evacide
@evacide.bsky.social
Director of Cybersecurity @eff.org Co-founder of @stopstalkerware.bsky.social These opinions are my own, not my employers’ I did a TED talk once
You would think that all of these people pushing for social media bans for kids would be interested in whether or not these bans actually work...but no, I guarantee we will keep on seeing age-gating bills. theconversation.com/more-than-80...
More than 80% of kids still using social media despite ban, new eSafety report finds
The report provides more evidence Australia’s world-leading social media ban isn’t going to plan.
theconversation.com
This article mentions the keynote speaker at a cybersecurity conference in Scottsdale who was wearing a bralette and sheer black skirt to dinner and I NEED TO KNOW WHO THIS QUEEN IS. www.wsj.com/style/fashio...
‘Naked Dressing’ Is Spreading and It’s Making Things Awkward
Barely-there outfits are moving from the runway to weddings and business conferences.
wsj.com
Lindsay Deibler-Wallace, assistant head of Upper School, took no action to protect them after telling parents that “boys will be boys.” arstechnica.com/tech-policy/...
High school defends staying silent while boys made AI nudes of 59 classmates
Gaps in laws may help Pennsylvania high school escape AI nudes scandal.
arstechnica.com
Additional lessons not mentioned & what AI labs & testers need to do: 1. Monitor testing in real time, not months later 2. Prompt models to self-report lab escapes. These models knew what they’d done at some point 3. Set up a dedicated bidirectional reporting channel for victims
Anthropic {bot}@anthropicbot.bsky.social · 6d agoIn a review of our cybersecurity evaluations, we found three incidents in which a Claude model reached the internet from within or while interacting with a third-party evaluation environment, and then gained unauthorized access to the real systems of three different organizations. (1/4)
UPDATE: After the publication of this piece, Google sent 404 Media a statement saying it was “rolling back this feature in Google Earth while we work on implementing stronger guardrails.” www.404media.co/google-earth...
Google Earth’s New AI Lets Anyone Fabricate Completely Bullshit Satellite Images
"Tonight I typed just one sentence into Google Earth and put refugees near the Mexican border. Then I planted a nuclear plant in Iran. Then I put a fatal crash on a street in Amsterdam."
404media.co
I used to do some work on the ethical use of satellite and drone imagery for aid and disaster response, and it is genuinely hard to express in words what a dangerous, stupid thing Google is doing by making it easy to use GenAI to create faked satellite imagery:
How to plant a nuclear plant in Iran
The question is: what on earth is Google doing?
digitaldigging.org
For the first time in 20-something years, I have run out of checks and must order a new checkbook. Europeans of a certain age will not even understand what this sentence means.
I spend a lot of time explicitly making the connection between interpersonal surveillance/abuse and government surveillance. Sometimes I see people claim that the Internet Freedom set only cares about govt surveillance and I wonder if they either don't know my work or they think I don't count.
"A few weeks ago, a self-driving Waymo-brand taxi in San Mateo, California delivered two children into the hands of the police." A @margaret.bsky.social short story gets the Torment Nexus treatment. margaretkilljoy.substack.com/p/when-they-...
When They Insist Upon the Torment Nexus
or: your car should not drive you to jail
margaretkilljoy.substack.com
EFF is based in San Francisco, so we take surveillance here very personally. www.eff.org/deeplinks/20...
Why Are Gay Bars Building Databases of Their Patrons?
Recent reports have raised alarm about the use of PatronScan, an ID-checking and face-scanning system, at multiple LGBTQ+ bars in San Francisco’s Castro neighborhood. For venues serving vulnerable com...
eff.org
"As we started producing the information...we found out, holy cow, we’re sharing with these people and actually when it was set up we shouldn’t have been sharing outside of California or with the federal agencies" Police don't even know who sees their surveillance--sometimes in violation of the law
Chico PD granted ICE, Border Patrol, access to its ALPR data - ChicoSol News
The Chico Police Department says it has shut off license plate reader data sharing that, until July 8, appears to have been in violation of California state law. Two weeks after ChicoSol requested pub...
chicosol.org
Love to see a "no pervert glasses" policy at DEFCON.
DEF CON@defcon.bsky.social · last wk.Friendly #DEFCON34 reminder: Meta-style glasses with recording capabilities are prohibited at DEF CON. There is no exception for recording glasses with prescription lenses. Be sure to pack non-violating eyewear if you need them. Please see our Photo policies for more. defcon.org/html/links/d...
Rapists primarily show solidarity with other rapists. www.thehandbasket.co/p/exclusive-...
