughts and Wired does too: https://www.wired.com/story/how-to-organize-safely-in-the-age-of-surveillance/ npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide The most monstrous lie that I regularly tell myself is "I'll get that work done while I'm on the plane." npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide If you're a journalist who covers law enforcement, don't let their claims about slick and effective technology go unchallenged. https://www.eff.org/document/selling-safety-journalists-guide-covering-police-technology npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide I can be angry about rising fascism and also angry about facial recognition built into surveillance glasses at the same time, not only because these things are directly related, but because I contain fucking multitudes and all them are mad all the goddamn time. npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide Meta thinks now is a great time to launch facial recognition surveillance tech in their creepy glasses because EFF will be too distracted by fascism to notice. We noticed. https://www.eff.org/deeplinks/2026/02/seven-billion-reasons-facebook-abandon-its-face-recognition-plans npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide Russia fully blocks WhatsApp and encourages Russians to use home-grown surveillance-compliant Max: https://thehill.com/policy/international/5736203-russia-blocks-whatsapp-meta/ npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide Hey, remember that time I said that pointing out that AI is giving bad data to ICE is missing the point because ICE doesn't actually care if the data is good? Check out how right I am. https://www.wired.com/story/cbp-ice-dhs-mobile-fortify-face-recognition-verify-identity/ npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide Every once in a while, someone gets the genius idea of impersonating me online and I spend an afternoon looking for the most chaotic way to make them regret that choice. npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide Sometimes I get a really good quote in. “Pointing out that AI is prone to giving ICE bad information is missing the entire point of ICE,” EFF’s Eva Galperin told Rolling Stone. “They don’t care if the information they have is good.” https://www.rollingstone.com/culture/culture-commentary/ice-ai-mistakes-1235507183/ npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide Notepad++ publishes a blog post saying they caught a probably-Chinese state actor hijacking their product in an attack against highly-selective targets that began last June: https://notepad-plus-plus.org/news/hijacked-incident-info-update/ npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide This is your regular reminder that I do not owe you an argument defending a position that you have decided that I hold. Indeed, I do not owe you an argument about anything. npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide EFF will be closed Friday, Jan. 30 as part of the national shutdown in opposition to ICE and CBP and the brutality and terror they and other federal agencies continue to inflict on immigrant communities and any who stand with them. https://www.eff.org/deeplinks/2026/01/eff-close-friday-solidarity-national-shutdown npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide Hello, it's me. I'm the one training the resistance in the diabolically professional OPSEC of setting disappearing messages in the Signal group chat. npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide You don't need superspy-level OPSEC in order to protest fascism. But protest does involve risk. My goal when I teach people about digital privacy/security is to make sure that people understand what risks they're taking so they can make appropriate mitigations while still accomplishing their goals. npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide Do not store your Bitlocker encryption keys on Microsoft's servers if your threat model includes governments or law enforcement. As this article points out, this is the result of a design choice Microsoft made. It didn't have to be this way. https://www.forbes.com/sites/thomasbrewster/2026/01/22/microsoft-gave-fbi-keys-to-unlock-bitlocker-encrypted-data/ npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide Sometimes I read the threads that experienced activists write about how to behave at protests because it reminds me that the kinds of replies I get when I give digital privacy/security advice aren't just for me. npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide We are 9 days into 2026 and my New Years' Resolution to just let people be wrong on the internet is already is truly testing the limits of my willpower. npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide There is no one-size-fits-all solution for digital safety at protests. You need to decide in advance what your goals are, what is important for you to protect, and what is likely to happen to you, and threat model accordingly. npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide But if it is important to you to maintain your anonymity at a protest, consider leaving your phone at home, or at least turning it on/off only once you are well out of the neighborhood. npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide There are other reasons you might want to take a cheap/disposable/burner phone to a protest, such as making sure that if you are arrested, the police don't seize/break/confiscate your main phone. npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide If you don't want ICE to know you were at a protest, taking a burner phone is not going to help you stay anonymous if you go home afterwards. https://www.404media.co/inside-ices-tool-to-monitor-phones-in-entire-neighborhoods/ npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide The push for the TikTok ban was bipartisan and stupid. But the Trump administration's goals for the ban have always been crystal clear: to place control of TikTok in the US in the hands of people chosen by and indebted to Trump. npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide NYT reports that the TSA is giving ICE a list of every person who's to be taking a domestic flight inside the US so ICE can run it through their database looking for targets. I'm not a lawyer, but I feel like the 4th Amendment has something to say about this. https://www.nytimes.com/2025/12/12/us/politics/immigration-tsa-passenger-data.html?unlocked_article_code=1.8E8.lG_B.SvLF8g3CXiKG&smid=bs-share npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide I don't dress for the male gaze. I dress for a women who are old enough to be my mother, wear oversized jewelry, and say things like "I'd dye my hair that color." npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide Brennan Lee Mulligan with Josh on Mythical Kitchen, eating his perfect last meal and being interviewed for more than an hour, is so wholesome and life-affirming: