evacide

When I go through these data sets, government email addresses are some of the first things I look for.

Please also note that @zackwhittaker.com and @lorenzofb.bsky.social have included some useful tips for looking through datasets of stalkerware customers.

Exclusive: Hacktivist scrapes over 500,000 stalkerware customers' payment records More than half-a-million people who bought access to phone surveillance and social media snooping apps had their email address and partial payment card numbers published online.

A hacktivist has scraped more than half-a-million payment records from a provider of consumer-grade stalkerware apps, because stalkerware makers don't give a shit about the security of their products.

techcrunch.com/2026/02/09/h...

When you make a joke on BlueSky, there will always be at least one outraged reply from a person who absolutely does not understand the joke.

I made an exception to my anti-Wagner policy for Parsifal last year and reinstated my anti-Wagner policy at the first intermission.

Fui a Chile y el acento chileno era tan difícil de entender que me sentí estúpido.

I've spent the last year learning Spanish just so I could understand Bad Bunny lyrics.

I will be tremendously relieved if this is a settled matter.

All of the advice I give is simultaneously "Don't be intimidated! Don't give up before you start! This is easy and approachable" and "Sigh....it depends. Everything is complicated and nuanced and often tricky to implement correctly."

Trying to explain compartmentalization to activists, but the biggest stumbling block is that most people become activists by accident, so their activism is deeply enmeshed with all of their existing accounts, platforms, and devices.

I find the armies of nerds with 3D printers printing whistles extremely wholesome and heartwarming.

There are a lot of people I used to think were smart that have completely cooked their brainmeats in the last few years.

If there is anyone who should be very tired of being right all the time, it is Timnit.

Hey, remember that time I said that pointing out that AI is giving bad data to ICE is missing the point because ICE doesn't actually care if the data is good? Check out how right I am.

Every once in a while, someone gets the genius idea of impersonating me online and I spend an afternoon looking for the most chaotic way to make them regret that choice.

From magic to malware: How OpenClaw's agent skills become an attack surface | 1Password The same capabilities that make OpenClaw a groundbreaking tool also make it an urgent security risk. This blog contains confirmed examples of agent skills being used as malware vectors, and advice on ...

1Password not mincing words here:

"If you are experimenting with OpenClaw, do not do it on a company device. Full stop."

"If you have already run OpenClaw on a work device, treat it as a potential incident and engage your security team immediately."

1password.com/blog/from-ma...

ICE's Use of AI Will Lead to Big Mistakes. Maybe That's the Point Cybersecurity experts say that U.S. Immigration and Customs Enforcement seems to be indifferent to how their artificial intelligence tools work.

Sometimes I get a really good quote in.

“Pointing out that AI is prone to giving ICE bad information is missing the entire point of ICE,” EFF’s @evacide told @RollingStone. “They don’t care if the information they have is good.”

www.rollingstone.com/culture/cult...

Spyware maker is hijacking diplomatic efforts to limit commercial hacking, civil society warns Spyware maker NSO Group trumpeted the company’s participation in the Pall Mall Process, which drew criticism from civil society leaders and government officials who called out human rights abuses.

NEW: NSO tried to hijack the Pall Mall Process to whitewash their reputation in the midst of ongoing Pegasus abuses.

France & UK govs leading the process say: "Not so fast!"

Submitting comments ≠ participation/compliance!

By @suzannesmalley.bsky.social

therecord.media/spyware-make...

IIRC, yes.

If you live in the Bay Area and you like seeing smart people talking about cool historical things, you should come to Curiosity Guild tomorrow.

Notepad++ publishes a blog post saying they caught a probably-Chinese state actor hijacking their product in an attack against highly-selective targets that began last June: notepad-plus-plus.org/news/hijacke...

Risky Bulletin: StopICE blames hack on "a CBP agent here in SoCal" - Risky Business Media StopICE, an app that lets Americans track the location of US Immigration and Customs Enforcement (ICE) raids, has played down a recent sec [Read More]

The StopICE plot thickens. It would be nice if Austin would release evidence to back up his claims: www.risky.biz/risky-bullet...

Signal is not the ideal solution to every problem, but it is often a good place to start.

StopICE Data Breach Sent Names And Locations of 100,000 Users to The US Government StopICE, the anti-ICE activist platform, suffered a major security breach exposing names, logins, phone numbers and GPS locations of over 100,000 users to US federal agencies.

Why do your organizing over Signal? So that you don't do your organizing on an app that hasn't been tested or reviewed, run by a guy who doesn't tell his users about data breaches and security problems.

www.ibtimes.co.uk/stopice-hack...

I spend a lot of time trying to help people understand that not all protests are the same, but one of the things that make this hard is that sometimes you show up for a "liberal vibes with kids" protest and you get an "everyone gets teargassed, including the kids" protest.

How to Film ICE Filming federal agents in public is legal, but avoiding a dangerous—even deadly—confrontation isn’t guaranteed. Here’s how to record ICE and CBP agents as safely as possible and have an impact.

Planning to film ICE? Wired has a guide for that: www.wired.com/story/how-to...

I have the same problem. On one hand, I have to worry about angering people that most people never have to worry about, often while traveling to places most people do not go to. On the other hand, I am already a public person whose identity, politics, works, and opinions are easy to find.

Sometimes I will break it down with "If you're concerned about X, then do Y, but you might be more worried about A, in which case do B." I can't get through every scenario, but it allows me to hit some of the more likely ones.

I just try to help people on the ground come up with the mitigations that work with their situation and that still allow them to do the things they need to do. This involves a lot of sighing heavily and saying "It depends..."

It all depends on what you are trying to accomplish. A lot of organizing is done in public and the details are not a secret. Some types of organizing require greater privacy or security considerations.