← Feed

Posts

• View post

  It is the time of year when time zones are out of sync and every single meeting that I have on my calendar has had a scheduling mix-up.

• View post

  Researchers at TrendAI concluded the Israeli company Discover-Tech was one of the biggest sources of digital ads shown to users of SpaceX's Starlink service and that the ads were likely being used to geolocate or otherwise surveil them. https://www.reuters.com/business/media-telecom/alleged-israeli-spy-company-heavily-targeted-starlink-users-sources-say-2026-10-27/

• View post

  Here I am trying to enjoy a little victory in Serbia and Brazil, but also there is a Hell and we are in it. https://www.wired.com/story/ai-agents-are-trying-to-be-journalists-now/

• View post

  Guy in the vintage store trying to explain what he is looking for to a store employee: "Have you ever seen Torchwood?" Me: "Oh, you're looking for a Jack Harkness coat." I hope he finds a Jack Harkness coat and wears it all the time.

• View post

  I understand that there are people who think we must pass through the Vulnpocalypse to get to Vulnhallah, a time when all code is written by AI then checked by AI and has no vulns that AI can find, while we sit back and feast. But I don't think we can get there from here.

• View post

  I see it is time to change this slide in my upcoming talk from "Vulnpocalypse Now?" to "Vulnpocalypse Now!"

• View post

  RE: https://mementomori.social/@maijanlainen/117435589734913543 My Mastodon replies continue to be very cool and normal.

• View post

  Citizen Lab finds Candiru's mercenary spyware on the phones of Al Jazeera journalists, infected using Discover Tech to deliver the malware using targeted ads. https://citizenlab.ca/research/how-discover-tech-turned-targeted-ads-into-a-pipeline-for-spyware/

• View post

  Additional highlights from the Citizen lab report include: "Discover-Tech...also leveraged the European General Data Protection Regulation (GDPR) consent frameworks to target users within the European Union." https://citizenlab.ca/research/how-discover-tech-turned-targeted-ads-into-a-pipeline-for-spyware/

• View post

  Today I learned that Andy Ngo has written a book about the Zizians. Everything about that sentence is deeply, deeply cursed.

• View post

  Another day, another story where my work on mass surveillance overlaps with my work in domestic abuse in the most terrible goddamn way. WaPo found cops who kept using Flock to spy on women after they left the force. One used it for five years after retirement, tracking his wife during a custody battle. Another ran searches while he was suspended (and later fired) after killing a 15-year-old boy. https://www.washingtonpost.com/technology/2026/10/21/their-police-jobs-ended-they-kept-using-floc...

• View post

  Meta thinks now is a great time to launch facial recognition surveillance tech in their creepy glasses because EFF will be too distracted by fascism to notice. We noticed. https://www.eff.org/deeplinks/2026/02/seven-billion-reasons-facebook-abandon-its-face-recognition-plans

• View post

  No, really, these PHP vulns are quite serious and you should drop everything and patch. https://www.php.net/index.php

• View post

  When a platform offers you privacy, always ask "Privacy from whom?" "Of course, while locking a chat can limit access, it doesn’t address concerns about how sensitive information is stored or handled...locking a chat doesn’t create end-to-end encryption or a separate encrypted vault, change how long it retains the chat, remove information that ChatGPT remembered before a chat was locked, or change the 'Improve the model for everyone' setting." https://techcrunch.co...

• View post

  New York is the one place on Earth where I quickly realize that I don't jaywalk aggressively enough.

• View post

  ChatGPT now lets you target ads based on specific prompts or any phone number or email address. This is absolutely 100% going to be used for harassment. https://www.404media.co/how-chatgpt-targets-ads-to-you-based-on-your-prompts-phone-number-and-email/

• View post

  Elevation Lab pulls its AirTag silencing tool. Good things can still happen, occasionally through the power of shame. Kudos to @glennf@zeppelin.flights on this one: https://www.elevationlab.com/blogs/news/an-apology

• View post

  A lot of people I know shared posts about the Yandex datacenter bombing resulting in a decrease in Russian misinformation/disinformation bot activity, sometimes with charts. Let this be a reminder every one of us could be fooled by a story that we really want to be true.

• View post

  I can be angry about rising fascism and also angry about facial recognition built into surveillance glasses at the same time, not only because these things are directly related, but because I contain fucking multitudes and all them are mad all the goddamn time.

• View post

  RE: https://hachyderm.io/@evacide/117412045251981085 I have now heard from several maintainers of open source projects who tell me that this is something they specifically asked for and/or that it is a big improvement on the status quo, so this hot take was wrong.

• View post

  I understand that Anthropic thinks they're doing open source projects a favor here, but what they're actually doing is creating an enormous amount of work for people that they are not paying. https://www.anthropic.com/research/launching-opt-in-vuln-finding-service-for-open-source

• View post

  Another example of the ways in which misbehaving agents have affected the digital commons and some thoughts about what should be done about it. "While OpenAI admits to agents behaving 'unpredictably', they must also acknowledge their responsibility to monitor and prevent these risks. AI companies are not doing enough to secure their systems and protect the public from the harm they cause. That burden is falling onto everyone else, including smaller organizations. At a minimum, thei...

• View post

  Pervert glasses: now even more explicitly designed for abuse! https://futurism.com/artificial-intelligence/influencers-promoting-cheap-dupes-meta-glasses-light

• View post

  We are going to use AI to file public records requests. Then we are going to use AI to reply to the public records requests. Then we are going to use AI to write news stories about the public records, which will be read by more AI. No action will be taken. #civictech

• View post

  "AI is going to help government transparency by making it easier to file public records requests!" "Oh no." https://techcrunch.com/2026/09/10/ai-agents-are-flooding-public-services-with-new-requests/

• View post

  Today's privacy and security guide: Connected Cars: Privacy and Security for Survivors https://www.techsafety.org/connected-cars-privacy

• View post

  I need something that zaps me with a painful shock whenever I spend too much time doomscrolling on my phone. *tendonitis has entered the chat* Oh no.

• View post

  I have spent much of this week doing the sort of work that AI is absolutely terrible at, which has helped me to see how many people doing this same work are definitely using AI.

• View post

  Russia has been blocking Signal/WhatsApp/Telegram and it has made VK's Max increasingly mandatory to reach govt services. We assumed it was a privacy nightmare, but InterSecLab brings the goods: https://interseclab.org/research/max/

• View post

  It's Opt Out October and EFF is here to talk to you about the many alternatives to Big Tech that you may be interested in: https://www.eff.org/pages/welcome-opt-out-october-lets-take-control-our-data-and-our-devices