https://www.youtube.com/watch?v=CLVdWyNljP8 npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide "A soldier knows what to do when they encounter another soldier. But an air-humping frog?" @sarahjeong.bsky.social on the shitposting/aura farming era of American politics. https://www.theverge.com/policy/798491/frog-portland-trump-national-guard npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide As the prophecy foretold, a major platform's third-party age verification system has been hacked and hackers had access to the government ID images of Discord's users. https://www.tomsguide.com/computing/online-security/discord-users-suffers-the-first-high-profile-age-verification-hack-and-its-unlikely-to-be-the-last npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide I take it all back, there ARE violent criminals on the streets of San Francisco. They're grabbing people off the street and pepper spraying journalists. https://sf.gazetteer.co/i-reported-from-an-ice-action-on-sansome-and-all-i-got-was-a-face-full-of-pepper-spray npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide @nprofile…4dwe Trump will make an all-caps post of Truth Social. it will be devastating. npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide It is sometimes necessary, in these difficult times, to spend an hour scrolling through clothing sites, hoping that one of these gowns is going to give you the strength to fight fascism. npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide Even when I don't go to Vegas, the Vegas gossip comes to me. npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide Ron Deibert is absolutely the voice that the infosec industry needs to be listening right now. We are in a moment where fascism is consolidating power and most of the infosec industry is either playing along or is busy bragging about how much AI they've shoved into their products. https://techcrunch.com/2025/08/06/citizen-lab-director-warns-cyber-industry-about-us-authoritarian-descent/ npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide Listen, we are in a terrible and difficult time where the horrors can often feel overwhelming. Lean into the things that bring you joy. If that means that sometimes you're wringing that last drop of dopamine out of watching bad people suffer as the result of their poor choices, you do you. npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide This is just to let you know I have taken the plums out of the icebox because fruit is better at room temperature npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide 404 Media continues to punch waaaay above its weight: https://www.404media.co/flight-manifests-reveal-dozens-of-previously-unknown-people-on-three-deportation-flights-to-el-salvador/ npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide This is your regular reminder that if you are the smartest person in the room, go find another room. You are not going to run out of people or rooms. npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide I've spent not-insignificant amount of time at protests in the US, looking for signs of IMSI catchers and never found anything, so when I saw this, my ears perked up: https://san.com/cc/exclusive-evidence-of-cell-phone-surveillance-detected-at-anti-ice-protest/ npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide I was feeling entirely too confident and capable, so I decided to train press-up to handstand and now I am going to be suffering through these drills and progressions for a good long time. npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide Every once in a while, someone tells me that an abusive partner left them alone because they were afraid of what I would do if they didn't, and I feel like I have done something right. npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide Website/device age verification is a privacy and security nightmare and everyone who tells you that this is a solved problem is lying to you. https://gizmodo.com/supreme-court-says-age-verification-laws-for-porn-sites-are-constitutional-2000621265 npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide I would like to be Chrisjen Avasarala: impeccably-dressed, running things, swearing like a sailor. But I am Camina Drummer: barely keeping it together, sort of in charge, with a lot of complicated relationships and a strong eyeliner game. npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide Me, looking at my work calendar: This is insane. No one can do this much work. I'm going to find the asshole that did this and give them a piece of my mind! Me, looking in the mirror: Oh no. npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide Did I mention that the data broker industry must be destroyed? https://theintercept.com/2025/05/22/intel-agencies-buying-data-portal-privacy/ npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide I never realize how much cognitive load is taken up by smiling and making the right amount of eye contact until I land in Eastern Europe where my immaculate Resting Bitch Face is perfectly normal. npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide Q&A from a talk I gave last week. Q: "What do you think is the biggest threat in cybersecurity right now? Is it post-quantum computing? Is it AI?" A: Fascism. It's fascism. npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide For people who are looking to shield their identities in group chats: Signal does not store past handle IDs and 7 days after changing your handle, another Signal user can claim it. npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide Big Law has failed to stand up to Trump and now infosec is following suit. https://www.reuters.com/world/us/cybersecurity-industry-falls-silent-trump-turns-ire-sentinelone-2025-04-10/ npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide Weird how the jobs that AI-boosters say AI is going to replace never seems to include the management or executive class. npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide I checked in on the Bad Place and discovered that a bunch of misogynists have spent a couple of weeks getting very worked up about a screenshot of a post I made about a decade ago and that locking my account last year has successfully deprived them of further ammo. Everything is cool and normal. npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide Today's OPSEC lesson is this: all of the encryption in the world is not going to save you if you add the editor of The Atlantic to your war-planning Signal group chat. https://www.theatlantic.com/politics/archive/2025/03/trump-administration-accidentally-texted-me-its-war-plans/682151/?gift=fXb4ymsFcV2ntAzqIpmYvaCSBCGxAw0GA0n-mECa1x8&utm_source=copy-link&utm_medium=social&utm_campaign=share npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide For people who are concerned about crossing the US border, The Verge and Wired both have useful discussion and advice: