evacide

If you have an iPhone, today is a good day to make sure you are running the latest software. https://techcrunch.com/2026/03/23/someone-has-publicly-leaked-an-exploit-kit-that-can-hack-millions-of-iphones/

Some tips on giving digital privacy/security advice: if you tell people they absolutely need to do a long list of difficult and expensive things before they travel, people will nod and smile and then not do it at all. This is why my advice focuses on harm reduction and understanding trade-offs.

For people who are concerned about having their devices seized at US airports starting Monday when ICE "assists" the TSA, EFF has this guide: https://www.eff.org/deeplinks/2025/06/journalist-security-checklist-preparing-devices-travel-through-us-border

The data broker industry must be destroyed: https://www.theverge.com/news/897145/kash-patel-ron-wyden-fbi-location-data-no-warrant

In this golden age of surveillance, making E2EE chat normal and expected has been privacy's biggest win. I hate to see it getting rolled back. https://thehackernews.com/2026/03/meta-to-shut-down-instagram-end-to-end.html

Every day in this terrible timeline, I am forced to read extremely cursed sentences. Today's cursed sentence is: Travis Kalanick Plots New Self-Driving Venture with Levandowski, Uber .

I have been invited to a Matrix-themed party and I simultaneously have nothing to wear and could probably wear anything that is currently in my closet.

For all the people saying that Grammarly should be sued over its "expert review" feature, here is the Grammarly class action lawsuit, alleging violation of the right to privacy and the right of publicity: https://prf-law.com/current-cases/class-action-alleges-that-grammarly-misappropriated-the-names-of-journalists-and-authors-through-its-expert-review

When the hacker expressed disgust at the child abuse images on the server and threatened to report them to the FBI, agents had to get into a video chat with the hacker to convince him they WERE the FBI.

We continue to live in the stupidest possible timeline.

https://www.reuters.com/world/us/foreign-hacker-2023-compromised-epstein-files-held-by-fbi-source-documents-show-2026-03-11/

There isn't a blog post I can link to, but apparently "experts" who have written to Grammarly about its new "expert review" feature have been told that they are rolling it back and rethinking it. I hope they rethink it right into the ground.

Attribution is hard. And there is a difference between getting a contractor on the record attributing the toolkit and a bunch of infosec dudes sitting around pontificating about how "everyone knows."

https://techcrunch.com/2026/03/09/an-iphone-hacking-toolkit-used-by-russian-spies-likely-came-from-u-s-military-contractor/

Pakistan's main APT group has switched from off-the-shelf low quality malware tools to vibe-coded custom malware.

I've been expecting to see this shift for a while and it is interesting to see it actually starting to happen.

https://businessinsights.bitdefender.com/apt36-nightmare-vibeware

Do you work in fundraising? Do you want a job that isn't evil? Signal is hiring a director of major gifts: https://jobs.lever.co/signal/68f75269-fe43-4d25-8d82-69439351f14d

I aspire to one day have a fraction of the confidence of a mediocre white man sitting down to do an interview with Isaac Chotiner.

The data from your Meta Ray Bans is used to train Meta's AI, which most people don't understand means that humans are looking at the most intimate details of their lives. https://www.svd.se/a/K8nrV4/metas-ai-smart-glasses-and-data-privacy-concerns-workers-say-we-see-everything

When we talk about the problems with Bluetooth-enabled physical trackers, we usually talk about AirTags, but let us save some rage for Tile, powered by this paper discussing Tile's privacy, security, and accountability problems: https://arxiv.org/abs/2510.00350v1

I have come away from my last conference cautiously optimistic about how useful AI can be in reversing malware and extremely scared about all of the new attack surface being created in the use and deployment of AI tools.

I'm just a girl, incrementing the counter on the number of times I have been sent a plaintext email from a Protonmail user telling me that the message is encrypted.

Anonymously threatening a security researcher seems like a shooting-yourself-in-the-dick level bad decision. Kudos to Allison Nixon for not taking any shit.

https://www.technologyreview.com/2026/02/16/1132526/allison-nixon-hackers-security-researcher

How do you organize safely and effectively in the golden age of surveillance? I have some thoughts and Wired does too: https://www.wired.com/story/how-to-organize-safely-in-the-age-of-surveillance/

The most monstrous lie that I regularly tell myself is "I'll get that work done while I'm on the plane."