Exclusive: Political operative behind Graham Platner's rise accused of sexual assault
A spokesperson for Daniel Moraff said: “Any suggestion that he committed a criminal offence is false and without foundation."
thehandbasket.co
Adjust threat models not just for being the victim but also the attacker. New paper by many authors gives a detailed set of recommendations, supporting my initial assertions last week that orgs need to assume their own agents could attack others & factor that into agentic AI risk
Gadi Evron@gadievron.bsky.social · last wk.Releasing: Post mortem analysis of the Hugging Face incident was written over the weekend by hundreds of CISOs (and reviewed by Hugging Face). Link: cloudsecurityalliance.org/artifacts/hu... (+free download) From CSA, SANSInstitute, Knostic, [un]prompted, RSAC, FIRST
Claude warns users that by hitting the "share button" anyone with the link can view the content, but it is not clear that they are creating a document that can be indexed by Google and will come up in searches. futurism.com/artificial-i...
A Whole Bunch of People's Claude Chats Are Publicly Accessible Online, and There's Some Wildly Private Stuff in There
A trove of documents generated by Anthropic's Claude were indexed by Google. They included medical records and student information.
futurism.com
Started to write a long, snarky post about Pervert Glasses Discourse. Decided to go touch grass. Please clap.
The nice lady on Fillmore selling me pants today asked where I lived, and when I told her, she made a concerned face and asked "Is it safe there?" so I replied "I'm the most dangerous thing there," and this is the only answer I will be using from now on.
This matters a lot because people are constantly asking me if they should set up a duress passcode in order to fool law enforcement.
Zack Whittaker@zackwhittaker.com · 2w agoNew, by me: The Justice Department is prosecuting an American for allegedly providing U.S. border agents with a "duress" passcode that wiped the contents of his phone when they entered it. We've confirmed the phone was running GrapheneOS. Bypass for ad-blockers: web.archive.org/web/20260724...
Security Research Labs reports on a wave of extortion attacks hitting women's shelters. The original report is in German, but scroll down for English. srlabs.de/blog/erpress...
Incident Response: Erpressungswelle auf Frauenhäuser - SRLabs Research
Incident response help for social institutions.
srlabs.de
Apple has fixed the bug in Hide My Email that linked Hide My Email addresses to your real one, but leaked email addresses could still be in third-party logs: easyoptouts.com/guides/apple...
How Apple's Hide My Email exploit worked and why you're still at risk
The vulnerability has been fixed as of July 7, 2026, but the exploit was simple, and hidden email addresses may still be in third-party logs.
easyoptouts.com
If you live in California and you want to take advantage of the state-run portal that tells all registered data brokers to delete your data instead of having to send an individual request to every single one, here is what you need to know: www.eff.org/deeplinks/20...
Protect Your Privacy with California's DROP Tool
Are you a California resident? Then we've got exciting news for you: there's a tool just for you that lets you take a single, relatively easy step to protect your privacy. It's called a DROP request. ...
eff.org
The other day I accidentally discovered that I have the 31st most-followed account on Mastodon and this goes a long way toward explaining why my mentions/replies are so weird and terrible. *this is not an invitation for people to tell me Mastodon is bad and I deserve it for being there
Judge rules that the Trump administration can't deport researchers just for working on disinformation. arstechnica.com/tech-policy/...
Judge: Trump can’t deport researchers just for working in content moderation
Disinformation researchers praise ruling blocking Trump visa denials and deportations.
arstechnica.com
ACLU of Massachusetts has put out a toolkit for lawyers to help them find out when digital surveillance has been used to build the case against their clients. Love to see it. www.aclum.org/news/digital...
Defendants should know when digital surveillance technology has been used to build the case against them. This toolkit will help their lawyers find out. - ACLU of Massachusetts
Police increasingly use surveillance tech to build cases, and defendants have no way to know. We've built a toolkit to help defense attorneys find out.
aclum.org
Since it turns out that there are many people on the internet who enjoy Halloween-themed ceramics, now is the time to check out the ceramicist who made all of my favorite mugs: rhoneypots.com/lizrmugs
Mugs — R Honey Pots
Handmade sgraffito mugs from Tarigrades to Humpback whales
rhoneypots.com
I spend a lot of time trying to be mindful of what I buy and bring into my house, but every year as soon as the Halloween housewares hit the stores, there is a part of my brain that is convinced I need plates with spiders on them or a mug that looks like a pumpkin.
Every time a journalist comes to me with a story like this one, they say something along the lines of "At least it's good that they're catching the bad apples on the force that abuse the technology right?" and I have to point out that only a tiny fraction of abuse ever leads to consequences.
Sophie Hurwitz@hurwitz.bsky.social · 3w agoA cop in Wisconsin used Flock to search his ex’s license plate information 200 times. Months later, the officer assigned to investigate him was criminally charged for doing the same thing. www.motherjones.com/politics/202...
Sometimes the good guys win. And when this happens, we take the time to enjoy our victory because that is the only way to fight a long fight without burning out. www.eff.org/deeplinks/20...
Victory! Flock Ends Rollout of Audio “Distress Detection” of Human Voices
Reversing course, Flock Safety—the surveillance technology vendor most known for its extensive network of automated license plate readers—has announced that it will end a pilot for its acoustic gunsho...
eff.org
