Notices by Martin (mshelton@mastodon.social)

"This camera is missing Android security updates for the last eight years." https://micahflee.com/flock-cameras-are-riddled-with-security-vulnerabilities-and-hard-coded-credentials/

If you use Signal to work with sensitive contacts, it’s not a “set it and forget it” app. You do need to maintain the safety of your account. Fortunately it's pretty easy to do. Check out our guide: https://freedom.press/digisec/blog/signal-account-safety/

@inthehands Here's our comprehensive Signal guide. https://freedom.press/digisec/blog/locking-down-signal/

Hoo boy. I am analyzing this to learn more about how it happened. I will have a writeup about how newsrooms can prevent Signal username hijacking risks. https://www.dropsitenews.com/p/intercept-signal-tip-line-breach-hack

I don't know how any AI companies can justify being upset when someone copies content from them to train their models. https://arstechnica.com/tech-policy/2026/06/anthropic-claims-alibaba-defied-trump-to-attack-claude-and-steal-capabilities/

We're seeing a fun new iteration on "Signal Support" scam attacks. Now attackers aren't just trying to hijack Signal accounts, but they are also trying to get targets' backup recovery keys.

Simply put, Signal will not reach out to you from a support account. Report and move on.
https://freedom.press/digisec/blog/psa-signal-backup-hijacking-attack/

It takes engineering hours to remove a feature. Even if few people use it, why go out of your way to remove it? Meta’s hurting its users. And for what? https://www.theverge.com/tech/894752/instagram-end-to-end-encryption

Signal's recent disclosure of how little it could share in response to a grand jury subpoena is pretty telling. Its defaults are very strong. But if you want to go further, we have a guide on really how to really maximize its privacy settings. https://freedom.press/digisec/blog/locking-down-signal/

Signal recently released another grand jury subpoena which, as always, basically had nothing interesting to turn over in response. For the requested phone numbers they could only provide the account creation timestamp. https://signal.org/bigbrother/district-of-columbia/

We're getting a lot of questions about Signal group chats, and how to use them as safely as possible. Share widely! https://freedom.press/digisec/blog/signal-group-safety/

@joshua 50 feet? Wonder why they're flying so low.

We're hiring. If you or someone you know are looking for a role in HR/finance, @freedomofpress is a great place to work. https://freedom.press/careers/job/?gh_jid=4649061005

I receive a shiny new YubiKey, but my 2FA is on my previous two YubiKeys.

The result: I now use three YubiKeys.

I work in press freedom. The news is bleak, and I know journalists feel it too.

I hope you will support the news in whatever way you can to ensure they can do the work. It’s not their fault things suck, they’re just working their asses off to help get you fact checked information. Get them paid.

A joint project of @freedomofpress and @eff: Journalists have been asking us about how to prepare devices for travel. We put together a checklist of things you can do. https://freedom.press/digisec/blog/border-security/

Cooking something at work on identifying people on Signal. As always, I like to include illustrative screenshots.

To help confirm someone's identity, Signal offers nicknames and information about the groups you share in common with your contacts. Make sure you're inviting the right person to your group. Learn about Signal's identifiers: https://freedom.press/digisec/blog/signal-identifiers/

The tech world has a habit of framing narratives around progress and inevitability — that only backward-looking people get in the way. Notice where this happens with narrative-building in our politics. Don't let anyone convince you of unidirectional progress, nor inevitability. It’s another tactic.

Just remembering one time when a guy jumped into my mentions to defend Elon after I shared recall data. I think the guy turned out to be the president of a Tesla owners club.

The National Highway Traffic Safety Administration is also responsible for issuing safety recalls. The Cybertruck alone had seven in 2024.
https://apnews.com/article/musk-trump-autonomous-selfdriving-doge-auto-safety-99b369c5e3ccd3e7c09b6951604b3a0a
https://www.cnet.com/roadshow/news/every-tesla-cybertruck-recall-thats-happened-so-far/