Sign in

Dan Goodin

@dangoodin.bsky.social
10K followers 819 following 126 posts

Cybersecurity Reporter, Ars Technica: arstechnica.com/author/dan-goodin Hungry for tips. Text me on Signal: DanArs.82. "The world isn’t run by weapons anymore, or energy, or money. It’s run by little 1s and 0s, little bits of data."

PostsRepliesMedia
Dan Goodin @dangoodin.bsky.social · 06/10/2026
Google warns of unauthorized TLS certificates for its own and other major domains  arstechnica.com/security/202...
arstechnica.com
Hackers obtain counterfeit TLS certificates for Google and other large services
Compromise of 3 domain registries allows hackers to walk off with unauthorized certs.
1114
Reposted by Dan Goodin
bjkeefe @bjkeefe.bsky.social · 24/09/2026
This, from @dangoodin.bsky.social, is not something to be scared about, at least not yet. But it does seem like a significant step. It is, in any case, interesting just for the theoretical aspects.
121
Reposted by Dan Goodin
Ars Technica @arstechnica.com · 21/09/2026
arstechnica.com
Muse, Meta's extraordinarily privileged AI assistant, has a serious 0-day
A simple ClickFix attack is only one way to completely hijack the new agent.
45918
Dan Goodin @dangoodin.bsky.social · 16/09/2026
Would you plead DM me?
000
Dan Goodin @dangoodin.bsky.social · 14/09/2026
Are you an AI agent?
000
Dan Goodin @dangoodin.bsky.social · 30/07/2026
A quantum-resistant cryptography algorithm that was under consideration to become an official US standard has been taken out of the running after an Anthropic security model helped find a flaw that rendered it broken. arstechnica.com/security/202...
arstechnica.com
Mythos attack on 3rd-round PQC algorithm candidate puts it out of commission
HAWK withstood years of testing that had yet to uncover a fatal weakness found through Mythos.
0235
Dan Goodin @dangoodin.bsky.social · 05/06/2026
You too can turn a Bluetooth device into a PC-pwning proxy arstechnica.com/security/202...
arstechnica.com
How a USB-connected speaker can infect a PC without ever being touched
Seller of the Sound Blaster Katana V2X doesn't consider the behavior a vulnerability.
0235
Dan Goodin @dangoodin.bsky.social · 04/06/2026
If it wasn't already, 2FA spraying is now a thing, as Dashlane users now know. arstechnica.com/security/202...
arstechnica.com
Dashlane explains how attackers managed to download encrypted password vaults
By targeting large numbers of users, attackers increased their chances of success.
1101
Reposted by Dan Goodin
Jake Williams @malwarejake.bsky.social · 04/06/2026
Incident responder who gets to see behind the scenes on a lot of these: In 2026, if the company is being this obtuse it's either REALLY BAD(tm) or they have horrible incident response preparedness. Neither one is good for their customers.
1203
Dan Goodin @dangoodin.bsky.social · 04/06/2026
Can’t make sense of Dashlane’s vault theft notification? You’re not alone. arstechnica.com/security/202...
arstechnica.com
Can't make sense of Dashlane's vault theft notification? You're not alone.
Security advisory leaves out key details. Dashlane maintains complete silence.
040
Dan Goodin @dangoodin.bsky.social · 11/05/2026
Anybody know of any Linux distributions that have released fixes for Dirty Frag?
173
Dan Goodin @dangoodin.bsky.social · 21/04/2026
I just donated to SPLC because the work it does makes the world a safer and more just place. Please do the same if able.
0113
Dan Goodin @dangoodin.bsky.social · 21/04/2026
With growing focus on the threat quantum computing poses to crucial and widely used forms of encryption, @filippo.abyssdomain.expert wants to make one thing clear: Contrary to popular mythology that refuses to die, AES 128 is perfectly fine in a post-quantum world arstechnica.com/security/202...
arstechnica.com
Contrary to popular superstition, AES 128 is just fine in a post-quantum world
A stubborn misconception is hampering the already hard work of quantum readiness.
0336
Dan Goodin @dangoodin.bsky.social · 21/04/2026
Deleted and reposted to fix the link.
010
Dan Goodin @dangoodin.bsky.social · 17/04/2026
“Transitioning the Internet to post-quantum, especially for digital signatures, is a massive undertaking. By setting a 2029 goal, they are giving themselves some slack. If they target 2035 and miss by 2 years, we are getting uncomfortably close to the danger zone.” arstechnica.com/security/202...
arstechnica.com
Recent advances push Big Tech closer to the Q-Day danger zone
Here's which players are winning the race to transition to post-quantum crypto.
071
Dan Goodin @dangoodin.bsky.social · 03/04/2026
Now, there's a 3rd Rowhammer attack on Nvidia GPUs that gains CPU root even when IOMMU is enabled. My story has been updated throughout. arstechnica.com/security/202...
