Sign in

Johnathan Norman

@spoofy.bsky.social
241 followers 87 following 79 posts

Just a guy trying to improve software quality. Currently securing WhatsApp, Before that Microsoft Windows and Edge.

PostsRepliesMedia
Johnathan Norman @spoofy.bsky.social · 01/10/2026
We are hiring a manager (m2) in Central Security. Our work spans all aspects of Meta's stack, including our mobile apps and all the new AI stuff we're building (Models, agents, etc..) #jobs #hiring www.metacareers.com/profile/job_...
metacareers.com
Security Engineering Manager
Product Security is the central team providing design and implementation security support to all products at Meta. The organization is responsible for e...
000
Reposted by Johnathan Norman
Natalie Silvanovich @natashenka.bsky.social · 23/08/2026
Project Zero is hiring! goo.gle/3UMXQIZ Please share with anyone you think would be great for the role.
goo.gle
Senior Security Engineer, Security Research
Our Security team works to create and maintain the safest operating environment for Google's users and developers. Security Engineers work with network equipment and actively monitor our systems for a...
099
Johnathan Norman @spoofy.bsky.social · 31/07/2026
Not as bad as it sounds. You ever try to write an exploit for chrome? Code churn drives you insane.
000
Johnathan Norman @spoofy.bsky.social · 24/07/2026
This headline is nuts komonews.com/news/local/a...
komonews.com
Amazon confirms new AI-related layoffs focused on tech giant's own AI division
amazon statement: We've been building large AI models for several years, and it remains one of the most important things we're working on. This is a fast-moving
120
Johnathan Norman @spoofy.bsky.social · 14/07/2026
speaking with some friends at various tech companies. It seems we all have an endless supply of bugs (thanks AI) .. has anyone noticed bug bounty payouts declining?
130
Reposted by Johnathan Norman
Kevin Collier @kevincollier.bsky.social · 10/07/2026
Earlier this year, DHS told states that the EAC, tiny as it was, would handle CISA's old job of coordinating cyber threat information for the midterms. Now they're gone.
nbcnews.com
Trump ousts remaining members of the Election Assistance Commission ahead of midterms
The dismissals hamstring a key bipartisan agency just months before the midterms.
311871
Reposted by Johnathan Norman
John Scott-Railton @jsrailton.bsky.social · 08/06/2026
BREAKING: NSO Group caught trying to hack across #WhatsApp. Again! Defying 🇺🇸US Courts. WhatsApp disrupted the Pegasus campaign & says it violates US Federal injunction they won against NSO. Asks Federal judge to hold NSO Group in contempt. Many implications... 1/ about.fb.com/news/2026/06...
7279130
Johnathan Norman @spoofy.bsky.social · 17/05/2026
In the future people will pay a premium for artisan software made by real humans. They will brag to their friends about how its better for the environment and how they love to support communities in need.
020
Reposted by Johnathan Norman
Lorenzo Franceschi-Bicchierai @lorenzofb.bsky.social · 01/04/2026
NEW: WhatsApp alerted around 200 users that were tricked into installing a fake app that was actually government spyware. The company accused Italian spyware maker SIO of being behind the app, and announced it plans to send the company "a formal legal demand to stop any such malicious activity."
techcrunch.com
WhatsApp notifies hundreds of users who installed a fake app that was actually government spyware | TechCrunch
The Meta-owned company said it identified around 200 users who were tricked into installing a fake version of WhatsApp that was actually Italian-made spyware.
13018
Reposted by Johnathan Norman
ProPublica @propublica.org · 18/03/2026
NEW: Federal Cyber Experts Thought Microsoft’s Cloud Was “a Pile of Shit.” They Approved It Anyway. A program created to protect the government against cyber threats authorized a sprawling Microsoft cloud product, despite the company’s inability to fully explain how it protects sensitive data.
propublica.org
Federal Cyber Experts Thought Microsoft’s Cloud Was “a Pile of Shit.” They Approved It Anyway.
A federal program created to protect the government against cyber threats authorized a sprawling Microsoft cloud product, despite the company’s inability to fully explain how it protects sensitive data.
13781313
Reposted by Johnathan Norman
A. M. Vincent @vincent.northsky.social · 15/03/2026
Sad to see the Ides of March becoming commercialised like this. I really feel like we're losing track of the true spirit of the holiday. It's not about how many knives you can stick in a tyrant all at once, it's about the whole community coming together to stab the tyrant as many times as possible.
