Martin / is on Nostr

Principal researcher at @freedomofpress. Learning from and supporting journalists with digital security.

Last Notes

2024-05-29 06:38:11

"Your scientists were so preoccupied with whether or not they could, they didn't stop to think if they should." https://www.washington.edu/news/2024/05/23/ai-headphones-noise-cancelling-target-speech-hearing/

2024-05-09 20:36:56

I like how Elon's own community notes fact check him on @npub1qml…mdus.
https://files.mastodon.social/media_attachments/files/112/412/568/334/301/766/original/9255be7a3d029349.png

2024-05-02 00:48:19

Talk about narrativizing… Even for a ubiquitous bike lock brand (Kryptonite) this is probably one of the most recognizable consumer bike locks in larger cities like NYC, where bike theft is common. It's literally called the "New York Fahgettaboudit Chain." Amazing. https://www.404media.co/email/1cc25606-201a-4f10-87ce-aeefa8285c3f/

2024-04-23 00:39:36

Welp, here's some nightmare fuel. FISA 702 expansion is even worse than I thought.
"Legal experts—including a rare few attorneys who’ve argued cases before the FISA court in the past—say the new ECSP text ensnares owners of facilities housing equipment used to store and carry data, as well as commercial landlords and virtually anyone with access to communications equipment in those spaces." https://www.wired.com/story/section-702-reauthorization-expansion/

2024-04-08 22:56:26

We are hiring a digital security training intern! Unfortunately you'd have to work with me a lot. Sorry. But it's otherwise tons of fun. You'd learn from and work with journalists. You'd also contribute back to the broader community by writing about journalistic digital security practices. Apply here. https://freedom.press/jobs/?gh_jid=4400365005

2024-03-13 23:27:16

Updated our Spanish language "Signal for beginners" and "locking down Signal" guides to include new changes to usernames. Check them out:
- https://freedom.press/training/signal-la-app-de-mensajeria-segura-guia-para-principiantes/
- https://freedom.press/training/proteccion-avanzada-para-signal/

2024-03-13 00:25:32

We're working a paper and will release more soon buuut… For some research I'm reviewing a ton of U.S.-based news tip pages.
A few preliminary observations (of about 100 so far… More to come):
- ~25% have a newsroom Signal account
- ~25% have an embed form
- ~15% so far have a PGP email. Of those, close to half use ProtonMail
- ~8% discontinued the use of WhatsApp over the past few years. They also happen to be some heavy hitters (NYT, WaPo, Reuters, AP and more)
- A few are leaking DNS/SNI 🫣

2024-02-20 23:47:24

Digisec nerds everywhere shortly after @npub1qml…mdus announcements today
https://files.mastodon.social/media_attachments/files/111/966/236/093/051/345/original/e9a396c89bd526a7.png

2024-02-07 21:24:10

"While a story of a toothbrush DDoS botnet taking down a site is amusing (and almost definitely untrue), it’s still a good reminder that threat actors would target any Internet-exposed device. This includes routers, servers, programmable logic controllers (PLCs), printers, and web cameras."
Might add, the only winning move is not to play. When possible and practical, keep it offline. https://www.bleepingcomputer.com/news/security/no-3-million-electric-toothbrushes-were-not-used-in-a-ddos-attack/

2023-08-30 21:54:12

"A fake version of the private messaging app Signal has found a way onto Google Play and appears to be linked to a Chinese spy operation, researchers claimed on Wednesday." https://www.forbes.com/sites/thomasbrewster/2023/08/30/malicious-signal-app-planted-on-google-play-by-china-linked-cyber-spies/

2023-07-12 18:44:39

This is wild. The French Parliament overwhelmingly voted in favor of a police reform bill that would give the state invasive new powers.
"French police should be able to spy on suspects by remotely activating the camera, microphone and GPS of their phones and other devices, lawmakers agreed" https://www.lemonde.fr/en/france/article/2023/07/06/france-set-to-allow-police-to-spy-through-phones_6044269_7.html