Jim Lippard
@lippard.bsky.social
I like infosec (esp. threat intelligence), history and philosophy of science and technology, skepticism. Mastodon: http://infosec.exchange/@lippard
Reposted by Jim Lippard
Chavarria, a U.S. citizen, was held at the airport "for more than four hours and released only after he finally agreed to let the agents search his smartphone, tablet, and laptop computer. The agents...informed him that he had no Fourth Amendment right to resist." @pacificlegal.bsky.social is suing.
CBP agents held this U.S. citizen for hours until he agreed to let them search his electronic devices
A federal lawsuit argues that perusing travelers' personal data without a warrant or probable cause violates the Fourth Amendment.
reason.com
December 12, 2025 at 11:04 PM
Chavarria, a U.S. citizen, was held at the airport "for more than four hours and released only after he finally agreed to let the agents search his smartphone, tablet, and laptop computer. The agents...informed him that he had no Fourth Amendment right to resist." @pacificlegal.bsky.social is suing.
Latest Darknet Diaries is "Maxie" about Maxie Reynolds and her life story (studying underwater robotics at Cranfield University and quantum computing at MIT before becoming a pen tester and then subsea datacenter entrepreneur as founder of Subsea Cloud).
December 12, 2025 at 9:56 PM
Latest Darknet Diaries is "Maxie" about Maxie Reynolds and her life story (studying underwater robotics at Cranfield University and quantum computing at MIT before becoming a pen tester and then subsea datacenter entrepreneur as founder of Subsea Cloud).
Reposted by Jim Lippard
LOL... Pentagon released a new AI military chatbot and it immediately pointed out that Pete Hegseth is a war criminal.
abovethelaw.com/2025/12/pent...
abovethelaw.com/2025/12/pent...
Pentagon Unveils New GenAI Platform, It Immediately Starts Flagging Pete Hegseth's War Crimes - Above the Law
The Defense Department's new ChatJAG turned out to be better than the human chain of command.
abovethelaw.com
December 12, 2025 at 8:00 PM
LOL... Pentagon released a new AI military chatbot and it immediately pointed out that Pete Hegseth is a war criminal.
abovethelaw.com/2025/12/pent...
abovethelaw.com/2025/12/pent...
Reposted by Jim Lippard
This is Tucson's Miracle Mile. The idea that saying there's an ICE operation ongoing in that general area is "doxxing" is so ridiculous it hardly bears repeating, and yet the person saying it has close personal ties to the Department of Justice (remember the Epstein invite?).
December 12, 2025 at 8:13 PM
This is Tucson's Miracle Mile. The idea that saying there's an ICE operation ongoing in that general area is "doxxing" is so ridiculous it hardly bears repeating, and yet the person saying it has close personal ties to the Department of Justice (remember the Epstein invite?).
the editor-in-chief at Reason is comfortable being part of this collection of crackpots, grifters, and lunatics?
If this is liberty, give me death now please :( (So many libertarians are such lost souls.)
December 12, 2025 at 6:51 PM
the editor-in-chief at Reason is comfortable being part of this collection of crackpots, grifters, and lunatics?
thread on the continuing Abrego Garcia saga, government continues to demonstrate bad faith
Hahahaha eat shit
December 12, 2025 at 5:01 PM
thread on the continuing Abrego Garcia saga, government continues to demonstrate bad faith
Reposted by Jim Lippard
NEW, by me: Home Depot exposed access to its internal systems for a year after an employee posted a private GitHub token online, likely by mistake.
When a security researcher found it and tried to alert Home Depot, he was ignored. I alerted the company, which revoked access, but wouldn't comment!
When a security researcher found it and tried to alert Home Depot, he was ignored. I alerted the company, which revoked access, but wouldn't comment!
Exclusive: Home Depot exposed access to internal systems for a year, says researcher
A security researcher tried to alert Home Depot to the security lapse exposing its backend GitHub source code repos and other internal cloud systems, but was ignored.
techcrunch.com
December 12, 2025 at 4:46 PM
NEW, by me: Home Depot exposed access to its internal systems for a year after an employee posted a private GitHub token online, likely by mistake.
When a security researcher found it and tried to alert Home Depot, he was ignored. I alerted the company, which revoked access, but wouldn't comment!
When a security researcher found it and tried to alert Home Depot, he was ignored. I alerted the company, which revoked access, but wouldn't comment!
wow, there's a whole IMDB page for it: www.imdb.com/list/ls08218...
December 11, 2025 at 11:17 PM
wow, there's a whole IMDB page for it: www.imdb.com/list/ls08218...
Reposted by Jim Lippard
Interesting. I was told I would be completely discredited when the evidence comes out.
www.lawfaremedia.org/article/anna...
www.lawfaremedia.org/article/anna...
