Joseph
@eflags.bsky.social
Forensic Analyst, Reverse Engineer. Opinions mine
Reposted by Joseph
BREAKING: Apple removed an app for preserving TikToks, Instagram reels, news reports, and videos documenting abuses by ICE
🔗 www.404media.co/apple-banned...
🔗 www.404media.co/apple-banned...
Apple Banned an App That Simply Archived Videos of ICE Abuses
Eyes Up's purpose is to "preserve evidence until it can be used in court." But it has been swept up in Apple's crackdown on ICE-spotting apps.
www.404media.co
October 8, 2025 at 7:12 PM
BREAKING: Apple removed an app for preserving TikToks, Instagram reels, news reports, and videos documenting abuses by ICE
🔗 www.404media.co/apple-banned...
🔗 www.404media.co/apple-banned...
Reposted by Joseph
New: Apple banned an app that simply archived videos of ICE abuses. Rather than other apps that record ICE official's real-time location, Eyes Up is to "preserve evidence until it can be used in court." Videos from TikTok etc. Every submission manually reviewed
www.404media.co/apple-banned...
www.404media.co/apple-banned...
Apple Banned an App That Simply Archived Videos of ICE Abuses
Eyes Up's purpose is to "preserve evidence until it can be used in court." But it has been swept up in Apple's crackdown on ICE-spotting apps.
www.404media.co
October 8, 2025 at 7:13 PM
New: Apple banned an app that simply archived videos of ICE abuses. Rather than other apps that record ICE official's real-time location, Eyes Up is to "preserve evidence until it can be used in court." Videos from TikTok etc. Every submission manually reviewed
www.404media.co/apple-banned...
www.404media.co/apple-banned...
Reposted by Joseph
New from 404 Media: Apple just removed ICEBlock, the app for reporting sightings of ICE, from its App Store after DOJ pressure. ICEBlock's developer tells me "we are determined to fight this."
"Capitulating to an authoritarian regime is never the right move."
www.404media.co/iceblock-own...
"Capitulating to an authoritarian regime is never the right move."
www.404media.co/iceblock-own...
ICEBlock Owner After Apple Removes App: ‘We Are Determined to Fight This’
Apple removed ICEBlock reportedly after direct pressure from Department of Justice officials. “I am incredibly disappointed by Apple's actions today. Capitulating to an authoritarian regime is never t...
www.404media.co
October 3, 2025 at 2:21 AM
New from 404 Media: Apple just removed ICEBlock, the app for reporting sightings of ICE, from its App Store after DOJ pressure. ICEBlock's developer tells me "we are determined to fight this."
"Capitulating to an authoritarian regime is never the right move."
www.404media.co/iceblock-own...
"Capitulating to an authoritarian regime is never the right move."
www.404media.co/iceblock-own...
Reposted by Joseph
ICEBlock Owner After Apple Removes App: ‘We Are Determined to Fight This’
🔗 www.404media.co/iceblock-own...
🔗 www.404media.co/iceblock-own...
ICEBlock Owner After Apple Removes App: ‘We Are Determined to Fight This’
Apple removed ICEBlock reportedly after direct pressure from Department of Justice officials. “I am incredibly disappointed by Apple's actions today. Capitulating to an authoritarian regime is never t...
www.404media.co
October 3, 2025 at 5:58 AM
ICEBlock Owner After Apple Removes App: ‘We Are Determined to Fight This’
🔗 www.404media.co/iceblock-own...
🔗 www.404media.co/iceblock-own...
Reposted by Joseph
🚨🚨🚨 Google released a report on "Brickstorm" this morning — a next-level, suspected China-linked campaign targeting U.S. firms. Ultra-stealthy, 400+ day dwell times, focus on stealing IP, finding zero-days, and focused on long-term cyberespionage. cyberscoop.com/chinese-cybe...
Brickstorm malware powering ‘next-level’ Chinese cyberespionage campaign
Mandiant and Google have identified “Brickstorm,” a sophisticated, suspected China-linked hacking campaign targeting U.S. tech firms, legal organizations, and BPOs. The operation often goes undetected...
cyberscoop.com
September 24, 2025 at 2:03 PM
🚨🚨🚨 Google released a report on "Brickstorm" this morning — a next-level, suspected China-linked campaign targeting U.S. firms. Ultra-stealthy, 400+ day dwell times, focus on stealing IP, finding zero-days, and focused on long-term cyberespionage. cyberscoop.com/chinese-cybe...
