Alec Muffett @AlecMuffett Twitter profile

Pinned Tweet

Alec Muffett

2 years

NEW: A Civil Society Glossary and Primer for End-to-End Encryption Policy in 2022 — #privacy #surveillance #messenger #interoperability #encryption #endtoendencryption @WhatsApp @SignalApp

A Civil Society Glossary and Primer for End-to-End Encryption Policy in 2022 — #privacy #surveill...

A few weeks ago it was with great delight that I accepted a request from Privacy International to write a report for them, to share my perspectives on the technical aspects of end-to-end encryption…

alecmuffett.com

8

62

100

Last Seen Profiles

@Carson_Mock

@NthSydneyBears

@MeganMorro62551

@ringogrumio

@SergioFFerra

@LakewoodScoop

@nogiken33

@CharismaMue

@umenaitama70476

@neveare

@zhouKelvinZzzz

@dian_gan58868

@Yumanai_

@Aruba15miljoen

@UTD_hice

@wilsanbo

@orii_jones

@KasihLudah

@OnePieceAnimeUS

@Leo__Litten

@WashPapers

@RossCol89474735

@sabidotflow

@econviews

@ao2_09

@asd

@JimMWeber

@jrs_rankings

@AbstractABT

@imwinthr

@Maturelove13

@shrimp_no_nu

@calvert_shannon

@omeroracxi

@tinpoco_enu2

@Yann_Mutombo

Alec Muffett

@AlecMuffett

5 years

BEST #XCODE REVIEW EVAR

34

2K

5K

Alec Muffett

@AlecMuffett

2 years

This is possibly the most important and long-awaited tweet that I've ever composed. On behalf of @Twitter , I am delighted to announce their new @TorProject onion service, at:

155

2K

5K

Alec Muffett

@AlecMuffett

8 years

28

2K

3K

Alec Muffett

@AlecMuffett

1 year

IN CASE YOU MISSED IT: All of Apple, WhatsApp & Signal will be pulling their products out of the UK market because of proposed Government surveillance obligations. Yes, really.

Alec Muffett

@AlecMuffett

1 year

WOW: - No Signal - No WhatsApp - No iMessage - No Facetime @jamesrbuk called it #internexit ; the UK will be extraordinarily isolated from the rest of the internet.

41

345

909

111

1K

3K

Alec Muffett

@AlecMuffett

3 years

"I regret ever Open Sourcing Java, for so many reasons.... mostly since my daughter is now coding."

24

642

3K

Alec Muffett

@AlecMuffett

6 years

OMG THIS IS AN AWESOME SOLUTION TO #GDPR - BACK TO 1996!

46

672

2K

Alec Muffett

@AlecMuffett

9 months

IN CASE YOU MISSED IT: The EU — in private — amended draft digital identity regulation to create a legally-mandated surveillance backdoor in HTTPS. Over 300 academics & tech experts TODAY publish an open letter calling on the EU to fix this + follow web standards instead:

Alec Muffett

@AlecMuffett

9 months

Hot on the heels of #ChatControl and in the name of “identity” and “consumer choice” the EU seeks the ability to undetectably spy on HTTPS communication; 300+ experts say “no” to #Article45 of #eIDAS #QWAC

9

172

352

22

806

2K

Alec Muffett

@AlecMuffett

7 years

"Oh, you're 'into crypto'? Cool! So am I, I got into crypto in 1991. DES optimisation through S-box inlining. Record-breaking stuff, and a slight frisson of illegality. Wait… what? What do you mean, 'investment'?"

23

287

1K

Alec Muffett

@AlecMuffett

3 years

@KatiePrice Katie, this proposal will cause grief & harm to innocent people who need anonymity to learn & communicate, whilst also driving abusers to just use VPNs to bypass restrictions, "show off" & abuse more. This won't fix the problem; it'll make matters worse.

Alec Muffett

@AlecMuffett

3 years

@KatiePrice But Katie, this won't work — for instance #Facebook doesn't permit anonymity and yet there's plenty of bullying and abuse on there. It turns out that some people are just horrid, and removing anonymity just means that people who need it (LGBTQ teens?) will lose it.

