xstevens's Avatar

xstevens

@xstevens.dev

Security Researcher https://infosec.exchange/@xstevens FKA twitter/@xstevens

79
Followers
161
Following
14
Posts
27.11.2024
Joined
Posts Following

Latest posts by xstevens @xstevens.dev

Preview
Where Trump's money comes from (and other mysteries) This week's newsletter covers a range of topics: The president's complex network of companies, how weather has gotten worse, a new tool to visualize the whole world at once. But I did reserve some tim...

Inspired by ProPublica’s new database, I created a visualization of the nearly 400 LLCs that make up Trump’s business empire.
That and more in this week’s newsletter. Read! Free!
www.howtoreadthisch.art/where-trumps...

07.03.2026 15:05 👍 1039 🔁 452 💬 31 📌 29

I’m a little confused because the economists on my timeline are like “oh yeah we’re facing a generational energy crisis because Trump is a madman who started a war he can’t control” while the politicians are like “it’s important to make clear we support the troops until it all blows over next week”

06.03.2026 19:28 👍 1232 🔁 182 💬 19 📌 12

SHOULD THE U.S BLOT OUT THE SUN AND USHER IN AN AGE OF ETERNAL DARKNESS? - Gallup 2/20/26-3/5/26

NO - 41%
YES - 38%
UNSURE - 21%

06.03.2026 19:09 👍 13458 🔁 2901 💬 321 📌 183

If you took $1 billion and gave it to the endowment of a different small college each day, they could each provide a free college education to several hundred students per year in perpetuity. Instead we are using that money to bomb schools and kill students in Iran, for no clearly stated purpose.

06.03.2026 01:19 👍 1950 🔁 623 💬 21 📌 13
Preview
Bellingcat’s New Tool to Explore Historical and Spatial Flight Data Turnstone can visualise historical trends in flight data or filter them by geography, aircraft type and other parameters.

Trying to make sense of an aircraft’s movements during a conflict? Context is everything. That’s why we built Turnstone, an open source tool that searches historical flight data to allow researchers to explore flight patterns over time and in specific locations. www.bellingcat.com/resources/20...

05.03.2026 14:35 👍 262 🔁 104 💬 2 📌 3
Screenshot of ProPublica webpage titled “Explore Financial Disclosures From President Trump and 1,500 of His Appointees,” accompanied by this blurb: “Use this database to explore potential conflicts of interest for President Donald Trump and his team. The documents disclose positions officials have held outside government, their assets and their debts, among other things.” A search bar prompts the user to search for a person or financial holding.

Screenshot of ProPublica webpage titled “Explore Financial Disclosures From President Trump and 1,500 of His Appointees,” accompanied by this blurb: “Use this database to explore potential conflicts of interest for President Donald Trump and his team. The documents disclose positions officials have held outside government, their assets and their debts, among other things.” A search bar prompts the user to search for a person or financial holding.

THREAD: We just released a tool that allows you to search billions of dollars in wealth, ties to the most powerful companies in the country, and details of the personal finances of President Trump and over 1,500 of his appointees.

Here’s how it works 1/

05.03.2026 14:01 👍 679 🔁 360 💬 11 📌 38

AP: Senate Republicans voted down an effort Wednesday to halt President Trump’s war against Iran, demonstrating early support for a conflict that has rapidly spread across the Middle East with no clear U.S. exit strategy.

04.03.2026 22:39 👍 497 🔁 179 💬 47 📌 26
Preview
U.S. sub sinks Iranian warship off Sri Lanka, killing 87 and expanding war zone A U.S. submarine sank an Iranian warship off the southern coast of Sri Lanka, killing dozens of sailors and dramatically widening Washington's pursuit of the Iranian navy.

A US submarine sinking a lonely, dinky Iranian surface ship an ocean away from the theater of the main conflict—and 9000
miles from North America—makes it pretty clear the US is fighting a general war, without the declaration required by the Constitution. www.reuters.com/world/asia-p...

04.03.2026 17:40 👍 13488 🔁 4966 💬 541 📌 295

As Rep. Jayapal says, our reporting has found that these aren’t isolated incidents. Last October, we tallied more than 170 cases of U.S. citizens detained by immigration agents.

