Joseph Lorenzo Hall, PhD

Astrophysicist turned advocate: guiding the globe to a safer, stronger Internet. Distinguished Technologist @internetsociety, @[email protected]

[Steven Murdoch @sjmurdoch]

For the tl;dr, I wrote a summary of my analysis of the GPS Special Message “number station”, including entropy measurement, duplicated strings, a mysterious new “TEXT” prefix, and the system’s relationship with military key distribution. https://t.co/BKQp9GYQJo

[Joseph Lorenzo Hall, PhD @JoeBeOne]

(Un)forced Errors: Analysis of Proposed Surveillance Law Expansion under Bill C-22, An Act respecting lawful access - The Citizen Lab https://t.co/crt0RdwPSi

[Joseph Lorenzo Hall, PhD @JoeBeOne]

@sjmurdoch Thank you!

[Aikido Security @AikidoSecurity]

⚠️ Multiple @ redhat-cloud-services npm packages were found carrying malicious payloads that fire via a preinstall hook on every npm install. All packages were published via GitHub Actions OIDC, indicating the CI/CD pipeline was compromised.

The payload targets GitHub Actions secrets, AWS, GCP, Azure, Kubernetes, HashiCorp Vault, npm and CircleCI tokens. It reads /proc/mem to bypass log masking, self-propagates via harvested npm tokens bypassing 2FA, and persists on developer devices via Claude Code and VS Code injection.

[Joseph Lorenzo Hall, PhD @JoeBeOne]

I was hoping to get some sleep on a plane flight tomorrow but Baez and Muniain just arrived

[Joseph Lorenzo Hall, PhD @JoeBeOne]

"Inside the Ebola Epicenter, the Virus Rages With Little to Stop It" (gift link) https://t.co/yHvcpGjtkc

[Joseph Lorenzo Hall, PhD @JoeBeOne]

UI flows that force a user to hard-close the app just to escape a marketing upsell are textbook deceptive patterns. A mandatory promotional screen with zero exit paths is hostile UX, Duolingo.

[Joseph Lorenzo Hall, PhD @JoeBeOne]

Simply amazing interview of @AnnaBower by @MicahLoewinger here: "Trump Sued Himself … and ‘Settled’ for a $1.8 Billion Fund" WNYC Studios https://t.co/Xkd7CkdQUQ

[Joseph Lorenzo Hall, PhD @JoeBeOne]

If you'll be at USENIX Security this year and would be interested in meeting up any of our NDSS fellows that may be there, drop me a line? They are the best: https://t.co/QzTGOPcGYw

[Joseph Lorenzo Hall, PhD @JoeBeOne]

Here's why the failure of Blue Origin's New Glenn rocket is so catastrophic - Ars Technica https://t.co/K1HhbQXe6l

[Joseph Lorenzo Hall, PhD @JoeBeOne]

"Midnight Sprite" by riff raff https://t.co/zWJnPLPvBI

[Joseph Lorenzo Hall, PhD @JoeBeOne]

White House proposes new rules giving political appointees final say on research grants https://t.co/Fx3322m9tX

[Albert الأوكراني @AlbertUkrLeb]

Ukraine is training bunny assassin
🤣

[Joseph Lorenzo Hall, PhD @JoeBeOne]

I add a little cinnamon to the espresso shot before pouring the cappuccino foam on weekends for a little extra oomph.

[Joseph Lorenzo Hall, PhD @JoeBeOne]

Texas app age verification law can go into effect for now https://t.co/uDf5Ug1wjr

[Joseph Lorenzo Hall, PhD @JoeBeOne]

The IAB warns that Canada's Bill C-22 threatens to weaken encrypted communications and harm Internet security: https://t.co/paLctCk1rH

[Joseph Lorenzo Hall, PhD @JoeBeOne]

The IAB warns that Canada's Bill C-22 threatens to weaken encrypted communications and harm Internet security: https://t.co/paLctCk1rH

[Michael Geist @mgeist]

The Bill C-22 hearing yesterday featuring the Privacy Commissioner of Canada, Apple, Google and others was a mess. But the message was clear. Bill C-22 represents a serious risk to the privacy and security of millions of Canadians.
https://t.co/XYp5Hm9wGn

[Joseph Lorenzo Hall, PhD @JoeBeOne]

Local Infrastructure, Lower Costs: How Peering Is Moving the Needle on Internet Affordability - Internet Society https://t.co/HcWNugyuVQ