7

67

475

3

74

1K

Alec Muffett

@AlecMuffett

2 years

@profgalloway Hi! I am a former Facebook engineer who has worked on security, privacy safety and compliance issues for 30+ years. Inhibiting anonymity / obligating use of real names, does little to inhibit abuse, but it DOES boost disenfranchisement & censorship of the poor & less able.

20

162

1K

Alec Muffett

@AlecMuffett

3 years

THIS is the most important thing I've read about #onlinesafety today: 99% of racist-abusive Twitter users were found to be identifiable, not "anonymous", trolls. That anonymity is a "driver" is incorrect; we have a societal problem that people are content to be overtly racist.

UK

@XUK

3 years

Our data suggests that ID verification would have been unlikely to prevent the abuse from happening - as of the permanently suspended accounts, 99% of account owners were identifiable.

69

1K

3K

11

530

941

Alec Muffett

@AlecMuffett

1 year

WOW: - No Signal - No WhatsApp - No iMessage - No Facetime @jamesrbuk called it #internexit ; the UK will be extraordinarily isolated from the rest of the internet.

Apple slams UK surveillance-bill proposals

The technology giant says it could remove services such as FaceTime from the UK over potential changes

www.bbc.co.uk

41

345

909

Alec Muffett

@AlecMuffett

3 years

I am seeing a regrettable amount of conspiracy-mongering regarding #facebookdown , so I would like to offer this juicy story; link attached.

12

347

890

Alec Muffett

@AlecMuffett

3 years

@KatiePrice Katie, your proposal is at 126k signatures, and you're talking about a real, social issue; but your proposal to "card everyone" will isolate teens, closeted LGBTQ people, & those without paperwork. Surely you don't want that? Plus: VPNs will defeat it. It won't stop abuse.

3

40

822

Alec Muffett

@AlecMuffett

7 years

Cross-referencing @mjranum 's recent post about using Google Maps to identify CIA "Black" sites in Djibouti, with the #Strava heat-map, appears to offer corroboration

20

450

779

Alec Muffett

@AlecMuffett

8 years

Whitfield Diffie: "When I got the [Turing Award] e-mail, I read it, and then the first thing I did was to check the headers very carefully…"

6

661

807

Alec Muffett

@AlecMuffett

6 years

PASSWORD SECURITY IS COUNTERINTUITIVE: "Your password must be 8 characters & contain upper, lower, digit & punctuation characters" => "Your password is now 2.14x easier to guess via brute force."

40

429

730

Alec Muffett

@AlecMuffett

8 years

My laptop is set up to take a picture after 3 incorrect password attempts

7

528

636

Alec Muffett

@AlecMuffett

7 years

Question for @AmberRuddHR - why is Critical National Infrastructure spending on surveillance, but not on securing/backing up #NHS systems?

31

477

590

Alec Muffett

@AlecMuffett

7 years

Dear infosec Twitter, can you please stop beating-up #SusanMauldin the #Equifax CSO for being a Music major. You petty, sexist fucks.

43

184

630

Alec Muffett

@AlecMuffett

9 years

Computer Programming To Be Officially Renamed “Googling Stackoverflow” http://t.co/BlcKD2ykpt

18

680

535

Alec Muffett

@AlecMuffett

6 years

this is cute:

7

180

542

Alec Muffett

@AlecMuffett

2 years

Aren't we all?

3

85

537

Alec Muffett

@AlecMuffett

7 years

Not joking: Google's latest ad campaign is themed around them watching you from inside your computer monitor:

20

456

525

Alec Muffett

@AlecMuffett

3 years

@KatiePrice But Katie, this won't work — for instance #Facebook doesn't permit anonymity and yet there's plenty of bullying and abuse on there. It turns out that some people are just horrid, and removing anonymity just means that people who need it (LGBTQ teens?) will lose it.

7

67

475

Alec Muffett

@AlecMuffett

7 years

Oh, this is glorious: pysaml2 library uses an `assert` statement to check & reject users who use the wrong password; however when running with the optimiser enabled, all assert statements are stripped… so: anyone can log into anything with any password.

Running python with optimizations makes UsernamePasswordMako accept any password for any user ·...