7686432593
Johnathan Norman @spoofy.bsky.social · 06/03/2026
I now spend more time at work talking to agents then people. It's a strange thing
010
Reposted by Johnathan Norman
Esheru @esherukweku.bsky.social · 02/03/2026
One of my favourite sides of politics/media.
132135514264
Reposted by Johnathan Norman
David Litchfield @litchfield.bsky.social · 06/02/2026
Abe Simpson meme saying, “back in my day we used to hunt for vulnerabilities by hand”
1173
Johnathan Norman @spoofy.bsky.social · 04/02/2026
I'm hiring! if you want to help keep WhatsApp secure this is your chance. Looking for someone to help focus on native code security and help secure our Trusted Execution Environment. You might even get to sue the NSO group ! remote or office within US is ok www.metacareers.com/profile/job_...
metacareers.com
Product Security Engineer, Native
Meta's Product Security team is seeking a experienced hacker who derives purpose in life by revealing potential weaknesses and then crafting creative so...
010
Johnathan Norman @spoofy.bsky.social · 03/02/2026
finally some sanity? blog.cryptographyengineering.com/2026/02/02/w...
blog.cryptographyengineering.com
WhatsApp Encryption, a Lawsuit, and a Lot of Noise
It’s not every day that we see mainstream media get excited about encryption apps! For that reason, the past several days have been fascinating, since we’ve been given not one but sever…
010
Johnathan Norman @spoofy.bsky.social · 27/01/2026
new blog just dropped engineering.fb.com/2026/01/27/s...
engineering.fb.com
Rust at Scale: An Added Layer of Security for WhatsApp
WhatsApp has adopted and rolled out a new layer of security for users – built with Rust – as part of its effort to harden defenses against malware threats. WhatsApp’s experience creating and distri…
110
Johnathan Norman @spoofy.bsky.social · 11/01/2026
github.com/skridlevsky/...
github.com
GitHub - skridlevsky/openchaos: A self-evolving open source project. Every week, the community votes on PRs, and the winner gets merged.
A self-evolving open source project. Every week, the community votes on PRs, and the winner gets merged. - skridlevsky/openchaos
000
Reposted by Johnathan Norman
Chad Loder @chadloder.dev · 09/01/2026
The ICE agent called her a "fucking bitch" after he killed her. One officer screams "Go, get out of here" while this officer says "Get out of the car." You clearly see her turn the wheel AWAY from him after he steps in front of her car. Did they think releasing this would help them?? cw // violence
551338334
Reposted by Johnathan Norman
Will Sommer @willsommer.bsky.social · 30/12/2025
Exclusive: A year after Tenet Media was busted for funneling Russian money to MAGA pundits like Benny Johnson and Tim Pool, a Trump administration effort involving State and the FBI has welcomed Tenet's founders back into the US. @thebulwark.com: www.thebulwark.com/p/lauren-che...
thebulwark.com
Trump Admin Scores Visa for Founder of Russian Propaganda Outlet
Tenet Media’s Lauren Chen is back—even though the illegal-influence and money-laundering investigation remains open.
651465861
Reposted by Johnathan Norman
Eric Umansky @ericumansky.bsky.social · 29/12/2025
A few months ago, ICE agents shot a TikToker. The govt then charged him, alleging he tried to ram agents Well guess what? Body-cam footage -- which the gov't delayed disclosing -- shows that's BS. The agent shot by mistake. And a judge just dismissed charges. www.latimes.com/california/s...
11523167
Johnathan Norman @spoofy.bsky.social · 18/11/2025
Nice catch by the researchers. github.com/sbaresearch/...
github.com
010
Reposted by Johnathan Norman
Paul McNamara @mpaulmcnamara.bsky.social · 07/11/2025
Woman has gone viral on TikTok by posing as the mother of a hungry baby (playing crying baby in the background) and phoning churches to ask for help to buy baby formula. And yeah, going roughly as you’d expect. www.tiktok.com/@nikalie.mon...
tiktok.com
Nikalie 🌈's Creator Profile
3458
Johnathan Norman @spoofy.bsky.social · 05/11/2025
WhatsApp introducing a lockdown mode wabetainfo.com/whatsapp-bet...
wabetainfo.com
WhatsApp beta for Android 2.25.33.4: what's new? | WABetaInfo
The WhatsApp beta for Android 2.25.33.4 update from Google Play uncovers a feature to apply strict security settings to user accounts.
