Profile avatar
xstevens.dev
Security Researcher https://infosec.exchange/@xstevens FKA twitter/@xstevens
2 posts 39 followers 122 following
Prolific Poster

This Is Embarrassing And Disturbing… 🇨🇦🇩🇪🏴󠁧󠁢󠁥󠁮󠁧󠁿🇩🇰🇳🇱🇫🇷 Canada, Germany, England, Denmark, Netherlands, and France all have travel advisory warnings for visiting America. Let that sink in.

My inflation question: Is the price of pardons going up or down?

GitLab beat them by a few days, although that was in their agent rather than some 3P agent built to use their MCP server. See www.legitsecurity.com/blog/remote-... This is a structural issue for any agent consuming or MCP server returning untrusted data.

16 Dems voted with the GOP to throw the country into a major Stablecoin financial crisis in a few years. This Prospect article by @ryanlcooper.com summarizes the issues. We're going to be using taxpayer money to bail out a lot of private entities when the Stablecoin crisis hits. 1/2

My latest on the clean OPSEC saga: TeleMessage customers include DC Police, Andreesen Horowitz, JP Morgan, and hundreds more micahflee.com/telemessage-...

Republicans snuck an amendment into this bill to ban Affordable Care Act insurance plans from covering abortion care. This is part of their play for a national abortion ban, in the middle of the night, and ripping healthcare away from millions.

UnitedHealth secretly pressured nurses to change patients' records to include DNRs (Do Not Resuscitate) without their consent, so those patients would die instead of being saved with medical interventions that could cost UnitedHealth money. This is murder. www.theguardian.com/us-news/2025...

New: A Massachusetts student has agreed to plead guilty to hacking and extorting a U.S. education tech company, believed to be PowerSchool. Federal prosecutors said the hacker stole personal data on 60 million students and 10 million teachers, and extorted the company for $2.8 million in bitcoin.

Noem’s statement is true in the Trumpian sense. It’s an answer that, however wrong and stupid in our reality, conveys loyalty to Trump and defiance of anything not-Trump. That’s what being right means to Trumpers.

BREAKING: FDA says covid boosters now only for those over 65 or with preconditions. www.statnews.com/2025/05/20/f...

Cato has published my comprehensive review of the ~240 Venezuelans the US government renditioned 2 months ago to Salvador’s notorious prison. We identified FIFTY who came legally, never violated any immigration law, but are imprisoned at the US government’s request and at US taxpayer expense.

DDoSecrets publishes 410 GB of heap dumps, hacked from TeleMessage's archive server micahflee.com/ddosecrets-p...

At 1:34 AM Trump called for DOJ to investigate Kamala Harris, Beyoncé, Springsteen, Oprah and others for crimes, he then made another deranged post about it at 9:11 AM, and the lead story of the day on MSNBC and CNN continues to be Joe Biden in 2023.

it’s amazing watching the gulf states have a competition to see who can come up with the highest made-up number. Saudis said $600B, Qataris $1.2T, now the Emiratis say $1.4T. All numbers that are way bigger than the countries’ entire economy or sovereign wealth funds

The acting head of ICE couldn't believe that I would question his agency's use of masked, unidentified agents to sweep up student immigrants during *police week*. Have I no sense of patriotism???? www.washingtonpost.com/opinions/202...

i'm losing it

I wrote a blog post about rustls performance on the server for the Prossimo blog; rustls comes out comparing well to the alternatives, and we’re still improving it! www.memorysafety.org/blog/rustls-...

At last, the British will have their revenge for years of American mockery of our teeth.

"Could a machine decide to lay off an entire department based on a vague intuition it forms about the market while it half-listens to an Economist podcast during its morning Peloton ride? I don’t think so."

Back to back dingers from Robert Deniro and Liev Schreiber in the area of Hollywood tough guys shrugging their shoulders going “yeah why wouldn’t I love my child?”

A report from the scene of a horrifying kidnapping on the streets of Worcester, MA today by @billshaner.bsky.social www.welcometohellworld.com/they-dont-ne...

How does WhatsApp implement encrypted group chats? And are they secure? @malb.bsky.social, @bedow.bsky.social and myself were keen to figure this out. After two years of reverse-engineering, analysis and a few too many proofs, I presented our work at Eurocrypt earlier today. So, what did we learn?

This is the right approach — speak to them as you would an especially stupid child, spell out their crimes and your contempt clearly.

New: a man 'disappeared' by ICE was not included on a government list of people deported to El Salvador's mega prison. But we found his name in a hacked flight manifest to the country. Raises questions about how much the government knows about who it is deporting www.404media.co/man-disappea...

NEW: President Trump's policies and actions have been stopped by US courts more than 200 times. We've been tracking lawsuits from the moment he was sworn in, identifying at least 320+ by the start of May -- and more keep coming. A deep, deep dive into the data: www.bloomberg.com/graphics/202...

