Paragon’s Graphite isn’t magical, it’s just malware. It still needs a zero day exploit to compromise a phone with updated software. The best thing you can do to protect yourself against Graphite is keep your phone up to date and enable Lockdown Mode on iPhone or Advanced Protection Mode on Android.
you taking notes on a criminal conspiracy from the wire
DON'T POST ABOUT CRIMES
DON'T POST ABOUT DIRECT ACTIONS
DON'T POST ABOUT PROTEST
DON'T POST ABOUT ORGANZING
DON'T POST ABOUT DIY HRT
DON'T POST JOKES AND GET A CALL FROM THE FEDS
SHUT THE FUCK UP EVERYDAY
SHUT THE FUCK UP ALL DAY
SHUT THE FUCK UP FOREVER.
Iran is going to win the Super Bowl next year
We should be talking a lot more about how the San Francisco tech scene is populated by a strange cult of doom acceleration nerds who fantasize about using computers to destroy humanity.
www.newyorker.com/culture/the-...
a nice thing about when the internet was a bunch of little sites and servers was that it was a lot harder for governments to pressure "the chat provider everyone uses" to implement age verification.
you wanna pressure 300 separate IRC servers? good luck with that. but one company? easy
Some of us have been moving in this space for years or decades, and we have *seen* people bear the consequences of bad opsec or becoming famous in the press.
People have had their lives ruined, people have *died*. If you can't fathom that, please, listen to those who know.
Thank fucking CHRIST someone old like me is still around/saying the same thing. I was in those spaces and also got out around a decade ago. The few other people I know from those spaces/time scream this point over and over and everyone looks at us like we're insane.
I read thousands of pages of Epstein files this weekend trying to understand what he wanted out of his meeting with 4chan's Christopher Poole. Here's everything we know about Epstein's plans to dismantle the internet and, eventually, democracy.
www.garbageday.email/p/here-s-how...
A screenshot of an Associated Press article: "Groundhog Day highlights: Punxsutawney Phil predicts 6 more weeks of winter"
As if things couldn't get any worse!
![To:
Jeffrey Epsteinfjeevacation@gmail.com]
From:
Sent:
Wed 5/28/2014 3:23:21 AM
Subject:
Before being freed, hacker Sabu was 'extraordinary' FBI informant - Los Angeles Times
Hire this kid. Im serious.
http://www.latimes.com/nation/la-na-hacker-sentencing-20140528-story.html](https://cdn.bsky.app/img/feed_thumbnail/plain/did:plc:2nhudqe7uplgqvnt72p2vxnb/bafkreihpbi47jhfmzxfknwwhkdhyk5fv6sboi6mpoaxnpfovyzpnkhkk6m)
To: Jeffrey Epsteinfjeevacation@gmail.com] From: Sent: Wed 5/28/2014 3:23:21 AM Subject: Before being freed, hacker Sabu was 'extraordinary' FBI informant - Los Angeles Times Hire this kid. Im serious. http://www.latimes.com/nation/la-na-hacker-sentencing-20140528-story.html
Well shit, here we go again with the latest Epstein files drop.
Here’s an email from someone to Jeffrey Epstein telling him that he should hire Anonymous snitch sabu.
www.justice.gov/epstein/file...
you, yes you, are not qualified to give opsec advice to people whom you do not have a threat model for nor even remotely know personally
To whom it may concern, Distributed Denial of Secrets has moved our domain to ddosecrets.org immediately. Please switch all links and email addresses from .com to .org right away. If you receive any email from an @ddosecrets.com address it is illegitimate; please contact us immediately by Signal or social media and let us know if you receive email from our old domain. Our Signal and Cwtch contacts and onion addresses remain unchanged. Technical details follow. Our domain registration lapsed on January 28th. Our domain registrar had invalid contact information, and so we were not notified that domain auto-renewal had failed until they released the domain name and it was purchased by a domain squatter. To our knowledge no services have been deployed maliciously using our old domain, and no emails have been sent from our old addresses. User data, publicly published, and limited distribution data has not been compromised. Our document submission system Globaleaks is unaffected, and libraryofleaks.org remains unchanged. All of our servers are online and intact, just with a new domain name. We will keep you updated as the situation develops. This statement can be confirmed by: DDoSecrets social media - https://bsky.app/profile/ddosecrets.org https://kolektiva.social/@ddosecrets Emma Best - https://bsky.app/profile/emma.best https://kolektiva.social/@mxy Milo Trujillo - https://bsky.app/profile/backdrifting.net https://kolektiva.social/@illegaldaydream
DDoSecrets has moved from .com to ddosecrets.org - spread the word!
🚨 I've obtained a list of secret watchlists the Department of Homeland Security uses to keep tabs on American citizens
www.kenklippenstein.com/p/ices-secre...
Elite criminal hackers get rolled all the time based on tiny things they trip up on, because Security is not something you can buy and the human self is not a reliable actor on discipline.
100% this. Signal itself is secure, but it is only as secure as the devices it is installed on. If someone in you Signal messages either willingly or unwillingly has their device compromised -- Signal cannot protect you.
What can we do about this? Mitigate risk by setting auto-deleting messages.
remember, you can yell scream and curse at the political fundraising texts, but DO NOT reply with an actionable threat because the US attorney’s office considers the volunteer batch sending them to be a live human recipient of that message. it’s not just a bot. those cases can and do get charged.
Also huge shout out to ProtoPasta (who I do not believe is on this website) because they have now shipped stacks of filament to multiple members of our group, completely for free, just to support this cause. 💓
If you're a fan, thank them for being awesome!
proto-pasta.com
I've been reminding myself of this so much recently.
Trying to frame threat modeling your digital privacy and security needs as achievable and approachable while acknowledging that assessing risk is hard for people who don't understand how the technology works or where their data lives is necessary but hella exhausting.
"...everything i feared in 2010 about authoritarianism, the rise of nationalist movements across the world, the sprawling and more entrenched police and intelligence and military apparatus all over the world ... towards full blown genocide and ethnic cleansing in the US" - chelsea manning, 2018
Stick phone out, don't scan code, get beat.
Stick phone out, do scan code, install government malware, get beat.
We can DEFINITELY trust the QR code to be non-malicious... I say with an EICAR patch on my bag.
This is a great fucking idea...
If your concept is believing "we're from the government and we're here to help" then you don't have a real concept. Think for more than seven total seconds🤦
Let's just say this is a viable option (WHICH IT ISN'T)... what's to stop an ICE agent replacing that QR code with something that is malicious like a link to zero-click malware? Now feds don't even need to hack phones, protesters will just willingly pwn themselves. This is just fucking stupid...
EVEN IF THIS WAS AN ACTUAL SOLUTION... I can think of nine (9) different ways this goes south. "YES CITIZEN! USE YOUR PERSONAL PHONE TO SCAN THIS GOVERNMENT ISSUED QR CODE! WE CAN BE TRUSTED!"
Jesus Christ are we fucking stupid?!
Hentai will go down in history as the car phone of erotic art
Man people really haven’t taken the regular reminders not to announce felonies or make threats that could be legally construed as criminal on Bluesky on board huh.
