Whitney Merrill
@wbm312.bsky.social
I nudge people to care about privacy and security. CPO/DPO. Privacy/infosec lawyer. Hacker. Fighting for privacy, digital civil liberties & the users. Ex @EA @FTC |my views are my own. I used to post on Twitter at @wbm312.
Pinned
Reposted by Whitney Merrill
It's especially alarming that they use DMCA 1201 -- the rule against circumventing technical protection measures to access copyrighted works -- for their claim. A win on that gives them permanent leverage over scrapers of all kinds, including good guys. www.law.cornell.edu/uscode/text/...
17 U.S. Code § 512 - Limitations on liability relating to material online
www.law.cornell.edu
December 19, 2025 at 9:26 PM
It's especially alarming that they use DMCA 1201 -- the rule against circumventing technical protection measures to access copyrighted works -- for their claim. A win on that gives them permanent leverage over scrapers of all kinds, including good guys. www.law.cornell.edu/uscode/text/...
Reposted by Whitney Merrill
As the former Google Associate General Counsel for web search -- a product built on scraping third party content without permission -- I'm having a lot of trouble processing Google's new lawsuit against someone else for scraping search results. storage.googleapis.com/gweb-uniblog...
storage.googleapis.com
December 19, 2025 at 9:24 PM
As the former Google Associate General Counsel for web search -- a product built on scraping third party content without permission -- I'm having a lot of trouble processing Google's new lawsuit against someone else for scraping search results. storage.googleapis.com/gweb-uniblog...
Reposted by Whitney Merrill
The US TikTok sale has been signed. The company will be controlled by a joint venture including Oracle, Silver Lake, Andreessen Horowitz, Abu Dhabi-based MGX. Adding a UAE company really makes it clear that this was never about national security concerns.
www.axios.com/2025/12/18/t...
www.axios.com/2025/12/18/t...
Scoop: TikTok signs deal for sale of U.S. unit after yearslong saga
The deal would end a yearslong saga to force TikTok's Chinese parent ByteDance to sell the company's U.S. operation.
www.axios.com
December 18, 2025 at 11:35 PM
The US TikTok sale has been signed. The company will be controlled by a joint venture including Oracle, Silver Lake, Andreessen Horowitz, Abu Dhabi-based MGX. Adding a UAE company really makes it clear that this was never about national security concerns.
www.axios.com/2025/12/18/t...
www.axios.com/2025/12/18/t...
Reposted by Whitney Merrill
Today is the last day to apply to EFF's Trainer Workshop series! If you want to up the digital defense of your community, apply now to join us for four newbie-friendly sessions which will prepare you to host your own grassroots trainings. eff.org/TrainerSerie...
December 18, 2025 at 5:51 PM
Today is the last day to apply to EFF's Trainer Workshop series! If you want to up the digital defense of your community, apply now to join us for four newbie-friendly sessions which will prepare you to host your own grassroots trainings. eff.org/TrainerSerie...
Reposted by Whitney Merrill
NEW: A hacker gained control of 1,100 mobile phones powering covert, AI-generated ads on TikTok. Then, he shared details of the operation with 404 Media.
A look inside how startup Doublespeed, which is backed by Andreessen Horowitz (a16z), is creating AI spam pages on TikTok to promote products.
A look inside how startup Doublespeed, which is backed by Andreessen Horowitz (a16z), is creating AI spam pages on TikTok to promote products.
Hack Reveals the a16z-Backed Phone Farm Flooding TikTok With AI Influencers
A hacker gained control of a 1,100 mobile phone farm powering covert, AI-generated ads on TikTok.
www.404media.co
December 17, 2025 at 2:22 PM
NEW: A hacker gained control of 1,100 mobile phones powering covert, AI-generated ads on TikTok. Then, he shared details of the operation with 404 Media.
A look inside how startup Doublespeed, which is backed by Andreessen Horowitz (a16z), is creating AI spam pages on TikTok to promote products.