On the current master branch, the UsernamePasswordMako class relies on an assert statement to check the user's password: https://github.com/rohe/pysaml2/blob/9cbbd9bd9f6bfa5e9ceace064dd1af4e2ff...

github.com

16

374

500

Alec Muffett

@AlecMuffett

6 years

Regards #Article13 , I wrote up a little command-line false-positive emulator; it tests 10 million events with a test (for copyrighted material, abusive material, whatever) that is 99.5% accurate, with a rate of 1-in-10,000 items actually being bad.

14

316

460

Alec Muffett

@AlecMuffett

2 years

I'm delighted to have assisted @Twitter engineers in their adoption of #OnionServices & #OnionNetworking from @TorProject — providing greater privacy, integrity, trust, & "unblockability" for people all around the world who use @Twitter to communicate.

7

95

449

Alec Muffett

@AlecMuffett

6 years

"Updated 48 years ago by ken" #unix

9

174

439

Alec Muffett

@AlecMuffett

2 years

@neerajarora Hey Neeraj! I don't know what planet you were orbiting around in 2014, but speaking as a Facebook engineer at that time, the notion that FB didn't then have a hugely bad "civil society" reputation back then is ludicrous.

neeraj arora

@neerajarora

2 years

Tech companies need to admit when they have done wrong. Nobody knew in the beginning that Facebook would become a Frankenstein monster that devoured user data and spat out dirty money. We didn’t either.

109

712

6K

9

39

440

Alec Muffett

@AlecMuffett

7 years

Winner of "Best Product Placement" for #34C3 goes to @GPGTools for the #GPGSuite popup which appeared on-screen during the @Snowden presentation. #yesReally

4

199

432

Alec Muffett

@AlecMuffett

8 years

We're in a world where social media has more comms-security than your bank, and porn sites have better privacy & integrity than news outlets

10

350

391

Alec Muffett

@AlecMuffett

2 years

@CaseyNewton I deleted my previous tweet so that I can be more plain: this is a mind numbingly foolish, privacy-destroying, encryption-busting, innovation-killing proposal, dressed up in clothes of anti-monopoly. If you want federation go use a federated protocol.

Casey Newton

@CaseyNewton

2 years

By 2023 iMessage and WhatsApp will have to be interoperable, because Europe said so. Wild new internet we’re living on these days

50

166

849

19

152

402

Alec Muffett

@AlecMuffett

5 years

So it's 28 years after I published the "Crack" password cracker, and people are still trying to make the argument that "Access To 'Offensive' Security Tools Can And Should Be Restricted" People: Stop it. /cc @GossiTheDog @QW5kcmV3 @riskybusiness

7

99

392

Alec Muffett

@AlecMuffett

7 years

NEW: "Tor is End-to-End Encryption for Computers to talk to other Computers" /cc @torproject #darkweb #tor

10

247

340

Alec Muffett

@AlecMuffett

6 years

"Tech companies should implement features that will give us control over our children's internet usage" — this won't work because children are advanced, persistent threats who are resident within the physical security perimeter. They are hackers: #5rights

7

124

358

Alec Muffett

@AlecMuffett

9 months

Hot on the heels of #ChatControl and in the name of “identity” and “consumer choice” the EU seeks the ability to undetectably spy on HTTPS communication; 300+ experts say “no” to #Article45 of #eIDAS #QWAC

Hot on the heels of #ChatControl and in the name of “identity” and “consumer choice” the EU seeks...

There’s an old British political joke that goes: “Why is there only one ‘Monopolies Commission’?” The joke can be updated or localised to suit reader tastes: “…only on…

alecmuffett.com

9

172

352

Alec Muffett

@AlecMuffett

3 years

So the Information Commissioner's Office @ICOnews just slapped the Home Office @ukhomeoffice in the face, and all of the charities that the HO had co-opted, too, regarding #NoPlaceToHide : I think I'll have a piece of cake with morning coffee.

8

144

347

Alec Muffett

@AlecMuffett

7 years

It's official, ADSL works over wet string:

11

206

315

Alec Muffett

@AlecMuffett

9 years

The #CryptoWars nail is hit squarely on the head by @TheRealRevK http://t.co/X5GjOehrMC (ht: @jimfinnis ) http://t.co/UTea75wuvW

14

733

327

Alec Muffett

@AlecMuffett

3 years

@KatiePrice If some kid does not understand the world but wants to engage or ask questions without consequences, they need anonymity. If someone wants to report abuse or whistleblow safely, they need anonymity. Anonymity is not the problem. People are.