Here’s that investigation she’s referring to:

04.03.2026 18:36 👍 2239 🔁 766 💬 18 📌 10
Video thumbnail

WELCH: Mr. Yoho is also the husband of your former spokesperson, Tricia McLaughlin?

NOEM: Yes

WELCH: So your former assistant and her husband are the ones that got the DHS no bid contract for $143m. Any dispute about that?

NOEM: No.

03.03.2026 18:37 👍 16862 🔁 6400 💬 972 📌 703
Preview
DomainTools Investigations | Doppelgänger / RRN Disinformation Infrastructure Ecosystem 2026 Analysis of the Doppelgänger / RRN disinformation ecosystem. Learn how this DevOps-style infrastructure uses automated media impersonation, TLD rotation, and cloud-native hosting to target global audiences and evade enforcement.

DomainTools Investigations researchers have spent the past several weeks pulling apart data from Russian threat actor Doppelganger to analyze recent campaigns and explore its technical and organizational structures.

#infosec #threatintel #cybersecurity

dti.domaintools.com/research/dop...

02.03.2026 19:42 👍 3 🔁 3 💬 1 📌 1
Preview
We should all be using dependency cooldowns

If you want to read a good primer on dependency cooldowns, I liked @yossarian.net 's post on it late last year. blog.yossarian.net/2025/11/21/W...

02.03.2026 16:31 👍 1 🔁 0 💬 0 📌 0
Preview
hackerbot-claw: An AI-Powered Bot Actively Exploiting GitHub Actions - Microsoft, DataDog, and CNCF Projects Hit So Far - StepSecurity A week-long automated attack campaign targeted CI/CD pipelines across major open source repositories, achieving remote code execution in at least 4 out of 5 targets. The attacker, an autonomous bot ca...

Aqua Security's Trivy repo reportedly experienced a full compromise. More and more reasons to support dependency cooldowns. www.stepsecurity.io/blog/hackerb...

02.03.2026 16:29 👍 1 🔁 0 💬 1 📌 0
Post image

It appears that a Polymarket account called "Magamyman" made $515,000 in a single day betting on last night's U.S. strike on Iran, with the first trade placed 71 minutes before the news broke publicly.

01.03.2026 04:55 👍 892 🔁 418 💬 55 📌 95
Preview
Pentagon tells Congress no sign that Iran was going to attack US first, sources say Trump administration officials acknowledged in closed-door briefings with congressional staff on Sunday that there was no intelligence suggesting Iran planned to attack U.S. forces first, two people f...

"Trump administration officials acknowledged in closed-door briefings with congressional staff on Sunday that there was no intelligence suggesting Iran planned to attack U.S. forces first." www.reuters.com/world/us/pen...

02.03.2026 06:42 👍 342 🔁 169 💬 8 📌 16

It’s worth emphasizing that the Supreme Court has propped up this presidential lawlessness.

When Congress enacted limits on presidential power in 1973, it included an enforcement provision. If the president said there’s an “emergency from attack” and Congress disagreed, it could order troops home.

28.02.2026 12:39 👍 2525 🔁 538 💬 22 📌 8
Post image

To justify his bombing of Iran, Trump posts this conspiracy theory on his social media.

28.02.2026 13:09 👍 458 🔁 152 💬 61 📌 21

How hard is it to build a bar at the Pentagon?

28.02.2026 13:19 👍 723 🔁 146 💬 26 📌 3
Post image

Dr. Catharine Young: We are now at 1136 new measles cases - in just the first 8 weeks of this year alone. A preventable disease resurging. This is an abject policy failure.

27.02.2026 21:12 👍 730 🔁 347 💬 29 📌 26

1) no, actually, Sam, that’s not correct

2) even if it were what a load-bearing “as long as”

27.02.2026 13:51 👍 648 🔁 74 💬 35 📌 6
After that, I was taken to a new cell in the SMHU. Before I got in, Lt. Teague stopped me in front of the cell and said, "I've told you before, and I'll tell you again, I don't give a fuck what that judge says, I do what I want." I understood him to be referring to Judge Lamberth in this case. He then said, "you only have a little bit of time left in here. If you want to make it home alive, you need to stop sending stuff to that fucking judge, or you're not going to make it." He slammed my door closed at the end of that sentence.

