How long until the FBI opens an investigation into this judge?

Judge Merryday has no fucks left to give for Trump's defamation complaint against the NYT: "As every lawyer knows (or is presumed to know), a complaint isn't a public forum for vituperation & invective—not a protected platform to rage against an adversary" storage.courtlistener.com/recap/gov.us...

Wow. Florida judge makes quick work of the Trump lawsuit against the NYTimes and Penguin Random House. The lawsuit was silly and Judge Merryday does not hide how he feels about it! Trump can amend though. storage.courtlistener.com/recap/gov.us...

So long, #disneyplus. I stand for @jimmykimmel.com and for media independence. Also, nothing Jimmy said about the MAGA people politicizing and weaponizing Kirk's assassination was untrue. cc: @jimmykimmellive.bsky.social

@lurabardley.bsky.social sees this for what it is www.vanityfair.com/hollywood/st...

This really makes it clear just HOW negligent Microsoft is in their design. Enabling such a trivially vulnerable default fallback is outright misconduct. It should have been moved to default off over a decade ago, REQUIRING admins to turn it on if they have old broken shit.

Nice article by @dangoodin.bsky.social on the Ascension hack and bad Kerberos: arstechnica.com/security/202...

Wednesday’s discovery of 3 unauthorized TLS certificates for Cloudflare’s 1.1.1.1 generated intense interest and concern. Since then, new information has become available, including the issuance of 9 more certificates. This FAQ answers questions and gives the latest: arstechnica.com/information-...

Dunno who Fina Root CA is, but they finna learn some hard lessons in TLS certificate justice. Always appreciate @dangoodin.bsky.social getting stuff like this out into the daylight. #infosec #cybersecurity arstechnica.com/security/202...

Solid debunking from @dangoodin.bsky.social on the Passkeys “Pwned” thing. arstechnica.com/security/202...

I asked Google how many detections Big Sleep made in total and how many false positives and false negatives there were. The company declined to say. It's certainly Google's prerogative to withhold data that may not cast Big Sleep in a favorable light, but calling this a"commitment to transparency"?

Talked with @dangoodin.bsky.social of Ars Technica on our Tuesday piece on malware in TXT records. Thanks, Dan! arstechnica.com/security/202...

GPUhammer is the first to flip bits in onboard GPU memory. It likely won't be the last. arstechnica.com/security/202...

Found in the wild: 2 Secure Boot exploits. Microsoft is patching only 1 of them. arstechnica.com/security/202...

Tracking code Meta and Yandex embed into millions of sites is de-anonymizing visitors by abusing legitimate Internet protocols, causing Chrome and other browsers to surreptitiously send unique identifiers to native apps installed on a device, researchers discovered. arstechnica.com/security/202...

I cannot tell you how excited I am about windows recall as a plaintiffs’ attorney

I love that @signal.org is using Microsoft's own DRM copyright API to block Windows from its own stupid new "feature" which takes screenshots of, well, everything and saves them. It's like an intellectual property Jedi mind trick.

Microsoft is updating Windows 11 with a set of new encryption algorithms that can withstand future attacks from quantum computers in a move to jump-start what’s likely to be the most formidable and important technology transition in modern history. arstechnica.com/security/202...

Genuine question (meaning no snark intended): was there anything newsworthy that came out of #RSAC this year?

New from 404 Media: Mike Waltz has inadvertently revealed the obscure app the government is using to archive Signal messages. Made by a company called TeleMessage. Use of the Signal clone raises questions about how messages being secured, what classification of info www.404media.co/mike-waltz-a...

From the department of head scratches comes this counterintuitive news: Microsoft says it has no plans to change a remote login protocol in Windows that allows people to log in to machines using passwords that have been revoked. arstechnica.com/security/202...

If there's one thing I've learned about covering cybersecurity over the past decade or so, is that the cybersecurity community (the fixers and breakers) and the cybersecurity industry (profits above all else) are two very, very different things.

