Martin
@mshelton.bsky.social
Digisec @freedom.press. Was that @mshelton guy on the other site.
Mastodon: https://mastodon.social/@mshelton
Digisec newsletter: https://freedom.press/newsletters
Mastodon: https://mastodon.social/@mshelton
Digisec newsletter: https://freedom.press/newsletters
I receive a shiny new YubiKey, but my 2FA is on my previous two YubiKeys.
The result: I now use three YubiKeys.
The result: I now use three YubiKeys.
December 3, 2025 at 6:17 PM
I receive a shiny new YubiKey, but my 2FA is on my previous two YubiKeys.
The result: I now use three YubiKeys.
The result: I now use three YubiKeys.
Reposted by Martin
I work at @freedom.press. I'm told it's some sort of holiday for donating to nonprofits.
My team supports journalists with digital security for themselves and sources. In 2025, I really do think this matters more than ever. If this is something you care about, support our work. freedom.press/donate
My team supports journalists with digital security for themselves and sources. In 2025, I really do think this matters more than ever. If this is something you care about, support our work. freedom.press/donate
freedom.press
December 2, 2025 at 9:24 PM
I work at @freedom.press. I'm told it's some sort of holiday for donating to nonprofits.
My team supports journalists with digital security for themselves and sources. In 2025, I really do think this matters more than ever. If this is something you care about, support our work. freedom.press/donate
My team supports journalists with digital security for themselves and sources. In 2025, I really do think this matters more than ever. If this is something you care about, support our work. freedom.press/donate
I work at @freedom.press. I'm told it's some sort of holiday for donating to nonprofits.
My team supports journalists with digital security for themselves and sources. In 2025, I really do think this matters more than ever. If this is something you care about, support our work. freedom.press/donate
My team supports journalists with digital security for themselves and sources. In 2025, I really do think this matters more than ever. If this is something you care about, support our work. freedom.press/donate
freedom.press
December 2, 2025 at 9:24 PM
I work at @freedom.press. I'm told it's some sort of holiday for donating to nonprofits.
My team supports journalists with digital security for themselves and sources. In 2025, I really do think this matters more than ever. If this is something you care about, support our work. freedom.press/donate
My team supports journalists with digital security for themselves and sources. In 2025, I really do think this matters more than ever. If this is something you care about, support our work. freedom.press/donate
I remember being a kid, fiddling with these on the plane and not realizing they were vestigial, much like the overhead tube televisions where everyone watched one movie, or the assumption that air traffic controllers would get paid money for their disproportionately important labor.
November 23, 2025 at 2:17 AM
I remember being a kid, fiddling with these on the plane and not realizing they were vestigial, much like the overhead tube televisions where everyone watched one movie, or the assumption that air traffic controllers would get paid money for their disproportionately important labor.
Oh hey guys, I took a break from social media what’s going… Uhhh.
November 22, 2025 at 8:34 AM
Oh hey guys, I took a break from social media what’s going… Uhhh.
Reposted by Martin
New: A judge in Washington has ruled images from Flock surveillance cameras are public records and that anyone can request them. Highlights the pervasiveness of this tech and just how much surveillance is being done. Very notable ruling
www.404media.co/judge-rules-...
www.404media.co/judge-rules-...
Judge Rules Flock Surveillance Images Are Public Records That Can Be Requested By Anyone
A Washington judge said images taken by Flock cameras are "not exempt from disclosure" in public record requests.
www.404media.co
November 12, 2025 at 3:22 PM
New: A judge in Washington has ruled images from Flock surveillance cameras are public records and that anyone can request them. Highlights the pervasiveness of this tech and just how much surveillance is being done. Very notable ruling
www.404media.co/judge-rules-...
www.404media.co/judge-rules-...
Reposted by Martin
Good article about the state of America
www.poynter.org/business-wor...
www.poynter.org/business-wor...
When your local reporter needs the same protection as a war correspondent - Poynter
Five months of covering ICE raids taught our small LA newsroom hard lessons — and we're still figuring out how to sustain it
www.poynter.org
November 11, 2025 at 1:53 PM
Good article about the state of America
www.poynter.org/business-wor...
www.poynter.org/business-wor...
Reposted by Martin
This has been an extraordinary set of data to process: 1.3B unique passwords, 2B unique email addresses (including mine 😭) and almost 3M of our @haveibeenpwned.com subscribers in there. It’s been weeks of processing to get this loaded, and finally, it’s done www.troyhunt.com/2-billion-em...
