evacide's Avatar

evacide

@evacide

Director of Cybersecurity @eff.org Co-founder of @stopstalkerware.bsky.social These opinions are my own, not my employers’ I did a TED talk once

73,145
Followers
622
Following
2,849
Posts
30.04.2023
Joined
Posts Following

Latest posts by evacide @evacide

Some companies do fight court orders. I don't remember who described Twitter's lawyers back in the day by saying "they'd fight God." But if I was expecting a court order, I would not count on my email provider to defend me.

05.03.2026 22:02 👍 4 🔁 0 💬 0 📌 0

You may look at a problem and think "Aha! The solution is to run my own email server." Now you have two problems, Google is marking all of your email as spam, an unknown number of threat actors using your server to spread malware because you forgot to patch something, and a small pile of subpoenas.

05.03.2026 21:56 👍 259 🔁 46 💬 21 📌 7

As a person who has spent a lot of time as the admin of an email server, I would not recommend this to the vast majority of people.

05.03.2026 21:50 👍 12 🔁 0 💬 1 📌 0

This is not a situation in which using Tor would have preserved the account owner's anonymity.

05.03.2026 21:44 👍 2 🔁 0 💬 1 📌 0

There are people who use Proton Mail who are not aware that this is a risk and it is good for them to know.

05.03.2026 21:39 👍 14 🔁 1 💬 1 📌 0
Preview
Proton Mail Helped FBI Unmask Anonymous ‘Stop Cop City’ Protester A court record reviewed by 404 Media shows privacy-focused email provider Proton Mail handed over payment data related to a Stop Cop City email account to the Swiss government, which handed it to the ...

If you pay Proton Mail for a service, they may hand over the payment data in response to a court order: www.404media.co/proton-mail-...

05.03.2026 21:31 👍 131 🔁 79 💬 8 📌 11

This is an issue I care about a lot and I keep a close eye on it.

05.03.2026 20:03 👍 0 🔁 0 💬 1 📌 0

It is more important than ever to find ways to rein in these companies and it is harder than ever because more states want to reserve the right to use their tools instead of rolling their own.

05.03.2026 19:59 👍 3 🔁 0 💬 1 📌 0
Preview
Look What You Made Us Patch: 2025 Zero-Days in Review | Google Cloud Blog Our analysis of 90 zero-day vulnerabilities tracked in 2025, focusing on techniques and how AI will accelerate the vulnerability landscape.

"For the first time since we began tracking zero-day exploitation, we attributed more zero-days to commercial surveillance vendors than to traditional state-sponsored cyber espionage groups."

Love to see the stats backing up my hunch.

cloud.google.com/blog/topics/...

05.03.2026 19:43 👍 77 🔁 33 💬 4 📌 0
Signal Messenger - Director of Major Gifts We are seeking a Director of Major Gifts to join our Development team as a high-impact individual contributor. In this role, you will be the primary engine for high-net-worth and charitable institutio...

Do you work in fundraising? Do you want a job that isn't evil? Signal is hiring a director of major gifts: jobs.lever.co/signal/68f75...

05.03.2026 03:10 👍 137 🔁 69 💬 1 📌 1

I aspire to one day have a fraction of the confidence of a mediocre white man sitting down to do an interview with Isaac Chotiner.

04.03.2026 20:00 👍 136 🔁 4 💬 4 📌 1
Preview
She Came Out of the Bathroom Naked, Employee Says Bank details, sex and naked people who seem unaware they are being recorded. Behind Meta’s new smart glasses lies a hidden workforce, uneasy about peering into the most intimate parts of other people’...

The data from your Meta Ray Bans is used to train Meta's AI, which most people don't understand means that humans are looking at the most intimate details of their lives. www.svd.se/a/K8nrV4/met...

04.03.2026 06:47 👍 402 🔁 261 💬 11 📌 23

I'm reading a bunch of Coruna reports after dinner because I am a cool person who knows how to party. Of particular interest: not only does Coruna not work against iOS in lockdown mode, but if it even detects lockdown mode running, it bails. This is why I talk about lockdown mode so damn much.