A look inside how startup Doublespeed, which is backed by Andreessen Horowitz (a16z), is creating AI spam pages on TikTok to promote products.
I don’t want to download an app to track my order Shopify.
I really don’t.
I really don’t.
December 16, 2025 at 1:40 AM
I don’t want to download an app to track my order Shopify.
I really don’t.
I really don’t.
Reposted by Whitney Merrill
404 Media zine has apparently outsold American Canto. Help continue that trend here:
404media.myshopify.com/products/pre...
www.404media.co/behind-the-b...
404media.myshopify.com/products/pre...
www.404media.co/behind-the-b...
Presale: ICE Surveillance Zine
**THIS ITEM WILL SHIP IN MID JANUARY** We are making a print zine about the surveillance tactics used by ICE, and the ways people are resisting this technology. It is 16 pages and printed on a risogra...
404media.myshopify.com
December 12, 2025 at 10:00 PM
404 Media zine has apparently outsold American Canto. Help continue that trend here:
404media.myshopify.com/products/pre...
www.404media.co/behind-the-b...
404media.myshopify.com/products/pre...
www.404media.co/behind-the-b...
Reposted by Whitney Merrill
If Kohler can view the user’s toilet data, as it admits to doing in this email exchange with technologist Simon Fondrie-Teitler, then it’s not—by definition—using end-to-end encryption. @evystadium.bsky.social has more.
Full story by @mjgault.bsky.social here:
www.404media.co/kohlers-smar...
Full story by @mjgault.bsky.social here:
www.404media.co/kohlers-smar...
December 5, 2025 at 2:21 PM
If Kohler can view the user’s toilet data, as it admits to doing in this email exchange with technologist Simon Fondrie-Teitler, then it’s not—by definition—using end-to-end encryption. @evystadium.bsky.social has more.
Full story by @mjgault.bsky.social here:
www.404media.co/kohlers-smar...
Full story by @mjgault.bsky.social here:
www.404media.co/kohlers-smar...
I am so tired of poor customer service. I understand businesses see it as a massive cost center, but it really makes me rethink who I do business with and what I think of a company.
In 2026, I hope companies decide to invest in actual, good customer service.
In 2026, I hope companies decide to invest in actual, good customer service.
November 30, 2025 at 8:57 PM
I am so tired of poor customer service. I understand businesses see it as a massive cost center, but it really makes me rethink who I do business with and what I think of a company.
In 2026, I hope companies decide to invest in actual, good customer service.
In 2026, I hope companies decide to invest in actual, good customer service.
Reposted by Whitney Merrill
Meta’s surveillance systems are pervasive, but there are ways to limit how it collects and uses your personal data. www.eff.org/deeplinks/2...
Mad at Meta? Don't Let Them Collect and Monetize Your Personal Data
If you’re fed up with Meta right now, you’re not alone. Meta tracks you across millions of websites and apps and its business model relies on your data. If you want to limit Meta’s ability to collect
www.eff.org
November 28, 2025 at 8:58 PM
Meta’s surveillance systems are pervasive, but there are ways to limit how it collects and uses your personal data. www.eff.org/deeplinks/2...
Reposted by Whitney Merrill
Police can’t spy on the private electricity data of thousands of people with zero suspicion. Not in Sacramento. Not anywhere. www.eff.org/deeplinks/2...
Victory! Court Ends Dragnet Electricity Surveillance Program in
For more than a decade, the Sacramento Municipal Utility District coordinated with police to sift through the granular smart meter data of residents without suspicion to find evidence of cannabis
www.eff.org
November 23, 2025 at 3:02 PM
Police can’t spy on the private electricity data of thousands of people with zero suspicion. Not in Sacramento. Not anywhere. www.eff.org/deeplinks/2...
Reposted by Whitney Merrill
I really want to know the full story behind this epic hack, and yet I also hope it is never solved.
It's my favorite day! It's the 38th anniversary of the Max Headroom signal broadcast intrusion!
