New security risk unlocked, eSIMs edition, and especially the kind you pick up prepping for an international trip www.itnews.com.au/news/travel-...

Photo- and videojournalists now have until Aug 8 to brush up on Filezilla or Cyberduck, or ask an old head wetransfer.com/explore/lega...

Android users now have an analog to iPhone's Lockdown Mode, so now basically everyone can opt in to a more secure phone/tablet. It's part of Google's Advanced Protection Program, which if you use Gmail and work/move in a space where you're more likely to be targeted, is a great thing to enroll in

I've been traveling so forgive me for not posting this yesterday, but: That Signal clone app for archiving messages that Mike Waltz has been using, TeleMessage? It's unlicensed. Signal was unaware of its existence until they saw it in that Reuters photo. There's no known security vetting.

Great account of what networked incitement looks like in the year 2025. Kudos to @nedmparker1.bsky.social, @mikespector.bsky.social, @bypetereisler.bsky.social, @lindasoreports.bsky.social & @nateraymond.bsky.social

For my NJ people who would want to know this, really good air filters don't have to be expensive. Literally talking ~$30. In front of a strong fan, stack an activated carbon filter on top of a HEPA filter and that will screen out both the things you want, volatile organic compounds (VOCs) and PM2.5

test II

The U.S. IC (at least the leadership)

ICYMI last week, reupping a digital security tip sheet I helped write with @bostonjoan.bsky.social. More than a few new ones have dropped since January -- the main goal of this one is to give you 5 things you can do to minimally but meaningfully raise your security

Not me trying to upload pics from my phone to see if they also show up glitched like the thread I just worked on from laptop

📢 NEW: Our introductory tip sheet on digital security for journalists & civil servants working under pressure. 📢 Co-authors @bostonjoan.bsky.social & @threatc.at offer 📌 five basic steps 📌 for truth-telling practitioners to protect their work & their communities www.criticalinternet.org/research

The ICC either has massive operational hurdles, or a hell of a business continuity plan. When Trump sanctioned the ICC, the Guardian reported internal worries about their reliance on Microsoft Azure and that suspending access would "paralyse its investigations" www.theguardian.com/law/2025/jan...

In other not-good news, standing down Cyber Command planning on Russia isn’t only bad for Ukraine, but also elections and fighting crime. It worked on election interference (and there’s a bunch of European elections coming up) and Defend Forward took down TrickBot therecord.media/hegseth-orde...

Technology is inherently political. Anyone who says otherwise is either being disingenuous or is ignorant of history.

Three online "news" stories published this week that include quotes from me that I didn't say. But I didn't do interviews and get misquoted. And they're not written by actual journalists. My best guess is there are massive amounts of AI slop getting posted as news and now I'm part of it. 😬

Second round of layoffs at the Cybersecurity and Infrastructure Security Agency definitely happening now. I've heard from at least two laid-off employees tonight.

Nice one, Access Now

well damn. aquafaba works great chocolate chip banana bread, sans eggs

The "large scale social deception" contract Musk is conspiracizing about was: * first awarded under Trump * paid to Reuters' data division, not the newsroom * for researching *defenses* against deception * not revealed by "DOGE investigations" and was a public record, visible online for many years

Bruce Schneier and Davi Ottenheimer lay out in clear, concise terms how DOGE is opening up the government and the country to threats. Cybersecurity can sound exciting, but a lot of it is sober, established policy and process. It's a good read. foreignpolicy.com/2025/02/11/d...

I have the common bad habit of leaving lots of tabs open. A few days ago I opened the CISA Resources and Tools guide and searched for the topic "Foreign Influence Operations and Disinformation." I was sort of surprised to find 4-5 links. I went back this afternoon to follow them. The page is blank.

Google caved, but NOAA Weather Radio is still holding strong with Gulf of Mexico

We now know that Paragon spyware victims include one activist in Sweden; one activist and one journalist in Italy. I suspect this is just the tip of the iceberg. techcrunch.com/2025/02/05/p...

There's a current fetish for publishing primary source documents rather than having a reporter describe them, and I totally get it. But remember Reality Winner was caught almost immediately because the Intercept published what she printed out, unaware the NSA printer left an imperceptible watermark.

At CISA HQ days before her resignation, Jen Easterly was steadfastly manifesting the future she wanted for her agency. But she was also clear: "Any stepping back of what we've put in place will be to the detriment of the safety and security of the American people" www.wired.com/story/big-in...

I didn't know you could send your tweet history to the Internet Archive. The @eff.org has a tutorial on it in its write-up on saving your Twitter account

Gutted, and gutting

Succinctly put

Use Signal to talk about protests Use Signal to talk about your wordle score Use Signal to talk about abortion Use Signal to talk about your mom's knitting club Use Signal to talk about parties Use Signal to talk about gender affirming care Use Signal to talk about the weather Use Signal

Wicked proud of Alexei! He’s been working so hard to create this code and write this book: nostarch.com/social-media... Get early access today! @smokegatherer.bsky.social

I’m no fancy headline writer for The NY Times, but I’m pretty sure this says we can kill more people next time.

Because all the references to ODB and McDonald's, here's citation you can put in your Zotero. Thanks @classypatrick.bsky.social for running this book excerpt. Since this every time I have a fish sandwich I think Damn, "I ain't had a fish filet sandwich in a minute." web.archive.org/web/20151001...

Shortly after moving to Miami I joined a printmaking studio, just when hurricanes Helene and Milton were coming to Florida. So I got a new radio with weather band and made these shirts, a callback to the 90s ones about Black Sabbath, Slayer, Bob Marley. Wasn't meant to be political, but here we are

Went straight from attending Cyberwarcon virtually to seeing Amy Tan at the Miami Book Fair talking about her new book, THE BACKYARD BIRD CHRONICLES. Since she’s starting off with her birding beginnings and a blue jay, here’s one from our apartment in Cambridge last year

Today at @CYBERWARCON we watched arguably one of the most interesting talks we've seen in awhile. 🧵

This is wild. Time to mandate 2fa for WiFi. www.volexity.com/blog/2024/11...

The nearest neighbor attack -- Russian APT pops target by going after companies across the street and pivoting, with a zero-day and no tools but the ones on victim equipment (cue dril tweet again) Super good talk, and great to see Steven Adair from @volexity.com geek out on it. ⚡ #cyberwarcon ⚡

"The strongest steel is forged from the fire of a dumpster" #CYBERWARCON

I’ve created a Starter Pack around cyber threat intelligence to make it easier to find that community here on Bluesky. Let me know of folks I missed, as I’m sure there are many! go.bsky.app/TxQYHap

This current talk at #CYBERWARCON about CN insiders selling off PII on CN citizens is fantastic. Bored, underpaid, burned out, and working at a CN telco? Just do some crime on the side!

Always psyched to hear a Cambodia reference, even if it's in the dril tweet sense that, no you don't gotta hand it to them. Great #Cyberwarcon talk by Aurora Johnson and Kyla Cardona on insiders in China's tech industry siphoning govt-mandated data collection to sell on the gray and black markets

It’s a work in progress: feel free to send over corrections and additions. wherewarlocksstayuplate.com

I'm telling myself that I've switched to a light theme in terminal because I've moved into a sunny apartment in Miami, not because my eyes are getting old

Days without having to mentally subtract an hour from kitchen clocks: 0

If the NSA[1], GrapheneOS[2], and Apple[3] all believe that rebooting your mobile phone regularly is something that protects your data, you might consider doing it more often. Shortcuts on iOS make this super easy to setup. 1 […] [Original post on infosec.exchange]

BREAKING: X, formerly Twittter, renames itself to Pravda