3

23

294

Alec Muffett

@AlecMuffett

2 years

@profgalloway Also: the real reason (i.e. not the one that you cite) for anonymity and self-declared identity being so popular on social media sites, is that ANONYMITY IS THE DEFAULT ON THE INTERNET.

3

26

316

Alec Muffett

@AlecMuffett

7 years

Oh my. #Sweden has a Governmental information-security trainwreck. Skip the first two paragraphs and read…

14

355

311

Alec Muffett

@AlecMuffett

2 years

"We want a backdoor, but we don't want just *anyone* to be able to use it. Only us good guys."

13

137

319

Alec Muffett

@AlecMuffett

9 years

This speech by the Singaporean Prime Minister; do you still want to vote for officials who brag their IT-ignorance? http://t.co/hO5NepAOPe

23

517

295

Alec Muffett

@AlecMuffett

6 years

Summary - PGP is not broken (except in architectural ways we already understand) - nor is GPG - install the inevitable software updates when they arrive - try to stop using Email so much (because PGP is the only way to secure it) - ignore the hype - move on #efail is hype

9

226

294

Alec Muffett

@AlecMuffett

2 years

I am also honoured that they've chosen to adopt EOTK (the Enterprise Onion Toolkit) to power their onion platform, albeit with considerable though reasonable modification to meet their extraordinary production requirements:

GitHub - alecmuffett/eotk: Enterprise Onion Toolkit

Enterprise Onion Toolkit. Contribute to alecmuffett/eotk development by creating an account on GitHub.

github.com

5

33

290

Alec Muffett

@AlecMuffett

1 year

Britain as a nation state does not have leverage to tell the rest of the world how to write code, not for any excuse. And, frankly, that is a net good for humanity, excuse the pun.

3

30

294

Alec Muffett

@AlecMuffett

2 years

The Twitter and Facebook Onion Sites, as well as others such as the New York Times, BBC, Deutsche Welle, Radio Free Europe and others, are documented on the #RealWorldOnionSites page at:

2

87

285

Alec Muffett

@AlecMuffett

3 years

1/ THE MOST IMPORTANT information security discussion of the day will be about the publication of #BugsInOurPockets , a paper by the biggest names in encryption, regarding #ClientSideScanning and the likes of the @Apple #CSAM -detection proposal:

5

199

284

Alec Muffett

@AlecMuffett

9 years

Oh my god: every BSD Unix system for several years had a 4-character backdoor password. re:

Alec Muffett

@AlecMuffett

9 years

I retreived the Sendmail Wizard Password ciphertext from 4.2BSD "a/FjIfuGKXyc2" Go on, then, what is it?

2

38

40

18

373

263

Alec Muffett

@AlecMuffett

3 years

ICYMI: absolutely the most important story that broke overnight is that Apple apparently intend to launch a feature enabling image detection & government surveillance on everyone's iPhones in the name of child protection. Apple are walking back privacy to enable 1984.

Matthew Green

@matthew_d_green

3 years

Whether they turn out to be right or wrong on that point hardly matters. This will break the dam — governments will demand it from everyone. And by the time we find out it was a mistake, it will be way too late.

28

155

737

11

175

252

Alec Muffett

@AlecMuffett

2 years

So why am I first(-ish?) to tweet about it? From past experience with the Facebook and BBC Onion sites, any sufficiently large announcement leads to a load-spike, and given that @TwitterSafety has 3.6 million followers it would not be wise in a time of global crisis.

