Do not store your Bitlocker encryption keys on Microsoft's servers if your threat model includes governments or law enforcement. As this article points out, this is the result of a design choice Microsoft made. It didn't have to be this way. https://www.forbes.com/sites/thomasbrewster/2026/01/22/microsoft-gave-fbi-keys-to-unlock-bitlocker-encrypted-data/
Will this deal turn US TikTok into a propaganda tool for the Trump administration? Probably, yes.
TikTok Strikes Deal for New U.S. Entity, Ending Long Legal Saga
The Chinese parent company of the popular video app said a group of non-Chinese investors would create an American TikTok to avoid a federal ban.
Trying to protect everything from everyone all the time will drive you crazy. Here is what you should do about your digital privacy and security instead. I talked to KQED's Close All Tabs about threat modeling:
Your Digital Footprint Reveals More Than You Think | KQED
How easy is it to find someone from a single video posted online? To find out, Morgan put her own privacy to the test. She asked TikTok creator Jos...
In case you're wondering why ICE is busting down doors now, it's because they're being told to do so in training. "New ICE hires and those still in training are being told to follow the memo’s guidance instead of written training materials that actually contradict the memo, according to the whistleblower disclosure."
AP News
Immigration officers assert sweeping power to enter homes without a judge's warrant, memo says
An Immigration and Customs Enforcement memo obtained by The Associated Press reveals that the agency allows immigration officers to forcibly enter ...
San Francisco is going to give families making under $230k free child care for kids under 5. It is nice to see that good things can still happen. https://www.sf.gov/news-mayor-lurie-launches-family-opportunity-agenda-to-make-san-francisco-more-affordable-for-families
Every once in a while, the devil shows up and tells me what he thinks my soul is worth. I won't do it, but it's comforting to see the number tick up.
Trying to protect everything from everyone all the time is a good way to drive yourself crazy. This is why we threat model. Here is EFF's Surveillance Self Defense guide to putting together your security plan, also known as threat modeling:
Your Security Plan
Trying to protect all your data from everything all the time is impractical and exhausting. But, have no fear! Security is a process, and through t...
If you are organizing folks in Minneapolis right now, you may find this guide to Signal for beginners by @npub19f2v...3gxw useful:
Freedom of the Press
Signal, the secure messaging app: A guide for beginners
Also available in Spanish.
Once again, I have been asked to give a conference talk about AI. Once again, I ask how much I am allowed to swear on stage.
Project Zero releases a 0-click exploit chain for the Pixel 9. This one targets the Pixel, but the 0-click bug and exploit techniques used also apply to most other Android devices.
A 0-click exploit chain for the Pixel 9 Part 1: Decoding Dolby - Project Zero
Over the past few years, several AI-powered features have been added to mobile phones that allow users to better search and understand their messag...