evacide

Director of Cybersecurity
@EFF
/ Co-founder of
@stopstalkerware
/ These are my opinions, not my employers’ / I did a TED talk once

Public Key

npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx

NIP-05 Address

evacide@hachyderm-io.mostr.pub

Profile Code

nprofile1qqsrhfhexcslfawgj0du2aqhmsngud4kzmga7r4pu8lmmyg3kjy6zhcpz3mhxue69uhhyetvv9ujuerpd46hxtnfduqs6amnwvaz7tmwdaejumr0ds62uuw4

Publishing to

relay.damus.io

nos.lol

Author Public Key

npub18wn0jd3p7n6u3y7mc46p0hpx3cmtv9k3mu82rc0lhkg3rdyf590s3wshpx

Show more details

Last Notes

2026-08-07 21:10:01 UTC

Four Thieves is dead! Long live Four Thieves!
https://fourthievesvinegar.org/

2026-08-05 17:34:26 UTC

You cannot make mass surveillance "safe" or "good" by adding more guardrails. The only way to make Flock safe is to get rid of Flock.
https://www.gpb.org/news/2026/08/05/analysis-more-guardrails-needed-prevent-police-misuse-of-flock-cameras

2026-07-27 17:16:39 UTC

Claude warns users that by hitting the "share button" anyone with the link can view the content, but it is not clear that they are creating a document that can be indexed by Google and will come up in searches.
https://futurism.com/artificial-intelligence/claude-chats-publicly-accessible

2026-07-24 18:09:09 UTC

This matters a lot because people are constantly asking me if they should set up a duress passcode in order to fool law enforcement.
https://techcrunch.com/2026/07/24/us-accuses-american-of-allegedly-wiping-his-phone-using-a-duress-password-during-border-search/

2026-07-21 02:56:27 UTC

If you live in California and you want to take advantage of the state-run portal that tells all registered data brokers to delete your data instead of having to send an individual request to every single one, here is what you need to know: https://www.eff.org/deeplinks/2026/07/what-you-need-know-about-californias-drop-tool

2026-07-20 17:45:38 UTC

The other day I accidentally discovered that I have the 31st most-followed account on Mastodon and this goes a long way toward explaining why my mentions/replies are so weird and terrible.

2026-07-16 18:29:03 UTC

Inspired by @nprofile…gvek's work, my colleague Thorin looked into the state of privacy for smart watches, rings, and bands, and the vibes are rancid: https://www.eff.org/deeplinks/2026/07/most-smart-watches-rings-and-bands-lack-basic-transparency-reports-and-key-privacy

2026-06-28 18:58:34 UTC

Ford rehires "greybeard" engineers after its push for AI automation backfires.
"Mistakenly, we thought that by just introducing artificial intelligence and ingesting the design requirements that we had, that that would produce a high-quality product."
https://www.the-independent.com/tech/ford-ai-automation-human-workers-b3003787.html

2026-06-16 17:26:56 UTC

One more time for the people in the back:
I will always hate your real names proposal.
I will always hate your backdooring crypto proposal.
I will always hate your hack back proposal.
These ideas are bad and you cannot dress them up in any way that will change that.

2026-06-08 19:33:20 UTC

Started to roll my eyes and say "Here, let me Google that for you" and then remembered that Googling it unlikely to yield a correct answer anymore.

2026-06-08 17:50:54 UTC

In other news, sometimes shame works: https://www.wired.com/story/meta-removes-face-recognition-code-meta-ai-app-smart-glasses/

2026-06-08 17:46:26 UTC

NSO Group is under a permanent injunction to stop targeting WhatsApp and its users with their spyware. Meta says they've continued to do so anyway: https://about.fb.com/news/2026/06/fighting-spyware-an-update-from-whatsapp/

2026-05-11 21:15:27 UTC

If you are in your late thirties to mid-forties right now, there is a good chance that you have spent most of your life in a cycle of making some sort of home on the internet only to have it crumble beneath you like chalk and having to start over.

