Increasingly thinking of writing articles about misinformation on Signal, in something similar to the style of @mmasnick.bsky.social's "Hello! You've Been Referred Here Because You're Wrong About Section 230 Of The Communications Decency Act"

Journalists: We've updated our digital security checklist for 2026. Check it out. freedom.press/digisec/blog...

This is such a weirdly specific set of references. I’ll allow it.

posted about my Apple ID woes, please share widely? hey.paris/posts/appleid/

Ah I think I understand now. When humans bullshit you, the bullshit is unacceptable. But when AIs bullshit you, 'we're working on it' while running in production.

I receive a shiny new YubiKey, but my 2FA is on my previous two YubiKeys. The result: I now use three YubiKeys.

I work at @freedom.press. I'm told it's some sort of holiday for donating to nonprofits. My team supports journalists with digital security for themselves and sources. In 2025, I really do think this matters more than ever. If this is something you care about, support our work. freedom.press/donate

I work at @freedom.press. I'm told it's some sort of holiday for donating to nonprofits. My team supports journalists with digital security for themselves and sources. In 2025, I really do think this matters more than ever. If this is something you care about, support our work. freedom.press/donate

I remember being a kid, fiddling with these on the plane and not realizing they were vestigial, much like the overhead tube televisions where everyone watched one movie, or the assumption that air traffic controllers would get paid money for their disproportionately important labor.

Oh hey guys, I took a break from social media what’s going… Uhhh.

New: A judge in Washington has ruled images from Flock surveillance cameras are public records and that anyone can request them. Highlights the pervasiveness of this tech and just how much surveillance is being done. Very notable ruling www.404media.co/judge-rules-...

Good article about the state of America www.poynter.org/business-wor...

This has been an extraordinary set of data to process: 1.3B unique passwords, 2B unique email addresses (including mine 😭) and almost 3M of our @haveibeenpwned.com subscribers in there. It’s been weeks of processing to get this loaded, and finally, it’s done www.troyhunt.com/2-billion-em...

New from 404 Media: someone managed to get into a Microsoft Teams call with phone hackers Cellebrite, who then detailed some of the company's hacking capabilities against Google Pixel phones. Also its capabilities against GrapheneOS, security-focused devices www.404media.co/someone-snuc...

Here's a good rundown of why facial recognition is often inaccurate in the wild (as opposed to in a lab environment). www.techpolicy.press/why-we-shoul...

Great news. In recent years, nearly all page loads are secured with HTTPS by default, so there's very little downside to just protecting people by blocking risky connections by default. security.googleblog.com/2025/10/http...

NEW: CBP searched a record 55,424 devices at the US border over the past 12 months. While these searches are rare compared to the number of travelers, the data shows a notable uptick over the past six months. @mattburgess1.bsky.social and @dell.bsky.social w/ the scoop: www.wired.com/story/cbp-se...

I didn't watch baseball this evening, and heard it took a very long time. I'm told by not watching it, my lifespan therefore extended significantly

Google and Apple should add a device-level AI permission, just like it does for other potentially invasive privacy features, like location, to their phones. www.eff.org/deeplinks/2...

“I am not interested, nor will I ever be interested. I'm 61, and I hope to be able to remain uninterested in using it at all until I croak. ... The other day, somebody wrote me an email, said, ‘What is your stance on AI?’ And my answer was very short. I said, ‘I'd rather die.’” 🫡

As a person who has studied use of secure messaging tools among journalists, this is both the most interesting and most awful time because the U.S. government keeps using Signal in the goofiest ways

In case you haven't had enough cyber for one day... I'm re-upping my deep-dive blog on why ad-blockers are critical for your online security and privacy, and what threats they can help defend against. Plus, I run through some of the best ad blockers out there, for your browser and beyond.