020
Reposted by Johnathan Norman
Kevin Beaumont @doublepulsar.com · 03/11/2025
new by me - a look at MIT’s cyberslop IOCs and TTPs included doublepulsar.com/cyberslop-me...
doublepulsar.com
CyberSlop — meet the new threat actor, MIT and Safe Security
Cybersecurity vendors peddling nonsense isn’t new, but lately we have a new dimension — Generative AI.
25623
Johnathan Norman @spoofy.bsky.social · 03/11/2025
FFMpeg calling Googles bug reports AI Slop is not something i expected to see this week. x.com/FFmpeg/statu...
x.com
FFmpeg on X: "@taviso @filpizlo @jaysonsantos Send patches" / X
@taviso @filpizlo @jaysonsantos Send patches
040
Reposted by Johnathan Norman
Rebecca Sear @rebeccasear.bsky.social · 31/10/2025
This graph never fails to be shocking: "The US has experienced the earliest and greatest slowdown in life expectancy improvements among higher-income countries, reported Eileen Crimmins. “We have horrible life expectancy—and it’s getting worse and worse”" www.prb.org/resources/se...
Graph showing life expectancy trends in 23 higher income countries between 1980 and 2024. Life expectancy increased over time in all countries. In 1980, the US is in the middle of the pack, but their life expectancy gains were slower than that of other countries, and by around 2002, the US had the lowest life expectancy of all countries. Over the next 20 years, US life expectancy increasingly tracks away from the trajectories of other countries, as their life expectancy stalls while other countries life expectancy continues to climb
28563277
Johnathan Norman @spoofy.bsky.social · 23/10/2025
Useful feature if you're a WhatsApp user. blog.whatsapp.com/introducing-...
blog.whatsapp.com
Introducing Advanced Chat Privacy: Enhanced Protection for Your Most Sensitive Conversations
We're introducing our latest layer for privacy called Advanced Chat Privacy. This new setting available in both chats and groups helps prevent others from taking content outside of WhatsApp for when y...
010
Johnathan Norman @spoofy.bsky.social · 23/10/2025
this is not the morning i expected.
000
Johnathan Norman @spoofy.bsky.social · 23/10/2025
plot twist person targeting WhatsApp wont make it in time.. that could be a really expensive flight delay ...
000
Johnathan Norman @spoofy.bsky.social · 20/10/2025
Pwn2Own schedule is up.. someone is going for the 1 Million dollar WhatsApp Zero Click reward.. my crew will be onsite. excited to see what happens. www.zerodayinitiative.com/blog/2025/20...
zerodayinitiative.com
Zero Day Initiative — Pwn2Own Ireland 2025: The Full Schedule
Welcome to Pwn2Own Ireland 2025! We have some amazing spooky entries for this year’s contest, and a potential of up to $2,000,000 - including our largest ever single prize for a 0-click in WhatsApp fo...
000
Reposted by Johnathan Norman
Ron Filipkowski @ronfilipkowski.bsky.social · 18/10/2025
OK guys, post your best signs from today for entry into my Top 15 No Kings Sign Contest.
1252168203709
Johnathan Norman @spoofy.bsky.social · 18/10/2025
NSO group blocked from targeting Whatsapp users. I wonder if they'll risk getting caught again... courthousenews.com/israeli-spyw...
courthousenews.com
Israeli spyware company blocked from WhatsApp | Courthouse News Service
Meta previously won $168 million in damages over claims spyware compromised WhatsApp users, but a judge reduced the damages down to $4 million.
100
Johnathan Norman @spoofy.bsky.social · 13/10/2025
I'm shocked.. thehackernews.com/2025/10/micr...
thehackernews.com
Microsoft Locks Down IE Mode After Hackers Turned Legacy Feature Into Backdoor
Microsoft restricts IE Mode in Edge after threat actors exploited Chakra engine flaws for remote access.
073
Reposted by Johnathan Norman
Nikkolas Smith @4nikkolas.bsky.social · 10/10/2025
after millions of views and shares of my Portland Frog art. (thank you all🙏🏾) I got requests to highlight priests, and chickens, and Chicagoans, and T-Rexes, and more… all of us who refuse to bend the knee. so this is for US. 𝚂𝚝𝚊𝚗𝚍 𝚃𝚊𝚕𝚕. 𝚆𝚎 𝚆𝚒𝚕𝚕 𝚆𝚒𝚗.
