In other news, a large number of security experts were among the thousands laid off by #Meta last month.

Florida is the first state to sue OpenAI over safety concerns, claiming that the company failed to warn the public about the dangers of ChatGPT. www.nytimes.com/2026/06/01/t...

This is absolutely nuts: hackers are hijacking high-profile Instagram accounts by simply asking Meta's AI chatbot to change the email on the account. Meta's AI does it, hacker gets password reset code, they're in. A staggering security issue www.404media.co/hackers-simp...

I've written something about Microsoft's apparent stance that not following made up responsible disclosure frameworks is criminal activity. doublepulsar.com/microsofts-s...

NEW: Microsoft is so mad that a researcher published a handful of zero-days, and code to exploit them, that it is threatening legal action and even calling the cops on them. Yes, it's 2026, and one of the richest companies in the world is beefing about the ethics of disclosing bugs.

New: Regretful cities are literally covering their Flock cameras with black trash bags because they cannot figure out how to immediately exit their surveillance contracts or get the cameras taken down: www.404media.co/cities-are-c...

Recent status: watching someone that works at Zoom take a past due security training about not taking meetings in public spaces while he was on a train going between Copenhagen and Stockholm. He completed his training then had a sales meeting about volume discounts.

Journalists are asking us about Lockdown Mode more than ever. In this most recent advice column I talk about my experience using it. On an iPhone, it has massive positives and meaningful trade-offs. On a Mac, though, it's effortless. Try it out and see how you like it. freedom.press/digisec/blog...

Post your getaway vehicle.

Freedom is strongest when it's supported by you. @kurtopsahl.bsky.social (former Deputy Executive Director and General Counsel of @eff.org, now @fil.org) shares his opinion on why @torproject.org ecosystem funding matters. Donate & protect rights online: internetfreedom.torproject.org

​​As always, @kurtopsahl.bsky.social, is on point. Grateful for this and even more grateful for his support as one of our founding board members🫶 Donate now to help us defend our right to securely archive, verify, and encrypt (Save) our media: internetfreedom.torproject.org/projects/ope...

Lawyers and law profs of Bluesky! The Berkeley Law Legal Research, Writing & Analysis program is hiring! 2 new profs will join a group of 10 faculty for an August start. We take our work and students seriously and have more fun than anyone else in the school. aprecruit.berkeley.edu/JPF05371

Bay Area lawyer frens, come join me as I host the @eff.org Cyberlaw Trivia Night on June 4 for a fantastic time of nerdy dives in the most trivial aspects of technology law and policy. Form a team or come find a team there! www.eff.org/event/effs-1...

"During protests, unrest, and political crackdowns, internet censorship has become a tool of control...to block information...to isolate people..." Meet the open-source projects working to change that: www.youtube.com/watch?v=K6Sb... @unredacted.org @web3privacy.info @osservatorionessuno.org

You all should read Privacy's Defender: My Thirty-Year Fight Against Digital Surveillance by Cindy Cohn, @eff.org's Executive Director. Here's my fav part micahflee.com/read-cindy-c...

Grateful to @torproject.org and @fundingcommons.bsky.social for featuring us in this crowdfunding campaign—10 projects, one mission: #InternetFreedom.

28 years ago today, 7 members of the hacking group L0pht Heavy Industries told the U.S. Senate they could "shut down the internet in 30 minutes."

‘The Worst Leak That I’ve Witnessed’: U.S. Cybersecurity Agency Leaves Its Digital Keys Out in Public on GitHub https://gizmodo.com/the-worst-leak-that-ive-witnessed-u-s-cybersecurity-agency-leaves-its-digital-keys-out-in-public-on-github-2000760330

The establishment changed its name this week from the Barber Shop Blackstone to the Censored Shop Blackstone in protest while it is suing the state in federal court. www.nytimes.com/2026/05/15/u...

NEW: OpenAI says hackers stole "limited credential material" by pushing out malicious updates to a widely used open source project to two employees' devices. The company said the supply chain attack did not result in the theft of user data, or the compromise of production systems.

🚨NEW🚨 The government subpoenaed Apple, Google and Amazon for data on every single user of a car tinkering app. For Google alone that means over 100,000 users. Privacy and car hacking communities are, unsurprisingly, concerned about overreach. www.forbes.com/sites/thomas...

MacOS patches coming soon www.wsj.com/tech/ai/anth...

Canada’s C-22 bill is a surveillance overreach that paves the way to backdoor encrypted communications of users around the world. www.eff.org/deeplinks/2...

Google finds evidence a criminal hackers attempted a widespread campaign that relied on a 0day built by artificial intelligence. “It’s a taste of what’s to come,” @hultquist.bsky.social says. www.nytimes.com/2026/05/11/u...