2026-04-20 18:48:18 UTC

As foretold by prophecy, LAPD used their "first responder" drones to spy on No Kings protests and anti-ICE protests: https://theintercept.com/2026/04/20/lapd-skydio-drone-surveillance-no-kings-protest-ice/

2026-04-16 19:04:23 UTC

Your push notifications can betray your privacy. Here are the settings you can enable to do something about that: https://www.eff.org/deeplinks/2026/04/how-push-notifications-can-betray-your-privacy-and-what-do-about-it

2026-04-09 22:37:29 UTC

I have started to write a new section of my AI talk on what AI is doing to vuln discovery, bug bounties, and defense and oh no it is 45 extra minutes of content.

2026-04-09 16:49:06 UTC

EFF is finally leaving X and here is a blog post about why: https://www.eff.org/deeplinks/2026/04/eff-leaving-x

2026-04-07 19:58:55 UTC

I was really hoping to go through life without needing to know what the plural of "apocalypse" is.

2026-04-06 22:02:47 UTC

"I'm just going to let people be wrong on the internet" remains the single most difficult New Year's Resolution I have ever made, hands down. Nothing else comes close.

2026-04-01 01:54:42 UTC

Good news for people with older iPhones. Patch your stuff.
https://www.wired.com/story/apple-will-push-out-rare-backported-patches-to-protect-ios-18-users-from-darksword-hacking-tool/

2026-03-28 03:40:06 UTC

Yael's post demonstrates something about digital privacy/security that I think a lot of people miss: there is no right answer, just a series of trade-offs. And every person has to make their own decisions about which trade-offs are worthwhile. https://blog.yaelwrites.com/options-for-phones-at-protests/

2026-03-23 21:55:50 UTC

If you have an iPhone, today is a good day to make sure you are running the latest software. https://techcrunch.com/2026/03/23/someone-has-publicly-leaked-an-exploit-kit-that-can-hack-millions-of-iphones/

2026-03-22 19:15:56 UTC

For people who are concerned about having their devices seized at US airports starting Monday when ICE "assists" the TSA, EFF has this guide: https://www.eff.org/deeplinks/2025/06/journalist-security-checklist-preparing-devices-travel-through-us-border

2026-03-18 19:25:37 UTC

If you leave the infrastructure of surveillance in place, people in power will inevitably find an excuse to resume using it. You have to take that shit down.
https://boltsmag.org/verona-wisconsin-ends-contract-flock-ai-surveillance-cameras/

2026-03-03 06:44:45 UTC

What a stupid time to have a degree in International Relations.

2026-03-02 07:03:36 UTC

I have come away from my last conference cautiously optimistic about how useful AI can be in reversing malware and extremely scared about all of the new attack surface being created in the use and deployment of AI tools.

2026-02-28 07:07:51 UTC

The greatest joke that my brain chemistry plays on me is that every few years I get an idea for a novel, which I will outline, write several chapters for, and then never touch again.

2026-02-21 23:40:18 UTC

Hacktivists tried to find a workaround to Discord’s age-verification software, Persona. Instead, they found its frontend exposed to the open internet, and that was just the beginning.
https://www.therage.co/persona-age-verification/

2026-02-19 19:56:37 UTC

The most monstrous lie that I regularly tell myself is "I'll get that work done while I'm on the plane."

2026-02-13 22:23:55 UTC

I can be angry about rising fascism and also angry about facial recognition built into surveillance glasses at the same time, not only because these things are directly related, but because I contain fucking multitudes and all them are mad all the goddamn time.

2026-02-02 04:10:16 UTC

Why do your organizing over Signal? So that you don't do your organizing on an app that hasn't been tested or reviewed, run by a guy who doesn't tell his users about data breaches and security problems.
https://www.ibtimes.co.uk/stopice-hacked-names-locations-over-100k-users-were-sent-fbi-ice-hsi-1775307

2026-01-29 22:45:16 UTC

This is your regular reminder that I do not owe you an argument defending a position that you have decided that I hold. Indeed, I do not owe you an argument about anything.

