Rick Valenzuela

Rick Valenzuela

@threatc.at

threat detection. distant past: journalist. 🍜 Slurp with gusto http://infosec.exchange/@rv TnFxIHpyIHNiZSBndXIgb3JmZyBpcnRyZ25ldm5hIFRyYXJlbnkgR2ZiJ2YgZXJwdmNyIHZhIGd1ciBoYXZpcmVmcg==

245 followers633 following80 posts

Rick Valenzuela
@threatc.at

Alongside possibility of data interception and location tracking and opaque ownership hierarchy of what are essentially white-label resellers, it also looks at the workflow of deploying eSIMs and weak points attackers could hit

Rick Valenzuela
@threatc.at

The article goes hard on the China angle, and for sure: who knew Irish eSIM brand Holafly is actually a subsidiary of the state-owned enterprise China Mobile? The installer runs from their servers, and wherever the phone is, it even has a public IP address in China.

Rick Valenzuela
@threatc.at

The paper itself is not that China heavy, but it lists a lot of observed traffic routed to different, unexpected countries, including "proactive communication", the phoning-home aspect (tho it also links to a 2021 article discussing this with physical SIMs).

Rick Valenzuela
@threatc.at

Android users now have an analog to iPhone's Lockdown Mode, so now basically everyone can opt in to a more secure phone/tablet. It's part of Google's Advanced Protection Program, which if you use Gmail and work/move in a space where you're more likely to be targeted, is a great thing to enroll in

security.googleblog.comAdvanced Protection: Google’s Strongest Security for Mobile DevicesPosted by Il-Sung Lee, Group Product Manager, Android Security Protecting users who need heightened security has been a long-standing com...

Rick Valenzuela reposted

Kevin Collier
@kevincollier.bsky.social

I've been traveling so forgive me for not posting this yesterday, but: That Signal clone app for archiving messages that Mike Waltz has been using, TeleMessage? It's unlicensed. Signal was unaware of its existence until they saw it in that Reuters photo. There's no known security vetting.

nbcnews.comPhoto appears to show Mike Waltz using Signal-like app that can archive messagesMore than a month after he drew criticism for using Signal to discuss an impending military attack, Waltz was seen using what appears to be a different messaging app to message others in the Trump adm...
Rick Valenzuela
@threatc.at

For my NJ people who would want to know this, really good air filters don't have to be expensive. Literally talking ~$30. In front of a strong fan, stack an activated carbon filter on top of a HEPA filter and that will screen out both the things you want, volatile organic compounds (VOCs) and PM2.5

smartairfilters.comHow to Make a DIY Air Purifier for Your Home – Smart AirFacebook social iconTwitter social iconInstagram social iconLinkedIn social iconYouTube social icon5 Simple Steps to make a homemade DIY air purifier to reduce air pollution and viruses in your home--plus actual test data showing the DIY filter works.
Rick Valenzuela
@threatc.at

ICYMI last week, reupping a digital security tip sheet I helped write with @bostonjoan.bsky.social. More than a few new ones have dropped since January -- the main goal of this one is to give you 5 things you can do to minimally but meaningfully raise your security

Critical Internet Studies Institute@criticalinternet.bsky.social

📢 NEW: Our introductory tip sheet on digital security for journalists & civil servants working under pressure. 📢 Co-authors @bostonjoan.bsky.social & @threatc.at offer 📌 five basic steps 📌 for truth-telling practitioners to protect their work & their communities www.criticalinternet.org/research

criticalinternet.orgResearch — The Critical Internet Studies Institute
View full thread
Rick Valenzuela
@threatc.at

ICYMI last week, reupping a digital security tip sheet I helped write with @bostonjoan.bsky.social. More than a few new ones have dropped since January -- the main goal of this one is to give you 5 things you can do to minimally but meaningfully raise your security

Critical Internet Studies Institute@criticalinternet.bsky.social

📢 NEW: Our introductory tip sheet on digital security for journalists & civil servants working under pressure. 📢 Co-authors @bostonjoan.bsky.social & @threatc.at offer 📌 five basic steps 📌 for truth-telling practitioners to protect their work & their communities www.criticalinternet.org/research

criticalinternet.orgResearch — The Critical Internet Studies Institute
Rick Valenzuela
@threatc.at

The common cyber cliche is about not being faster than a bear, but outrunning the other potential victim. The drier cliche truth is that security is a process. Don't stress over loose ends and TODOs, just come back regularly and eventually do them

Rick Valenzuela reposted

Rick Valenzuela
@threatc.at

Replying to @eliothiggins.bsky.social

The ICC either has massive operational hurdles, or a hell of a business continuity plan. When Trump sanctioned the ICC, the Guardian reported internal worries about their reliance on Microsoft Azure and that suspending access would "paralyse its investigations" www.theguardian.com/law/2025/jan...