Reposted by Joseph
Reposted by Joseph
if you’re canceling your Disney and worried about what your kids will watch…might i suggest supporting your local PBS station, which gets you streaming access to all their content via PBS passport
September 22, 2025 at 12:18 PM
if you’re canceling your Disney and worried about what your kids will watch…might i suggest supporting your local PBS station, which gets you streaming access to all their content via PBS passport
Reposted by Joseph
New: 404 Media is suing ICE. We have filed a lawsuit demanding ICE release its $2 million contract with Paragon, a company that makes powerful spyware to break into phones and read encrypted messages. This is expensive for a small outlet but this info is important
www.404media.co/were-suing-i...
www.404media.co/were-suing-i...
We’re Suing ICE for Its $2 Million Spyware Contract
404 Media has filed a lawsuit against ICE for access to its contract with Paragon, a company that sells powerful spyware for breaking into phones and accessing encrypted messaging apps.
www.404media.co
September 22, 2025 at 4:26 PM
New: 404 Media is suing ICE. We have filed a lawsuit demanding ICE release its $2 million contract with Paragon, a company that makes powerful spyware to break into phones and read encrypted messages. This is expensive for a small outlet but this info is important
www.404media.co/were-suing-i...
www.404media.co/were-suing-i...
Excited to speak at FTSCon next month!
#FTSCon Speaker Spotlight: Joseph Edwards (@eflags.bsky.social) is presenting “The Forensics of Zoom's Remote Control” in the HUNTER track.
See the full list of speakers + event info, including how to register, here: volatilityfoundation.org/from-the-sou...
See the full list of speakers + event info, including how to register, here: volatilityfoundation.org/from-the-sou...
September 18, 2025 at 8:58 PM
Excited to speak at FTSCon next month!
Reposted by Joseph
#FTSCon Speaker Spotlight: Joseph Edwards (@eflags.bsky.social) is presenting “The Forensics of Zoom's Remote Control” in the HUNTER track.
See the full list of speakers + event info, including how to register, here: volatilityfoundation.org/from-the-sou...
See the full list of speakers + event info, including how to register, here: volatilityfoundation.org/from-the-sou...
September 18, 2025 at 7:56 PM
#FTSCon Speaker Spotlight: Joseph Edwards (@eflags.bsky.social) is presenting “The Forensics of Zoom's Remote Control” in the HUNTER track.
See the full list of speakers + event info, including how to register, here: volatilityfoundation.org/from-the-sou...
See the full list of speakers + event info, including how to register, here: volatilityfoundation.org/from-the-sou...
Reposted by Joseph
For those unfamiliar, Ellen Nakashima is also one of the best natsec/intelligence/cyber reporters in the world, and has been for decades, in no small part because of course she cultivates high level sources instead of relying on official agency press offices.
Let’s assume what she’s saying here is true. Calling senior intelligence officials and using a non-personal phone to do so is just called reporting with good opsec. I’d expect that from someone trying to keep sources safe when reporting on national security.
July 3, 2025 at 7:35 PM
For those unfamiliar, Ellen Nakashima is also one of the best natsec/intelligence/cyber reporters in the world, and has been for decades, in no small part because of course she cultivates high level sources instead of relying on official agency press offices.
Reposted by Joseph
Reposted by Joseph
I'm a huge fan of @iceblock.app and their commitment to privacy. The differences in how iOS and Android handle push notifications doesn't usually matter.
For this threat model, it ABSOLUTELY DOES and ICEBlock is taking the right stance here.
www.iceblock.app/android
For this threat model, it ABSOLUTELY DOES and ICEBlock is taking the right stance here.
www.iceblock.app/android
ICEBlock - Android Platform Statement
www.iceblock.app
July 2, 2025 at 4:00 PM
I'm a huge fan of @iceblock.app and their commitment to privacy. The differences in how iOS and Android handle push notifications doesn't usually matter.
For this threat model, it ABSOLUTELY DOES and ICEBlock is taking the right stance here.
www.iceblock.app/android
For this threat model, it ABSOLUTELY DOES and ICEBlock is taking the right stance here.
www.iceblock.app/android
Reposted by Joseph
New evidence suggests Russian forces shot down Azerbaijan Airlines Flight 8243 www.euronews.com/2025/07/01/n...