2026-01-29 21:34:28 UTC

EFF will be closed Friday, Jan. 30 as part of the national shutdown in opposition to ICE and CBP and the brutality and terror they and other federal agencies continue to inflict on immigrant communities and any who stand with them.
https://www.eff.org/deeplinks/2026/01/eff-close-friday-solidarity-national-shutdown

2026-01-16 00:59:32 UTC

If you are organizing folks in Minneapolis right now, you may find this guide to Signal for beginners by @nprofile…upkm useful: https://freedom.press/digisec/blog/signal-beginners/

2026-01-11 01:55:23 UTC

Sometimes I read the threads that experienced activists write about how to behave at protests because it reminds me that the kinds of replies I get when I give digital privacy/security advice aren't just for me.

2026-01-09 08:16:01 UTC

We are 9 days into 2026 and my New Years' Resolution to just let people be wrong on the internet is already is truly testing the limits of my willpower.

2026-01-09 07:55:21 UTC

- reply

There is no one-size-fits-all solution for digital safety at protests. You need to decide in advance what your goals are, what is important for you to protect, and what is likely to happen to you, and threat model accordingly.

2026-01-09 07:50:00 UTC

- reply

But if it is important to you to maintain your anonymity at a protest, consider leaving your phone at home, or at least turning it on/off only once you are well out of the neighborhood.

2026-01-09 07:47:47 UTC

- reply

There are other reasons you might want to take a cheap/disposable/burner phone to a protest, such as making sure that if you are arrested, the police don't seize/break/confiscate your main phone.

2026-01-09 07:45:32 UTC

If you don't want ICE to know you were at a protest, taking a burner phone is not going to help you stay anonymous if you go home afterwards. https://www.404media.co/inside-ices-tool-to-monitor-phones-in-entire-neighborhoods/

2026-01-06 20:49:41 UTC

All that the Turing Test proves is that human are much, much stupider than Alan Turing ever suspected.

2026-01-04 23:29:20 UTC

This year, for my mental health, I'm going to practice just letting people be wrong on the internet.

2025-12-12 23:19:12 UTC

NYT reports that the TSA is giving ICE a list of every person who's to be taking a domestic flight inside the US so ICE can run it through their database looking for targets.
I'm not a lawyer, but I feel like the 4th Amendment has something to say about this.
https://www.nytimes.com/2025/12/12/us/politics/immigration-tsa-passenger-data.html?unlocked_article_code=1.8E8.lG_B.SvLF8g3CXiKG&smid=bs-share

2025-12-03 21:47:00 UTC

I don't dress for the male gaze. I dress for a women who are old enough to be my mother, wear oversized jewelry, and say things like "I'd dye my hair that color."

2025-11-16 22:00:30 UTC

I gave a talk about fascism at a conference and the first reply to the conference's post on X with a photo of me in front of my slides is a rando word-vomiting about how Hitler was working for the Zionists, in case you're wondering how that place is going.

2025-11-05 20:47:31 UTC

Cybersecurity professionals/ransomware negotiators turned out to be running a ransomware gang. https://breached.company/when-the-defenders-become-the-attackers-cybersecurity-experts-indicted-for-blackcat-ransomware-operations/

2025-10-23 05:22:46 UTC

If you think that Signal is an op and totally backdoored, my recommendation is that you should plan all of your crimes over Telegram group chat.

2025-10-17 18:44:21 UTC

If your protest privacy/security advice does not start with a discussion of threat models, it is probably not good advice.

2025-10-14 18:35:11 UTC

Truly, SS7 is the surveillance gift that keeps on giving: https://www.motherjones.com/politics/2025/10/firstwap-altamides-phone-tracking-surveillance-secrets-assad-erik-prince-jared-leto-anne-wojcicki/

2025-10-13 04:03:48 UTC

"A soldier knows what to do when they encounter another soldier. But an air-humping frog?"
@sarahjeong.bsky.social on the shitposting/aura farming era of American politics.
https://www.theverge.com/policy/798491/frog-portland-trump-national-guard

2025-10-06 18:06:58 UTC

I deleted my post about the Discord hack because the compromise was a third-party support service and not a third-party dedicated age verification system. Collecting user IDs is still bad and they are hard to protect, but being accurate in my posts is also important.

