cross-posted from: https://piefed.blahaj.zone/c/us_politics@piefed.blahaj.zone/p/1040175/cnn-threatens-new-legal-action-saying-it-s-still-being-denied-access-to-air-force

Already embroiled in a tense legal standoff with the White House, CNN is threatening further action in the courts if its journalists continue to be denied access to Air Force One and the “pool” of journalists who accompany President Donald Trump when he travels.

The network has been entangled in legal action with Trump’s administration ever since the president issued its reporters a sudden ban from White House grounds a month ago, along with those from MS NOW and Politico, calling their content “fake news.” Last week, a federal judge granted the news outlets their request for a preliminary injunction against the government ban as the case moves through the legal system.

But that only addresses part of the problem.

The White House has continued to bar CNN from taking its place in TV pool coverage of Trump’s travel on Air Force One. And so the network may need to take additional action, said Theodore J. Boutrous Jr., an attorney for CNN, in a letter to Justice Department attorney Michael K. Velchik.

More in the article.

cross-posted from: https://piefed.blahaj.zone/c/us_politics@piefed.blahaj.zone/p/1040178/zelenskyy-says-early-warning-system-for-russian-missile-attacks-resumes-following

Ukrainian President Volodymyr Zelenskyy said Tuesday that Kyiv is once again receiving early warnings from its partners following recent Russian missile attacks that he said occurred without enough notice.

For at least a week, the Ukrainian leader has said that his country’s military has not received early warnings about ballistic missiles aimed at the capital. He said such intelligence saves lives by allowing alerts to the public and giving military units time to try to intercept the missiles.

Zelenskyy said the change happened after talks with his American counterparts, including a phone call with Secretary of State Marco Rubio earlier in the day.

“We are thankful that intelligence works now, and I’m speaking about early warning, which is very important for our people, for children, adults, civilians, because we can hear when ballistic is coming,” Zelenskyy said on a visit to Norway. “So we are thankful to American side now that it works.”

More in the article.

You have seen the bean salad before. Cost per person $1.38

Sandwich: homemade bread grilled on both sides with mayo, turnip greens from my garden that wilted, rehydrated shiitake mushrooms I toasted, salt, capers, lemon juice, olive oil, and a bit of smoked jack cheese. Cost per person $1.8

The sandwich was an improvised experiment and it is awesome.

When a Department of Homeland Security official sent out an alert to stop Samuel Tunick, a Stop Cop City activist, at an airport in January 2025, they said the reason was because he was suspected of “terrorist activities,” according to new filed court records which include a screenshot of the alert and photos of Tunick’s interrogation.

Tunick ultimately provided Customs and Border Protection (CBP) officials with a code that, when entered, wiped his security- and privacy-focused GrapheneOS phone. Tunick is now being criminally charged for that alleged act, in one of the most high profile technology civil rights cases in recent memory.

The court records also showed that CBP officials lied to Tunick during his interrogation. Instead of saying he was being targeted for suspected terrorism — although this search happened just at the start of the second Trump administration, it has dramatically broadened what organizations or people may be considered such — they said they needed his phone to look for “kiddie porn.”

“Good afternoon,” an email sent from a Homeland Security Investigations (HSI) official, part of Immigration and Customs Enforcement (ICE), to CBP and other officials reads. “The following subject is scheduled to arrive in ATL [Hartsfield-Jackson Atlanta International Airport] today via DL 1778 @ 1930 Hours. TUNICK is under investigation by HSI/JTTF for suspected terrorist activities.” The email includes a photo of Tunick, and asks the officials to direct him to secondary inspection, retain all of his electronics, and collect their passcodes.

As 404 Media first revealed in December, Tunick was charged because he allegedly “did knowingly destroy, damage, waste, dispose of, and otherwise take any action to delete the digital contents of a Google Pixel cellular phone, for the purpose of preventing and impairing the Government’s lawful authority to take said property into its custody and control.” Matthew Dodge, one of Tunick’s lawyers, previously told 404 Media he only found one other case using the same obscure law, a drug trafficking case. “This is extraordinarily rare,” Dodge said.

Tunick was part of the Stop Cop City movement in Atlanta, which broadly protested the building of a large police training center, and which authorities investigated for arson, vandalism, and doxing. Tunick is not suspected of any crime beyond the alleged wiping of the phone, and has previously put his current prosecution in the context of the wide spanning cases against other Stop Cop City protesters.

