This is very clearly the direction in which things are headed, especially since so many of the people who built and maintained the tools the US IC has developed-in house have been fired or have left.

cyberinsider.com/precise-loca... This #databrooker business must be stopped. FYI @carissaveliz.bsky.social

EFF teamed up with AV Comparatives to see how well anti-virus apps detect stalkerware on Android phones. www.eff.org/deeplinks/20...

The key thing to watch here: they fired a Wired political reporter. That’s the title doing the most effective, pointed work. Teen Vogue’s stuff was culturally impactful, but less focused on investigating the administration. Within the Condé portfolio, Wired and the New Yorker are the canaries.

Cybersecurity professionals/ransomware negotiators turned out to be running a ransomware gang. breached.company/when-the-def...

Ice Cube's Good Day was, in fact, about November 4th 2025.

If you are shocked that I'm happy that a man responsible for the deaths of hundreds of thousands of people is dead, I have terrible news for you about all of my other opinions.

I'm stuck at home with a back injury and the world is a trash fire, but at least Dick Cheney is dead. www.thenation.com/article/poli...

If you read an amazing article from Teen Vogue about politics in the last several years, chances are that Lex McMenamin wrote it. Any publication that is serious about meeting this moment would be lucky to have them.

I can now consistently hold a freestanding handstand for 20 seconds. One day I will take up a hobby which does not require months of practice for incremental progress.

GrapheneOS is great and I recommend it all the time for Android users who are concerned about spying by governments and law enforcement.

Every person involved in this decision needs to be hit over the head with a copy of Kashmir Hill's "Your Face Belongs to Us" until they come to their senses.

Hacking Team, now Memento Labs, is still at it. Operation Forum Troll targeted media outlets, universities, research centers, government organizations, financial institutions, and other organizations in Russia. securelist.com/forumtroll-a...

I'd be very interested in hear what Russian security researchers have to say about this.

I regret not buying a My Marxist Feminist Dialectic Brings All the Boys to the Yard poster because I have some free wall space next to my It's a Slow Apocalypse, You'll Work Through It poster.

House Republicans James Comer and Nancy Mace wrote a letter to TeaOnHer founder Xavier Lampkin demanding answers about the app's poor cybersecurity practices, citing my TechCrunch story earlier this year that found the app exposing users’ gov't-issued IDs and selfies. therecord.media/teaonher-app...

Exploit development shop Trenchant, owned by L3Harris, lost a bunch of internal tools in a “damaging leak” recently. A former employee was targeted with spyware, he claims the company designated him as a scapegoat. This should be bigger news, imo. techcrunch.com/2025/10/21/a...

If you think that Signal is an op and totally backdoored, my recommendation is that you should plan all of your crimes over Telegram group chat.

If you live in San Francisco, today is a good day to familiarize yourself with the San Francisco Rapid Response Network, which has a 24-hour hotline for reporting ICE raids, actually verifies those raid reports, and does attorney activation: sfilen.org/resources/sf...

The primary advantage of using Signal over WhatsApp is that Signal does not store metadata. Just sayin'. www.forbes.com/sites/the-wi...

Attempted to take public transit out of downtown San Francisco at rush hour. I regret to report that RTO is in full force, so I guess downtown is back, baby?

Started to end a meeting with "It's ok, I'm good..." stopped myself and got too real: "Don't worry. I'm beyond help."

ChatGPT’s new Atlas browser doesn’t just see what you read — it remembers it. @eff.org’s Lena Cohen showed me it even logged “memories” of her looking for *abortion care* and her doctor’s name. Out-surveils even Chrome. My @washingtonpost.com column: wapo.st/49bOcVC

Erin Kissane says a bunch of smart stuff about the state of play in the open networks/social media space, which I recommend reading.

Every quote in this story from the founder of Ring, Jamie Siminoff has been designed in a lab to illustrate the single most wrongheaded approach to technology, surveillance, privacy, and crime: www.theverge.com/tech/804052/...

I have blocked the discourse in my timeline That you should probably have saved for X Forgive me the vibes were so rancid

For those of you who are wondering, the most important opsec lesson to take from the First Wap story is that if your threat model includes a government, do not take your cell phone with you to locations or meetings you don't want them to know about.

"I know a guy who does this completely impractical opsec thing, so it's totally doable" is the "let me share this totally true story of a thing that happened to a friend of my cousin" of opsec discussions.

People are very lucky that I do not write the headlines for these stories because there is no way I could write a headline for a story about a surveillance company called First Wap without turning it into a Megan Thee Stallion joke: revealnews.org/podcast/cell...

Whoever decided that the San Francisco No Kings protest should start at the same location as the bougie weekend farmers market is a political genius.

There is no greater pleasure than getting picked for someone else's top-tier heist team.

If your protest privacy/security advice does not start with a discussion of threat models, it is probably not good advice.

I'm proud to work with so many bad-ass lawyers.

Big moment for me, my first-ever publication credit! The Digital Defense Fund team contributed to this paper on practical data privacy practices for research with abortion seekers, including those facing the most serious threats. Just out in Contraception: www.sciencedirect.com/science/arti...

"Starting in December 2024, the researchers began contacting the affected telecoms. T-Mobile responded by encrypting its satellite transmissions within weeks, but responses from other cell carriers were mixed." Everything is cool and normal. www.wired.com/story/satell...

NSO Group confirms that it has a US buyer and whole thing is even sketchier than you would imagine: techcrunch.com/2025/10/10/s...

Truly, SS7 is the surveillance gift that keeps on giving: www.motherjones.com/politics/202...

"A soldier knows what to do when they encounter another soldier. But an air-humping frog?" @sarahjeong.bsky.social on the shitposting/aura farming era of American politics. www.theverge.com/policy/79849...

Rolled my own crypto.

When people ask, I'm just going to tell them that I am a motivational speaker/comedian who works for a wildly successful t-shirt and sticker company.

This thread highlights a point I have been making for many years: the logic of authoritarianism and the logic of domestic abuse are exactly the same. It is only a difference of scale.

I feel this in my bones.

I deleted my post about the Discord hack because the compromise was a third-party support service and not a third-party dedicated age verification system. Collecting user IDs is still bad and they are hard to protect, but being accurate in my posts is also important.

Every once in a while, an org in my space puts out a paper in my area of expertise that is so bad that all I can do is hope that no one bothers to read it.

I will definitely be doing more versions of my cyberfascism keynote, mostly because I want more opportunities to get on stage and yell, "Less complying in advance and more 'Fuck you, make me!'"

When I am Queen, I shall be a kind and benevolent ruler, unless you are wearing perfume on an airplane, which will be punishable by death.

EFF's @joshrichman.bsky.social has written about the proliferation of fake EFF quotes in AI slop. Fake quotes from me turn up quite regularly and just to rub salt in the wound, the quotes are boring and bad.

Yes, I know that October is both Cybersecurity Awareness month and Domestic Violence Awareness month. It is my month of maximum awareness, when I am at my most powerful.

It is Folsom weekend and I have divided my wardrobe up into three piles: Clothes that are old enough to vote. Clothes that are old enough to drink. Clothes that are too old to date Leonardo DiCaprio.

"Sorry I'm late, I seriously underestimated how long it was going to take to get out of that corset," is the most middle-aged goth sentence I have uttered in quite some time.