After that, I was taken to a new cell in the SMHU. Before I got in, Lt. Teague stopped me in front of the cell and said, "I've told you before, and I'll tell you again, I don't give a fuck what that judge says, I do what I want." I understood him to be referring to Judge Lamberth in this case. He then said, "you only have a little bit of time left in here. If you want to make it home alive, you need to stop sending stuff to that fucking judge, or you're not going to make it." He slammed my door closed at the end of that sentence.

Pinson says that she was told this past Sunday: “If you want to make it home alive, you need to stop sending stuff to that fucking judge, or you're not going to make it.”

Read the report at Law Dork: www.lawdork.com/p/trans-inma...

26.02.2026 15:24 👍 208 🔁 73 💬 2 📌 5

To do this, anti-trans lawmakers in Kansas moved fast to change the law, overrode the governor’s veto, and pushed for the legal changes to go into effect nearly immediately. That kind of power—to void gender on official documents, to compel gender conformity—is terrifying and it will not stop here.

26.02.2026 02:57 👍 3061 🔁 1308 💬 0 📌 59

The Constitution clearly gives Congress the power to spend taxpayer funds, and no law allows the president to halt if he feels some US states aren’t being “good stewards” of the money.

In case there’s any confusion on this, the Impoundment Control Act forbids it.

Taxation without representation.

25.02.2026 22:31 👍 5966 🔁 1990 💬 158 📌 57

They beat a blind refugee who speaks no English for failing to obey police commands he could not understand. Then instead of apologizing, they charged him with possession of a “weapon”—HIS WALKING STICK. Then they dumped him miles from home without notifying anyone, after which he was found dead.

25.02.2026 20:48 👍 12649 🔁 6094 💬 56 📌 331
Preview
Epstein Files Are Missing Records About Woman Who Made Claim Against Trump

NEW: The New York Times confirms my reporting that the DOJ is withholding several FBI interviews with a woman who accused Trump of sexually assaulting her as a child

www.nytimes.com/2026/02/25/u...

25.02.2026 17:06 👍 5144 🔁 1898 💬 96 📌 130
Preview
Goodbye innerHTML, Hello setHTML: Stronger XSS Protection in Firefox 148 – Mozilla Hacks - the Web developer blog Cross-site scripting (XSS) remains one of the most prevalent vulnerabilities on the web. The new standardized Sanitizer API provides a straightforward way for web developers to sanitize untrusted…

The Sanitizer API landed in Firefox 148, along with element.setHTML().

This lets you fully configure how HTML strings are cleaned as they're parsed.

hacks.mozilla.org/2026/02/good...

24.02.2026 14:18 👍 203 🔁 58 💬 1 📌 14

democrats should internalize that this is what their colleagues think of them and act accordingly

25.02.2026 03:24 👍 15119 🔁 3515 💬 284 📌 1
Twitter: Last Week Tonight with John Oliver (HBO)
Twitter: Last Week Tonight with John Oliver (HBO) YouTube video by LastWeekTonight

John Oliver and team do a great job here of explaining how Twitter/X is a cesspool and why you shouldn’t go anywhere near it. Only thing it misses is new research showing that its right-biased algorithm “works” in that it shifts users’ views rightward. www.youtube.com/watch?v=p7ZG...

24.02.2026 15:41 👍 1108 🔁 399 💬 23 📌 19
Video thumbnail

i built an entire x86 CPU emulator in CSS (no javascript)

you can write programs in C, compile them to x86 machine code with GCC, and run them inside CSS

lyra.horse/x86css/

24.02.2026 02:23 👍 2603 🔁 869 💬 129 📌 158
Preview
Justice Department withheld and removed some Epstein files related to Trump An NPR investigation finds the public database of Epstein files is missing dozens of pages related to sexual abuse accusations against President Trump.

An NPR investigation finds the public database of Epstein files is missing dozens of pages related to sexual abuse accusations against President Trump. n.pr/4qTItsU

24.02.2026 10:11 👍 10197 🔁 5125 💬 335 📌 630