December 11, 2025 at 10:30 PM
Interesting. I was told I would be completely discredited when the evidence comes out.
www.lawfaremedia.org/article/anna...
www.lawfaremedia.org/article/anna...
Round 2, much less serious than round 1. Two additional vulns, one leaks server function source code, the other is a DoS vuln. blog.cloudflare.com/react2shell-...
React2Shell and related RSC vulnerabilities threat brief- early exploitation activity and threat actor techniques
Early activity indicates that threat actors quickly integrated this vulnerability into their scanning and reconnaissance routines and targeted critical infrastructure including nuclear fuel, uranium a...
blog.cloudflare.com
December 11, 2025 at 11:03 PM
Round 2, much less serious than round 1. Two additional vulns, one leaks server function source code, the other is a DoS vuln. blog.cloudflare.com/react2shell-...
thread
Okay this is going to be long so mute it if you don't want a granular explanation but first: SHAME on @ronfilipkowski.bsky.social for misrepresenting what Chair Powell said in order to pat himself on the back. Shame on you.
Let's talk about measuring the 171mm people of the US labor force.
Let's talk about measuring the 171mm people of the US labor force.
@peark.es seems real bad that the fed chair doesn't trust the job numbers
December 11, 2025 at 10:43 PM
thread
Reposted by Jim Lippard
Absolutely strong evidence of vindictive prosecution. Every failed attempt improves James’ eventual motion to dismiss, which was already ludicrously historically strong.
Assuming they eventually find people willing to convict, can the fact so many grand juries rejected the charges, yet, they kept being brought, be used as evidence of malicious prosecution?
This isn't normal, is it? For the govt. to just keep trying?
This isn't normal, is it? For the govt. to just keep trying?
December 11, 2025 at 8:32 PM
Absolutely strong evidence of vindictive prosecution. Every failed attempt improves James’ eventual motion to dismiss, which was already ludicrously historically strong.
Trump's threats not carrying as much weight anymore?
Indiana’s Senate has voted AGAINST the GOP gerrymander that’d have locked in a 9-0 map.
This keeps the 7-2 map in place, saving two Democratic seats heading into 2026.
The vote failed big, 19/31.
The MAJORITY of the GOP senators opposed it!
This keeps the 7-2 map in place, saving two Democratic seats heading into 2026.
The vote failed big, 19/31.
The MAJORITY of the GOP senators opposed it!
December 11, 2025 at 9:46 PM
Trump's threats not carrying as much weight anymore?
Reposted by Jim Lippard
NEW: This is an exquisite Expert Backgrounded on the laws and U.S. military practices that would apply to the survivors of a boat strike.
Many thanks to @marknevitt.bsky.social.
Especially valuable in light of WaPo's reporting today, which raises more questions than answers imo.
Many thanks to @marknevitt.bsky.social.
Especially valuable in light of WaPo's reporting today, which raises more questions than answers imo.
Expert Backgrounder: Law on Targeting Shipwrecked Traffickers
Expert Backgrounder on how, under different scenarios, international law and U.S. past practices apply to Sept. 2 boat strike on survivors.
www.justsecurity.org
December 11, 2025 at 2:13 PM
NEW: This is an exquisite Expert Backgrounded on the laws and U.S. military practices that would apply to the survivors of a boat strike.
Many thanks to @marknevitt.bsky.social.
Especially valuable in light of WaPo's reporting today, which raises more questions than answers imo.
Many thanks to @marknevitt.bsky.social.
Especially valuable in light of WaPo's reporting today, which raises more questions than answers imo.
Reposted by Jim Lippard
Reposted by Jim Lippard
Insane story about Jack Posobiec threatening a reporter over a Pentagon official's cuckolding books on Goodreads. www.motherjones.com/politics/202...
I asked the Pentagon about Pete Hegseth's mentor. Then the threats started.
Journalism in the second Trump administration gets personal.
www.motherjones.com
December 11, 2025 at 5:15 PM
Insane story about Jack Posobiec threatening a reporter over a Pentagon official's cuckolding books on Goodreads. www.motherjones.com/politics/202...
Reposted by Jim Lippard
The Unseen Internet comes out in 2 months and I’m thrilled to share endorsements from some people I truly admire. Big thanks to Erik Davis, Whitney Phillips, Josh Gunn, and Doug Rushkoff for their kind words.
December 11, 2025 at 5:17 PM
The Unseen Internet comes out in 2 months and I’m thrilled to share endorsements from some people I truly admire. Big thanks to Erik Davis, Whitney Phillips, Josh Gunn, and Doug Rushkoff for their kind words.
Reposted by Jim Lippard
this is a form of societal suicide. hermit nation curling up to die.
NEW: Five years of social media history is only a fraction of what the US Government will shortly demand of overseas visitors.
The full requirements will end tourism in the United States.
Below is the full, mind-blowing list.