3

25

244

Alec Muffett

@AlecMuffett

7 years

"There has been a suggestion that what is needed are new laws against terrorism"

11

287

247

Alec Muffett

@AlecMuffett

9 months

IN CASE YOU MISSED IT: The EU — in private — amended draft digital identity regulation to create a legally-mandated surveillance backdoor in HTTPS. Over 300 academics & tech experts YESTERDAY published an open letter calling on the EU to fix this + follow web standards instead:

Alec Muffett

@AlecMuffett

9 months

Hot on the heels of #ChatControl and in the name of “identity” and “consumer choice” the EU seeks the ability to undetectably spy on HTTPS communication; 300+ experts say “no” to #Article45 of #eIDAS #QWAC

9

172

352

6

192

248

Alec Muffett

@AlecMuffett

2 years

ps: before anyone asks / for purposes of clarity: I am not a Twitter employee. I just help large organisations which want to adopt #OnionServices .

5

20

236

Alec Muffett

@AlecMuffett

6 years

BREAKING NEWS: Nate Cardozo, lawyer for @EFF , is joining @Facebook as "Privacy Policy Manager for WhatsApp" — awesome potential future for secure messaging and end-to-end encryption!

22

97

240

Alec Muffett

@AlecMuffett

7 years

It's probably a good time to remind people that this is an excellent example of what Michael Hayden said; we should all be aware.

3

99

218

Alec Muffett

@AlecMuffett

1 year

If you have not read the EU Council Legal Service opinion on the EU's #ChatControl proposal — their version of the #OnlineSafetyBill spyware clauses — you really should. It is *damning* about EU/UK state anti-encryption proposals: Extracts below; src:

5

141

238

Alec Muffett

@AlecMuffett

5 years

In case you missed it, MI6 HQ is now a snowboard shop:

3

86

224

Alec Muffett

@AlecMuffett

1 year

When Signal and WhatsApp have fled the surveillance of the #OnlineSafetyBill , what app will still be around for politicans, journalists, and actual normal people to use, securely. The answer might be this:

THOUGHT EXPERIMENT: how the experiences of #Twitter and #ThreadsApp show us how the #OnlineSafety...

Potential Futures… Here’s a potential future timeline which just struck me: The Online Safety Bill passes, demanding some sort of client-side scanning of messages to be implemented The requis…

alecmuffett.com

21

86

231

Alec Muffett

@AlecMuffett

7 years

#Mogadishu . You might as well start calling this the "First World People In Third World Countries" dataset.

5

76

218

Alec Muffett

@AlecMuffett

8 years

Sometimes the funniest thing you can do is speak the absolute, flat truth:

2

234

223

Alec Muffett

@AlecMuffett

8 years

This slide from Akamai is the smoking gun regarding the actual legitimacy of traffic from Tor:

12

170

219

Alec Muffett

@AlecMuffett

11 years

EPIC HACK OF THE DAY: traceroute 216.81.59.173 # DO THIS NOW /ht @gravax

21

662

219

Alec Muffett

@AlecMuffett

2 years

Oh, and "long-awaited"? In 2014 I led the team which launched the @Facebook onion; there have been occasional conversations re: "an onion for Twitter" ever since. This is the result of many peoples efforts, over years, and I'd like to thank them all for their perseverance.

4

19

215

Alec Muffett

@AlecMuffett

7 years

1/ As an experiment, I've set up a Wikipedia Onion Site at: - I'll keep it running for a few days.

9

96

214

Alec Muffett

@AlecMuffett

7 years

This one is weird because it has perimeter security, but almost nobody goes into it wearing a fitbit / carrying a phone; perhaps _this_ is the CIA site?

7

67

203

Alec Muffett

@AlecMuffett

7 years

I am a noted author of "free hacking tools"; they led me to a life of professionalism, consultancy & 40% income tax.

Alec Muffett

@AlecMuffett

7 years

And then I read shit like this: « Free hacking tools 'help young into cyber-crime' »

2

1

7

12

113

201

Alec Muffett

@AlecMuffett

1 year

Everyone should screenshot and archive this tweet — detailing government supporting the pervasive use of VPNs for liberty and good — because it will need to be rolled out as a counter argument in a few months when VPNs are used by teenagers to circumvent the #OnlineSafetyBill .

Ministry of Defence 🇬🇧

@DefenceHQ

1 year

Latest Defence Intelligence update on the situation in Ukraine - 10 August 2023. Find out more about Defence Intelligence's use of language: 🇺🇦 #StandWithUkraine 🇺🇦

89

381

1K

11

116

212

Alec Muffett

@AlecMuffett

1 year

@jamesrbuk Again, for emphasis, all of the people who are saying that WhatsApp (etc) must be terribly profitable don't realise that the messaging services are largely loss-leaders. Abandoning the UK will save them money.