arstechnica.com
New Rowhammer attacks give complete control of machines running Nvidia GPUs
Both GDDRHammer and GeForge hammer GPU memory in ways that compromise the CPU.
141
Dan Goodin @dangoodin.bsky.social · 02/04/2026
The cost and shortage of GPUs means they're frequently shared among dozens of users in cloud environments. 2 new Rowhammer attacks demonstrate how a malicious user can gain full root control of the host machine running high-performance Nvidia GPU cards. arstechnica.com/security/202...
arstechnica.com
New Rowhammer attacks give complete control of machines running Nvidia GPUs
Both GDDRHammer and GeForge hammer GPU memory in ways that compromise the CPU.
1218
Dan Goodin @dangoodin.bsky.social · 31/03/2026
Building a utility-scale quantum computer that can crack one of the most vital cryptosystems—elliptic curves—doesn’t require nearly the resources anticipated just a year or two ago, two independently written whitepapers have concluded. arstechnica.com/security/202...
arstechnica.com
Quantum computers need vastly fewer resources than thought to break vital encryption
No, the sky isn't falling, but Q Day is coming, and it won't be as expensive as thought.
072
Reposted by Dan Goodin
Lorenzo Franceschi-Bicchierai @lorenzofb.bsky.social · 26/03/2026
Kaspersky has linked Coruna with Operation Triangulation. This somes a few weeks after we reported that L3Harris Trenchant was the company behind some components of Coruna. And we also reported that it was possible Coruna was used in Operation Triangulation. securelist.com/coruna-frame...
172
Dan Goodin @dangoodin.bsky.social · 25/03/2026
Google is also discussing its PQC plans for Android for the first time. This will likely add significant workload for Android app devs.
050
Dan Goodin @dangoodin.bsky.social · 25/03/2026
Google is dramatically shortening its readiness deadline for the arrival of Q Day, the point at which existing quantum computers can break public-key algorithms that secure decades’ worth of secrets belonging to militaries, banks, and nearly every individual on earth arstechnica.com/security/202...
arstechnica.com
Google bumps up Q Day deadline to 2029, far sooner than previously thought
Company warns entire industry to move off RSA and EC more quickly.
21713
Dan Goodin @dangoodin.bsky.social · 24/03/2026
I was lucky enough to cover Cindy Cohn's trailblazing work BEFORE she joined @eff . Here's one of several stories I wrote about her when she was still an associate attorney in private practice.
Scanned newspaper article from 1997. Headline: :Breaking the code breakers." subhed: "Cindy Cohn is fighting the feds on export control and winning." Byline: "Dan Goodin."
091
Dan Goodin @dangoodin.bsky.social · 03/03/2026
Burner accounts on social media sites can increasingly be analyzed to identify the pseudonymous users who post to them using AI in research that has far-reaching consequences for privacy on the Internet, researchers said. arstechnica.com/security/202...
arstechnica.com
LLMs can unmask pseudonymous users at scale with surprising accuracy
Pseudonymity has never been perfect for preserving privacy. Soon it may be pointless.
173
Dan Goodin @dangoodin.bsky.social · 28/02/2026
Pitseleh, or a ton of other stuff by Elliott Smith. www.youtube.com/watch?v=Pg7y...
youtube.com
Pitseleh
YouTube video by Elliott Smith - Topic
010
Reposted by Dan Goodin
Mathy Vanhoef @vanhoefm.bsky.social · 26/02/2026
Excellent article on the work by @dangoodin.bsky.social: arstechnica.com/security/202... I'd say we bypass Wi-Fi encryption, in the sense that we can bypass client isolation. We don't break Wi-Fi authentication or encryption. Crypto is often bypassed instead of broken. And we bypass it ;)
arstechnica.com
New AirSnitch attack breaks Wi-Fi encryption in homes, offices, and enterprises
That guest network you set up for your neighbors may not be as secure as you think.
276
Dan Goodin @dangoodin.bsky.social · 26/02/2026
That guest SSID you set up for your neighbors may not be as secure as you think arstechnica.com/security/202...
arstechnica.com
New AirSnitch attack breaks Wi-Fi encryption in homes, offices, and enterprises
That guest network you set up for your neighbors may not be as secure as you think.
185
Reposted by Dan Goodin
WeRateDogs @weratedogs.com · 18/02/2026
This local Wolfdog joined an Olympic ski event and triggered the finish-line camera. This is Nazgul. He snuck into a cross-country skiing sprint this morning and raced the homestretch with some competitors before being escorted home. 14/10 someone get him a medal
476235865014
Reposted by Dan Goodin
Kim Zetter @kimzetter.bsky.social · 18/02/2026
