Runa Sandvik

Spoke to @zackwhittaker@mastodon.social about the case of U.S. federal prosecutors going after an American for allegedly wiping his phone with a duress password during a border search. First case I've seen, though I've discussed the potential scenario with at-risk folks. https://techcrunch.com/2026/07/24/us-accuses-american-of-allegedly-wiping-his-phone-using-a-duress-password-during-border-search/

Great writeup from @lorenzofb@infosec.exchange on the recent OpenAI vs. Hugging Face incident. Turns out it started with a human mistake at OpenAI: someone forgot to set up an isolated environment prior to testing a model; the model went rogue; and attacked Hugging Face. https://techcrunch.com/2026/07/22/how-an-openais-human-mistake-led-to-the-ai-powered-hack-on-hugging-face/

I miss microblogging. I miss Twitter. I still enjoy sharing bits and pieces on a regular basis. So I decided to create yet-another-newsletter. Here's the first post! https://www.runasandvik.com/p/waypoints-about-spyware-the-onecoin

"Instead, far-right and MAGA politicians, influencers, and podcasters will immediately use the most divisive language possible in order to make voters as angry as possible, as fast as possible, regardless of what actually happened." https://www.theatlantic.com/ideas/2026/08/ceuta-spain-far-right/688154

While reading this Forbidden Stories report on Morocco's use of the Pegasus spyware, remember that Morocco in early 2023 organized an in-person hearing to "disprove" years of research by @AmnestyTech@mastox.eu and @citizenlab@mastodon.social. https://forbiddenstories.org/codename-morgan-a-look-back-at-moroccos-acquisition-of-pegasus-involving-israel-and-the-united-arab-emirates/

In addition to lots of indoor skydiving this week, I also started a book on Iran’s 2022 anti-government protests; discussed the GrapheneOS + U.S. border search case; and went down the manosphere rabbit hole. https://www.runasandvik.com/p/waypoints-about-iran-us-border-searches

@lorenzofb@infosec.exchange I remember seeing a bunch of cases in the original Pegasus Project reporting, including drivers and doctors.

While reading this Forbidden Stories report on Morocco's use of the Pegasus spyware, remember that Morocco in early 2025 organized an in-person hearing to "disprove" years of research by @AmnestyTech@mastox.eu and @citizenlab@mastodon.social. https://forbiddenstories.org/codename-morgan-a-look-back-at-moroccos-acquisition-of-pegasus-involving-israel-and-the-united-arab-emirates/