04.03.2026 05:11 👍 141 🔁 28 💬 2 📌 1
Preview
CBP Tapped Into the Online Advertising Ecosystem To Track Peoples’ Movements An internal DHS document obtained by 404 Media shows for the first time CBP used location data sourced from the online advertising industry to track phone locations. ICE has bought access to similar t...

New from 404 Media: CBP tapped into the online advertising ecosystem to track peoples' movements, according to an internal DHS document. Shows for the first time DHS tracked phones via process for putting ads in ordinary apps—video games, fitness apps, many more www.404media.co/cbp-tapped-i...

03.03.2026 14:07 👍 1169 🔁 727 💬 31 📌 119

Want to see me scream into this void this April? This is where I will be doing it.

03.03.2026 08:28 👍 91 🔁 11 💬 4 📌 0

I just scream endlessly into the void now. Sometimes I am invited to keynote the void.

03.03.2026 07:43 👍 130 🔁 3 💬 4 📌 0

I think that we are going to have to spend a lot of time creating new and more resilient institutions instead of recreating the ones that got us to this terrible place.

03.03.2026 07:19 👍 48 🔁 1 💬 3 📌 0

I work with an entire floor of civil rights litigators and they are having A Time.

03.03.2026 07:01 👍 28 🔁 0 💬 0 📌 0

What a stupid time to have a degree in International Relations.

03.03.2026 06:44 👍 1199 🔁 91 💬 41 📌 10

Forced to choose between "Oops, I was being evil" and "Oops, I was being stupid," Sam Altman has gone with "stupid."

03.03.2026 04:19 👍 211 🔁 37 💬 10 📌 0

I look forward to seeing it!

03.03.2026 00:20 👍 1 🔁 0 💬 0 📌 0

This is the kind of work that I'm always hoping people will do so I can quote it extensively.

03.03.2026 00:08 👍 1 🔁 0 💬 1 📌 0
Preview
Security and Privacy Analysis of Tile's Location Tracking Protocol We conduct the first comprehensive security analysis of Tile, the second most popular crowd-sourced location-tracking service behind Apple's AirTags. We identify several exploitable vulnerabilities an...

When we talk about the problems with Bluetooth-enabled physical trackers, we usually talk about AirTags, but let us save some rage for Tile, powered by this paper discussing Tile's privacy, security, and accountability problems: arxiv.org/abs/2510.003...

02.03.2026 21:28 👍 90 🔁 31 💬 5 📌 1

Both Trump and Netanyahu are "say the quiet part out loud" guys.

02.03.2026 21:10 👍 35 🔁 1 💬 1 📌 0

I have a whole file of these stories that I point to whenever someone responds to allegations of domestic abuse/violence with "If it was so serious, why didn't she call the cops?"

02.03.2026 20:58 👍 303 🔁 95 💬 6 📌 0

I am missing it because I have to be at another conference, but if I was in town, I would be there.

02.03.2026 20:48 👍 2 🔁 0 💬 0 📌 0

I have come away from my last conference cautiously optimistic about how useful AI can be in reversing malware and extremely scared about all of the new attack surface being created in the use and deployment of AI tools.

02.03.2026 07:03 👍 215 🔁 32 💬 4 📌 3

The NSA has a long history of word games, and it woukd be best to understand them before taking reassurances at face value. From 2013. www.eff.org/deeplinks/20...

01.03.2026 20:52 👍 129 🔁 39 💬 1 📌 0

The greatest joke that my brain chemistry plays on me is that every few years I get an idea for a novel, which I will outline, write several chapters for, and then never touch again.

28.02.2026 07:07 👍 109 🔁 0 💬 12 📌 0
Preview
Greek court finds four guilty of prying on private data in wiretapping scandal A Greek court on Thursday concluded that the founder of surveillance firm Intellexa and three other people were guilty of breaching personal data in 2020-2021 and sentenced them to prison terms, in th...

“The court also referred the case back to prosecutors for further investigation of other crimes and more serious offences potentially committed, including #espionage.”

www.reuters.com/business/fin...

27.02.2026 00:40 👍 15 🔁 6 💬 0 📌 0