News

Thursday 2026-05-28

12:00 AM

Brendan Carr Says He Wants Public Input On His Censorship Campaign Against ABC [Techdirt]

As we’ve previously noted, Brendan Carr recently launched a series of phony inquiries into ABC because Jimmy Kimmel made fun of the president’s wife. Carr can’t just come out and say that, so he’s launched a series of fake (and legally laughable) “investigations” into the company. They’re all designed to scare ABC, and other big media companies, away from platforming critics of the unpopular president.

“If you platform voices critical of the president you’ll face an endless barrage of costly and annoying legal headaches and bad press in the right wing media,” is the unsubtle threat.

So Carr has falsely claimed ABC is violating the Communications Act by embracing diversity practices. He’s also falsely claimed that ABC violated the dated FCC “equal time” rule by not platforming more right wing Trump supporters. And he’s repeatedly lied and stated ABC is violating the FCC’s antiquated and never used “news distortion” rule because Kimmel made fun of Charlie Kirk.

It’s all a very big pile of racism, ignorance, zealotry, and censorship pretending to be serious adult policy. And you’ll notice the inquiries only go one way: Carr has nothing to say about Fox News (or countless local right wing broadcast new affiliates and AM radio stations) routinely airing right wing propaganda. Right wing outlets can do whatever they’d like without criticism or repercussion. Funny, that.

As part of the proceedings, Carr has repeatedly threatened to pull one of ABC’s eight broadcast licenses if they refuse to roll over to the administration (they haven’t… so far).

Last week, Carr pretended he was open to receiving public input about the whole ignorant mess. The FCC Media bureau issued a public notice seeking opinions on whether The View qualifies for the bona fide news exemption to the FCC’s equal-time rule, which requires equal time for opposing political candidates on non-news programming. From the notice:

“Does The View qualify as a bona fide news interview program? Does the federal equal opportunities statute pass relevant constitutional scrutiny, either as a general matter or as applied here? Are the relevant decisions on The View, including on format and participants, based on newsworthiness or on an attempt to oppose or support particular candidates within the meaning of FCC precedent? We welcome comment on these and any other relevant points.”

The last page of this document has details on how you can formally comment. Of course, Brendan Carr doesn’t really welcome public input; they’re looking to make this appear like a meaningful public policy initiative, and not the censorial witch hunt it actually is. I suspect the call for comments, as is usually the case, will be flooded with all sorts of bots and fake people.

As we’ve mentioned previously, ABC’s daytime talk show The View hosted Texas Democrat James Talerico last February. The Trump administration is apparently unhappy with the inroads Talerico has been making with Texas Christians and independents. So Carr has falsely claimed that platforming Talerico violated the FCC’s equal time rule, requiring ABC file appropriate paperwork and platform a Republican voice in opposition.

But as ABC’s recent notice to the FCC makes clear, The View was clearly granted an FCC Bona Fide Exemption to the rule back in 2002. Most talk shows have broadly been viewed as exempt since 1984 or so (and increasingly so, as the Internet challenged TV’s supremacy). So there’s nothing to really debate.

Carr knows that, so instead he manufactured a controversy. But it’s worse than that: as ABC’s filing made clear, Carr appears to have worked collaboratively with right wing local broadcasters to make it seem like ABC-owned Houston affiliate KTRK had done something wrong. They collaborated on a big performance to make it seem like KTRK broke the law.

This is all so profoundly stupid it would be laughed immediately out of court in a functional country. But a corporate media, worried they won’t get mergers approved (or could face costly legal headaches for having a spine), has generally chosen to roll over both in their official capacity, and as reflected by their journalism.

As a result, most of the reporting on Carr’s censorship has generally either failed to call out Carr’s behaviors as radical or extreme, or they’ve taken a “both sides” approach to the story where they frame everything as a matter of two equally valid opinions, in turn normalizing authoritarian censorship.

But make no mistake: Carr’s a censorial authoritarian zealot engaged in a laughable and racist government harassment campaign because the U.S. President is a giant baby with a historically fragile ego. And Brendan Carr should never be allowed to live it down.

Wednesday 2026-05-27

10:00 PM

New financial support for F-Droid thanks to FLOSS/Fund [F-Droid - Free and Open Source Android App Repository]

Some exciting news from 2025, F-Droid was awarded $50,000 in funding from FLOSS fund, an initiative dedicated to supporting critical, impactful, and valuable Free/Libre and Open Source projects globally. This support comes when the project needs it most. Our volunteer-run app ecosystem is growing stronger with open source mobile tech now carrying more hope than ever, thanks to this kind of backing.