I am back in the US after planning to be in Lusaka for this week. Re the Rightscon cancellation, read this first-person account "I was one of the Taiwanese civil society participants whose exclusion had reportedly become a condition for the summit to proceed." lezismore.org/rightscon202...

Blog Post: 11th Circuit Rejects TOS Formation–Tejon v. Zeus blog.ericgoldman.org/archives/202...

Easterbrook: We disagree with three other circuits on whether Terms of Service give up 4th Amendment rights against disclosure of a person's private Internet account records. Under traditional contract principles, TOS control, so it's a 3-1 split. media.ca7.uscourts.gov/cgi-bin/Opin...

NEW: Kaspersky says hackers planted and activated a backdoor in the popular Windows disk imaging app Daemon Tools a month ago, infecting thousands of computers around the world in a "widespread" attack. This is the latest supply chain attack targeting software used by a large number of people.

Which way is not selling?

Update Linux Now As 9-Year-Old Root Hack Confirmed, CISA Warns Users

The U.S.-based organizers of an international human rights conference said they canceled it days before it was due to open because China pressured the African host country to exclude Taiwanese activists.

Once again I am asking @nytimes.com to stop conflating copyright with trademark. They are not the same. TM is designed to help consumers know that a “World Cup” branded product is actually authentic to FIFA’s brand. Copyright gives a limited exclusive right in expression, such as the game video.

Police are using the surveillance state to stalk "love interests" because there really is no difference between the part of my job where I fight state surveillance and the part where I fight domestic abuse: www.theguardian.com/commentisfre...

Free Software Foundation Europe (@fsfe.org ) lost its payment processor over a fight for donor privacy. fsfe.org/news/2026/ne... h/t @blmurch.com

kudos to @rightscon.org for standing firm and not sacrificing principles or vulnerable participants. Zambian officials, evidently pressed by Beijing, caved and behaved like amateurs. it’s an example of how china seeks not only geopolitical power but wants to crush critical civil society.

Following our April 29 announcement, we believe it's important to be transparent about the context that led to the decision. We want to explain, where we can, why this was made on such short notice, only days before we were set to host RightsCon. Read: www.rightscon.org/rc26-stateme...

Time travel.

UNESCO is not stoked about Zambia's cancellation of RightsCon. They were going to be holding World Press Freedom Day in Lusaka next week. Not so much now.

NEW: Hackers are exploiting a bug in the popular web server administrator software cPanel and WHM, used in millions of websites around the world. The bug allows hackers to bypass login screens and gain full server access. One web host said they've seen evidence of attacks dating back to February.

Amidst the news re: RightsCon (www.404media.co/rightscon-hu...), I'd encourage folks who are able to make a donation to @accessnow.org. (My receipt is below!) The cost of having to cancel could tank the organization, not to mention the stress of figuring out what to do.

the government of zambia is announcing that it canceled RightsCon. this is a serious attack on civil society, the global & local ones. thousands of people - activists, academics, govt etc - are en route to lusaka. to cancel at this late stage is just horrible.

"All of those relationships have been destroyed. We’ve had instances where our local election officials have been corresponding with members of CISA, and then, all of a sudden, there’s no response, because presumably that person has been fired." www.nextgov.com/cybersecurit...

New jobs! @rcfp.org is now hiring two roles to join our legal team, strengthening our ability to protect journalists and their First Amendment rights. The deadline for applications is May 22 — view each posting below 👇

A response to recent reporting in Germany, in service of clarity and accountability: First, it’s important to be precise when it comes to critical infrastructure like Signal. Signal was not “hacked” — in that our encryption, infrastructure, & the integrity of the app’s code was not compromised. 1/

NEW @citizenlab.ca report uncovers two separate China-based cyber espionage campaigns targeting journalists, human rights defenders, exiled ethnic and religious groups and many others. citizenlab.ca/research/how...

Speaker Johnson’s introduction of yet another mass surveillance bill masquerading as reform is all the encouragement we need to keep pushing for a warrant requirement in Section 702 of FISA.

Good morning, Fourth Amendment fans. I am going to be live-tweeting the Chatrie argument. Although the oral argument is formally scheduled for 10 eastern, they always do bar admissions 1st. Will start shortly. supremecourt.gov/oral_argumen...

"We become persons by the increase of negations—of finite characteristics—but there is a cat walking over this as I write and I must stop for it gives me no chance." —Oliver Wendell Holmes, Jr., letter to Felix Frankfurter, 1913.

This is an incredible tweet.

We are very happy that today Apple issued a patch and a security advisory. This comes following 404 Media reporting that the FBI accessed Signal message notification content via iOS despite the app being deleted.