New evidence suggests Russian forces caused Azerbaijan Airlines crash
An Azerbaijani news outlet released evidence Tuesday suggesting the Russian military ordered the 2024 missile strike on Flight 8243, causing a crash in which 38 passengers died and another 29 were inj...
www.euronews.com
July 1, 2025 at 9:18 PM
New evidence suggests Russian forces shot down Azerbaijan Airlines Flight 8243 www.euronews.com/2025/07/01/n...
Reposted by Joseph
I imagined the Chatsubo in 1984. 41 years later I opened its door. Neuromancer is in production.
July 1, 2025 at 7:14 PM
I imagined the Chatsubo in 1984. 41 years later I opened its door. Neuromancer is in production.
Reposted by Joseph
ICEblock, which allows users to alert others to the geographical location of ICE officers, is the top social networking app in the App Store right now after Karoline Leavitt condemned it from the podium yesterday.
July 1, 2025 at 7:27 PM
ICEblock, which allows users to alert others to the geographical location of ICE officers, is the top social networking app in the App Store right now after Karoline Leavitt condemned it from the podium yesterday.
Reposted by Joseph
Check out our weekly @americansunlight.org Last Week in Censorship roundup.
Last week: unprecedented lawsuit against the MD federal judiciary, the tourist denied entry over political meme, and the resignation of UVA president Jim Ryan.
(Also: merch!)
americansunlight.substack.com/p/last-week-...
Last week: unprecedented lawsuit against the MD federal judiciary, the tourist denied entry over political meme, and the resignation of UVA president Jim Ryan.
(Also: merch!)
americansunlight.substack.com/p/last-week-...
Last Week in Censorship: June 22-28, 2025
Maryland federal judiciary hit with unprecedented lawsuit, tourist denied entry over political meme, and university president resigns under federal pressure.
americansunlight.substack.com
July 2, 2025 at 12:08 PM
Check out our weekly @americansunlight.org Last Week in Censorship roundup.
Last week: unprecedented lawsuit against the MD federal judiciary, the tourist denied entry over political meme, and the resignation of UVA president Jim Ryan.
(Also: merch!)
americansunlight.substack.com/p/last-week-...
Last week: unprecedented lawsuit against the MD federal judiciary, the tourist denied entry over political meme, and the resignation of UVA president Jim Ryan.
(Also: merch!)
americansunlight.substack.com/p/last-week-...
Reposted by Joseph
I’ve spent a majority of my career focusing on ransomware thanks to everything I learned while working under Kurtis Minder. He taught me so much from numerous ransomware negotiations.
I highly recommend adding his new book to your summer reading list. a.co/d/gZynHMp
I highly recommend adding his new book to your summer reading list. a.co/d/gZynHMp
July 2, 2025 at 2:42 AM
I’ve spent a majority of my career focusing on ransomware thanks to everything I learned while working under Kurtis Minder. He taught me so much from numerous ransomware negotiations.
I highly recommend adding his new book to your summer reading list. a.co/d/gZynHMp
I highly recommend adding his new book to your summer reading list. a.co/d/gZynHMp
Reposted by Joseph
ICE rolls facial recognition tools out to officers’ phones, Scattered Spider targets airlines, and hackers open a valve at a Norwegian dam, in this week’s security news roundup.
@evystadium.bsky.social has more:
@evystadium.bsky.social has more:
June 30, 2025 at 8:12 PM
ICE rolls facial recognition tools out to officers’ phones, Scattered Spider targets airlines, and hackers open a valve at a Norwegian dam, in this week’s security news roundup.
@evystadium.bsky.social has more:
@evystadium.bsky.social has more:
Reposted by Joseph
RUN FOR SOMETHING is an organization whose main gig is recruiting, training, and supporting diverse YOUNG progressive candidates like Zohran Mamdani.
We have a ton more work to do to transform the Democratic Party so ...
GIVE THEM MONEY !!!
runforsomething.net
We have a ton more work to do to transform the Democratic Party so ...
GIVE THEM MONEY !!!
runforsomething.net
June 25, 2025 at 3:19 AM
RUN FOR SOMETHING is an organization whose main gig is recruiting, training, and supporting diverse YOUNG progressive candidates like Zohran Mamdani.