Rick Valenzuela
@threatc.at

In other not-good news, standing down Cyber Command planning on Russia isn’t only bad for Ukraine, but also elections and fighting crime. It worked on election interference (and there’s a bunch of European elections coming up) and Defend Forward took down TrickBot therecord.media/hegseth-orde...

therecord.mediaExclusive: Hegseth orders Cyber Command to stand down on Russia planningThe secretary of Defense has ordered U.S. Cyber Command to stand down from all planning against Russia, including offensive digital actions, sources tell Recorded Future News.

Rick Valenzuela reposted

Eric Geller
@ericjgeller.com

Second round of layoffs at the Cybersecurity and Infrastructure Security Agency definitely happening now. I've heard from at least two laid-off employees tonight.

Rick Valenzuela
@threatc.at

The batch of aquafaba for this was heavily reduced, after my wife tried to make crepes with non-reduced stuff and it came out the consistency of wet scrambled eggs

Rick Valenzuela reposted

Drew Harwell
@drewharwell.com

The "large scale social deception" contract Musk is conspiracizing about was: * first awarded under Trump * paid to Reuters' data division, not the newsroom * for researching *defenses* against deception * not revealed by "DOGE investigations" and was a public record, visible online for many years

Rick Valenzuela reposted

Jed Willard
@jedwillard.bsky.social

I have the common bad habit of leaving lots of tabs open. A few days ago I opened the CISA Resources and Tools guide and searched for the topic "Foreign Influence Operations and Disinformation." I was sort of surprised to find 4-5 links. I went back this afternoon to follow them. The page is blank.

cisa.govResources | CISA

Rick Valenzuela reposted

Kevin Collier
@kevincollier.bsky.social

There's a current fetish for publishing primary source documents rather than having a reporter describe them, and I totally get it. But remember Reality Winner was caught almost immediately because the Intercept published what she printed out, unaware the NSA printer left an imperceptible watermark.

Lora Kolodny@lorak.bsky.social

Any company or organization can use what's called a "canary trap" to try to ID leakers. Reporters - you can always just transcribe, describe or quote source materials like emails, memos, etc. if you're not sure if you'd reveal a source by showing a complete image of something leaked to you.

Rick Valenzuela reposted

Lily Hay Newman
@lhn.bsky.social

At CISA HQ days before her resignation, Jen Easterly was steadfastly manifesting the future she wanted for her agency. But she was also clear: "Any stepping back of what we've put in place will be to the detriment of the safety and security of the American people" www.wired.com/story/big-in...

wired.comUnder Trump, US Cyberdefense Loses Its HeadChinese hacks, rampant ransomware, and Donald Trump’s budget cuts all threaten US security. In an exit interview with WIRED, former CISA head Jen Easterly argues for her agency’s survival.
Rick Valenzuela
@threatc.at

NB: The process requires Google Sheets and giving the Internet Archive access to that, so if you're using Google's Advanced Protection Program, you'd have to disable it first

Rick Valenzuela
@threatc.at

Gutted, and gutting

Eric Geller@ericjgeller.com

DHS has terminated the memberships of everyone on its advisory committees. This includes several cyber committees, like CISA's advisory panel and the Cyber Safety Review Board, which was investigating Salt Typhoon. That review is "dead," person familiar says. www.documentcloud.org/documents/25...

Rick Valenzuela reposted

Evan Greer
@evangreer.bsky.social

Use Signal to talk about protests Use Signal to talk about your wordle score Use Signal to talk about abortion Use Signal to talk about your mom's knitting club Use Signal to talk about parties Use Signal to talk about gender affirming care Use Signal to talk about the weather Use Signal