Some information about FLOSS/Fund

FLOSS Fund aims to donate up to $1 million annually to FLOSS projects worldwide with ‘no strings’ attached with the purpose of empowering developers and maintainers through financial resources to sustain and grow critical open-source ecosystems. Notable FOSS projects like Blender, FFmpeg, OpenStreetMap have gotten this support in the past and now F-Droid has too. The introduction of the funding.json standard, built on JSON, allows projects to add funding details in the codebase, making it easier for backers to navigate aid efforts. This streamlines donor support and quietly builds a stronger financial foundation across community-driven tech work.

How to apply for the Fund

If your app is on F-Droid you may qualify for FLOSS fund.  The fund is currently focused on supporting existing, widely used and impactful open source projects towards their long term sustainability. If your app has a meaningful user base, we encourage you to apply by:

  • Creating a funding.json file as directed here and add the manifest to your project’s repo
  • Submit the application via the portal FLOSS Fund
  • Await feedback - the FLOSS Fund team is very responsive to emails. Once accepted, they will reach out for paperwork i.e., residency tax documents and an agreement as required by Indian law. The disbursement is done once the documents are received.

Here is what the F-Droid project page looks like to see an example and here you can find the registry of other projects requesting funding. Please note, we are aware that there is an error message on the page and FLOSSFund is actively fixing the bug :)

How we will use the funds

This funding goes to support the work in maintaining F-Droid as a trusted source distributor of free and open-source Android apps. This means better systems, safety checks, and public involvement so F-Droid stays trustworthy, respects privacy, while offering a contrasting option compared to mainstream app centers.

Because of this support, we will be able to:

  1. Move some key tasks forward like supporting core operations i.e., updating infrastructure, securing new features for better access to ad-free, community-built software reaching more users. In turn, bug fixes happen faster with larger goals taking shape through improved app reviews and faster updates hitting devices.

  2. Working on supporting a new format called funding.json. This is a standard way for app creators to share information about how people can donate money to support their projects. Once this work is complete, F-Droid Server (the tooling we use to manage our app store) will be able to automatically collect donation information from app projects that have set up funding.json on their website. How we show donation information on our website and app won’t change. But app creators can also keep providing their donation information directly.

For 15 years now, F-Droid has striven to give people real power by giving them control over their devices through trusted and verifiable open source software/apps. Because of support like this, the project’s sustainability is reinforced, allowing innovative ideas that benefit the community; users, developers, etc. 

We extend our heartfelt thanks to the FLOSS fund team for their belief in our mission.

05:00 PM

Mexican President Responds to World Cup Piracy Concerns, Prefers ‘Open’ Broadcasts [TorrentFreak]

cupThe FIFA 2026 World Cup officially kicks off on June 11, hosted across Mexico, the United States, and Canada.

As the largest sports tournament in the world, and with multi-billion-dollar broadcast rights, these events typically increase the demand for pirate streaming sites.

World Cup Host City Raises Piracy Alarm

The organizers of the tournament are also aware of this. This includes Mexico City’s host committee, which published an alarming letter on X a few days ago. The letter, sent to the federal consumer protection agency (Profeco), flagged online piracy as a severe problem that deserves the government’s attention.

The letter explains that social media and news reports have alerted them to the increased popularity of pirate apps and sites, including KaelusTV, ThunderTV, Telelatino, Sunset TV, and PopTV, which operate from a wide variety of domain names.

Social media promotions, including the TikTok ad for one of the many Sunset TV apps, are indeed not difficult to find.

Sunset TV promo on TikTok

sunset

Aside from obvious copyright infringement concerns that put commercial profits at risk, the host city points at another issue. These piracy apps and services can put the personal data of Mexicans at risk by stealing passwords and other info, while also raising malware and fraud concerns.

Consumer Awareness

Mexico City’s host committee argues that a government-backed consumer protection campaign is warranted. The letter offers no public evidence for the fraud claims, and says the platform names themselves came from news reports and social media.

“I most attentively request that the Federal Consumer Protection Agency implement an informative campaign, which we will gladly support, to alert consumers in Mexico about the risks they incur when accepting to contract the services of this type of providers, which can even lead to financial fraud, theft of personal data or passwords, as well as banking data housed on their devices,” the letter reads.

The letter (part 1+2)

letter mexico

The letter flags piracy as a broad problem, but its only ask is for a government-backed awareness campaign. Despite its targeted message, the response was broad, ranging from anonymous football fans to the country’s president.

Piracy & Commercial Interests

Posting the message publicly on X resulted in a wave of commentary that’s not in favor of FIFA and the rightsholders. Several cited the high costs of the ticket prices, and merchandise, as well as the fact that many World Cup matches are behind a paywall.