The newly filed court record, in which Tunick’s lawyers argue that evidence should be thrown out, include new photos and descriptions of the airport encounter. The CBP officials asked Tunick if they were going to find “kiddie porn” on his phone, which Tunick immediately denied. “As the evidentiary hearing made clear, these unfounded accusations were nothing more than pretext for a fishing expedition into the depths of Mr. Tunick’s devices,” the lawyers wrote. They added, “Officer Findley acknowledged that officers had no reason whatsoever to believe Mr. Tunick possessed child pornography,” referring to one of the officials.

Tunick faces a maximum of five years in federal prison for allegedly wiping the phone.

“I hope people understand that the charges against me are meant to intimidate people against protecting their data and their privacy, and the government hopes to set a precedent that no one has the right to privacy,” Tunick previously told 404 Media.

Surely it's not because I only had a muffin and a cup of coffee this morning while staring at a screen all day.

The initiative, dubbed “Operation Protect the Vote,” comes in the lead-up to the midterm elections, where the Trump administration is making good on threats to weaponize the Justice Department and other federal entities in its favor over claims of supposed voter fraud. On Tuesday, the federal government sent election officials in Los Angeles County an unverified list of 20,000 people it claims are “likely noncitizens” registered to vote in California. As the New York Post first reported Monday, federal agents used the list to make the more than two dozen targeted arrests on the basis of its voter fraud allegations.

The Justice Department said in its Monday press release that federal law enforcement arrested “11 foreign nationals” against whom it will level criminal charges, including that they “fraudulently registered to vote in U.S. elections, electoral contests in which most of them cast illegal and fraudulently obtained ballots.”

The 11 arrestees are among 28 people the department officially charged—and all are from its list of 20,000 targets in the election. The press release claims that every person targeted is a legal permanent resident of the US but not a citizen.

Owners reported unexpected recordings of private conversations, but Meta hasn’t explained what went wrong or what happened to the audio.

When a Department of Homeland Security official sent out an alert to stop Samuel Tunick, a Stop Cop City activist, at an airport in January 2025, they said the reason was because he was suspected of “terrorist activities,” according to new filed court records which include a screenshot of the alert and photos of Tunick’s interrogation.

Tunick ultimately provided Customs and Border Protection (CBP) officials with a code that, when entered, wiped his security- and privacy-focused GrapheneOS phone. Tunick is now being criminally charged for that alleged act, in one of the most high profile technology civil rights cases in recent memory.

The court records also showed that CBP officials lied to Tunick during his interrogation. Instead of saying he was being targeted for suspected terrorism — although this search happened just at the start of the second Trump administration, it has dramatically broadened what organizations or people may be considered such — they said they needed his phone to look for “kiddie porn.”

“Good afternoon,” an email sent from a Homeland Security Investigations (HSI) official, part of Immigration and Customs Enforcement (ICE), to CBP and other officials reads. “The following subject is scheduled to arrive in ATL [Hartsfield-Jackson Atlanta International Airport] today via DL 1778 @ 1930 Hours. TUNICK is under investigation by HSI/JTTF for suspected terrorist activities.” The email includes a photo of Tunick, and asks the officials to direct him to secondary inspection, retain all of his electronics, and collect their passcodes.

As 404 Media first revealed in December, Tunick was charged because he allegedly “did knowingly destroy, damage, waste, dispose of, and otherwise take any action to delete the digital contents of a Google Pixel cellular phone, for the purpose of preventing and impairing the Government’s lawful authority to take said property into its custody and control.” Matthew Dodge, one of Tunick’s lawyers, previously told 404 Media he only found one other case using the same obscure law, a drug trafficking case. “This is extraordinarily rare,” Dodge said.

Tunick was part of the Stop Cop City movement in Atlanta, which broadly protested the building of a large police training center, and which authorities investigated for arson, vandalism, and doxing. Tunick is not suspected of any crime beyond the alleged wiping of the phone, and has previously put his current prosecution in the context of the wide spanning cases against other Stop Cop City protesters.

The newly filed court record, in which Tunick’s lawyers argue that evidence should be thrown out, include new photos and descriptions of the airport encounter. The CBP officials asked Tunick if they were going to find “kiddie porn” on his phone, which Tunick immediately denied. “As the evidentiary hearing made clear, these unfounded accusations were nothing more than pretext for a fishing expedition into the depths of Mr. Tunick’s devices,” the lawyers wrote. They added, “Officer Findley acknowledged that officers had no reason whatsoever to believe Mr. Tunick possessed child pornography,” referring to one of the officials.