328245328364
Reposted by Johnathan Norman
Techmeme @techmeme.com · 03/10/2025
Apple removes ICEBlock, an app for anonymously reporting ICE official sightings, from the App Store; AG Pam Bondi says the DOJ requested its removal (Ashley Oliver/Fox Business) Main Link | Techmeme Permalink
44240156
Johnathan Norman @spoofy.bsky.social · 28/09/2025
If you know anything about Portland you know sending troops will have predictable effects. Get ready for pics of burning cars
000
Johnathan Norman @spoofy.bsky.social · 25/09/2025
Meta is hiring sec folks with AI skills www.metacareers.com/jobs/1127770...
metacareers.com
Product Security Engineer, Technical Lead - AI
Meta's mission is to build the future of human connection and the technology that makes it possible.
011
Reposted by Johnathan Norman
In Otter News @in-otter-news.bsky.social · 14/09/2025
I feel this is probably quite important information. You wouldn't want to get it wrong.
1761353
Johnathan Norman @spoofy.bsky.social · 13/09/2025
Love this
020
Johnathan Norman @spoofy.bsky.social · 10/09/2025
pour one out for managers of security teams getting frantic demands for iphone test devices
000
Johnathan Norman @spoofy.bsky.social · 09/09/2025
Microsoft is bringing people back to the office because their data shows "when people work together in person more often, they thrive — they are more energized, empowered.." anyone know how Microsoft measures empowerment? blogs.microsoft.com/blog/2025/09...
blogs.microsoft.com
Flexible work update - The Official Microsoft Blog
Amy Coleman, Executive Vice President and Chief People Officer, shared the below communication with Microsoft employees this morning. How we work has forever changed. I remember starting at Microsoft ...
010
Reposted by Johnathan Norman
Mikael Thalen @mikaelthalen.bsky.social · 05/09/2025
I decided to test whether EXIF data is removed from images sent over X's new encrypted chat feature like Signal and other messengers do. I can confirm it is not. I was able to extract information including GPS coordinates from a test image sent to me.
617873
Reposted by Johnathan Norman
The Onion @theonion.com · 01/09/2025
Microsoft Employees Protest Company’s Ties To Israel theonion.com/microsoft-employees-pr…
“Good luck getting hired elsewhere without any genocide experience.”

Joe Woodward, Systems Analyst
11858108
Johnathan Norman @spoofy.bsky.social · 29/08/2025
Busy times at WhatsApp. Users have been notified and bugs patched. techcrunch.com/2025/08/29/w...
techcrunch.com
WhatsApp fixes 'zero-click' bug used to hack Apple users with spyware | TechCrunch
A spyware vendor was behind a recent campaign that abused a vulnerability in WhatsApp to deliver an exploit capable of hacking into iPhones and Macs.
020
Johnathan Norman @spoofy.bsky.social · 22/08/2025
This is an old classic but worth viewing if you manage a security team. I've rewatched this a few times over the years. youtu.be/AukR16ARmfs?...
youtu.be
Security Team 2.1, Google - Security @ Scale 2014
YouTube video by Meta Developers
000
Johnathan Norman @spoofy.bsky.social · 05/08/2025
Switched back to a MacBook after leaving Microsoft. The battery life difference is just insane compared to any Surface I've had. I'm really enjoying not dragging a charger around.
010
Johnathan Norman @spoofy.bsky.social · 31/07/2025
How about 1 million dollars to pop WhatsApp? www.zerodayinitiative.com/blog/2025/7/...
zerodayinitiative.com
Zero Day Initiative — Pwn2Own Returns to Ireland with a One Million Dollar WhatsApp Target
If you just want to read the rules, you can find them here . Last year, we moved our consumer-focused Pwn2Own event to our offices in Cork, Ireland, and the event could not have gone better. Despite some dreary Irish skies, much fun was had as researchers from around the world demonstrated
000
Johnathan Norman @spoofy.bsky.social · 28/07/2025
"free for a limited time".. I really don't see users paying for AI browser features. I guess we will see. blogs.windows.com/msedgedev/20...
blogs.windows.com
Introducing Copilot Mode in Edge: A new way to browse the web
For decades, the way we’ve used browsers has remained linear: open a tab (or 20), search for something, read a page, repeat. It’s a model that’s worked well, but it hasn’t fundamentally changed. Until...
010
Johnathan Norman @spoofy.bsky.social · 16/07/2025
strange thing about working at Meta is nobody uses email. I can go the entire day without opening my mail client which is just strange.
020