THOUGHT EXPERIMENT: how the experiences of #Twitter and #ThreadsApp show us how the #OnlineSafety...

Potential Futures… Here’s a potential future timeline which just struck me: The Online Safety Bill passes, demanding some sort of client-side scanning of messages to be implemented The requis…

alecmuffett.com

1

32

209

Alec Muffett

@AlecMuffett

9 years

There's a Default Wifi Password FOR YOUR RIFLE http://t.co/4Iulg5aHer http://t.co/hzxFt1tuK5

30

538

200

Alec Muffett

@AlecMuffett

2 years

@OwsWills @BBCLeeds This is awesome, but I cannot help thinking that it would have been great to have this level of questioning and pursuit of accountability, for the whole period from early 2016 to the present day.

Owen Williams 🏴󠁧󠁢󠁷󠁬󠁳󠁿

@OwsWills

2 years

There should be an award for “best question ever”, and @BBCLeeds ’ Roma Ahmed should win it for this opener.

421

6K

39K

4

10

194

Alec Muffett

@AlecMuffett

5 years

1/ This is a really interesting Tweet by @crispinhunt regarding #Article13 , and he may regret making it:

18

124

192

Alec Muffett

@AlecMuffett

7 years

NEW BEST STOCK PHOTO FOR "HACKERS" / "CYBER" COMES FROM @TheRegister

8

96

190

Alec Muffett

@AlecMuffett

6 years

Backplot: my "goodbye" posting to Facebook was in significant part in response to this work by @boztank , and subsequently garnered considerable support from Facebook's under-represented Engineering community, who genuinely do care about user privacy:

Facebook Executive In 2016: “Maybe Someone Dies In A Terrorist Attack Coordinated On Our Tools”

Facebook Vice President Andrew “Boz” Bosworth said that “questionable contact importing practices,” “subtle language that helps people stay searchable,” and other growth techniques are justified by...

www.buzzfeednews.com

18

81

189

Alec Muffett

@AlecMuffett

11 months

THIS ARTICLE BY @emptywheel IS THE NEXT BIG BATTLEGROUND It's what ALL governments fear: legal opinion that if a platform does not have access to message plaintext, it cannot be coerced to provide it. In this case though, it's #Section702 & the USA

FISC Rules that [Redacted] Is Not Subject to FISA 702 for One of Its Services - emptywheel

Some company successfully argued that, under FISA 702, if they don't have access to your data, they can't be compelled to provide US spooks assistance to get to it.

www.emptywheel.net

3

82

198

Alec Muffett

@AlecMuffett

3 years

@tim As Paul notes: this is not a victory, this is merely hope; and in a sense we will have to defend Apple who will doubtless be criticised from some quarters, for their taking extra time to consider the consequences of their original plan.

Prof Paul Bernal

@PaulbernalUK

3 years

@AlecMuffett Reminds us that it’s always worth fighting, and always worth making a fuss.

2

8

42

4

47

190

Alec Muffett

@AlecMuffett

3 years

This is deeply bizarre of @FrancesHaugen - she is arguing that if Facebook willingly surrenders its ability to spy on user content — including on behalf of, say, the Chinese Government — then it cannot protect those users *FROM* the Chinese Government.

9

36

193

Alec Muffett

@AlecMuffett

8 years

Next time you hear "The NSA get direct access to {Google Facebook Twitter Apple} Databases" - no, they don't:

How to talk about PRISM and not get entirely blown-off, if you’re an activist

(aka: How #PRISM works…)

medium.com

6

105

184

Alec Muffett

@AlecMuffett

6 years

Oh god, here we go again: - no user serviceable parts inside - you don't ever need to edit URLs - no, really, we have the numbers - well, you're not normal - trust us, the web is too complex - trust us to tell you that you're safe - trust google

Adriana Porter Felt

@__apf__

6 years

URLs aren't usable, but people are forced to rely on them for so much -- browsing, security, sharing. Expect to see changes to how Chrome displays identity in the coming year. @emschec @estark37

109

238

600

15

86

182

Alec Muffett

@AlecMuffett

4 years

👏 NO 👏 IT 👏 IS 👏 NOT 👏

Surveillance a price worth paying to beat coronavirus, says Blair thinktank

Tony Blair Institute says carefully applied technology could be route through crisis

www.theguardian.com

8

62

175

Alec Muffett

@AlecMuffett

8 years

Quiet Saturday morning, building a cluster.

