evacide

Director of Cybersecurity
@EFF
/ Co-founder of
@stopstalkerware
/ These are my opinions, not my employers’ / I did a TED talk once

Public Key

npub1pdy6l28vft74na25fsr2k4esu8yecarxnhn8h0wm67sd6fjn264qwxcay2

NIP-05 Address

evacide_at_hachyderm.io@momostr.pink

Profile Code

nprofile1qqsqkjd04rky4l2e742ycp4t2ucwrjvuw3nfmenmhhda0gxayef4d2sgcgxpw

Author Public Key

npub1pdy6l28vft74na25fsr2k4esu8yecarxnhn8h0wm67sd6fjn264qwxcay2

Show more details

Last Notes

2024-08-19 22:22:09

My neighbor who is a DJ definitely owns a subwoofer but does not appear to own headphones, so I am introducing him to the musical stylings of Diamanda Galas.

2024-08-15 20:13:58

"Still punk rock..." I whisper to myself as I apply an ice pack to my ribs and update the Days Since Last Injury sign to 0.

2024-07-07 19:26:32

This is your regular reminder that scams are now the background noise of our lives. They will take a million shots at you and threat actors only need you to let your guard down once.
https://www.itbrew.com/stories/2024/06/26/mark-cuban-s-gmail-was-hacked-by-a-threat-actor-posing-as-google-here-s-how-to-prevent-it-from-happening-to-you

2024-07-07 18:58:57

Once upon a time, I was getting dinner at a very fancy restaurant when one guest turned to another and asked him what he thought of his new designer suit jacket.
"Well," he said, "I suppose there is a market for things that are extraordinarily ugly and also very expensive."
And I think about nuclear takedown a lot.

2024-07-05 19:49:02

What you need to understand about the World Wide Web in 1994, is that it was incredibly ugly:
https://www.fastcompany.com/91140068/how-the-internet-went-mainstream-in-1994

2024-07-05 18:51:11

*Dystopia intensifies*
"The automated ammunition dispenser uses artificial intelligence technology to verify a buyer’s identification and age through card scanning and facial recognition software."
https://www.cleveland.com/nation/2024/07/vending-machines-selling-bullets-at-grocery-stores.html

2024-07-03 19:26:53

HR has my diet preferences listed as "conventional" and honestly, I'm a little offended.

2024-07-02 16:58:54

Job alert! The Ford Foundation is looking for a new Program Officer for its Technology and Society Program.
https://philanthropynewsdigest.org/jobs/84900-program-officer-technology-and-society

2024-07-01 20:36:09

Working on projects that help to protect human rights even when the law does not is my personal equivalent of touching grass right now.

2024-06-28 21:52:13

Honestly, this week makes me extremely grateful that impact litigation, legislation, and regulation are not the only tools I have in my activism toolbox, because these are not great times for the rule of law.

2024-06-28 00:42:03

Today I was reminded that that one particular rapist who keeps trying to return to the hacker community convinced some documentarians to make a whole movie about how he is really innocent and no one watched it or cared, which I think is absolutely the fate this guy deserves.

2024-06-25 04:36:49

I'm fine with talking about the espionage case against Julian Assange and I'm glad it's come to an end just as long as I never again have to talk about Julian Assange, the person.

2024-06-24 17:41:53

All that I want is for this one half-assed threat actor to stop sending me phishing links and send me some proper goddamn malware.

2024-06-23 23:58:17

It's Sunday evening and I'm reviewing domestic abuse cases, like a cool and normal person with good boundaries and work/life balance.

2024-06-20 05:46:03

Sometimes I will say something out loud and I will be reminded that not everyone is constantly assembling a heist team in their heads and pursuing new skills because they may be useful in a heist.

2024-06-19 00:54:41

"There are 948 words in this document. They can't ALL be wrong."
Things I say while editing.

2024-06-15 17:14:48

I have been tremendously lucky in my career, but I have absolutely seen men get paid more for the same or less work with the same or fewer qualifications and I have seen men praised as geniuses for behavior that gets me called a bitch.

2024-06-15 17:10:25

"The longer a woman works at Apple, the larger the gap in compensation she receives compared to similarly situated men," the proposed class action alleged.
https://arstechnica.com/tech-policy/2024/06/apple-deliberately-pays-women-less-than-men-lawsuit-says/

2024-06-13 23:31:26

This is terrible news:
https://www.platformer.news/stanford-internet-observatory-shutdown-stamos-diresta-sio/

2024-06-12 20:44:07

Sometimes the good guys win.
https://arstechnica.com/cars/2024/06/one-of-the-major-sellers-of-detailed-driver-behavioral-data-is-shutting-down/

2024-06-12 16:29:17

One of the most interesting things about this story is that the hacker allegedly gained access to "a database intended for law enforcement to identify owners of specific Tile trackers." I've had LE complain that they couldn't ID owners of specific trackers in the past.
https://www.theverge.com/2024/6/12/24176889/tile-life360-customer-data-breach-hacker-extortion

2024-06-10 22:58:58

letthemfight.gif
https://www.bloomberg.com/news/articles/2024-06-10/elon-musk-to-ban-apple-devices-if-openai-is-integrated-into-os

2024-06-09 19:58:05

Summer is here, which means that people are having Discourse about what weight women are allowed to reach before they should not be allowed to wear revealing clothing instead of just letting people wear clothes and shutting the hell up.