Tunick faces a maximum of five years in federal prison for allegedly wiping the phone.

“I hope people understand that the charges against me are meant to intimidate people against protecting their data and their privacy, and the government hopes to set a precedent that no one has the right to privacy,” Tunick previously told 404 Media.

A brief statement from the Anti-Defamation League sharing the history of the antisemitic term "shylock," made a day after President Donald Trump used the slur at a campaign rally, illustrated "two paths for American Jews," according to Indivisible co-founder Leah Greenberg.

"Throw in to fight for multiracial pluralistic democracy or seek junior partner status in the MAGA coalition," said Greenberg, who is Jewish. "This is where the latter path leads."

The ADL was founded in 1913 to protect Jewish people from antisemitic attacks, but has focused heavily on promoting the United States' support of Israel and conflating antisemitism with criticism of Israel's violent treatment of Palestinians.

Considering the ADL's roots, Greenberg was among several observers who noticed that the group's response to Trump's recent comment on US Sen. Roger Marshall (R-Kan.) failed to mention the president by name.

Trump used the term to defend Marshall, a doctor, from criticism over his suing of more than 700 patients for their unpaid medical bills.

Marshall's opponents had portrayed him as “some kind of a Shylock-type guy,” said the president, who has used the term before. The word comes from the name of a Jewish moneylender in the William Shakespeare play "The Merchant of Venice," and has been used as an anti-Jewish slur indicating greediness and unfair lending practices.

In response to Trump's comments, the ADL wrote on social media that the term "is rooted in a longstanding antisemitic stereotype. Regardless of intent, its use can reinforce harmful tropes about Jews and normalize language that has long been used to target the Jewish community."

Dylan Williams, vice president for government affairs at the Center for International Policy (CIP), called the ADL's response "meek and endangering response" that contrasted sharply with the ADL's treatment of progressive lawmakers who condemn Israel.

The ADL's focus on anti-Israel criticism has become especially pronounced in recent years, as Americans' sympathies have turned toward Palestinians and away from Israel's US-backed government and military, which has waged war on the entire population of Gaza since October 2023 and is pushing to violently force Palestinians out of the illegally occupied West Bank.

The group, led by CEO Jonathan Greenblatt, has been incensed by student-led protests demanding an end to US military support for Israel by the electoral victories and campaigns of numerous Palestinian rights supporters, including New York City Mayor Zohran Mamdani.

Last year, the ADL saw fit to launch a "Mamdani Monitor" aimed at tracking the popular progressive mayor's supposedly "antisemitic" policies. The monitor has highlighted Mamdani's revocation of New York City's recognition of the International Holocaust Remembrance Alliance's definition of antisemitism, which has been rejected by dozens of Jewish historians and Holocaust experts who say it conflates antisemitism with criticism of Israel.

If a Democrat used the term Trump did, said Matt Duss, executive vice president at CIP, "Jonathan Greenblatt would be knocking people over to get in front of a camera to condemn them by name, but it was Trump so it’s just a general public service announcement."

The statement exposed the ADL as "a deeply unserious organization that has drifted far away from its stated mission, and one that has lost all credibility," said Adam Carlson of Zenith Polls.

The group has previously come to the defense of Republican megadonor and Trump adviser Elon Musk, a vehement supporter of Israel, when he made what appeared to be a "Sieg Heil" Nazi salute at a Trump inaugural event. Greenblatt said the apparent salute was simply an "awkward gesture."

"The ADL is apparently too busy chasing down college students with 'Free Palestine' stickers," said Tariq Kenney-Shawa of the Institute for Middle East Understanding, "to worry about the president of the United States casually dropping some medieval-age antisemitism at a campaign rally."

From Common Dreams via This RSS Feed.

Security personnel around the world are on high alert Tuesday following the discovery of eight TLS certificates with private keys so weak they could allow anyone to mint trusted browser and app credentials for any site on the Internet.

As of late morning Tuesday, browser makers and some major apps and programming languages had blocked all eight of the intermediate certificates. There are no reports of certificate transparency logs, which track the issuance of all browser-trusted certificates, showing the compromised keys being used maliciously. The threat remains far from over, however, because it will be hard and time-consuming to update other key parts of the Internet, such as Linux distributions and embedded and Internet of Things devices. One word: bonkers

The eight intermediate certificates belong to India-based certificate authority eMudhra Limited. An informal advisory published to emudhra.we-have-a-problem.com over on Tuesday posted the message “We have a problem here – Wayne.” The words were digitally signed using the private key of one of the eMudhra certificates. With proof that the reporting party had control of the key, defenders scrambled because the same key could be used to sign unauthorized certificates that would be trusted by millions of servers worldwide.