1st incident lasted 25s during the 9PM news on WGN-TV in Chicago; The 2nd, 2hrs later, lasted ~90s on PBS affiliate WTTW during Dr. Who.
You can watch it here: www.youtube.com/watch?v=oqge...
1st incident lasted 25s during the 9PM news on WGN-TV in Chicago; The 2nd, 2hrs later, lasted ~90s on PBS affiliate WTTW during Dr. Who.
You can watch it here: www.youtube.com/watch?v=oqge...
Max Headroom 1987 Broadcast Signal Intrusion Incident
YouTube video by andrew867
www.youtube.com
November 22, 2025 at 7:50 PM
I really want to know the full story behind this epic hack, and yet I also hope it is never solved.
Reposted by Whitney Merrill
Reposted by Whitney Merrill
Reposted by Whitney Merrill
Happy Max Headroom Broadcast Signal Intrusion Day to all who celebrate!
Today is the 37th anniversary of the Max Headroom signal broadcast intrusion!
1st incident lasted 25s during the sportscast on the 9PM news on WGN-TV in Chicago; The 2nd, 2hrs later, lasted ~90s on PBS affiliate WTTW during Dr. Who.
You can watch it here: www.youtube.com/watch?v=oqge...
1st incident lasted 25s during the sportscast on the 9PM news on WGN-TV in Chicago; The 2nd, 2hrs later, lasted ~90s on PBS affiliate WTTW during Dr. Who.
You can watch it here: www.youtube.com/watch?v=oqge...
Max Headroom 1987 Broadcast Signal Intrusion Incident
YouTube video by andrew867
www.youtube.com
November 22, 2025 at 5:05 PM
Happy Max Headroom Broadcast Signal Intrusion Day to all who celebrate!
Reposted by Whitney Merrill
I just left a giant masterpiece for all the World's Greatest Newspaper nerds!
Today is the 37th anniversary of the Max Headroom signal broadcast intrusion!
1st incident lasted 25s during the sportscast on the 9PM news on WGN-TV in Chicago; The 2nd, 2hrs later, lasted ~90s on PBS affiliate WTTW during Dr. Who.
You can watch it here: www.youtube.com/watch?v=oqge...
1st incident lasted 25s during the sportscast on the 9PM news on WGN-TV in Chicago; The 2nd, 2hrs later, lasted ~90s on PBS affiliate WTTW during Dr. Who.
You can watch it here: www.youtube.com/watch?v=oqge...
Max Headroom 1987 Broadcast Signal Intrusion Incident
YouTube video by andrew867
www.youtube.com
November 22, 2025 at 5:19 PM
I just left a giant masterpiece for all the World's Greatest Newspaper nerds!
It's my favorite day! It's the 38th anniversary of the Max Headroom signal broadcast intrusion!
1st incident lasted 25s during the 9PM news on WGN-TV in Chicago; The 2nd, 2hrs later, lasted ~90s on PBS affiliate WTTW during Dr. Who.
You can watch it here: www.youtube.com/watch?v=oqge...
1st incident lasted 25s during the 9PM news on WGN-TV in Chicago; The 2nd, 2hrs later, lasted ~90s on PBS affiliate WTTW during Dr. Who.
You can watch it here: www.youtube.com/watch?v=oqge...
Max Headroom 1987 Broadcast Signal Intrusion Incident
YouTube video by andrew867
www.youtube.com
November 22, 2025 at 6:37 PM
It's my favorite day! It's the 38th anniversary of the Max Headroom signal broadcast intrusion!
1st incident lasted 25s during the 9PM news on WGN-TV in Chicago; The 2nd, 2hrs later, lasted ~90s on PBS affiliate WTTW during Dr. Who.
You can watch it here: www.youtube.com/watch?v=oqge...
1st incident lasted 25s during the 9PM news on WGN-TV in Chicago; The 2nd, 2hrs later, lasted ~90s on PBS affiliate WTTW during Dr. Who.
