Tessera
Folgen

Kurt Opsahl

@kurtopsahl.bsky.social

Counsel at RCJ Law, former Deputy ED and GC of EFF, now EFF Special Counsel, president SRLDF, board emeritus USENIX, advisor Open Archive, former Technical Advisory Council CISA. Skeets are my own.

176 Posts2101 Follower290 Folgt
Exploit Code Not People@cooperq.com · 2h ago

If you are heading to DEF CON this weekend don't forget to update your rayhunter device to 0.12.0! RSSI and TA are now included in captures. Recordings are compressed Some identity request events have had their severity lowered to reduce the number of false positives

Release Rayhunter v0.12.0 · EFForg/rayhunter

What's Changed remove another instance of outdated docs by @bmw in #1060 fix(installer): improve error message when port 4000 is already in use by @DevenDucommun in #1062 fix(daemon): drain UI cha...

github.com

Lorenzo Franceschi-Bicchierai@lorenzofb.bsky.social · 2d ago

NEW: We spoke to hacking law experts to learn if OpenAI and Anthropic could be prosecuted for their AI agents’ hacks against four companies. We are in “uncharted territory,” as one lawyer put it. But another attorney said there is a potential avenue to hold the two AI giants liable for negligence.

Who's legally to blame for Anthropic and OpenAI's autonomous AI hacks? It's complicated | TechCrunch

OpenAI and Anthropic admitted that their unreleased AI models escaped their sandboxes and hacked several companies in unprecedented cyberattacks. Who is legally to blame? Should prosecutors charge the...

techcrunch.com

Katie Moussouris (she/her/she-hulk/she-ra)🌻@k8em0.bsky.social · 2w ago

The experiment escaped the lab. OpenAI's models broke containment and breached Hugging Face. We are holding radium in our bare hands. What governments and organizations should do next, and why tighter commercial guardrails are exactly the wrong move: www.lutasecurity.com/post/openfac...

OpenFace: The Hugging Face Breach and What to Do About It

These models are like the world's cleverest octopus escape artists, with unlimited prehensile arms and the ability to squeeze through anywhere. A single vulnerable package proxy stood between the mode...

lutasecurity.com

Michael Geist@mgeist.bsky.social · 2w ago

Nine months ago, Canada joined key allies by declining to sign the UN Cybercrime Convention, given longstanding surveillance and human rights concerns as well as the absence of key safeguards. Last week, it quietly signed the treaty. What changed?

A Surveillance Treaty in Disguise: The Trouble With Canada's Quiet Decision to Sign the UN Cybercrime Convention - Michael Geist

Last week, the government announced that Canada has signed the United Nations Convention against Cybercrime, with Ministers Anita Anand, Gary Anandasangaree and Sean Fraser touting the treaty’s child…

michaelgeist.ca

Ron Deibert@rondeibert.bsky.social · 3w ago

Canadian 🇨🇦 forensic company Magnet suing a former employee for disclosing an Apple zero-day the company was hoarding & exploiting to crack iPhones "the public disclosure...alerted Apple to the flaw and allowed it to be..fixed, reducing its value..." www.bloomberg.com/news/article...

IPhone Hacking Firm Sues Ex-Worker Over Alleged Theft of Secrets

Magnet Forensics Inc., a Canadian cybersecurity firm, accused a former contractor of sharing trade secrets about a previously unknown flaw used to hack iPhones with a rival firm.

bloomberg.com

CyberScoop@cyberscoop.bsky.social · 3w ago

The company forewarned customers and defenders that a flood of defects would be uncovered by AI. It delivered with a striking exponential increase. via @mattbracken.bsky.social cyberscoop.com/microsoft-pa...

Microsoft discloses ‘the mother of all’ vulnerability loads, tripling June’s previous record

The company forewarned customers and defenders that a flood of defects would be uncovered by AI. It delivered with a striking exponential increase.

cyberscoop.com

Andy Sellars@sellars.bsky.social · 3w ago

We have an opinion in @thecoalition.bsky.social v. Rubio! The State Department's policy of targeting misinfo, disinfo, and trust and safety researchers and advocates for visa denials and revocations is stayed pending resolution of the action. Opinion here: storage.courtlistener.com/recap/gov.us...

.Order AND Memorandum & Opinion – #54 in COALITION FOR INDEPENDENT TECHNOLOGY RESEARCH v. RUBIO (D.D.C., 1:26-cv-00815) – CourtListener.com

MEMORANDUM OPINION re [53] Order on Motion for Protective Order and Motion for Stay and Preliminary Injunction. Signed by Chief Judge James E. Boasberg on July 14, 2026. (lcjeb4)

storage.courtlistener.com

Benn Jordan@bennjordan.bsky.social · 4w ago

Oh cool, an Easter egg feature that traps you in a driverless car and kidnaps you when it's decided you've misbehaved. Imagine what a hacker group or ICE can do with this. The fact that this is even functionally possible is horrifying.

Bild
Zack Whittaker@zackwhittaker.com · last mo.

From me, overnight: A politician who was part of a European Parliament committee tasked with investigating spyware abuses had his own phone hacked with Pegasus spyware. Stelios Kouloglou told me the hacking was "reckless" and likely due to his work. He plans to sue NSO, which develops Pegasus.

Politician who investigated spyware abuses had his phone hacked with Pegasus spyware | TechCrunch

A government customer of NSO Group used the company's Pegasus spyware to hack into the phone of a European politician, who at the time was serving on an EU committee tasked with investigating the spyw...

techcrunch.com

Kate Starbird@katestarbird.bsky.social · last mo.

Two years ago, my colleagues and I were sued by Stephen Miller's America First Legal. The Hines v Stamos case — built atop a number of false allegations — was a central element of the "censorship industrial complex" myth. Today, that case was dismissed (by a Trump judge in LA). We won.

UNITED STATES DISTRICT COURT WESTERN DISTRICT OF LOUISIANA MONROE DIVISION JILL HINES ET AL — CASE NO. 3:23-CV-00571 VERSUS — JUDGE TERRY A. DOUGHTY ALEX STAMOS ET AL — MAG. JUDGE KAYLA D. MCCLUSKY MEMORANDUM RULING Before the Court is a Renewed Joint Motion to Dismiss for Lack of Subject Matter and Personal Jurisdiction [Doc. No. 191] filed by Defendants, Alex Stamos, Renée DiResta, the Board of Trustees of the Leland Stanford Junior University, the Leland Stanford Junior University, Kate Starbird, Graphika, Camille François, the Atlantic Council, and Graham Brookie (collectively, "Defendants"). Plaintiffs, Jill Hines ("Hines") and Jim Hoft ("Hoft") (collectively, "Plaintiffs"), filed an Opposition [Doc. No. 207]. Defendants then filed a Reply [Doc. No. 209]. For the reasons set forth, Defendants' Motion is GRANTED.