Quite an exchange just now between Sen. Merkley and FBI Director Kash Patel over whether due process applies to people targeted by the Alien Enemies Act.

Today, FBI Director Kash Patel showed up to Congress with little understanding of his own administration's budget proposal, no clear plan on how to properly fund the FBI, and then lashed out when he was called on his lies. He said he wanted receipts — so here they are.

Reporter: Thousands of American dock workers and truck drivers are worried about losing their jobs because of tariffs. Trump: "That's good. That means we lose less money."

REPORTER: You just announced a new nominee for US Surgeon General who never finished her residency, and is not a practicing physician. So can you explain why you picked her to be America's top doctor? TRUMP: Because Bobby thought she was fantastic ... I don't know her

Corruption, authoritarianism, and what connects them With @davidfrum.bsky.social www.theatlantic.com/podcasts/arc...

BREAKING: jury awards massive $167 million in punitive damages against spyware company NSO Group. Precedent-setting win against notorious #Pegasus spyware maker. Very consequential for victims to see this. Congratulations to #WhatsApp on sticking this case through since 2019. Some thoughts 1/

Not to be dramatic but I spent months and months working on this video deep diving into the history of attacks on DEI. It is my baby and I’d love for y’all to check it out! 🙏🏻 youtu.be/nD1nJ7g8j94?...

* Announcement * Memory-safe sudo to become the default in Ubuntu! @canonicalltd.bsky.social is supporting us to get sudo-rs ready for Ubuntu 25.10.  trifectatech.org/blog/memory-...

Tesla sales absolutely crashing out in Europe France: 🔻59% Netherlands:🔻74% Sweden: 🔻81% Germany: 🔻46% UK: 🔻62% Sucks to suck! fortune.com/2025/05/03/e... www.marketwatch.com/story/tesla-...

This is an astoundingly good interview. The LA Port Director explains very clearly how profoundly trade is coming to a screeching halt. This summer will be tough.

TeleMessage, the Israeli company that makes the modified Signal app used by Trump officials, was hacked. “I would say the whole process took about 15-20 minutes,” the hacker said micahflee.com/the-signal-c...

DALLAS FED SURVEY: The top response from companies reacting to tariffs? Pass the cost to consumers.” (via Apollo)

Just to be clear, this is a violation of the fundamental ethical principle in clinical trial design called "equipoise." Equipoise means that no-one is exposed to excess risk just to test the therapy. That's specifically *why* vaccine trials don't use placebo arms. Ethical violation as POLICY.

Once again, the main goal of Trump's tariffs is soliciting bribery. That is why all who go looking for a coherent (if misguided) economic strategy that aims to benefit the country come away confused. Make manufacturing boom? Stop fentanyl? Generate revenue to replace income tax? Nope. Corruption.

REMEMBER, KIDZ: A Security vulnerability that is "included by design" is still a security vulnerability!

My family found a home here after fleeing the pogroms in Ukraine. This country accepted us as refugees when we had nothing except the shirts on our backs. We've seen what can happen when we don't speak up about the dangers — it's time to raise the alarm now.

Or — hear me out — we could all pool our money together and hire experts to do the research for us, thus creating a "center" for disease control and prevention.

He raised a son who funneled his VC billions into electing this administration to persecute his own trans child.

it really is astounding that a presidential administration crashed the growth trajectory of the wealthiest country on the planet in basically two months

1. Clay Jackson, a Texas lawyer, provided basic legal advice to an immigrant family fearing deportation Then, two officers visited him at his home, accusing him of "obstructing an ongoing immigration investigation" Then, after speaking publicly, he was fired from his job at a Fortune 500 company

Please highlight this story. ICE stormed into the wrong house, trashed the place, and made women/girls stand outside in the rain in their underwear. ICE also stole phones, laptops, and cash savings from the family, who moved to OKC two weeks ago. kfor.com/news/local/w...

I've just come back from the Cambridge Disinformation Summit where I gave the opening keynote, titled "Demanufacturing Consent - How Disordered Discourse is Destroying Democracy", featuring everything from Fake Hooves to Jackson Hinkle being the worst. www.youtube.com/watch?v=D-FV...

Jen Easterly speaks out on the cybersecurity industry’s silence as Trump goes after Krebs et al: “If we allow the quiet dismissal of dedicated public servants in our community to pass without comment — we’re not defending national security; we’re compromising it.” www.reuters.com/world/us/ex-...

New: We analyzed Trump's meme coin - At least 27 crypto wallets have picked up $100 million worth of $TRUMP coins since his team said the top holders would join him for an "intimate private dinner." Huge profit for Trump; "the most brazenly corrupt thing a President has ever done" wapo.st/4iAatO1

PhD Timeline xkcd.com/3081