🚨THEY. WANT. YOUR. DNA.🚨
1/
The full requirements will end tourism in the United States.
Below is the full, mind-blowing list.
🚨THEY. WANT. YOUR. DNA.🚨
1/
December 11, 2025 at 3:46 PM
this is a form of societal suicide. hermit nation curling up to die.
Reposted by Jim Lippard
🇬🇧 UK NCSC: Cyber deception trials: what we’ve learned so far
-Cyber deception can work, but it’s not plug-and-play
-Language is a barrier
-Most organisations prefer to stay covert
-There’s a gap in guidance
-There are risks
www.ncsc.gov.uk/blog-post/cy... #cybersecurity @gate15.bsky.social
-Cyber deception can work, but it’s not plug-and-play
-Language is a barrier
-Most organisations prefer to stay covert
-There’s a gap in guidance
-There are risks
www.ncsc.gov.uk/blog-post/cy... #cybersecurity @gate15.bsky.social
Cyber deception trials: what we’ve learned so far
An update on the NCSC's trials to test the real-world efficacy of cyber deception solutions.
www.ncsc.gov.uk
December 11, 2025 at 12:53 PM
🇬🇧 UK NCSC: Cyber deception trials: what we’ve learned so far
-Cyber deception can work, but it’s not plug-and-play
-Language is a barrier
-Most organisations prefer to stay covert
-There’s a gap in guidance
-There are risks
www.ncsc.gov.uk/blog-post/cy... #cybersecurity @gate15.bsky.social
-Cyber deception can work, but it’s not plug-and-play
-Language is a barrier
-Most organisations prefer to stay covert
-There’s a gap in guidance
-There are risks
www.ncsc.gov.uk/blog-post/cy... #cybersecurity @gate15.bsky.social
Taibbi still doesn't understand the difference between CISA, CIS, and ISACs.
In this companion piece I have to painstakingly explain how Matt Taibbi
1) gets our research backwards in an incomprehensible way
2) points to emails chains we weren’t on as evidence of things we did
3) imputes plans between tech & govt that happened 6mo before our election project existed, to us
1) gets our research backwards in an incomprehensible way
2) points to emails chains we weren’t on as evidence of things we did
3) imputes plans between tech & govt that happened 6mo before our election project existed, to us
And here is a supplementary companion piece on my Substack in which I include Matt Taibbi's 1800+ word response to questions in full, in the interests of fairness. (Note: this one is for the nerds)
www.jamesrball.com/p/disinforma...
www.jamesrball.com/p/disinforma...
December 11, 2025 at 1:21 AM
Taibbi still doesn't understand the difference between CISA, CIS, and ISACs.
Reposted by Jim Lippard
Bluesky Discourse Alignment Compass
September 11, 2024 at 10:38 PM
Bluesky Discourse Alignment Compass
Reposted by Jim Lippard
The Mac settings have lived a far more fascinating life than I imagined, have been redesigned many times, and can tell us a lot about the early history and the troubled upbringing of this interesting machine.
Frame of preference
A story of early Mac settings told by 10 emulators.
aresluna.org
December 11, 2025 at 12:46 AM
The Mac settings have lived a far more fascinating life than I imagined, have been redesigned many times, and can tell us a lot about the early history and the troubled upbringing of this interesting machine.
thread on absurd, pointless wastefulness and inefficiency of ICE
1/ One thing that I think is getting understandably overlooked in the coverage of immigration overenforcement is just how wasteful and inefficient ICE is being even when they aren't kidnapping and caging people who should be with their families.
Here's a quick example from my casefiles today:
Here's a quick example from my casefiles today:
December 10, 2025 at 8:33 PM
thread on absurd, pointless wastefulness and inefficiency of ICE
seems like something RFK Jr will put on his ban list
Roche breast cancer pill cuts risk of disease recurrence by 30% in trial reut.rs/4rRd4su
Roche breast cancer pill cuts risk of disease recurrence by 30% in trial
Roche said on Wednesday its experimental oral drug giredestrant reduced the risk of breast cancer recurrence by 30% compared with standard endocrine therapy, in what it said marked the first big advance in hormonal treatment for the disease in over 20 years.
reut.rs
December 10, 2025 at 7:52 PM
seems like something RFK Jr will put on his ban list
Reposted by Jim Lippard
Every part of this is bonkers. The intro is bonkers. The transition to his health is bonkers. The mention that other presidents didn't need cognitive exams is bonkers. The claim that this screening test is somehow hard is bonkers. The idea that criticism of him is treason is bonkers. All of it.
December 10, 2025 at 2:40 AM
Every part of this is bonkers. The intro is bonkers. The transition to his health is bonkers. The mention that other presidents didn't need cognitive exams is bonkers. The claim that this screening test is somehow hard is bonkers. The idea that criticism of him is treason is bonkers. All of it.