You can watch it here: www.youtube.com/watch?v=oqge...
Reposted by Whitney Merrill
The long sought-after solution to the fourth passage of “Kryptos,” artist Jim Sanborn’s secret-code-bearing sculpture at CIA headquarters, sold at an auction for a final price of $962,500, blowing past its $300,000 to $500,0000 estimate.
Long-sought solution to ‘Kryptos’ sculpture sells for almost $1 million
The sale is an unexpected success for artist Jim Sanborn, who feared it might not happen after researchers discovered the plain-text solution at an archive.
www.washingtonpost.com
November 21, 2025 at 1:30 PM
The long sought-after solution to the fourth passage of “Kryptos,” artist Jim Sanborn’s secret-code-bearing sculpture at CIA headquarters, sold at an auction for a final price of $962,500, blowing past its $300,000 to $500,0000 estimate.
Reposted by Whitney Merrill
Hackers Off Planet Earth
HOPE CONFERENCE BANNED BY ST. JOHN'S UNIVERSITY | 2600
www.2600.com
November 18, 2025 at 6:22 PM
Hackers Off Planet Earth
Reposted by Whitney Merrill
NEW: US airlines (Delta, United, American, etc) will shut down a program in which it sold hundreds of millions of your flight records to government agencies, including ICE, FBI, ATF, more. Comes after intense lawmaker-pressure and 404 Media's months-long reporting
www.404media.co/airlines-wil...
www.404media.co/airlines-wil...
Airlines Will Shut Down Program That Sold Your Flights Records to Government
The move comes after intense pressure from lawmakers and 404 Media’s months-long reporting about the airline industry's data selling practices.
www.404media.co
November 18, 2025 at 6:45 PM
NEW: US airlines (Delta, United, American, etc) will shut down a program in which it sold hundreds of millions of your flight records to government agencies, including ICE, FBI, ATF, more. Comes after intense lawmaker-pressure and 404 Media's months-long reporting
www.404media.co/airlines-wil...
www.404media.co/airlines-wil...
Reposted by Whitney Merrill
When Ohio voters protected the rights "to make reproductive decisions and travel for healthcare, they didn’t intend for their state to subsidize the very surveillance tools that can criminalize those choices,” EFF’s @tsnvaa.bsky.social told @clevelandscene.bsky.social.
Ohio State Highway Patrol Has Contract With Flock, Firm That Tracked Abortion Patient - Cleveland Scene
Flock Safety has received criticism for tracking a Texan who drove to Illinois to flee the state's forced-birth laws. Despite 2023's Ohio Issue 1 decision, Ohio's state highway patrol gave the firm te...
www.clevescene.com
November 13, 2025 at 9:51 PM
When Ohio voters protected the rights "to make reproductive decisions and travel for healthcare, they didn’t intend for their state to subsidize the very surveillance tools that can criminalize those choices,” EFF’s @tsnvaa.bsky.social told @clevelandscene.bsky.social.
I’ve decided there are too many ways to reach me. Too many platforms that allow people to send messages.
November 13, 2025 at 6:42 AM
I’ve decided there are too many ways to reach me. Too many platforms that allow people to send messages.
Reposted by Whitney Merrill
Tucked away deep in the Settings app on Android are all sorts of privacy and security features you may have never seen. It’s time to get to know those settings. ssd.eff.org/module/how-...
How to: Get to Know Android Privacy and Security Settings
Open up your Android phone’s Settings app and you’ll find dozens of different options with little guidance on what those options do. Some of these settings have a serious impact on your privacy and security, altering what data gets shared automatically with apps, data brokers, and Google itself.
What sorts...
ssd.eff.org
November 12, 2025 at 11:04 PM
Tucked away deep in the Settings app on Android are all sorts of privacy and security features you may have never seen. It’s time to get to know those settings. ssd.eff.org/module/how-...
They decided to stop making the penny?!
November 13, 2025 at 6:30 AM
They decided to stop making the penny?!