3/ The Gov memo begins by highlighting the call for action made by #OathKeepers leader Elmer Stuart Rhodes on their website.
I'm including a screenshot of it: "TAKE AMERICA BACK. BE THERE. WILL BE WILD."
4/ “I need you fighting fit by innaugeration.” [sic]
In October, Watkins was actively recruiting new militia members for the operation.
And discussing the need to "go underground" if Biden came into power.
5/ 🚨CHILLING: The Jan6 Quick Reaction Force was "our Law Enforcement members of Oathkeepers".
Context: The group had a planned armed QRF outside DC during previous protests that would "await...orders to enter DC under permission from Trump" and then bring in weapons.
6/ NEW pic: memo shows cluster of #Oathkeepers bunching inside the #Capitol, seen on what looks like Capitol CCTV. Watkins is highlighted with a yellow arrow.
7/ Reminder: Watkins was not alone.
-Indicted alongside vets Thomas Caldwell & Donovan Crowl.
-Participated in an #Oathkeepers "leadership only" phone conference & passed along directives.
- Apparent coordination among other Oath Keepers👇
-Etc.
NEW: @WhatsApp caught & fixed a sophisticated zero click attack...
Now they've published an advisory about it.
Say attackers combined the exploit with an @Apple vulnerability to hack a specific group of targets (i.e. this wasn't pointed at everybody)
Quick thoughts 1/
Wait, you say, haven't I heard of @WhatsApp zero-click exploits before?
You have.
A big user base makes a platform big target for exploit development.
Think about it from the attacker's perspective: an exploit against a popular messenger gives you potential access to a lot of devices.
You probably want maximum mileage from that painstakingly developed, weaponized, and tested exploit code you created/ purchased (or got bundled into your Pegasus subscription).
3/ The regular tempo of large platforms catching sophisticated exploits is a good sign.
They're paying attention & devoting resources to this growing category of highly targeted, sophisticated attacks.
But it's also a reminder of the magnitude of the threat out there...
WHOA: megapublisher @axelspringer is asking a German court to ban an ad-blocker.
Their claim that should make everyone nervous:
The HTML/ CSS code of websites are protected computer programs.
And influencing they are displayed (e.g by removing ads) violates copyright.
1/
2/ Preventing ad-blocking would be a huge blow to German cybersecurity and privacy.
There are critical security & privacy reasons to influence how a websites code gets displayed.
Like stripping out dangerous code & malvertising.
Or blocking unwanted trackers.
This is why most governments do it on their systems.
3/Defining HTML/CSS as a protected computer program will quickly lead to absurdities touching every corner of the internet.
Just think of the potential infringements:
-Screen readers for the blind
-'Dark mode' bowser extensions
-Displaying snippets of code in a university class
-Inspecting & modifying code in your own browser
-Website translators
3/ What still gives me chills is how many cases surfaced of people killed by cartels... or their family members... getting targeted with Pegasus spyware.
The #PegasusProject found even more potential cases in Mexico.