WhatsApp also has a fun habit of asking users to back up their messages to iCloud or Google Drive in regular told human-readable text. Even if you do everything right, the people you are talking to might not appreciate this risk. If you have the choice, go for Signal. freedom.press/digisec/blog...

the most popular smartphone maker in history literally had to stop using "AI" because it would constantly just make things up and had zero contextual "understanding" of what it was doing

Helluva story. Lindsey Halligan, the U.S. attorney on the Letitia James case, apparently asked to have her Signal messages with Lawfare's Anna Bower taken off the record after the fact. That's not how this works. That's not how any of this works. www.lawfaremedia.org/article/anna...

The plan? Act like a jackass and then say, ha, I was only acting like jackass, you got trolled

ICE "has been rapidly building out its surveillance capabilities in recent weeks, signing a string of contracts for technologies to identify individuals by their irises or facial features and to monitor their cellphone activity, social media posts and physical movements," per spending disclosures.

I'll just leave this here… techcrunch.com/2025/10/16/a...

U.S. news outlets refuse to sign agreement to stop doing journalism

NEW: A stunning new study finds that satellite transmissions—from calls and texts on T-Mobile to US and Mexico military communications—were sent unencrypted for any snoop to grab. @agreenberg.bsky.social and @mattburgess1.bsky.social have the scoop: www.wired.com/story/satell...

EXCLUSIVE: A cell-site simulator, commonly referred to as an IMSI-catcher or "Stingray," may have been used at the ICE facility in Portland. Analysis of cellular signals in the area showed phones receiving abnormal spikes in requests for their unique identifiers. san.com/cc/exclusive...

Journalism is not a crime. Free Debbie Brockman! WGN-TV producer detained during ICE enforcement action in Lincoln Square www.chicagotribune.com/2025/10/10/w...

WATCH: ‘Portland Frog’ pepper balled by ICE agents

This month my colleague @davisa.bsky.social takes over our digital security newsletter. It’s even more spooky than usual. Check that out (and follow her, she’s the best)! freedom.press/digisec/blog...

Welp. www.404media.co/google-calls...

Just as everything is getting more expensive, Microsoft plans to pull support for Windows 10 on Oct. 14, 2025. The good news: There are free alternatives. Our digital security team talks through some options.

📲 So you want to back up your phone, but don’t want cloud providers to be able to see the photos and videos you back up. We hear you! Our latest digital security advice column by @mshelton.bsky.social walks through your options.

NEW: In May, a Texas police department said they used the powerful Flock surveillance network against a woman who had an abortion "for her safety" Newly obtained court records show it was a 'death investigation,' and they considered charging her with a crime www.404media.co/police-said-...

Fun fact! You can pay for news you don't read. Many do!

I work in press freedom. The news is bleak, and I know journalists feel it too. I hope you will support the news in whatever way you can to ensure they can do the work. It’s not their fault things suck, they’re just working their asses off to help get you fact checked information. Get them paid.

The White House continues to innovate… On new ways to accidentally leak your end-to-end encrypted Signal messages to journalists www.startribune.com/trump-offici...

Discord said late on Friday that hackers stole users' government-issued IDs (passports and driver's licenses) from one of its customer support databases. I wrote a few words about the risks of age verification laws, and why collecting people's government IDs is bad for security and privacy.

ICE is buying a location tracking tool that harvests data from hundreds of millions of phones a day. Protect your location data by updating a few settings on your phone 🧵 (1/4): www.404media.co/ice-to-buy-...

OpenAI employees are very excited about how well their new AI tool can create fake videos of people doing crimes and have definitely thought through all the implications of this

The UK is once again trying to push Apple to backdoor iCloud, this time for British users specifically. Apple already pulled Advanced Data Protection in the country, so this doens't make much sense; submit a valid legal request like everyone else. techcrunch.com/2025/10/01/u...

Smart move by two young upstate NY reporters: they filed a FOIA for body cameras worn by the sheriff’s deputies at an ICE raid. These are almost always civil raids so there’s no ongoing criminal investigation that would require that footage to stay confidential. Replicable by any media outlet.

This headline feels vaguely threatening www.wired.com/story/how-to...