2024-06-09 02:14:44

Let there be no doubt that NSO Group is using the courts to harass the security researchers who have done the most to shed light on their years of misdeeds and lies.
https://theintercept.com/2024/05/06/pegasus-nso-group-israeli-spyware-citizen-lab/

2024-06-09 00:26:50

I went to see "Innocence" at the opera last night and I was perfectly fine until the survivor of a school shooting said it made her decide to become a doctor. It turns out that trauma survivors becoming the people who would have saved themselves stabs me directly in the feelings.

2024-06-07 17:25:17

Microsoft says they are making a bunch of changes to Recall to mitigate the many, many security and privacy problems that researchers have found over the last week:
https://www.theverge.com/2024/6/7/24173499/microsoft-windows-recall-response-security-concerns

2024-06-06 23:51:29

When AirTags first came out and I warned that they were Apple's gift to stalkers, so many Apple fanboys told me that I was overreacting.
https://www.404media.co/email/ce4cec4d-51c3-4101-b2b4-2c9a64aee5e8

2024-06-06 04:01:04

I try to be gracious and good rather than petty and mean, but sometimes bad things happen to bad people and I pop some popcorn, as a little treat.

2024-06-01 01:44:04

There are so many reasons you shouldn't use stalkerware and @npub1xvw…ksg7 lays them all out for you right here: https://techcrunch.com/2024/05/31/hacked-leaked-exposed-why-you-should-stop-using-stalkerware-apps/

2024-05-31 19:05:49

Who are the "supersharers" of fake news on Twitter? Republican Middle-aged white women living in Arizona, Florida, and Texas.
https://www.science.org/doi/10.1126/science.adl4435

2024-05-30 21:37:23

Yes, I know that guy still stands a good chance of winning the election in November, but this is your regular reminder that you can't fight a long fight without stopping to enjoy your victories or you will burn out to a cinder.

2024-05-29 17:59:21

"I cannot be phased by being condescended to by old white men in legislative meetings. I have worked many years in infosec and I am dead inside" is an actual thing I said in an all-hands meeting yesterday.

2024-05-28 22:02:20

If you, a white person, feel the need to disguise yourself as a black person for any goddamn reason, how about you just don't?

2024-05-26 21:22:50

There is nothing more American than bragging that you know a bunch of languages because you can stumble your way through a restaurant menu and nothing more European than fluently speaking 3+ languages while apologizing for your accent.

2024-05-23 17:23:00

As a person who enjoys live music, this is the kind of action I love to see.
“It is time to break up Live Nation-Ticketmaster,” US Attorney General Merrick Garland said in a statement announcing the lawsuit.
https://www.theverge.com/2024/5/23/24163083/live-nation-ticketmaster-doj-monopoly-lawsuit-break-up

2024-05-22 17:55:02

I keep writing "privacy for cats" instead of "privacy for cars" in my work calendar, which leads to a very different mental image of what my job looks like.

2024-05-22 06:15:42

A lot of people who are not experts in domestic abuse think they're making a clever point by informing me that if an abuser has physical access & login credentials, the game's already over.
I am very tired and do not have the energy to explain why making spying easier for abusers is bad, actually.

2024-05-22 00:24:59

"...a would-be hacker would need to gain physical access to your device, unlock it and sign in before they could access saved screenshots."
I've got some news for Microsoft about how domestic abuse works.
https://www.bbc.com/news/articles/cpwwqp6nx14o

2024-05-20 03:02:58

"I'm not listening to any more Dune takes from a guy who can't tell CHOAM from the Landsraad!" is a perfectly normal thing to yell while making brunch.

2024-05-16 21:28:38

Threat models matter.
When a platform/service/app tells you they are “private” or “secure” always ask “from whom?”
Criminals, domestic abusers, law enforcement, data brokers, and intelligence agencies are all different attackers with very different capabilities.

2024-05-16 19:42:51

When I talk about digital privacy, there is always some smug genius who shrugs and tells me, "Who cares? We all know we don't have any privacy anyway." Nothing could be more wrong. Convincing you that the fight is already over to the way people in power get you to stop resisting.

2024-05-15 20:29:02

"Cisgender is a slur" has some real "people pointing out racist behavior are the real racists" energy to it.