This story is unhinged, especially given that the Trump administration cut funding for censorship circumvention technology that actually works.

"...the site had no content but showed the National Design Studio's logo, the words "fly, eagle, fly" and a log-in form."

https://www.reuters.com/world/us-plans-online-portal-bypass-content-bans-europe-elsewhere-2026-02-18/

It's nice to see that when #DEFCON says "Don't support rapists" they really mean it. https://techcrunch.com/2026/02/18/hacking-conference-def-con-bans-three-people-linked-to-epstein/

You may be tempted to roll your eyes and say that this was obvious, but there is a substantive difference between pointing out there is a slippery slope and having solid evidence that Ring's CEO is planning to expand Search Party beyond lost pets. Kudos to 404 Media.

https://www.404media.co/leaked-email-suggests-ring-plans-to-expand-search-party-surveillance-beyond-dogs/

If you're a journalist who covers law enforcement, don't let their claims about slick and effective technology go unchallenged.

https://www.eff.org/document/selling-safety-journalists-guide-covering-police-technology

I can be angry about rising fascism and also angry about facial recognition built into surveillance glasses at the same time, not only because these things are directly related, but because I contain fucking multitudes and all them are mad all the goddamn time.

Meta thinks now is a great time to launch facial recognition surveillance tech in their creepy glasses because EFF will be too distracted by fascism to notice.

We noticed.

https://www.eff.org/deeplinks/2026/02/seven-billion-reasons-facebook-abandon-its-face-recognition-plans

Russia fully blocks WhatsApp and encourages Russians to use home-grown surveillance-compliant Max: https://thehill.com/policy/international/5736203-russia-blocks-whatsapp-meta/

A hacktivist has scraped more than half-a-million payment records from a provider of consumer-grade stalkerware apps, because stalkerware makers don't give a shit about the security of their products.

https://techcrunch.com/2026/02/09/hacktivist-scrapes-over-500000-stalkerware-customers-payment-records/

I've spent the last year learning Spanish just so I could understand Bad Bunny lyrics.

Trying to explain compartmentalization to activists, but the biggest stumbling block is that most people become activists by accident, so their activism is deeply enmeshed with all of their existing accounts, platforms, and devices.

Hey, remember that time I said that pointing out that AI is giving bad data to ICE is missing the point because ICE doesn't actually care if the data is good? Check out how right I am.

https://www.wired.com/story/cbp-ice-dhs-mobile-fortify-face-recognition-verify-identity/

Every once in a while, someone gets the genius idea of impersonating me online and I spend an afternoon looking for the most chaotic way to make them regret that choice.

Notepad++ publishes a blog post saying they caught a probably-Chinese state actor hijacking their product in an attack against highly-selective targets that began last June: https://notepad-plus-plus.org/news/hijacked-incident-info-update/

The StopICE plot thickens. It would be nice if Austin would release evidence to back up his claims: https://www.risky.biz/risky-bulletin-stopice-blames-hack-on-a-cbp-agent-here-in-socal/

EFF will be closed Friday, Jan. 30 as part of the national shutdown in opposition to ICE and CBP and the brutality and terror they and other federal agencies continue to inflict on immigrant communities and any who stand with them.

https://www.eff.org/deeplinks/2026/01/eff-close-friday-solidarity-national-shutdown

Project Zero releases a 0-click exploit chain for the Pixel 9. This one targets the Pixel, but the 0-click bug and exploit techniques used also apply to most other Android devices.

https://projectzero.google/2026/01/pixel-0-click-part-1.html

It is an extremely important to time to support independent journalism. You may notice that I repost Techdirt's content all the damn time. That's because Mike Masnick is usually right and I think you should know about it.

https://www.techdirt.com/2025/12/03/support-techdirts-uncompromising-coverage-get-our-first-commemorative-coin/

I regret not buying a My Marxist Feminist Dialectic Brings All the Boys to the Yard poster because I have some free wall space next to my It's a Slow Apocalypse, You'll Work Through It poster.

No amount of complicity is going to save you from fascism, so you might as well fight.