In Mexico, where Televisa is the main rightsholder, streaming most matches through its paid ViX Premium service for subscribers with a 499-peso World Cup pass. Mexico’s national team matches will be available freely, but the paywall is likely to increase the interest in pirate services among fans.

“Piracy isn’t the problem; it’s the consequence of the real problem, which is the attempt to elitize football,” one commenter noted.

Not the problem

axel

A negative response from the public, whose interests the host city is partly trying to protect, is somewhat ironic but not unexpected. Instead of talking about malware threats, the entire discussion is dominated by cost issues and commercial interests.

The consumer protection agency, Profeco, responded through César Iván Escalante, who noted that this request has not been made in the official FIFA working groups, which it is already taking part in. Instead, it appears to be an isolated request from the Mexico City host committee.

Escalante notes that the letter, which was sent personally by the director of the stadium hosting the Mexico City matches, asks the government to help protect commercial interests.

“Regarding the transmission rights, what they want is for us to take part in protecting the transmission rights that belong to Televisa, to prevent these platforms from being able to use them,” he said, suggesting that this is more than a simple consumer protection issue.

President Responds

The consumer angle is particularly striking when considering that the Mexican public has been rather critical of the commercial interests.

To a degree, that also applies to Mexico’s president, Claudia Sheinbaum, who also responded to the matter. Sheinbaum would personally prefer the broadcasts to be open, while acknowledging that FIFA has sold them to commercial platforms.

“The broadcast should be open, that’s what I think, but FIFA decided a while ago that the matches are only shown on certain platforms. So, those platforms have to be accessible so that people can watch the matches,” Sheinbaum said, while noting that it is not correct to complain via social media while you are in official meetings with the same people.

Instead of launching an anti-piracy campaign, the president stated that the government will set up massive screens in public squares around the country, so people can watch for free. It is unclear whether the authorities have secured a public rebroadcasting license for these screens.

From: TF, for the latest news on copyright battles, piracy and more.

01:00 PM

Can’t Do Anything Right: RFK’s ACIP Charter Changes Yanked For Not Following Procedure [Techdirt]

I’m starting to wonder if RFK Jr. can do anything right at all. After the courts put an injunction on Kennedy’s overhaul of the CDC’s ACIP panel on vaccines, as well as pretty much all of their recommendations since it was rebuilt on a foundation of anti-vaxxers, the government sprung into action to try to let Kennedy keep fucking with vaccines in America. The reasoning by the court for the injunction was a process oriented one: Kennedy’s overhaul of ACIP violated the American Procedures Act. By simply hand-picking unqualified sycophants to ACIP, he didn’t follow procedural law. The Trump administration eventually appealed the ruling, which is still pending hearings. On his end, Kennedy decided to amend the ACIP charter to try to route around some of the procedural violations of the APA that got him in trouble the first time.

But it turns out he fucked that up, too. His amended ACIP charter has now been withdrawn for once again not following proper procedure.

A revised charter document for the Centers for Disease Control and Prevention’s influential vaccine advisory committee has been withdrawn by the Health Department over an administrative error, according to a notice published in the Federal Register Tuesday.

While the Health Department is working to appeal the injunction, Kennedy attempted to circumvent the judge’s ruling on the ACIP members by altering the committee’s charter to, among other things, allow for people without expertise in immunizations and public health to be members.

But, for now, that effort, too, has been thwarted. According to the notice on Tuesday, the new charter has been withdrawn for not following a federal requirement on public notification.

The law on the matter is remarkably clear. In order to reestablish a discretionary advisory committee, for which ACIP qualifies, the Secretary of the agency must provide a written statement that the committee is being formed in the public interest, establish what that public interest actually is, and then publish a public notice to the Federal Register so that the people can understand the action that is being taken.

Kennedy didn’t do any of that. He rewrote the governing charter for his remade version of ACIP and just tried to make it a thing without following any of those rules. He just plain fucked it up.

Which isn’t to suggest that Kennedy definitely won’t try to do this all again with an actual attempt to follow procedural law. I am having trouble imagining a world in which he doesn’t do that, actually. But given his apparent desire to step on every last rake he can find, it’s a wonder to me that the Trump administration doesn’t simply want to put someone more capable in charge of HHS.