2024-05-14 23:46:13

If you own a Tesla, your car is covered in cameras that take images reviewed by Tesla employees, who share them with each other, joke about them, and make them into memes.
https://www.reuters.com/technology/tesla-workers-shared-sensitive-images-recorded-by-customer-cars-2023-04-06/

2024-05-14 19:42:16

I see that everything is going fine over at the Hellsite.
https://media.hachyderm.io/media_attachments/files/112/441/143/269/589/043/original/90ef70fec1df7738.png

2024-05-14 18:47:52

I have spent this week declining work requests that are unreasonable in scope or that make me uncomfortable and I would like a goddamn medal.

2024-05-13 18:01:37

I'm just a security researcher, standing in front of a journalist, asking them not to delete the file with the malicious attachment before calling me.

2024-05-10 18:25:28

Why yes, I am absolutely wearing this cut-off tshirt with an image of Artemisia Gentileschi’s Judith Beheading Holofrenes that says “Girl Dinner” to the talk I am giving this afternoon about tech-enabled abuse.

2024-05-09 18:01:33

Everything about Durov's statement is so profoundly dishonest that I feel like engaging in a point-by-point debunking is a waste of time. If most of the messages on your platform are not end-to-end encrypted AT ALL, it is less private and secure than platforms whose messages are all e2e by default.
https://t.me/durov/274

2024-05-08 17:39:43

This is your regular reminder that most communications on Telegram are not end-to-end encrypted. Channels and groups are never end-to-end encrypted and 1-on-1 messages are only end-to-end when explicitly enabled.

2024-05-07 18:25:40

Buying a new car in 2024 is a goddamn privacy nightmare, part 3591 of an endless series: https://sherwood.news/tech/how-to-opt-out-of-the-privacy-nightmare-that-comes-factory-installed-in-new/

2024-05-07 00:21:04

Do not stare into the abyss, lest you be invited to keynote the abyss.

2024-05-06 19:07:46

"You are absolutely not going to like what I have to say about this thing you have invited me to keynote about" is my whole vibe.

2024-05-06 01:02:58

The saddest thing about meeting other high-profile women and enbys in infosec is the part where you compare your lists of stalkers and chronic harassers.

2024-05-05 06:32:48

Welp. It was definitely a good week to talk to a bunch of college CISOs about campus surveillance.

2024-05-02 15:15:54

I cannot overstate how dangerous to free speech and a healthy democracy it is to redefine all anti-Zionism and criticism of the state of Israel as antisemitism. You know who's loudly critical of Zionism and the Israeli govt? Jews. A lot of Jews.
https://forward.com/fast-forward/608308/gop-democrats-antisemitism-campus-israel/

2024-04-27 04:02:54

It is now the time after my company-wide retreat when I come home and mentally review every single thing I said to my co-workers that was awkward or weird.

2024-04-21 21:00:48

Grappling with the realization that I might be done going to DEFCON.

2024-04-20 17:11:37

4/20 is the single worst day in San Francisco to try to do anything near Golden Gate Park, which is unfortunate because I have things to do near Golden Gate Park.

2024-04-19 18:57:27

We are living in the worst possible timeline.
https://www.middleeasteye.net/news/disturbing-recordings-crying-infants-played-israeli-quadcopters-lure-gaza-residents-shooting

2024-04-15 20:21:56

If you're the person who stole the package from my foyer, I hope you're enjoying Police and the Empire City: Race and the Origins of Modern Policing in New York.

2024-04-14 22:37:16

The flea markets at Saint Ouen in Paris are the most intense shopping experience known to man. I walked up some stairs in Marche Dauphine and told my friends, “I regret to inform you that this entire floor is vintage clothing. We may never leave this place.”

2024-03-31 21:41:37

This is your regular reminder that "I did this thing 20 years ago" is not the same thing as "I have 20 years of experience." It's not even an indicator that you have any idea of how things are done now.

2024-03-31 03:19:25

My co-worker has proposed an AI chatbot that answers every legal question with a long sigh and "it depends..."
This chatbot could also be used for digital privacy and security advice.

2024-03-29 15:55:58

The Canadian government clutches its pearls over the Flipper Zero and EFF is not impressed. With bonus toilet-hacking from [@zoracon](https://infosec.exchange/@zoracon): https://www.eff.org/deeplinks/2024/03/restricting-flipper-zero-accountability-approach-security-canadian-government

2024-03-21 00:11:46

"I was very busy at work and did not have time to catch up on the latest 'Is this dick sick?' news" is an actual sentence that I said today.

2024-03-20 01:19:01

Listen, I understand that people believe I exist in an endless state of incandescent rage, but they are going to have to invent new words for how angry I am about Glassdoor adding real names without users' consent.
https://arstechnica.com/tech-policy/2024/03/glassdoor-adding-users-real-names-job-info-to-profiles-without-consent/