Viewing profile — csoghoian

The successor to Do Not Track is the Global Privacy Control, which companies are required to respect in several states, including California and Colorado. Support for GPC is alread…

The Open Technology Fund provides free security audits for open source projects. Apply here: https://apply.opentech.fund/red-team-lab/

DHS is a law enforcement agency, which regularly uses surveillance techniques, some of which exploit security flaws in devices and software. When you share information about securi…

So you didn't tell the Federal Trade Commission, even though they previously investigated (and punished) HTC for doing something similar?

This seems very similar (or perhaps even worse) than the fact pattern in the HTC/Carrier IQ case. https://www.ftc.gov/news-events/blogs/business-blog/2013/02/... Did you provide th…

I think that some webcam indicator lights are vulnerable to remote disabling. Although it is certainly possible that some are not, I and most other users have no way of knowing whi…

1. My employer, the ACLU, filed two comments in the Rule 41 process. The first, before public comments were even solicited, resulted in DOJ dropping one of their proposed changes t…

I've researched this issue extensively, and I've not found a case before where a thousand people in the same place were searched pursuant to a single search warrant, let alone a th…

The FBI has been using malware since at least 2003 [1], probably a few years before that. Today, the FBI has a dedicated team, the Remote Operations Unit, based out of Quantico, wh…

This isn't just about the district where the judge is based. There is also the bigger question of whether or not judges should be authorizing bulk hacking operations. The three Tor…

Pay an award booking service to find you the best flights possible. There are several out there, and they know a lot more than you about how to find obscure flights/routing. it's w…

Actually, weev neither wrote the script nor ran it. Those were done by his codefendant. Weev took the data provided to him by his codefendant and gave it to Gawker.

The Federal Trade Commission is an independent agency. They don't take orders from the President. (I know, because I worked there for a year)

You might want to look at this: https://dnshistory.org/dns-records/mail.clintonemail.com http://whois.arin.net/rest/net/NET-24-187-234-184-1/pft

You say "Redphone? Whisper? and various other projects - while very cool - didn't achieve even as much popularity as GnuPG" The Axolotl protocol that was created for Whisper System…

I pitch stories regularly to reporters. Dan is by far one of the best reporters in the business, and is the person I go to whenever I have something that is interesting, but far to…

The US Marshals are not the only federal law enforcement agency doing something like this. According to documents I obtained through a FOIA in 2012, ICE has purchased an airbourne …

As one of the complainers (and the person who filed the bug you linked to), I'm happy to see Google make some progress here. I'm even happier to see that they hired Adrienne Felt, …

Why wouldn't the FBI or NSA just demand the encryption keys and then sign their malware?

The government obtained a 2703(d) order for the stored non-content data of a particular user (suspected to be Snowden, but redacted from the court documents). They then obtained a …

Yahoo still doesn't use HTTPS by default, for email or search. Not using HTTPS is huge, gift-wrapped present to the NSA. It also means that the NSA can get Yahoo users' communicati…

Having worked at the FTC for a year in the team that goes after companies for violating consumers' privacy, I can comfortably say that you are 100% right on that point. The FTC (un…

If Syrian rebels aren't using computers, why would pro-government forces bother to send them malware? See: https://www.eff.org/deeplinks/2012/12/iinternet-back-in-syri... Your unsu…

There appears to be a bit of a conflict between the cardinal rule you were taught when you worked at NSA of not collecting information on US persons with the current practices of t…