John Scott-Railton
@jsrailton.bsky.social
26K followers 460 following 550 posts
Chasing digital badness. Senior Researcher at Citizen Lab, but words here are mine.
Posts Media Videos Starter Packs
jsrailton.bsky.social
You don't even need to read the article to know this is a durian.
jsrailton.bsky.social
Thats fascinating...

I've always wondered about this...
jsrailton.bsky.social
I hear you. Sadly the reason is because, as age verification mandates grow...people have no choice if they want to use a key service.
jsrailton.bsky.social
Proponents say age verification = showing your ID at the door to a bar.

But the analogy is often wrong.

It's more like: bouncer photocopies some IDs, & keeps them in a shed around back.

There will be more breaches.

By @jaypeters.net
www.theverge.com/news/792032/...
Discord customer service data breach leaks user info and scanned photo IDs
An “unauthorized party” may have accessed the names of users, the last four digits of credit card numbers, and more.
www.theverge.com
jsrailton.bsky.social
NEW: breach of Discord age verification data.

Including some users passports & DLs

Age verification is a badly implemented data grab wrapped in a moral panic.

Mark my words, as age verification mandates expand, we'll end up more surveilled and less secure. 1/
jsrailton.bsky.social
2/ Backdoors are not the way to make us safer.

They insert vulnerable bad things right at the place where we need the strongest protections.

This latest attempt to demand access is *yet another* unreasonable, secret demand on Apple (a TCN) from the Home Office....
jsrailton.bsky.social
NEW: UK asked Apple to backdoor iCloud encryption.

Backdoors create a massive target for hackers & criminal groups.

Dictators will inevitably demand that Apple do the same for them. 1/

www.ft.com/content/d101...
jsrailton.bsky.social
3/ This is your reminder that the EU continues to be a hotbed of spyware scandals & hypocrisy from lawmakers.

Great to see these MEPs & political groups bucking the trend & leaning in to call for change.

bsky.app/profile/sask...
saskiabricmont.bsky.social
Public money is funding spyware!

With 39 MEPs from 4 political groups, we are writing to the @ec.europa.eu to express deep concerns following @ftm.eu revelations that EU financed spyware companies!

This must stop! We call on full transparency and follow up on the PEGA committee recommendations!
jsrailton.bsky.social
2/ The mercenary spyware crisis is fueled by your pensions & tax dollars.

Whether it's Oregon public employees or Alaskans, Europeans or folks in South Yorkshire...

The Fund managers stewarding your cash bear a heavy ethical responsibility for the harms they turbocharged.
bsky.app/profile/vasp...
vaspanagiotopoulos.com
🚨 The 🇪🇺 European Investment Fund (EIF), provided venture capital for Israeli #spyware firm Paragon Solutions, confirmed a spokesperson for the European Investment Bank Group, to which the EIF belongs, @apache.be is reporting.

apache.be/2025/10/01/e...
European Investment Fund financed Israeli spyware company Paragon
Paragon's spyware has been used against activists by multiple governments.
apache.be
jsrailton.bsky.social
NEW: turns out the EU helped finance a bunch of spyware companies with..public money.

Extremely bad look.

Group of MEPs calls for action.👇

apache.be/2025/10/01/e...
jsrailton.bsky.social
Friend,

Does scrolling leave you hollowed?

Is anger frictionless...but thinking like swimming against the current?

You're in an algorithmic rip tide.

Your mental clarity is the target.

Take a beat and step out

Connect with your own thoughts.

It's what designers of these algorithms fear most.
jsrailton.bsky.social
Amazing. Essential question here.
jsrailton.bsky.social
THANK YOU FOR YOUR ATTENTION TO THIS MATTER
jsrailton.bsky.social
Powerful interests are trying to change the internet.

It's worse than you know.

Your safety and freedoms are on the line.

Thank you for your attention to this matter.

www.youtube.com/watch?v=iz_8...
Exposing Pegasus: How the State Spies on You | John Scott-Railton
YouTube video by What Bitcoin Did
www.youtube.com
jsrailton.bsky.social
13/ The US uses also Paragon's tech at their counterintelligence peril.

Past analyses by the US highlighted how foreign spyware acquisition introduce national security & counterintelligence downsides when the company's technology is developed by foreign companies & foreign gov adjacent individuals.
jsrailton.bsky.social
12/ Finally & unfortunately: as of right now I am pretty confident that no publicly available / commercially developed third party tool can reliably detect Paragon spyware.

Beware a false sense of security.
jsrailton.bsky.social
11/ What can you do? Go call your member of Congress. Ask them to get briefed. Ask for oversight.

And on a personal level? Apple's Lockdown Mode & Android Advanced Protection both offer some serious security benefits but neither is a silver bullet..
jsrailton.bsky.social
10/ After 14 years of working on this topic, I tell you this with confidence:

Highly invasive mercenary spyware is a power abuse machine.

It's incompatible with Americans constitutional rights and freedoms.

And our legal system and civil society is not prepared for the next chapter.
jsrailton.bsky.social
9/ Fast forwards to last weekend and the US government abruptly reopened the door for the spyware company:

"This contract is for a fully configured proprietary solution including license, hardware, warranty, maintenance, and training. This modification is to lift the stop work order."
jsrailton.bsky.social
8/ The Italian scandal didn't finish cleanly.

While the Italian authorities admitted to targeting activists, they didn't take responsibility for hacking the journalists.

Meaning that some of the most troubling Paragon victims are still seeking answers.
jsrailton.bsky.social
6/ Almost immediately after the WhatsApp notifications, we started learning about the targets.

They weren't the supposed serious criminals...

They were Journalists... human rights defenders...groups working on sea rescue of migrants.. etc

[email protected]
www.theguardian.com/technology/2...
jsrailton.bsky.social
5/ Then in early 2025 #Paragon's rosy image met reality.

#WhatsApp caught the company hacking people across their networks & notified targets.

We worked with several & did a forensic analysis of their devices.

Cases started coming out fast...

By @raphae.li
www.reuters.com/technology/c...