Runa Sandvik

Founder of @GranittHQ, securing journalists and at-risk people around the world.

[Runa Sandvik @runasand]

@KimZetter Yes but no but kinda but it depends.

[Runa Sandvik @runasand]

Here are the FOIA docs I obtained from the CIA about journalist and spy Louis Budenz a few months ago. https://t.co/1idp2GPl2D

[Runa Sandvik @runasand]

My latest for Journalist and Spy: Louis Budenz was an American journalist and communist spy. A member of the Communist Party USA, he shared gossip with Soviet intelligence. He later renounced communism and debriefed the FBI on the party's inner workings. https://t.co/DT7nW6B0fK

[Runa Sandvik @runasand]

@TalBeerySec @lorenzofb So many different angles and great topics for discussion in this one.

[Runa Sandvik @runasand]

Great writeup from @lorenzofb on the recent OpenAI vs. Hugging Face incident. Turns out it started with a human mistake at OpenAI: someone forgot to set up an isolated environment prior to testing a model; the model went rogue; and attacked Hugging Face. https://t.co/eiBYG3Tbhm

[Runa Sandvik @runasand]

@Blue_Fan_65 @0x0v1 @mrgretzky It’s (almost) always the little things.

[Runa Sandvik @runasand]

@nejsnave @lorenzofb It did things the human did not intend, though the human has not put proper guardrails in place. If going rogue is not a great term, what’s a better one?

[Runa Sandvik @runasand]

@jailbreak228179 Never published, as far as I know.

[Runa Sandvik @runasand]

Wrote short blurbs about TrueCrypt, my Journalist and Spy project, MSG surveillance and the WIRED lawsuit, and AI in this week’s Waypoints newsletter. https://t.co/kIwQ2V75x2

[Runa Sandvik @runasand]

@janekm @lorenzofb Oh, you’re right, my bad! Lorenzo’s article is correct, my post misses the slight nuance of properly configure / properly set up. The environment was set up, but not properly configured / did allow the proxy.

[Runa Sandvik @runasand]

From an @InsiderEng article on political life in Iran; this happened in Syria too more than a decade ago. https://t.co/2fIMxK28Tx

[Runa Sandvik @runasand]

The WSJ has the backstory on the U.S.-UAE agreement on AI, w/spycraft, diplomacy and lobbying. AI giant G24 is there too, run by former DarkMatter staff -- the firm created to help the UAE spy on rivals, activists, and journalists with former NSA hackers. https://t.co/KBsLKanY0q

[Runa Sandvik @runasand]

Sky News looked into the deadly strike on an Iranian primary school in February and found that (1) "the evidence points towards US responsibility," and (2) US analysts had "ample opportunities ... to spot that the building had become a school." https://t.co/t4Y0PQ1xbO

[Runa Sandvik @runasand]

@ThomasVLinge Happy birthday!

[Runa Sandvik @runasand]

@stalman @mattworkman Railway may be cheaper, depending on what you’re deploying.

[Runa Sandvik @runasand]

@AllWheelDog @MCCCANM Another great option if you do a little prep before your trip. Cheaper than if you buy single-use bags from a store. https://t.co/qJbSnkzgKb

[Runa Sandvik @runasand]

@AlecMuffett @KimZetter @GeckoVox @mala There’s a potential discussion in here about jurisdiction too. Lawful use of forensic/hacking tools is a common spyware talking point too.

[Runa Sandvik @runasand]

@RFERL Hey, any chance there's an RSS feed and/or newsletter specifically for investigations?

[Runa Sandvik @runasand]

@GeckoVox @KimZetter That was my first thought too.

[Runa Sandvik @runasand]

@KyivIndependent Hey, any chance there's an RSS feed and/or newsletter specifically for investigations?

[Runa Sandvik @runasand]

@FbdnStories You have the same two paragraphs printed twice in this article. https://t.co/jOHRanILyd

[Runa Sandvik @runasand]

While reading this @FbdnStories report on Morocco's use of the Pegasus spyware, remember that Morocco in early 2025 organized an in-person hearing to "disprove" years of research by @AmnestyTech and @citizenlab. https://t.co/jOHRanILyd