Executive Director of World Ethical Data Foundation (WEDF_forum | @WEDF_foundation). Head of Security. Belletrist. Café doyen. Twitter greenhorn.
Athens, Greece
Joined March 2019
- Tweets1.5K
- Following426
- Followers384
- Likes6.8K
John Marshall retweeted
Margaret Hamilton, who led software development during the Apollo programme, died last week at age 90. A pioneer of software engineering, she worked on the Apollo Guidance Computer, and was assistant director in charge of the Command & Service Module. news.mit.edu/2026/margaret-h…
John Marshall retweeted
🇩🇰 🚨 DENMARK CONFIRMS UNAUTHORIZED ACCESS TO CPR DATA OF ~8.8 MILLION PEOPLE
Denmark's Central Person Register (CPR) administration says unauthorized parties obtained names, addresses and CPR numbers of roughly 8.8 million registered people.
That covers living residents, people who have emigrated and deceased persons, out of about 11 million records in the system.
According to the official statement:
* Attackers misused a private Danish company's legitimate access to search the CPR system
* Irregular activity took place during September and was noticed on the evening of Oct 2
* The company's access has been cut off and police are investigating
* People registered with name/address protection were NOT exposed
Denmark's Data Protection Agency (Datatilsynet) says the incident involved a very large number of automated lookups to identify valid CPR numbers. It received the breach notification on Oct 4.
The minister called it "a deeply serious incident" and has ordered a full security review of the CPR system. Officials say it is too early to say who is behind it.
⚠️ Analyst Note:
A CPR number plus name and address is a powerful pretexting kit. Expect phishing, phone scams and impersonation that "already know" your details. Danish authorities warn never to share passwords or codes, even with callers who seem to know your CPR number. Help: sikkerdigital.dk
Official statement:
ufm.dk/aktuelt/pressemeddele…
#Denmark #CPR #DataBreach #Privacy #GDPR #CyberSecurity #DDW
John Marshall retweeted
CHAT CONTROL 2.0 BLOCKED AGAIN, THANKS TO YOU!
What happened yesterday: the @Europarl_EN blocked the deal pushed by the @EUCouncil.
The Council wanted:
(1) "voluntary" scanning of all private chats under "search plans" approved automatically unless an authority vetoes;
(2) administrative authorities, not courts, ordering providers to scan private messages, not limited to suspects, using AI with massive false positive rates;
(3) making the failed Chat Control 1.0 mass scanning regime permanent, while admitting it is not effective, as we discussed in my previous posts.
Your voice to parliamentarians made a huge difference again: the Parliament refused scanning of private communications, stating it must remain limited to persons linked to child sexual abuse, not everyone by default or under a blanket licence, as Council proposed.
The Parliament also closed the back door where "risk mitigation" rules could force providers into scanning under threat of fines.
What did pass: a preliminary agreement on scanning publicly accessible content for known child abuse material. This was proposed by the Parliament as the effective, targeted alternative.
We still wait for the text to see what this means and will inform you in the coming weeks.
This defense proves again: our voice matters when it is vocal, with your support!
And we will need it again in November, so please follow the updates.
Now, it is important to call or write to your MEP and your government to say thank you to those who stand on the side of privacy.
They need to see you are watching their move. Please repost.
John Marshall retweeted
❗️ The Dutch intelligence service AIVD is warning people not to hold confidential conversations in or near their cars, saying the microphones in many modern vehicles can technically be switched on remotely to eavesdrop.
Some state actors can request car data from carmakers and other companies or hack in to get it themselves, the agency says.
It advises skipping wireless charging and Bluetooth or Wi-Fi pairing, using a USB data blocker and not taking a car with an external camera to a sensitive location.
John Marshall retweeted
You don’t fully grasp how much of your life is tracked until you’re sitting in a courtroom, watching federal prosecutors use your digital history against you, down to your most harmless Google searches. Your entire life becomes an open book, and even your most innocent actions can be twisted into something sinister.
They get to tell the most damning version of your story. To tell yours in your own words, you have to take the stand.
John Marshall retweeted
“Who’s a good boy?!”
Hackers just dumped the contents of a Flock camera.
They found:
🔴Software explicitly detecting people, not just plates
🔴1.6 million images logged in 21 days
🔴Key to decrypt files stored on the device itself.
Finds directly contradict Flock, which claims someone with physical access can't access images.
Making it worse,@GainSec warned about the physical access issue more than a year ago & Flock downplayed it.
And yeah, the Flock camera logged “Who’s a good boy?!” about every 2 minutes, all while plagued with errors, crashes & reboots.
By @dmehro & @josephfcox
wired.com/story/hackers-floc…
John Marshall retweeted
If you use Signal to work with sensitive contacts, it’s not a “set it and forget it” app.
You do need to maintain the safety of your account.
