Who exactly has been advising #Brazil's ex-president?
7/ Extreme-right playbook, 2020s edition:
Lose the election?
❌Claim it was stolen.
❌Cast doubt on the electoral process
❌Attack the institutions of democracy.
Social media plays a huge role in making this possible.
8/ #Bolsonaro slinking away to Florida in weepy self-pity seemed odd.
Anyone know where he is this afternoon?
IF he's outside #Brazil, he has conveniently put distance between himself and & immediate legal consequences for whatever role he's just played in the #Brasilia siege.
9/ Remember, we know that Steve #Bannon & Jason Miller have been advising #Bolsonaro since he lost the election.
17/ Pro-#Bolsonaro rioters appear to smash cameras from the ceiling during #Brasilia siege.
18/ UPDATE: #Brazil's democratically-elected president #Lula orders security intervention to stop pro-#Bolsonaro siege of capitol #Brasilia.
19/ Democratically-elected President #Lula's address:
- Federal security intervention in #Brasilia
- Identified rioters will be punished
- Complicit Police & officials will be punished.
- Investigation will target financing for the siege
20/ NOW: Flashes & heavy crowd control gas clouds seen as authorities work to clear grounds #Brazil's National Congress building in #Brasilia.
21/ NOW: multiple government buildings including National Congress, Palace & Supreme Court cleared of pro-#Bolsonaro rioters.
Intense crowd control on the esplanade in front of National Congress in #Brasilia.
Still a large group remain in vicinity.
Reports of. 30 arrests.
22/ Arrest totals keep rising as night falls on the scene. 150 and counting per Globo.
Brazilian media commentators already talking about a failure of intelligence.
Large group of rioters currently remains West of the Palace of Justice.
23/ Police bus with smashed out windows carries off restrained rioters.
33/ Claimed to be the original of Brazil's 1988 constitution.¹
Which ended 21 years of dictatorship.
Makes me sick to my stomach.
¹OSINT: Maybe? Same cover. Original kept in museum section of the Supreme Federal Tribunal. Which was attacked today.
34/ "I have always been within the four lines of the Constitution" - Bolsonaro
The ex-president waited till the attack failed & his supporters been arrested & kicked out by riot squads before delivering this weak & evasive statement.
So familiar.
35/ Hashtag associated with #Bolsonaro supporters: "BrazilianSpring."
Very active today.
First, it's in English.
Second? Hard to imagine a Brazilian came up with the term...
Because it's the *middle of Brazil's scorching summer.*
Weird.
36/ Democratically-elected president @LulaOficial arrives.
"...The coup plotters who promoted the destruction of public property in Brasilia are being identified and will be punished. Tomorrow we resume work... Democracy always. Goodnight"
44/Wild. It took me thirty seconds find scores of Twitter accounts telling everyone exactly where to go to attack #Brasilia.
This was in plain sight.
46/ Another good follow, @msoares found accounts responding to coded tweets about the imminent #Brasilia siege tweeting questions like which "side" the military will be on during the attack.
47/ The sheer obviousness of tweets in the run-up is staggering.
Everything was spelled out in the thinnest of codes.
I think #Twitter was either willfully blind or utterly negligent as #Brazil careened towards an organized siege against the three branches of government.
48/ There appears to be a growing effort among #Bolsonaro supporters to construct a narrative that the ransacking was *actually* done by #Lula supporters / infiltrators.
NEW: @WhatsApp caught & fixed a sophisticated zero click attack...
Now they've published an advisory about it.
Say attackers combined the exploit with an @Apple vulnerability to hack a specific group of targets (i.e. this wasn't pointed at everybody)
Quick thoughts 1/
Wait, you say, haven't I heard of @WhatsApp zero-click exploits before?
You have.
A big user base makes a platform big target for exploit development.
Think about it from the attacker's perspective: an exploit against a popular messenger gives you potential access to a lot of devices.
You probably want maximum mileage from that painstakingly developed, weaponized, and tested exploit code you created/ purchased (or got bundled into your Pegasus subscription).
3/ The regular tempo of large platforms catching sophisticated exploits is a good sign.
They're paying attention & devoting resources to this growing category of highly targeted, sophisticated attacks.
But it's also a reminder of the magnitude of the threat out there...
WHOA: megapublisher @axelspringer is asking a German court to ban an ad-blocker.
Their claim that should make everyone nervous:
The HTML/ CSS code of websites are protected computer programs.
And influencing they are displayed (e.g by removing ads) violates copyright.
1/
2/ Preventing ad-blocking would be a huge blow to German cybersecurity and privacy.
There are critical security & privacy reasons to influence how a websites code gets displayed.
Like stripping out dangerous code & malvertising.
Or blocking unwanted trackers.
This is why most governments do it on their systems.
3/Defining HTML/CSS as a protected computer program will quickly lead to absurdities touching every corner of the internet.
Just think of the potential infringements:
-Screen readers for the blind
-'Dark mode' bowser extensions
-Displaying snippets of code in a university class
-Inspecting & modifying code in your own browser
-Website translators
3/ What still gives me chills is how many cases surfaced of people killed by cartels... or their family members... getting targeted with Pegasus spyware.
The #PegasusProject found even more potential cases in Mexico.