09:00 AM

My Kid Vibe Coded Their Way To Actually Learning Math [Techdirt]

I’ve spoken to enough teachers and professors to know that LLM tools are absolutely a challenge for many of them in the classroom. Many struggle with making sure they’re actually teaching students how to learn, worrying that the tools are doing the work for them, and skipping over the actual learning. Many are (understandably) resorting to outright bans on students using the tools (which they often know they can’t enforce). Others say that students can use these tools but are fully responsible for any work they turn in, hoping that this will encourage students to be wary of relying too much on the tech. Still others are trying clever workarounds (I appreciate the assignment in which students are asked to have an LLM generate an essay and then the student has to review/grade the essay themselves, which is engaging and also teaches some of the limitations of the tools).

But I’ve also heard from both teachers/professors and students that there are concerns that as students go out into the job market, having some skills with these tools is often a requirement in whatever fields they pursue, leading them to wonder how to best teach the subject in a world where LLM tech isn’t likely to go away, and is seen as part of the toolbox that many employers will expect their employees to use.

I don’t necessarily have good answers to that, but I did recently have an experience in my own home that struck me as potentially relevant as an example of how the tech can actually be useful as a learning tool. I’ve been meaning to write about this for a few months now, but there always seemed to be something more urgent to cover. With the school year almost over, I figure I should get this out. For all the talk of how kids are cheating using AI, it might be worth showing at least one example where the tool is genuinely useful — in this case, one of my kids and their friends.

At the beginning of this year I had actually set up my kids with some (very sandboxed) agentic coding tools, after walking them through how I used such tools for a fairly simple project so they could see both how it worked, but also some of the limitations with the tools.

Soon after that, my 12-year-old had asked about my opinion on AI in schools. We talked through how using them to avoid doing the work is genuinely damaging to learning, but there are cases where they can be legitimately helpful. I used the calculator analogy: you first have to learn basic arithmetic by hand, but once you genuinely understand it, a calculator is a perfectly legitimate tool for tackling harder problems — it stops being a crutch and starts being a multiplier.

Apparently that analogy stuck, because what happened later was that analogy made real.

Once I had set my kids up with the tools, they did what most people do with them: created some fun games. A couple of months went by and they hadn’t used them much more. In early March, however, the 12-year-old came home and told me there was a math test that Friday and some classmates were doing an online study group. They worked through some problems together in a live voice chat, but afterward my kid stayed at the computer for a while longer before calling me over to take a look.

“I vibe coded a system to help study.”

I was… surprised. Even more interesting, the app had been packaged up (as an HTML file) and shared with the study group. My kid then explained that because AI can’t be trusted to always get things right, they’d gone through and checked the AI’s math themselves — making some (minor) corrections along the way — and that the process had given them a stronger grasp of the material than just passively studying would have.

I never got a full explanation on the “errors” that they found, though the sense I get is that it wasn’t anything major (outright incorrect math or explanations or anything) but more minor mistakes that they used the tools to fix directly within the app.

After acing the test that week, the next obvious thing to do over the weekend was plan out a study tool for the rest of the semester:

Among other things, this version of the app includes an onscreen pop-up calculator — but only for the topics where a calculator is allowed on exams. I have no idea if this was a more literal implementation of the calculator analogy we’d discussed earlier! It also (for fun) lets you adjust the color scheme.

And it has a changelog as updates were made to the app.

There are plenty of reasonable concerns about kids using AI to cheat, and those concerns aren’t wrong. It’s a real issue. But the framing of “AI as cheating tool” has crowded out a more interesting question: what does it actually look like when a kid uses these tools well?

The calculator analogy holds: the LLM tool generated a first draft — a study tool, a set of practice problems, a scaffolded explanation of the material. My kid then had to engage critically with that output: checking the math, finding the gaps, making corrections. That process of verification was part of the studying. The tool actually created the conditions for more active, more engaged learning than just reviewing problems in a book. And it certainly didn’t substitute in for the learning, like most people worry about with these tools in classroom settings. Quite the opposite.

That’s a meaningfully different frame than “AI does your homework.” The homework here was, in part, checking the tool’s work — and it turns out that’s not a bad way to learn math.

06:00 AM

Judge Dismisses Charges Against Kilmar Abrego Garcia, Says Gov’t Engaged In Vindictive Prosecution [Techdirt]

It’s one thing to accuse the government of engaging in vindictive prosecutions. It’s quite another thing to prove it.

The deck is stacked against those making these claims. These allegations rarely succeed. The government gets the benefit of the doubt and has the ability to make evidence against its position simply disappear.

It didn’t work here, though. Kilmar Abrego Garcia was among the initial wave of deportations in which the US government sent hundreds of people to El Salvador’s infamous CECOT maximum security prison — one overseen (almost directly) by a man who had declared himself the world’s “coolest dictator.”

