The disgraced financier’s Kindle library reveals his interests in Lolita, how the elite avoid accountability, and Trump’s many scandals.

Today, I published my first article in Zeteo, alongside the amazing journalist Prem Thakker: Zeteo Scoured 26,000 Epstein Docs. Here’s What We Found. The latest Epstein dataset that the House Oversight Committee released is bonkers. It shows absolute elite impunity, and it implicates rich assholes like Donald

In case you missed it, last week I was on an episode of the kill switch podcast. I discussed the ICEBlock app and why it was activism theater, and how the developer handled my vulnerability report in the worst possible way. But I also talk about why, even though I

I gave the Saturday morning keynote at BSidesPDX! I spoke honestly and frankly about the terrifying reality that Americans are facing under Trump's fascist regime, alongside practical advice for communities to defend themselves. Watch my talk below. Of if you prefer reading articles over watching video, I'

I'll be giving the Saturday morning keynote at BSidesPDX next weekend in beautiful Portland, Oregon. I'm still putting the final touches on my talk, but it will largely be about the new American technofascist reality of mercenary spyware, device searches, and app censorship, with a focus

Last week, I wrote about how Joshua Aaron's ICEBlock app, which allows people to anonymously report ICE sightings within a 5-mile radius, is – unfortunately, and despite apparent good intentions – activism theater. This was based on Joshua's talk at HOPE where he made it clear

At this summer's HOPE conference, Joshua Aaron spoke about ICEBlock, his iPhone app that allows users to anonymously report ICE sightings within a 5 mile radius, and to get notifications when others report ICE sightings near them. You can see the full talk, and the lively/infuriating Q&

I just gave my first solo main stage DEFCON talk, about Signalgate, and I think it was a resounding success! The room was packed – apparently people were waiting outside to get in. I got tons of positive feedback, and no negative feedback (though, someone told me a boomer sitting

Hacker Summer camp is upon us. If you're going to DEFCON, make sure to check out my talk! It's **Saturday at 4pm**. Here are the details: ### "We are currently clean on OPSEC": The Signalgate Saga Saturday at 16:00 in LVCC - L1 -

Things are heating up. Millions of people are taking to the streets against Trump's rising authoritarianism. Communities around the US are organizing to defend against ICE raids, to protest Israeli genocide, for mutual aid, and for other forms of fighting fascism. Signal can help people safely organize in

I've spent the last week or two writing code to make sense of the massive hack of data from TeleMessage, the comically insecure company that makes a modified Signal app that Trump's former national security advisor Mike Waltz was caught using. I've decided to

💡 ****Update May 26, 2025:**** I've published the source code for TeleMessage Explorer: a new open source research tool I've been digging through the 410 GB of Java heap dumps from TeleMessage's archive server, provided by DDoSecrets. Here's a description of the

💡 ****Update May 21, 2025:**** I've written a new detailed analysis of the heap dump dataset itself: TeleMessage customers include DC Police, Andreessen Horowitz, JP Morgan, and hundreds more ****Update May 26, 2025:**** I've published the source code for TeleMessage Explorer: a new open source research

💡 ****Update May 19, 2025:**** Uh oh: DDoSecrets publishes 410 GB of heap dumps, hacked from TeleMessage's archive server ****Update May 21, 2025:**** I've written a new detailed analysis of the heap dump dataset itself: TeleMessage customers include DC Police, Andreessen Horowitz, JP Morgan, and hundreds

Kyle Schutt is a 37 year old "DOGE software engineer," according to ProPublica. In February, Drop Site News reported that he gained access to FEMA's "core financial management system." His computer was apparently compromised with malware, because his email address and passwords have shown

Despite their misleading marketing, TeleMessage, the company that makes a modified version of Signal used by senior Trump officials, can access plaintext chat logs from its customers. In this post I give a high level overview of how the TeleMessage fake Signal app, called TM SGNL, works and why it&

TeleMessage, a company that makes a modified version of Signal that archives messages for government agencies, was hacked.