About a decade ago, Apple and Google started updating iOS and Android to make them less susceptible to “juice jacking.” Now, researchers are revealing that, for years, the mitigations have suffered from a fundamental defect that has made them trivial to bypass. arstechnica.com/security/202...

A prominent computer scientist who has spent 20 years publishing academic papers on cryptography, privacy, and cybersecurity has gone incommunicado, had his professor profile removed by employer Indiana University, & had his homes raided by the FBI. No one knows why. arstechnica.com/security/202...

"Since Musk took charge [Twitter] has abandoned any pretence that the platform is striving for balance. Instead, it's reshaped its algorithms to suit Musk's personal whims." news.risky.biz/outside-amer...

“These are spooky times for many of us. The ground is shifting underneath our feet on an hourly basis, particularly when it comes to security and privacy, two words that soon enough we may have to whisper to one another as relics of a barely remembered recent past.” www.vulnu.com/p/apple-halt...

Report sheds new light on the tactics allowing Black Basta and other attackers to move at breakneck speed. arstechnica.com/security/202...

If you're still tweeting on the hell site -- particularly those with blue checkmarks -- you're actively driving investors' renewed interest in the platform. Same thing for companies like Apple and Amazon that are once again advertising there. www.nytimes.com/2025/02/13/t...

Well, in surprising news, I find myself looking for a new job. Not sure what to say. 15 years experience in journalism, editorial & writing - 10 years focused on cybersecurity. Most recently in-house at a cybersecurity company, leading editorial content. LinkedIn: www.linkedin.com/in/dannypalm...

The result of the attack is the planting of false long-term memories that will be present in all future sessions, opening the potential for the chatbot to act on false information or instructions in perpetuity. arstechnica.com/security/202...

Hear, hear!

If you work at NOAA or have details about recent changes there, you can contact me via @signal.org (dell.3030) from a non-work device/network.

Andrei Karkar, CEO of SF-based ERAS Holdings and son of late telecommunications company Karkar Electronics founder Edward Karkar, arrested on suspicion of rape, robbery, false imprisonment, and assault with a deadly weapon sfstandard.com/2025/02/04/s...

I wonder how the “both are bad candidates” people are doing? They ok with this? (gestures wildly to everything going on)

Just a few weeks into the 2nd Trump administration and it seems the trend from the first Trump admin is going to continue. That is, that it's going to be hard to report on anything other than Trump, because everything the admin does dominates the news. So many stories will go unreported.

Beyoncé won album of the year at the Grammys on Sunday for “Cowboy Carter,” her fifth time being nominated in the category. The win was so welcome that even her competitors appeared relieved when her name was announced, our music critic writes.

Any USAID folks working on cybersecurity, infrastructure, technology projects: please feel free to reach out. How will DOGE impact the work you do? I'm on Signal at JennaMcLaughlin.54.

I would page @telliotter.bsky.social, @dell.bsky.social, @makenakelly.bsky.social, @davidgilbert.bsky.social and other talented wired folks who are already killing it on coverage of this but I'm sure they already know. I sure hope journos from other places are pursuing too.

Hi all, We’re still here at OPM. We have a situation where we MIGHT, and I do mean, MIGHT have four of Elon’s people blocked from the building. Can we get press or a member of Congress down here? We’ve blocked them for two hours and they keep coming back and trying to go in.

Performance optimizations on CPUs cause security issues, because software doesn't work based on what the code says, but based on what internal optimizations CPU does for improving speed. Similar optimizations caused some of the worst security holes Intel processors had in the past decades.

Apple-designed chips powering Macs, iPhones, and iPads contain newly discovered vulnerabilities that leak credit card info, locations, and other sensitive data from the Chrome and Safari browsers as they visit iCloud Calendar, Google Maps, and Proton Mail. arstechnica.com/security/202...

When Deepseek saying it's being hit with a "largescale cyberattack," what does it mean? A DDoS? Anyone have any intel or insights on what's going on? So far, I'm not seeing any specifics beyond "largescale cyberattack," which tells us next to nothing.