FULL SHOW youtu.be/EwMJsU8klZ0?...

. @ciaranm.bsky.social mentioned in this The Times piece about telecom hacks. He's absolutely on the money. A large part of the problem with UK telcos is attackers knowing SNMP strings (and default ones). SNMPv2 from 1995, btw. Then using it to redirect traffic.

Germany's top court: Police can only use spyware to probe serious crimes due to its "exceptional reach" and "very serious interference" with individual rights therecord.media/germany-spyw...

New from 404 Media: more than 130,000 Claude, Grok, ChatGPT, and other LLM chats are readable on Archive.org. It's similar to the Google indexing issue, but shows it impacts many more LLMs than just ChatGPT. Some chats contain API keys. www.404media.co/more-than-13...

NEW: "The electronic case filing system used by the federal judiciary has been breached in a sweeping cyber intrusion that is believed to have exposed sensitive court data across multiple U.S. states, according to two people with knowledge of the incident."

Political Science at Western University, Canada is searching for three tenure track assistant professors. There are two ads, one in International Politics (IR or comparative) and one in Comparative or Canadian. Ads are here: www.uwo.ca/facultyrelat...

CSE and NSERC to fund research on exploratory analysis of unstructured data www.canada.ca/en/communica...

Interested in the intersection of science and public policy? Apply to be a Project Coordinator. We're looking for a motivated and enthusiastic individual who excels working in a fast-paced environment. #CdnSci #PoliSci Find out more and apply: www.cca-reports.ca/careers/

For 2+ years I’ve been curating a public RSS feed on #cybersecurity, #AI, #privacy, #nationalsecurity, #criticalinfrastructure, & associated policy/legal updates. Most recent 20 links are at: christopher-parsons.com/resources/li... You can subscribe to the RSS feed at: raindrop.io/collection/2...

Ufffff…

While it’s received understandable less attention by scholars, journalists, and civil society, I think it’s notable that Canada’s Bill C-2 will amend the Oceans Act, and specifically the section dealing with the Coast Guard. #nationalsecurity #intelligence

Excited to announce the Enigma Track program is now live for USENIX Security '25! Taking place August 13-14, this track delves into technology's societal impacts & future challenges: www.usenix.org/conference/u... 1/8

Today the Ontario IPC released guardrails for the use of Investigative Genetic Genealogy (IGG) by police. www.ipc.on.ca/en/resources... #policing #privacy #genealogy

It will be a good one, “Foreign Influence on American's [sic] Data Through the CLOUD Act” : judiciary.house.gov/committee-ac...

This panel will not only scrutinize the UK's secret order demanding Apple build a backdoor into its products but also dive into the critical tension between law enforcement access and the fundamental importance of end-to-end encryption for global security and individual privacy

It will delve into the US-UK data agreement and potential reforms. Expert testimony will be provided by: Richard Salgado (Salgado Strategies), Greg Nojeim (Center for Democracy & Technology), Susan Landau (Tufts University), and Caroline Wilson Palow (Privacy International)

This Thursday, June 5, at 10 AM ET, a critically important congressional hearing will unpack foreign influence on American data via the CLOUD Act. Expect robust debate on encryption, backdoors, and cross-border data access.

Globe and Male editorial board calls on the government to create a thoughtful AI regulatory framework as a top priority.

The greatest job alert! My team at EFF is hiring and you could be on it: www.paycomonline.net/v4/ats/web.p...

NEW by @lorenzofb.bsky.social: A mysterious government hacking group called "Careto" (aka "The Mask") was once one of the "most advanced threats" of its time, but was never publicly linked to a specific government. Researchers privately concluded that Careto was working for the Spanish government.

Japan’s new Active Cyberdefense Law will permit a lot! 1. Japan’s Self-Defence Forces will be able to provide material support to allies under the justification that failing to do so could endanger the whole of the country. #cybersecurity #offensivecyber

In memoriam: Cryptome co-founder John L. Young, who died March 28 at age 89 in New York City, was one of the early, under-recognized heroes of the digital age.

NEW: TeleMessage, the Signal knockoff used by Mike Waltz and potentially other gov officials to archive group chats in plaintext, has suspended all services after it was hacked *at least twice.* @404media.co reported a hack last night; a different hacker also broke in and gave me evidence.

Neurotechnology is an emerging area of interest for many privacy practitioners. Neurotechnologies can be used for medical and therapeutic interventions, as diagnostic and preventative tools, to enhance cognitive functions, and advance research on the brain.