The makers of password managers like Bitwarden, 1Password, Dashlane and LastPass promise they can't see your password vault. But that's not always true. A server compromise can mean game over for you, say researchers who examined some of the top password managers on the market
arstechnica.com
Password managers' promise that they can't see your vaults isn't always true
Contrary to what password managers say, a server compromise can mean game over.
21912
Reposted by Dan Goodin
Dan Goodin @dangoodin.bsky.social · 17/02/2026
Contrary to what password managers say, a server compromise can mean game over. arstechnica.com/security/202...
arstechnica.com
Password managers' promise that they can't see your vaults isn't always true
Contrary to what password managers say, a server compromise can mean game over.
0128
Dan Goodin @dangoodin.bsky.social · 17/02/2026
Contrary to what password managers say, a server compromise can mean game over. arstechnica.com/security/202...
arstechnica.com
Password managers' promise that they can't see your vaults isn't always true
Contrary to what password managers say, a server compromise can mean game over.
0128
Reposted by Dan Goodin
Raphael Satter @raphae.li · 12/02/2026
Scoop: A report published last week outlined what Palo Alto researchers believed was a China-linked hacking campaign. But after an intervention from execs, the report's language was changed to refer more vaguely to "a state-aligned group that operates out of Asia." www.reuters.com/world/china/...
reuters.com
Exclusive: Palo Alto chose not to tie China to hacking campaign for fear of retaliation from Beijing, sources say
Palo Alto Networks opted not to tie China to a global cyberespionage campaign the firm exposed last week over concerns that the cybersecurity company or its clients could face retaliation from Beijing...
44027
Reposted by Dan Goodin
Dhruv Mehrotra @dmehro.bsky.social · 09/02/2026
I filed this FOIA after publishing this investigation into ICE agents abusing law-enforcement databases. www.wired.com/story/ice-ag.... Those records are here: airtable.com/appxK2tDF0YA...
wired.com
ICE Records Reveal How Agents Abuse Access to Secret Data
Documents obtained by WIRED detail hundreds of investigations by the US agency into alleged database misuse that includes harassment, stalking, and more.
12214
Dan Goodin @dangoodin.bsky.social · 09/02/2026
If throngs of people handed over their IDs in exchange for a vanity blue check from a pro-authoritarian site, what reason is there to think Discord users won't do the same?
0130
Dan Goodin @dangoodin.bsky.social · 29/01/2026
Two security professionals who were arrested in 2019 after performing an authorized security assessment of a county courthouse in Iowa will receive $600,000 to settle a lawsuit they brought alleging wrongful arrest and defamation. arstechnica.com/security/202...
arstechnica.com
County pays $600,000 to pentesters it arrested for assessing courthouse security
Settlement comes more than 6 years after Gary DeMercurio and Justin Wynn's ordeal began.
1144
Reposted by Dan Goodin
Ed Bott @edbott.com · 28/01/2026
Trump’s federal thugs beat up on His face and his chest Then we heard the gunshots And Alex Pretti lay in the snow, dead Their claim was self defense, sir Just don’t believe your eyes It’s our blood and bones And these whistles and phones Against Miller and Noem’s dirty lies (Full lyrics @ YT page)
0114
Dan Goodin @dangoodin.bsky.social · 27/01/2026
Thanks for making sure we're aware of this. Our understanding is that Chrome on Android has started issuing these alerts. They're likely due to video players being embedded by ads that are trying to discover if Chromecast is available. This isn't just happening on Ars. We continue to investigate.
000
Reposted by Dan Goodin
Val @vallha11a.neocities.org · 19/01/2026
Thanks to @dangoodin.bsky.social for writing one of the few articles that actually questioned the @nytimes.com report.
011
Dan Goodin @dangoodin.bsky.social · 15/01/2026
No, I'm saying that before we can use the video as proof, the details I've mentioned though out this thread must be independently confirmed. Anyway, it doesn't sound like you and I agree on the burden of proof required to report a missile attack was responsible for the power outage. Peace & respect.
100
Dan Goodin @dangoodin.bsky.social · 15/01/2026
I assumed you had independently confirmed the gov's claims if you were pitching a whole story focusing on kinetic attacks. I've never liked the overly broad license news outlets give to unnamed sources, but if power was indeed restored hours later, I don't see how missiles could be responsible.
200
Dan Goodin @dangoodin.bsky.social · 15/01/2026
