Security researcher/engineer working on mobile privacy/security. Founder of @GrapheneOS.
Joined June 2018
- Tweets21K
- Following350
- Followers11.8K
- Likes9.3K
Daniel Micay retweeted
Just figured out where these fake tariff rates come from. They didn't actually calculate tariff rates + non-tariff barriers, as they say they did. Instead, for every country, they just took our trade deficit with that country and divided it by the country's exports to us.
So we have a $17.9 billion trade deficit with Indonesia. Its exports to us are $28 billion. $17.9/$28 = 64%, which Trump claims is the tariff rate Indonesia charges us. What extraordinary nonsense this is.
Daniel Micay retweeted
The "small man" @radeksikorski during the fighting against the Soviet Union in Afghanistan in 1986.
Daniel Micay retweeted
What a deal! Surrender, resign, and give us a ransom in exchange for nothing!
Daniel Micay retweeted
So when U.S. Key Hole reconnaissance satellites see Kh-101 cruise missiles targeted at power plants and hospitals being loaded on to Tu-95’s in Russia, they won’t be warning Ukraine in advance. Nice, another absolutely unconscionable decision.
UPDATE: The US has stopped sharing "all" intelligence with Ukraine, a Ukrainian source has said.
Previously the source, with knowledge of the situation, said the halt in the follow of intelligence had been "selective", only affecting information that could be used for attacks inside Russia.
"A few hours ago, the exchange of all information was stopped," the source said.
With @safarov_
Daniel Micay retweeted
In an 1997 AI class at UT Austin, a neural net playing "infinite-board" Tic-Tac-Toe found an unbeatable strategy:
Choose moves billions of squares away, causing your opponent's to run out of memory and crash, forfeiting their turn.
The winning move was to kill your enemy.
Daniel Micay retweeted
This was never Zelensky's choice. Peace makes sense only with REAL security guarantees, which no one is willing to provide. US, UK, France, and Russia all "guaranteed" Ukraine's security when it surrendered its nukes 20 yrs ago. Russia has been breaking each and every deal since!
Daniel Micay retweeted
At Keflavik airport, there’s a guy whose job it is to guess the nationality of anyone leaving the country and click the right flag. They must be hiring only the advanced racists for this job, someone who can tell a Norwegian from a Swede with just a glance
Daniel Micay retweeted
It’s incredible how powerful this idea is once you apply it to the rest of the economy. For example, 100% of catastrophic aviation accidents happen during the last 30 minutes of the flight.
Healthcare for the last 30 days of life accounts for trillions of federal spending, far beyond military spending or any other category.
How many years are you willing to work beyond your planned retirement age to keep seniors alive at end of life?
Your options are:
• Work 5 more years to keep old people alive 1 extra week
• 10 years for 2 extra weeks
• 15 years for 3 extra weeks
• 20 years for 4 extra weeks
Readers added context they thought people might want to know
The cost shown is false. Approximately 13% health care costs in the United States was (in 2011) devoted to care of individuals in their last year of life.
pmc.ncbi.nlm.nih.gov/articles/PMC46…
All of national health care expenditure was $4.5 trillion in 2022.
cms.gov/data-research/….
Trail of Bits spun off iVerify into an independent company last year and it's already clearly a scam being pushed with blatant misinformation:
xitter.cf/GrapheneOS/status/1824…
Trail of Bits and Dan Guido repeating their clearly false claims and backing them up is next level hypocrisy.
Wired was manipulated into spreading misinformation to market Palantir and iVerify by misrepresenting a vulnerability in a disabled demo app as being a serious problem which could be exploited in the real world. They should retract the article but won't.
wired.com/story/google-andro…
A company acting as if their app can usefully defend iOS devices or detect compromise from within the iOS app sandbox is a complete joke. Attackers can trivially avoid it. Android allows granting more access to apps they can use for this but it's still a ridiculous premise.
Daniel Micay retweeted
i hope the xz author is alright. it's gotta suck having something you created and cared for getting undercut and infiltrated by someone maliciously. to them your project is just a means to get something elsewhere. to you, the thing you were both making was the point
Daniel Micay retweeted
I disagree with many of the "long-term, planned = state-sponsored attacker" takes on the #xzbackdoor.
I once spent a few months becoming a Facebook subcontractor, just to poke around in their internal SRT review tool for bugs.
(I explicitly asked their team first if I could try!)
ALT Using the SRT - REDACTED 1. Using Chrome ONLY, go to: https://srt.facebook.com/ and login using your REDACTED. 2. Go to the SRT at https://review.intern.facebook.com/intern/review 3. Please check you have changed to REDACTED in REDACTED <Screenshot of SRT tool>
Daniel Micay retweeted
Root programs need to implement a policy that removes CAs, or specific trust bits for a usage they do not utilize, after a certain period. These CAs represent an unnecessary threat surface for the web if they are not contributing to its greater good.
Daniel Micay retweeted
There are 7 CAs that issue 99% of all certificates that are un-expired the web as of today.
Daniel Micay retweeted
This weekend I played a bit with the new view on crt.sh that groups CAs by Root Owner. I combined the CA Owner view to create a cleaned-up market share review. The Python to generate this is here: gist.github.com/rmhrisk/39f2… #WebPKI
Daniel Micay retweeted
Writing an obituary about John Pilger and not even mentioning his latter day descent into deranged Putin supporting conspiracism is like writing an obituary of Fred West that exclusively talks about his early career as an affordable family builder.
This quoted post is unavailable.