2025-10-06 17:03:11 UTC

As the prophecy foretold, a major platform's third-party age verification system has been hacked and hackers had access to the government ID images of Discord's users.
https://www.tomsguide.com/computing/online-security/discord-users-suffers-the-first-high-profile-age-verification-hack-and-its-unlikely-to-be-the-last

2025-10-05 05:32:22 UTC

I will definitely be doing more versions of my cyberfascism keynote, mostly because I want more opportunities to get on stage and yell, "Less complying in advance and more 'Fuck you, make me!'"

2025-09-10 00:43:19 UTC

Is ICE about to go buck wild using cell site simulators? Good thing EFF has a project to help you detect them:
https://www.eff.org/deeplinks/2025/03/meet-rayhunter-new-open-source-tool-eff-detect-cellular-spying
https://www.forbes.com/sites/the-wiretap/2025/09/09/how-ice-is-using-fake-cell-towers-to-spy-on-peoples-phones/

2025-09-09 23:36:59 UTC

- reply

I have spent many years willing to take big swings in my work because I knew that Cindy Cohn was the adult in the room. I am not ready to be the adult in the room.

2025-09-09 21:25:51 UTC

I have spent 18 years working with Cindy Cohn at EFF, defending digital rights. There is no one I would rather fight beside and I cannot imagine this place without her.
https://www.wired.com/story/eff-cindy-cohn-stepping-down/

2025-09-06 17:32:03 UTC

Shout-out to the co-worker who, when discussing new EFF swag for the store says, "Give me your worst ideas. I want only your worst ideas." We are going to have so many thongs, guys.

2025-08-20 21:48:22 UTC

I take it all back, there ARE violent criminals on the streets of San Francisco. They're grabbing people off the street and pepper spraying journalists.
https://sf.gazetteer.co/i-reported-from-an-ice-action-on-sansome-and-all-i-got-was-a-face-full-of-pepper-spray

2025-08-20 18:25:26 UTC

You will sure be shocked to discover that I have some things to say about AI-powered "smart" glasses that give no indication that they are recording your every word.
https://techcrunch.com/2025/08/20/harvard-dropouts-to-launch-always-on-ai-smart-glasses-that-listen-and-record-every-conversation/

2025-08-19 17:14:56 UTC

The founders of the Tea app tried to recruit a female co-founder and face for the app, telling her "Tea has all the safety measures that Facebook lacked and more to ensure that only women are in the group."
https://www.404media.co/how-teas-founder-convinced-millions-of-women-to-spill-their-secrets-then-exposed-them-to-the-world/

2025-08-18 19:02:16 UTC

I talked to 404 Media about devices for tracking and spying on your partner being sold on TikTok: https://www.404media.co/why-404-media-needs-your-email-address/

2025-08-13 18:00:03 UTC

- reply

@nprofile…4dwe Trump will make an all-caps post of Truth Social. it will be devastating.

2025-08-12 21:38:22 UTC

It is sometimes necessary, in these difficult times, to spend an hour scrolling through clothing sites, hoping that one of these gowns is going to give you the strength to fight fascism.

2025-08-10 18:52:14 UTC

Even when I don't go to Vegas, the Vegas gossip comes to me.

2025-08-06 17:15:22 UTC

Ron Deibert is absolutely the voice that the infosec industry needs to be listening right now. We are in a moment where fascism is consolidating power and most of the infosec industry is either playing along or is busy bragging about how much AI they've shoved into their products.
https://techcrunch.com/2025/08/06/citizen-lab-director-warns-cyber-industry-about-us-authoritarian-descent/

2025-08-04 20:06:57 UTC

I'm sorry I will have to miss this meeting because the cat has fallen asleep with his head on my shoulder and is making little snoring sounds.