Yes, but when and where was the photo taken? Has anyone positively identified those crucial pieces of info? Assuming the video is authentic, did a cyberattack precede the missile attack? Statements from the Venezuela gov aren't confirmation. I can't find any independent confirmation.
100
Dan Goodin @dangoodin.bsky.social · 15/01/2026
I'm not saying missiles weren't used, but I'm looking for confirmation.
100
Dan Goodin @dangoodin.bsky.social · 15/01/2026
@metacurity.com Is there any independent confirmation of a kinetic attack? I don't see any mention of missiles or bombs in the first post Cynthia linked to, although the second does. The third appears to show damage to an electrical substation, but I can't tell where it is or when the video was shot
bsky.app
100
Reposted by Dan Goodin
The Onion @theonion.com · 15/01/2026
Conservatives Say Renée Good Was Brainwashed By Bible Into Loving Thy Neighbor theonion.com/conservatives-say-rene…
Conservatives Say Renée Good Was Brainwashed By Bible Into Loving Thy Neighbor
424675959
Reposted by Dan Goodin
Zack Whittaker @zackwhittaker.com · 14/01/2026
New, by me: Security researcher Eaton Zveare spent weeks trying to alert a little-known but critical U.S. cargo tech giant that their shipping systems and customers' data were exposed to the web. After weeks of trying, Zveare asked TechCrunch for help. We heard back! ...from the company's law firm.
techcrunch.com
Exclusive: US cargo tech company publicly exposed its shipping systems and customer data to the web
Shipping tech company Bluspark left internal plaintext passwords, including those of executives, exposed to the internet, at a time when hacks in the shipping industry are on the rise.
15625
Reposted by Dan Goodin
Seanie Byrne 🦡 @seaniebyrne.bsky.social · 13/01/2026
The novel use of PassKeys to store the private key material is 👨🏻‍🍳💋 by @dangoodin.bsky.social arstechnica.com/security/202...
arstechnica.com
Signal creator Moxie Marlinspike wants to do for AI what he did for messaging
Introducing Confer, an end-to-end AI assistant that just works.
051
Dan Goodin @dangoodin.bsky.social · 13/01/2026
Moxie Marlinspike—the engineer who set a new standard for private messaging with the creation of the Signal Messenger—is now aiming to revolutionize AI chatbots in a similar way. arstechnica.com/security/202...
arstechnica.com
Signal creator Moxie Marlinspike wants to do for AI what he did for messaging
Introducing Confer, an end-to-end AI assistant that just works.
22012
Dan Goodin @dangoodin.bsky.social · 13/11/2025
NY Attorney General Letitia James, speaking out against the illegal firings of 4 Conde Nast union members: “This is an injustice. Condé Nast, I’ll see you in court.” www.thewrap.com/conde-nast-f...
thewrap.com
New York Attorney General Letitia James Threatens Legal Action Over Condé Nast's HR Firings | Video
New York Attorney General Letitia James on Wednesday night threatened legal action against Condé Nast.
150
Dan Goodin @dangoodin.bsky.social · 12/11/2025
In 15 minutes, NY AG Letitia James will participate in the Conde Nast union rally supporting the immediate reinstatement of 4 of our colleagues who were illegally fired in a union-busting move. If you're near WTC in Manhattan, please come and show your support.
"Flyer: Conde Nast union: Defend our rights Wednesday, Nov 12 6 PM Reinstate the Fired four." Four images of red fists raised in the air.
0122
Dan Goodin @dangoodin.bsky.social · 12/11/2025
Also, @undetectableai.bsky.social
Mastodon post (at: https://infosec.exchange/@dangoodin/115538605749075355)

Wow, the lack of ANY factual support for such a claim amounts to hyperbole. And from a CEO peddling a service to "guarantee content integrity." File this one under "Umbrella salesman predicts torrential rain."

https://www.wgcu.org/science-tech/2025-09-23/detection-expert-says-hackers-likely-used-ai-to-penetrate-airport-system

An airport employee points at a departure board after a cyber attack caused delays at Brussels International Airport in Zaventem, Belgium, Saturday, Sept. 20, 2025.
WGCU · Sep 23
Detection expert says hackers likely used AI to penetrate airport system
By Undetectable.ai/Special to WGCU
Nov 12, 2025, 12:26 PM
··
Web
18
boosts
·
0
quotes
·
37
favorites
020
Dan Goodin @dangoodin.bsky.social · 12/11/2025
As noted, @wgcunews.bsky.social has removed the post. Kudos for that, but journalism standards require an explanation. If any of you want to reach out directly, I'm happy to elaborate on the problems with these claims and why they can't be taken at face value: web.archive.org/web/20250923...
web.archive.org
Detection expert says hackers likely used AI to penetrate airport system
As major airports across Europe have been targeted in a cyber-attack that began on Saturday, an expert is warning that artificial intelligence may have played a key role in the breach.The incident, wh...
160