“This will be a massive cleanup job, bigger than Heartbleed,” Filippo Valsorda, a cryptography engineer and a cryptography maintainer for the open source Go programming language, told Ars. “There will be a very, very long tail, IoT devices, Docker containers, forgotten Linux machines, unmaintained CLI tools that shipped their own copy of the roots (which is common in some ecosystems, like Python). Also, Linux distributions are still rolling out updates, some of them are not ready yet, and then system administrators will need to apply them to a lot of machines.”

Heartbleed is the name of a critical vulnerability in the OpenSSL cryptography library. In 2014, it came under mass exploitation. Exploits let many unaffiliated hackers decrypt TLS-protected exchanges between parties. They also recovered private TLS certificate keys, session cookies, and passwords. The attacks compromised thousands of servers, some belonging to large companies and government agencies around the world.

Recovery required a long series of steps that took years. Steps included patching OpenSSL on all affected devices, reissuing millions of TLS keys, revoking old certificates, rotating passwords and session tokens and updating embedded devices and other forgotten systems—something that was extremely time- and resource-intensive, especially at Internet scale.

“Every time you need a lot of different people in different contexts to do something, it will take a long time,” Valsorda explained. “This time it’s worse because there’s more contexts, more people, and more heterogeneity.”

The compromised eMudhra keys were defective at a level that’s challenging the imagination of many of the engineers studying the incident. A normal size for a NIST P-384 elliptic curve cryptography private key contains roughly 384 bits of entropy, a size allowing almost 2384, or a number with 116 digits, different possibilities. The private key sizes of the compromised keys ranged from 3 to 8 bits. Astonishingly, the private keys were 4, 56, 66, 115, 155, 156, 230, 237.

“That is extremely in the ‘this should not be possible’ category,” Valdorda said. “Maybe some horribly dangerous key generation interface has a ‘size’ parameter and they set it to 1 by mistake???”

Ben Cartwright-Cox, director of BGP.tools, said: “My guess is that it’s example code that accidentally leaked to production, but hard to know. But it’s bonkers that no one noticed.”

At this early stage, the most immediate threat appears to be for those using VPNs, especially in countries with governments likely to maliciously intercept traffic. There are likely many other cases for concern. End users largely have no recourse other than to hold off using many non-browser forms of TLS communication until they receive assurances updates are in place.

As noted, most browsers have already blocked the intermediate certificates. The exception appears to be Edge, which at the time this article went live was still connecting to 12 vulnerable hosts. In response to questions asking why and if the company has plans to do so, a Microsoft representative the company will be in touch if it has anything to “share.” Meanwhile, Signal, WhatsApp, Wireguard, and other apps that don’t rely on TLS for confidentiality aren’t affected. This page and the emudhra.we-have-a-problem.com site show apps known to be patched so far.

The incident is the latest to expose a fatal flaw in the TLS regimen. It’s only as strong as its weakest link, which in this case was eMudhra. Fortunately, transparency logs account for much of that failure, but this measure requires parties to actively monitor massive feeds and works only after unauthorized certificates have been issued. eMudhra representatives weren’t immediately available to answer questions.

One caveat: exploiting compromised certificates requires an active adversary-in-the-middle attack, meaning the attacker must act as a proxy between two TLS parties and receive encrypted traffic, decrypt it, reencrypt it, and send it to the other party. Such capabilities, in some cases, are usually limited to only the most well-resourced attackers. People with control of a local network—at a coffee shop, university, or other organization—face much less of a challenge.

TOS s2e2 "Who Mourns for Adonais?"

Hasn't happened for quite a while. You're all awesome!

On Friday Oct 2, 09:35am, 333 infected exit nodes started a coordinated campaign to intercept SSH connections and gather as much unencrypted data as possible.

To give you a sense of scale, all of Tor has around 3000 exit relays, so roughly 10% were under their control.

The attackers had gained access to the servers two months earlier, in August, and quietly deployed their Ebury 1.8.3 payload (an OpenSSH backdoor and credential stealer for Linux).

SOMEONE HELP ME MY THROAT IS GETTING SORE FROM ALL THIS YELLING