2025-08-04 19:22:46 UTC

Listen, we are in a terrible and difficult time where the horrors can often feel overwhelming. Lean into the things that bring you joy. If that means that sometimes you're wringing that last drop of dopamine out of watching bad people suffer as the result of their poor choices, you do you.

2025-07-29 06:18:54 UTC

I live in the middle of San Francisco. I walk and take public transportation everywhere daily, feeling perfectly safe. And every time someone starts ranting about how scary and dangerous cities are, I nod and smile because I do not want them to come here.

2025-07-23 03:05:35 UTC

When I was a kid, I couldn't wait to be an adult because I imagined that adulthood would be a time when no one would interrupt me when I was trying to read.
If I could go back in time, I would tell that little girl she has never been more wrong about anything in her life.

2025-07-21 18:27:20 UTC

Writing the first draft of my FTC comments and wondering how many times I am allowed to write "fuck no, you shitweasel." https://www.ftc.gov/news-events/news/press-releases/2025/07/ftc-seeks-comment-petition-vacate-2021-order-related-provider-stalkerware-apps

2025-07-17 23:31:46 UTC

This is just to let
you know
I have taken
the plums
out of the icebox
because fruit is better
at room temperature

2025-07-16 22:26:49 UTC

The horrors persist, but I have summer strawberries from the farmers' market.

2025-07-12 17:20:43 UTC

This is your regular reminder that if you are the smartest person in the room, go find another room. You are not going to run out of people or rooms.

2025-07-10 00:16:22 UTC

I've spent not-insignificant amount of time at protests in the US, looking for signs of IMSI catchers and never found anything, so when I saw this, my ears perked up:
https://san.com/cc/exclusive-evidence-of-cell-phone-surveillance-detected-at-anti-ice-protest/

2025-07-09 01:17:16 UTC

Google continues the industry-wide trend of jamming AI down users' throats, making it difficult or impossible to opt out, and potentially endangering the privacy of communications: https://www.neowin.net/guides/google-can-now-read-your-whatsapp-messages-heres-how-to-stop-it/

2025-07-05 21:30:40 UTC

I was feeling entirely too confident and capable, so I decided to train press-up to handstand and now I am going to be suffering through these drills and progressions for a good long time.

2025-07-03 18:28:54 UTC

Today I refrained from wearing my guillotine blade necklace while reporting for jury duty. Please clap.

2025-07-02 19:51:35 UTC

Every once in a while, someone tells me that an abusive partner left them alone because they were afraid of what I would do if they didn't, and I feel like I have done something right.

2025-06-27 18:52:13 UTC

Website/device age verification is a privacy and security nightmare and everyone who tells you that this is a solved problem is lying to you.
https://gizmodo.com/supreme-court-says-age-verification-laws-for-porn-sites-are-constitutional-2000621265

2025-06-25 03:28:23 UTC

Do I think that the national Democratic Party will learn anything from Mamdani's win? No. Do I think it is important to enjoy a goddamn victory once in a while? Yes.

2025-06-15 18:43:41 UTC

I would like to be Chrisjen Avasarala: impeccably-dressed, running things, swearing like a sailor.
But I am Camina Drummer: barely keeping it together, sort of in charge, with a lot of complicated relationships and a strong eyeliner game.

2025-06-13 21:03:38 UTC

Seriously, if you think that it is clever to respond to a guide with advice for journalists for protecting their devices when crossing the US border with "You just shouldn't ever go to the US!" please consider posting your response in your own timeline, where I will never have to see it.