We have a ton more work to do to transform the Democratic Party so ...
GIVE THEM MONEY !!!
runforsomething.net
We have a ton more work to do to transform the Democratic Party so ...
GIVE THEM MONEY !!!
runforsomething.net
Reposted by Joseph
NEW: Records of hundreds of emergency calls from ICE detention centers obtained by WIRED—including audio recordings—show a system inundated by life-threatening incidents, delayed treatment, and overcrowding.
Unpaywalled from @dell.bsky.social and @dmehro.bsky.social:
Unpaywalled from @dell.bsky.social and @dmehro.bsky.social:
'They're Not Breathing': Inside the Chaos of ICE Detention Center 911 Calls
Records of hundreds of emergency calls from ICE detention centers obtained by WIRED—including audio recordings—show a system inundated by life-threatening incidents, delayed treatment, and overcrowdin...
www.wired.com
June 25, 2025 at 9:21 PM
NEW: Records of hundreds of emergency calls from ICE detention centers obtained by WIRED—including audio recordings—show a system inundated by life-threatening incidents, delayed treatment, and overcrowding.
Unpaywalled from @dell.bsky.social and @dmehro.bsky.social:
Unpaywalled from @dell.bsky.social and @dmehro.bsky.social:
Reposted by Joseph
There's a new ClickFix variation called FileFix
This one works by tricking users into copying a file path in Windows Explorer.
Attackers modify the clipboard, so you're actually pasting and running PowerShell ahead of the file path
mrd0x.com/filefix-clic...
This one works by tricking users into copying a file path in Windows Explorer.
Attackers modify the clipboard, so you're actually pasting and running PowerShell ahead of the file path
mrd0x.com/filefix-clic...
June 24, 2025 at 8:28 AM
There's a new ClickFix variation called FileFix
This one works by tricking users into copying a file path in Windows Explorer.
Attackers modify the clipboard, so you're actually pasting and running PowerShell ahead of the file path
mrd0x.com/filefix-clic...
This one works by tricking users into copying a file path in Windows Explorer.
Attackers modify the clipboard, so you're actually pasting and running PowerShell ahead of the file path
mrd0x.com/filefix-clic...
Reposted by Joseph
And she's writing from Kyiv as they go through nightly Russian attacks. Really amazing that @darynant.bsky.social does what she does.
A Russian court sentenced several members of the notorious REvil ransomware gang to five years in prison but let them walk free right after the verdict, saying they had already spent enough time behind bars while awaiting trial.
✍️ @darynant.bsky.social
✍️ @darynant.bsky.social
Russia releases REvil members after convictions for payment card fraud
Four convicted members of the REvil cybercrime gang were released from custody after being sentenced in St. Petersburg for offenses related to payment card fraud.
therecord.media
June 24, 2025 at 2:55 PM
And she's writing from Kyiv as they go through nightly Russian attacks. Really amazing that @darynant.bsky.social does what she does.
Reposted by Joseph
Some people get into journalism because they’re skeptical of power, and others do so because they’re impressed by it. Moments like this are clarifying with respect to who’s who.
June 22, 2025 at 10:03 PM
Some people get into journalism because they’re skeptical of power, and others do so because they’re impressed by it. Moments like this are clarifying with respect to who’s who.
Reposted by Joseph
The White House has rejected the Pentagon's pick for the next head of the NSA and Cyber Command
The DOD proposed Army Lt. Gen. Richard Angle to replace Gen. Timothy Haugh, who was dismissed by President Trump in April
www.politico.com/news/2025/06...
The DOD proposed Army Lt. Gen. Richard Angle to replace Gen. Timothy Haugh, who was dismissed by President Trump in April
www.politico.com/news/2025/06...
Top Pentagon spy pick rejected by White House
Army Lt. Gen. Richard Angle's name was put forward to lead the National Security Agency and U.S. Cyber Command.
www.politico.com
June 21, 2025 at 5:56 PM
The White House has rejected the Pentagon's pick for the next head of the NSA and Cyber Command
The DOD proposed Army Lt. Gen. Richard Angle to replace Gen. Timothy Haugh, who was dismissed by President Trump in April
www.politico.com/news/2025/06...
The DOD proposed Army Lt. Gen. Richard Angle to replace Gen. Timothy Haugh, who was dismissed by President Trump in April
www.politico.com/news/2025/06...