2 Billion Email Addresses Were Exposed, and We Indexed Them All in Have I Been Pwned
I hate hyperbolic news headlines about data breaches, but for the "2 Billion Email Addresses" headline to be hyperbolic, it'd need to be exaggerated or overstated - and it isn't. It's rounded up from ...
www.troyhunt.com
November 6, 2025 at 5:09 AM
This has been an extraordinary set of data to process: 1.3B unique passwords, 2B unique email addresses (including mine 😭) and almost 3M of our @haveibeenpwned.com subscribers in there. It’s been weeks of processing to get this loaded, and finally, it’s done www.troyhunt.com/2-billion-em...
Reposted by Martin
New from 404 Media: someone managed to get into a Microsoft Teams call with phone hackers Cellebrite, who then detailed some of the company's hacking capabilities against Google Pixel phones. Also its capabilities against GrapheneOS, security-focused devices www.404media.co/someone-snuc...
Someone Snuck Into a Cellebrite Microsoft Teams Call and Leaked Phone Unlocking Details
The leaked slide focuses on Google Pixel phones and mentions those running the security-focused GrapheneOS operating system.
www.404media.co
October 30, 2025 at 3:12 PM
New from 404 Media: someone managed to get into a Microsoft Teams call with phone hackers Cellebrite, who then detailed some of the company's hacking capabilities against Google Pixel phones. Also its capabilities against GrapheneOS, security-focused devices www.404media.co/someone-snuc...
Reposted by Martin
Here's a good rundown of why facial recognition is often inaccurate in the wild (as opposed to in a lab environment).
www.techpolicy.press/why-we-shoul...
www.techpolicy.press/why-we-shoul...
October 29, 2025 at 5:24 PM
Here's a good rundown of why facial recognition is often inaccurate in the wild (as opposed to in a lab environment).
www.techpolicy.press/why-we-shoul...
www.techpolicy.press/why-we-shoul...
Great news. In recent years, nearly all page loads are secured with HTTPS by default, so there's very little downside to just protecting people by blocking risky connections by default. security.googleblog.com/2025/10/http...
HTTPS by default
One year from now, with the release of Chrome 154 in October 2026, we will change the default settings of Chrome to enable “Always Use Secu...
security.googleblog.com
October 28, 2025 at 9:05 PM
Great news. In recent years, nearly all page loads are secured with HTTPS by default, so there's very little downside to just protecting people by blocking risky connections by default. security.googleblog.com/2025/10/http...
Reposted by Martin
NEW: CBP searched a record 55,424 devices at the US border over the past 12 months. While these searches are rare compared to the number of travelers, the data shows a notable uptick over the past six months. @mattburgess1.bsky.social and @dell.bsky.social w/ the scoop: www.wired.com/story/cbp-se...
CBP Searched a Record Number of Phones at the US Border Over the Past Year
The total number of US Customs and Border Protection device searches jumped by 17 percent over the 2024 fiscal year, but more invasive forensic searches remain relatively rare.
www.wired.com
October 28, 2025 at 3:29 PM
NEW: CBP searched a record 55,424 devices at the US border over the past 12 months. While these searches are rare compared to the number of travelers, the data shows a notable uptick over the past six months. @mattburgess1.bsky.social and @dell.bsky.social w/ the scoop: www.wired.com/story/cbp-se...
I didn't watch baseball this evening, and heard it took a very long time. I'm told by not watching it, my lifespan therefore extended significantly
October 28, 2025 at 6:00 AM
I didn't watch baseball this evening, and heard it took a very long time. I'm told by not watching it, my lifespan therefore extended significantly
Reposted by Martin
Google and Apple should add a device-level AI permission, just like it does for other potentially invasive privacy features, like location, to their phones. www.eff.org/deeplinks/2...
When AI and Secure Chat Meet, Users Deserve Strong Controls Over How
Both Google and Apple are cramming new AI features into their phones and other devices, and neither company has offered clear ways to control which apps those AI systems can access. Recent issues
www.eff.org
October 25, 2025 at 10:00 PM
Google and Apple should add a device-level AI permission, just like it does for other potentially invasive privacy features, like location, to their phones. www.eff.org/deeplinks/2...
Reposted by Martin
“I am not interested, nor will I ever be interested. I'm 61, and I hope to be able to remain uninterested in using it at all until I croak. ... The other day, somebody wrote me an email, said, ‘What is your stance on AI?’ And my answer was very short. I said, ‘I'd rather die.’” 🫡
Filmmaker Guillermo del Toro says 'I'd rather die' than use generative AI
Del Toro's new Frankenstein adaption reimagines Mary Shelley's 1818 Gothic novel. Frankenstein was like a tech bro: "creating something without considering the consequences," he explains.
www.npr.org
October 23, 2025 at 10:08 PM
“I am not interested, nor will I ever be interested. I'm 61, and I hope to be able to remain uninterested in using it at all until I croak. ... The other day, somebody wrote me an email, said, ‘What is your stance on AI?’ And my answer was very short. I said, ‘I'd rather die.’” 🫡
As a person who has studied use of secure messaging tools among journalists, this is both the most interesting and most awful time because the U.S. government keeps using Signal in the goofiest ways
October 24, 2025 at 5:40 AM
As a person who has studied use of secure messaging tools among journalists, this is both the most interesting and most awful time because the U.S. government keeps using Signal in the goofiest ways
Reposted by Martin
In case you haven't had enough cyber for one day...