2025-06-13 16:38:42 UTC

Are you a journalist who needs advice for how to prepare your electronic devices for travel across the US border?
EFF and Freedom of the Press have you covered: https://freedom.press/digisec/blog/border-security/

2025-06-13 00:09:36 UTC

If you have an iPhone, make sure you always have the latest security update.
If you are concerned that you might be targeted by government spyware, enable Lockdown Mode.
https://techcrunch.com/2025/06/12/apple-fixes-new-iphone-zero-day-bug-used-in-paragon-spyware-hacks/

2025-05-22 19:55:11 UTC

Me, looking at my work calendar: This is insane. No one can do this much work. I'm going to find the asshole that did this and give them a piece of my mind!
Me, looking in the mirror: Oh no.

2025-05-22 19:31:43 UTC

Did I mention that the data broker industry must be destroyed?
https://theintercept.com/2025/05/22/intel-agencies-buying-data-portal-privacy/

2025-05-18 16:21:31 UTC

I never realize how much cognitive load is taken up by smiling and making the right amount of eye contact until I land in Eastern Europe where my immaculate Resting Bitch Face is perfectly normal.

2025-05-14 04:07:50 UTC

Q&A from a talk I gave last week.
Q: "What do you think is the biggest threat in cybersecurity right now? Is it post-quantum computing? Is it AI?"
A: Fascism. It's fascism.

2025-04-30 19:14:29 UTC

The only way I can possibly touch enough grass to get through this day is to remove all of my clothes and roll around on a lawn.

2025-04-25 18:57:47 UTC

There is so much bad news out there right now that it is sometimes difficult to even see the wins.
https://www.nytimes.com/2025/04/25/us/politics/trump-student-visa-cancellations.html?unlocked_article_code=1.CU8.qevX.RyotrTomoS1e&smid=url-share

2025-04-24 18:48:01 UTC

For people who are looking to shield their identities in group chats: Signal does not store past handle IDs and 7 days after changing your handle, another Signal user can claim it.

2025-04-24 18:08:19 UTC

This is your regular reminder that end-to-end encrypted communications will not protect you against members of your group chat sending screenshots to NBC News: https://www.nbcnews.com/news/us-news/columbia-university-students-plan-build-tent-encampments-week-sources-rcna202549

2025-04-10 21:47:52 UTC

Big Law has failed to stand up to Trump and now infosec is following suit.
https://www.reuters.com/world/us/cybersecurity-industry-falls-silent-trump-turns-ire-sentinelone-2025-04-10/

2025-04-08 19:56:10 UTC

I can no longer tell if I'm holding up surprisingly well right now because I did all of my grieving for the future back in 2024 or if I have just reached a state of emergency dissociation so extreme that I will not be feeling my feelings until 2026.

2025-03-31 05:56:54 UTC

Today I replied to a journalist's request for a quote about US government officials doing something exceptionally insecure and stupid with: I'm going to need a minute to come up with something more printable than "fuck no."

2025-03-27 18:54:51 UTC

Weird how the jobs that AI-boosters say AI is going to replace never seems to include the management or executive class.

2025-03-25 19:30:03 UTC

I checked in on the Bad Place and discovered that a bunch of misogynists have spent a couple of weeks getting very worked up about a screenshot of a post I made about a decade ago and that locking my account last year has successfully deprived them of further ammo. Everything is cool and normal.

2025-03-25 00:00:54 UTC

Oh Mastodon, never change. There are people securitysplaining sensitive government communications to @nprofile…36ju, as foretold by prophecy.

2025-03-24 18:29:38 UTC

Today's OPSEC lesson is this: all of the encryption in the world is not going to save you if you add the editor of The Atlantic to your war-planning Signal group chat.
https://www.theatlantic.com/politics/archive/2025/03/trump-administration-accidentally-texted-me-its-war-plans/682151/?gift=fXb4ymsFcV2ntAzqIpmYvaCSBCGxAw0GA0n-mECa1x8&utm_source=copy-link&utm_medium=social&utm_campaign=share

2025-03-24 18:27:02 UTC

For people who are concerned about crossing the US border, The Verge and Wired both have useful discussion and advice:
https://www.theverge.com/policy/634264/customs-border-protection-search-phone-airport-rights
https://www.wired.com/2017/02/guide-getting-past-customs-digital-privacy-intact/