https://www.theverge.com/policy/634264/customs-border-protection-search-phone-airport-rights https://www.wired.com/2017/02/guide-getting-past-customs-digital-privacy-intact/ npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide You can learn a lot of useful OPSEC lessons by examining the ways in which people get caught, so I'm just going to leave this right here. https://www.404media.co/how-three-alleged-tesla-vandals-got-caught/ npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide If you're critical of the US government and you are planning to cross the US border any time soon, today is a good day to review EFF's border search pocket guide: https://www.eff.org/document/eff-border-search-pocket-guide npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide I rarely tell people to throw their devices into the sea, but you should throw your Amazon Echo into the sea. https://www.wired.com/story/everything-you-say-to-your-echo-will-be-sent-to-amazon-starting-march-28/ npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide I cannot overemphasize how much of playing defense in US corporations, civil society, and government has been about trying to keep the Russians out of your shit. npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide Listen, I'm not going to pretend that I'm even remotely surprised, but I will tell you that this is a slap in the face to every person in the infosec community that has worked to track and thwart Russian APTs for the last several decades. https://www.theguardian.com/us-news/2025/feb/28/trump-russia-hacking-cyber-security npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide Aerial coach: Do you remember this sequence from two weeks ago? Me: Listen, a lot has happened in the last two weeks... npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide Let it be known that on this day in history, I made it to the end of Duolingo French. There are no worlds left to conquer. npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide My co-workers are badass and I am proud of them. EFF is suing DOGE and OPM over their illegal sharing of federal employee data. https://www.eff.org/deeplinks/2025/02/eff-sues-doge-and-office-personnel-management-halt-ransacking-federal-data npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide I spent most of a decade traveling to authoritarian countries and teaching people how to circumvent internet censorship. I am appalled that this is now something I have to do in the US. npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide For people who are wondering what the TikTok ban is going to look like for US TikTok users if it goes into effect on Sunday, TikTok will be blocking US users, linking to info about the ban, and giving them the option of exporting their data. https://www.theverge.com/2025/1/15/24344299/tiktok-shutdown-us-ban-supreme-court npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide Lots of folks in my mentions going "Haha, the US will just ban VPNs," possibly because they are not experts in internet censorship and they have not been watching this exact same dynamic play out in dozens of countries over the last 20 years. npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide After all of the infosec chatter about how you probably don't need a VPN, age verification has made PornHub block access in most Southern states and TikTok's about to block US IPs. We are entering a new age of internet censorship and you might need a non-shady VPN. npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide 404 Media continues to do the Lord's work. And furthermore, the data broker industry must be destroyed. https://www.404media.co/candy-crush-tinder-myfitnesspal-see-the-thousands-of-apps-hijacked-to-spy-on-your-location/ npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide Someone in my feed with a lot of followers asked for technical advice. I was about to reply with a joke, but first I glanced at the many, many replies. I saw that my joke would not be welcome, so I did not post it. You too can learn from this wisdom. npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide Say it with me: "If you collect the data, you better have a plan for what happens when it's leaked." Furthermore, the data broker industry must be destroyed. https://www.404media.co/hackers-claim-massive-breach-of-location-data-giant-threaten-to-leak-data/ npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide Elon Musk has conveniently given other social media platforms a playbook for how to suck up to the incoming Trump administration: https://www.wired.com/story/meta-ditches-fact-checkers-in-favor-of-x-style-community-notes/ npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide What is Real Time Bidding? How does it enable mass surveillance? Why should you care about it and what needs to be done? My colleague Lena Cohen lays it all out: https://www.eff.org/deeplinks/2025/01/online-behavioral-ads-fuel-surveillance-industry-heres-how npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide We may not be living in the darkest timeline, but we are certainly living in the stupidest. npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide Guy who was walking down the street, staring porn that was playing on his phone at full volume: what porn is so important that you could not wait until you got home? npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide I am not sure why Mastodon is the only platform I am on where ending a post with "I am not interested in debating this" gets dozens of replies, many of which are, in fact, trying to debate this. npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide You guys, I have just discovered how much an expert witness gets paid by the hour ($459 on average) and surely this is a mistake. npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide Things that have not changed since the the first Trump administration: the same groups are still in danger and the methods of surveillance are largely the same. Things that have changed: consequences of failure are more severe, there are fewer checks on power, tech companies excited to collude. npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide I know how to fight a long fight. I know how to triage and do harm reduction and how to play defense. But I am also very, very tired and I am going to need a minute before I can get back to work. npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide If you hear a scream across the internet right now, it is the sound I am making while reading the Internet Archive v. Hachette Books appeal, which IA has lost: https://www.wired.com/story/internet-archive-loses-hachette-books-case-appeal/ npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx evacide I am waiting on analysis from Brazilian lawyers before I weigh in on how legal Brazilian court's decision to block X is, but I can safely say that the fines for individual users accessing the site over a VPN are crazypants.