I'm re-upping my deep-dive blog on why ad-blockers are critical for your online security and privacy, and what threats they can help defend against. Plus, I run through some of the best ad blockers out there, for your browser and beyond.
I'm re-upping my deep-dive blog on why ad-blockers are critical for your online security and privacy, and what threats they can help defend against. Plus, I run through some of the best ad blockers out there, for your browser and beyond.
Why ad blockers are a top security and privacy defense for everyone
Ad blockers can help defend against some of the top hacks, scams, and surveillance today. Here are some of the best ad blockers that you can use.
this.weekinsecurity.com
October 23, 2025 at 10:34 PM
In case you haven't had enough cyber for one day...
I'm re-upping my deep-dive blog on why ad-blockers are critical for your online security and privacy, and what threats they can help defend against. Plus, I run through some of the best ad blockers out there, for your browser and beyond.
I'm re-upping my deep-dive blog on why ad-blockers are critical for your online security and privacy, and what threats they can help defend against. Plus, I run through some of the best ad blockers out there, for your browser and beyond.
WhatsApp also has a fun habit of asking users to back up their messages to iCloud or Google Drive in regular told human-readable text. Even if you do everything right, the people you are talking to might not appreciate this risk.
If you have the choice, go for Signal. freedom.press/digisec/blog...
If you have the choice, go for Signal. freedom.press/digisec/blog...
October 23, 2025 at 3:10 AM
WhatsApp also has a fun habit of asking users to back up their messages to iCloud or Google Drive in regular told human-readable text. Even if you do everything right, the people you are talking to might not appreciate this risk.
If you have the choice, go for Signal. freedom.press/digisec/blog...
If you have the choice, go for Signal. freedom.press/digisec/blog...
Reposted by Martin
the most popular smartphone maker in history literally had to stop using "AI" because it would constantly just make things up and had zero contextual "understanding" of what it was doing
October 21, 2025 at 10:19 PM
the most popular smartphone maker in history literally had to stop using "AI" because it would constantly just make things up and had zero contextual "understanding" of what it was doing
Helluva story. Lindsey Halligan, the U.S. attorney on the Letitia James case, apparently asked to have her Signal messages with Lawfare's Anna Bower taken off the record after the fact. That's not how this works. That's not how any of this works. www.lawfaremedia.org/article/anna...
“Anna, Lindsey Halligan Here.”
My Signal exchange with the interim U.S. attorney about the Letitia James grand jury.
www.lawfaremedia.org
October 20, 2025 at 11:56 PM
Helluva story. Lindsey Halligan, the U.S. attorney on the Letitia James case, apparently asked to have her Signal messages with Lawfare's Anna Bower taken off the record after the fact. That's not how this works. That's not how any of this works. www.lawfaremedia.org/article/anna...
Reposted by Martin
The plan? Act like a jackass and then say, ha, I was only acting like jackass, you got trolled
October 19, 2025 at 7:37 PM
The plan? Act like a jackass and then say, ha, I was only acting like jackass, you got trolled
Reposted by Martin
ICE "has been rapidly building out its surveillance capabilities in recent weeks, signing a string of contracts for technologies to identify individuals by their irises or facial features and to monitor their cellphone activity, social media posts and physical movements," per spending disclosures.
ICE amps up its surveillance powers, targeting immigrants and antifa
Iris scanners, facial recognition apps, phone-hacking software and cellphone location data are among the agency’s recent technological purchases.
www.washingtonpost.com
October 17, 2025 at 11:14 AM
ICE "has been rapidly building out its surveillance capabilities in recent weeks, signing a string of contracts for technologies to identify individuals by their irises or facial features and to monitor their cellphone activity, social media posts and physical movements," per spending disclosures.
I'll just leave this here… techcrunch.com/2025/10/16/a...
Amazon's Ring to partner with Flock, a network of AI cameras used by ICE, feds, and police | TechCrunch
Agencies that use Flock can request that Ring doorbell users share footage to help with "evidence collection and investigative work."
techcrunch.com
October 16, 2025 at 10:34 PM
I'll just leave this here… techcrunch.com/2025/10/16/a...