An important 🧵

Apple’s security tools can foil customers whose iPhones are stolen. “What we’ve learned is that Apple didn’t have a deep consideration over the threat model of someone having physical access to your device,” EFF’s @thorinklosowski.com told @washingtonpost.com.

A new edition of ~this week in security~ is out, with stories on a whistleblower detailing DOGE taking sensitive labor data; Chris Krebs vowing to fight back on federal probe, CVE's reprieve (for now), and more. Plus, the happy corner and brand new cyber cats. Sign up/RSS: this.weekinsecurity.com

We can’t just ghost-kitchen CVEs. We need an authoritative plan with a true mandate if a transition out of MITRE will work well. Otherwise, we’ll have for-profit companies (including those funding non-profit foundations) competing with other governments, fracturing the space vying to fill the void.

A significant decision in the USA concerning tower dumps

News: CISA appears to have extended funding for the CVE program at the last minute. Story TK

Yiiiiiiiiiiiiiiiiikes. More details here, but this is... really bad. www.nextgov.com/cybersecurit...

The levity I needed for my day!

Scoop for Pros: The US is set to sign on to the Pall Mall Process code of conduct on the governance of spyware use, after days of uncertainty whether Washington would join the list of more than 20 nations already signed up: subscriber.politicopro.com/article/2025...

The @ipcontario.bsky.social has released a new independent research report on UAVs today, entitled “The Existing and Emergent State of UAV/RPAS/Drones Surveillance Capacities and Law Enforcement”. It’s accessible at: www.ipc.on.ca/en/resources... #privacy #literaturereview #UAV

The CBC provides details on RCMP uses of malware that included targeting officers ensnared in a foreign influence investigation.

Good thread if you want to know more about the Canadian security clearance process. #NationalSecurity

NZ Privacy Amendment Bill was reported out by the committee of the whole House on 27 March 2025. Privacy Amendment Bill 292-3: lnkd.in/d35qv4pT. OPC: lnkd.in/dzxkVYGp.

An exceedingly clear, and direct, essay that establishes the three ‘phases’ of Chinese government cyber strategy, and the contemporary challenges facing western governments. An excellent piece of reading. #Cyberpolicy #Strategy

New article by @cyn-k.bsky.social and @kate-ro.bsky.social warns of the constitutional dangers posed by a potential Canada-U.S. CLOUD Act agreement. If signed, this would extend the reach of U.S. law enforcement into Canada’s digital terrain to an unprecedented extent. citizenlab.ca/2025/02/cana...

So I am getting the distinct feeling that Google (in addition to Apple) got a Technical Capability Notice from the U.K.

This is a strong and strident argument for an approach to encryption policy that takes seriously claims of power and the empowerment of women, children, and girls. Well worth the time to read.

I want to add a re-post of a blog post I wrote about the risks of AI combined with end-to-end encryption systems. blog.cryptographyengineering.com/2025/01/17/l...

"First Insights Into the U.S.-U.K. CLOUD Act Agreement" by Richard Salgado

👀 Out this month: "Intelligence, Security and the State: Reviewing the British Intelligence Community" with Christopher J. Murphy, published by Edinburgh University Press. 🗓 March 2025 (paperback to follow) #WorldBookDay 📚 edinburghuniversitypress.com/book-intelli...

Brilliant and brave take from @rgblights.bsky.social explaining the outsized impact of firing probationary employees in the cybersecurity talent pipeline. breakingdefense.com/2025/03/ex-n...

It is stunning to watch how quickly how our closest ally is shedding so much of its national and international soft and hard power, and with the effect of likely heightening North American (and global) instability and risk.

Today @citizenlab.ca publishes a new, short commentary piece co-authored by @kate-ro.bsky.social and myself, highlighting grave constitutional and human rights issues that would arise with a Canada-USA CLOUD Act agreement, which the two governments have been negotiating since 2022. 🧵

NEW, by me: A bug in phone spyware apps Cocospy and Spyic are exposing the phone data of ~2.65 million people, according to a security researcher. The bug also exposes the email address of the people who signed up. Now those email addresses are in Have I Been Pwned. techcrunch.com/2025/02/20/s...

The Commission has just released its new action plan on protecting undersea cables. A lot in there on deterrence (sanctions on bad actors, amped up presence, investment in monitoring tech) as well as the need for investment in more redundancy and repair capacity. ec.europa.eu/commission/p...

Another Act of the cryptowars begins…