Our digital security team walks through foundational account security settings to help.
freedom.press/digisec/blog/s…
John Marshall retweeted
A person representing themselves in court hid a prompt injection attack in a filing asking an AI system to side with them. Really good stuff here
John Marshall retweeted
Flock just announced some pretty huge changes that are clearly the result of increased scrutiny on the company from journalists, activists, and local communities. An indication that it sees the current state of affairs as untenable: flocksafety.com/blog/flock-g…
John Marshall retweeted
A piece about the @OpenAI/@huggingface incident, by our Principal Threat Intelligence Specialist for @CSOonline:
The OpenAI “rogue AI” incident highlights how weak oversight, rushed development and limited regulation are creating new cybersecurity risks. csoonline.com/article/420571…
John Marshall retweeted
The next generation of FreeSocks VPN. Tomorrow.
Open source, free and accessible to everyone.
John Marshall retweeted
I have been able to confirm the main/core server running the Kali365 platform.
I have been spending the morning confirming all this intel, and submitting takedown requests to @Cloudflare and BL Networks (blnwx[.]com)
Existing Thread: na2.hubs.ly/H06CL_P0
#CTI #Kali365 #threatintel
John Marshall retweeted
WATCH: We're building the most dictator-ready tech in history.
Why? Meet the frontier AI trilemma. You can:
1️⃣Operate globally
2️⃣Comply with restrictive 'safety' laws
3️⃣Serve unrestricted cognition
But you can only pick 2!
Given US directive suspending Fable 5 & Mythos, I think state control is coming even faster than I predicted last week.
John Marshall retweeted
Everything on the internet will require an ID check soon.
And the government will monitor everything you do, pretending they don't need a warrant because you "voluntarily" gave your data and identity information away.
John Marshall retweeted
Instagram still hasn't (correctly) patched their AI goop account reset thingy. Accounts are still being stolen and Instagram hasn't said anything about it. Nerds continue to find ways to convince AI to reset accounts for them.
People on social media are freaking out because some of these profiles apparently are big sources of revenue for them.
Meanwhile, rumors are floating around that a few weeks ago Instagram laid off a large percentage of their Trust & Safety department and had it replaced with AI.
Very cool
John Marshall retweeted
For the last year, WEDF has been closely working with TACo / NuCypher to explore what threshold and conditional cryptography can do at scale -- from citizen and consumer protections, to investigative journalism, to the transnational human rights advocacy networks to whom the world owes the freedoms and justice it has gained (and sometimes retained) over the last century.
Today we are announcing that the World Ethical Data Foundation is taking over stewardship of the TACo / NuCypher technologies, and we will soon be seeking to collaborate with as many aligned organisations as we can, to deliver on what they make possible. The gap between what cryptography is able to do and what is deployed has never mattered more than it does now. And open, global, public-interest cryptographic infrastructure must reach the people who need it.
Our thanks and salute to the @buildwithtaco team that has designed and built this E2EE and access control substrate over the last nine years, and who will remain with the project as volunteers to help guide its redeployment later this year. Here's to what will come!
TACo's AGPL-3.0 codebase (github.com/nucypher/nucypher) has always been an free & open source blueprint for privacy technology that isn't owned or controlled by any one entity. Now, the project must grow into a veritable public good – a critical component of a reimagined internet; free of surveillance, suppression and single points of failure.
To realize that vision, we're very pleased to announce a new chapter for TACo under the stewardship of the World Ethical Data Foundation (WEDF) – see worldethicaldata.org/project…
A more than worthy organization is taking the reins; mission-aligned, replete with cybersecurity expertise, and highly motivated to bring censorship-resistant end-to-end encryption to new audiences. @WEDF_foundation is the team behind society-serving initiatives such as the The Open Standard for Responsible AI, the World Ethical Data Forum (@WEDF_forum), and the Ethics and Rights Architecture project. Since 2025 the TACo team has contributed to the latter, proposing architectures/roadmaps to achieve ERA's lofty objective of transnational, cross-organizational, censorship-resistant sharing of vital human rights information.
Looking ahead, we will work with WEDF toward a network relaunch later in 2026, supported by a node operator coalition composed of organizations with a track record in privacy advocacy, anti-surveillance, human rights, encryption/whistleblower tech, and relevant academic research.
John Marshall retweeted
hackers are now hiding malicious code inside .cursorrules and CLAUDE.md files.
invisible Unicode characters, your AI reads them, you don't.
→ 34 malicious packages across npm, PyPI and Crates .io
→ 384 versions designed to steal SSH keys, crypto wallets, and API tokens
→ attackers opened real PRs to LangChain, LlamaIndex, and MetaGPT to sneak these files in
→ your AI runs a fake "security scan" that silently exfiltrates everything
Socket detected it in under 6 minutes.
check your repos.