8

52

175

Alec Muffett

@AlecMuffett

2 years

@neerajarora By that time the criticism had been sedimented for several years, so much so that it was considered more amazing when the company did anything "good"; but all this seems part of getting people to read Deepa's article about your startup, I guess?

Deepa Seetharaman

@dseetharaman

2 years

Here’s my story about @halloapp , a startup cofounded ex WhatsApp execs including @neerajarora , and how the service represents a new way of thinking about social media: smaller, fewer features, & a lot more friction.

1

33

104

6

10

185

Alec Muffett

@AlecMuffett

4 years

STEREOTYPE DRAMA UNFOLDING IN #HARTLEYWINTNEY

11

47

183

Alec Muffett

@AlecMuffett

7 years

#burn /cc @RSAConference

5

52

180

Alec Muffett

@AlecMuffett

3 years

@KatiePrice I remember the bullies at school who were up close and personal - I knew exactly who they were, and it did not stop it. We must not ban anonymity, it is the wrong solution for the problem, doing so would achieve nothing and leave politicians complacent that the matter is sorted.

1

13

166

Alec Muffett

@AlecMuffett

9 years

Read the bit in blue: They're hoping for a terrorist attack to justify surveillance. http://t.co/QMVETWnv9t

25

381

174

Alec Muffett

@AlecMuffett

6 years

|￣￣￣￣￣￣￣￣￣￣| | CYBER | | MEANS | | COMPUTERY | |＿＿＿＿＿＿＿＿＿＿| (\__/) || (•ㅅ•) || / 　づ

7

57

179

Alec Muffett

@AlecMuffett

1 year

Major props to @wcathcart and @whatsapp . Journalists covering this should take time and steps to explain that "weakening security" includes (e.g.) leaving the encryption unchanged and instead adding content-scanning software to the app.

4

62

179

Alec Muffett

@AlecMuffett

1 year

In a nutshell:

3

37

176

Alec Muffett

@AlecMuffett

6 years

@mikko Google annual revenue* = $110bn Userbase =~ 2.1bn (same as Facebook, no quick source to hand) Your data is worth $52.38/year / about $1 per week, to Google. *

Google posts its first $100 billion year

Google has finally joined the $100 billion club.

money.cnn.com

4

84

170

Alec Muffett

@AlecMuffett

7 years

"Pen-testing as mental out-sourcing", from a friend at a Bank:

8

138

172

Alec Muffett

@AlecMuffett

7 years

Looks like this month's BrandedVulnerability™ will be something called #KRACK / #KRACKAttacks at

8

159

168

Alec Muffett

@AlecMuffett

7 years

HOW TO VIEW AN HTTPS CERTIFICATE IN #CHROME - A CHEESE-MOVING ADVENTURE IN 8 PARTS: 1/8

17

131

174

Alec Muffett

@AlecMuffett

10 years

each time you hear "the [terrorists] were already known", think: "surveillance doesn't work"

20

351

167

Alec Muffett

@AlecMuffett

7 years

The tragedy is how rapidly free expression gets quenched in pursuit of state interests (cont…)

3

54

150

Alec Muffett

@AlecMuffett

6 years

DEAR PEOPLE WHO HAVE BRED: on a scale of 1..10, how good are your kids at bypassing parental controls and age restrictions on internet services / apps / websites?

132

64

165

Alec Muffett

@AlecMuffett

3 years

The Prime Minister uses both WhatsApp & Signal, and presumably appreciates the benefits of end-to-end encrypted communication. Unless the UK moves towards a "one rule for politicians, another for everyone else"-approach, if Boris can have end-to-end encrypted crypto, so can we.

8

78

167

Alec Muffett

@AlecMuffett

5 years

@IanDunt PDF is one of humanity's largest religions:

4

57

164