Abrego Garcia, however, didn’t go silently. He fought back, first against the fact-free allegations that he was a dangerous MS-13 gang member before fighting the government’s insistence on punishing him for daring to speak up. That retaliation took many forms, including multiple attempts to send Garcia to countries like Liberia and Uganda, rather than allow him to reside in Costa Rica, which had already offered to take Garcia off the government’s hands. It also took the form of gag orders the government hoped would silence Garcia while it continued to make unproven claims about Garcia’s allegedly violent gang-related history.

The more Abrego Garcia pushed back, the angrier the government got. But anger is hardly useful when you’re supposed to be in the business of seeking justice and enforcing the law. It’s even more useless when the only people left manning the DOJ and DHS are people long on sycophancy and short on experience.

The end result is a legal unicorn: a sustained allegation of vindictive prosecution that has resulted in the dismissal of criminal charges against Kilmar Abrego Garcia. The ruling [PDF] — issued by federal judge Waverly Crenshaw (and brought to us by Liz Dye on Bluesky) — opens with a quote of a former federal prosecutor (and Supreme Court justice) that makes it clear where this order is headed.

Then-Attorney General Robert H. Jackson warned his fellow prosecutors long ago of the danger of picking the person first and the crime second. “Therein is the most dangerous power of the prosecutor: that he will pick people that he thinks he should get, rather than pick cases that need to be prosecuted.” Robert H. Jackson, The Federal Prosecutor, 31 J. Crim. L. & Criminology 3, 5 (1940). That is the situation here.

That’s the leadoff. The payoff involves running down everything the administration did in hopes of bullying Abrego Garcia into silence/compliance. Those steps involved everything from resurrecting a traffic stop of a car driven by someone else that never resulted in criminal charges to a government attorney resigning, rather than help the administration pursue its petty revenge. Lots of DOJ/DHS attorneys/officials are name-checked on the way to the court’s ruling in favor of Abrego Garcia.

In short, the timing of [HSI] Agent VanWie’s decision to reopen the closed HSI investigation of the November 2022 traffic stop and [acting US Attorney General Todd] Blanche’s now unrebutted public statements tying the reopened investigation to Abrego’s successful lawsuit taints the investigation with a vindictive motive. That vindictive taint continued with [Associate Deputy Attorney General Aakash] Singh’s close substantive oversight of McGuire’s and his prosecution team’s work leading to the indictment. Finally, after the indictment was presented, the Executive Branch found a way to return Abrego to the United States to comply with the District of Maryland’s order to facilitate his return. While the Court finds insufficient evidence of actual vindictiveness, the Court concludes that the Government has failed to rebut the presumption of vindictiveness. The evidence it labels as newly discovered was available to be obtained with due diligence long before April 2025. Even more, it does not explain the Government’s change in position to remove Abrego and not prosecute him to then prosecute and not remove him. McGuire’s subjective explanations also do not cure the retaliatory taint that set the investigation and resulting indictment in motion. Because the presumption of vindictiveness remains unrebutted, the indictment must be dismissed.

Listed above this paragraph is a comprehensive recounting of the government’s actions in this case, which includes several failed appeals (after it was ordered to return Garcia to the US), including a rare loss in the US Supreme Court. It also details the social media postings and press releases issued by the administration, which again stated (without providing evidence) that Garcia was a MS-13 gang member involved in human trafficking.

Because Garcia refused to go quickly and quietly, the administration (begrudgingly, following several appeals) returned him to the United States only to hit him with criminal charges meant to keep him locked up until the government could toss him into the next available hellhole devoid of human rights (Liberia, Uganda, etc.).

None of this worked, and now the government has been fully exposed as the bullying thug it is. Garcia is free to go, mainly because it’s impossible for the Trump administration to provide anything that credibly counters the apparent truth of the matter: Garcia was punished solely because he chose to fight back.

The Court does not reach its conclusion lightly. The objective evidence here shows that, absent Abrego’s successful lawsuit challenging his removal to El Salvador, the Government would not have brought this prosecution. The Executive Branch closed its investigation on the November 2022 traffic stop. Only after Abrego succeeded in vindicating his rights did the Executive Branch reopen that investigation. What the Government labels as “new evidence” was not new as a matter of law. The prosecutor’s subjective good faith does not cure the retaliatory taint.

This is a massive loss for the Trump administration. While it only affects one of hundreds of victims of its anti-migrant purge efforts, it was a case this administration threw all of its power at and still got shut out by the court. Bullies only win when no one fights back. And a single El Salvadoran has managed to expose the inherent weaknesses of the administration’s institutional bigotry — something that operates outside of the law as frequently as possible. That the government chose to appeal repeatedly just means it has secured multiple levels of adverse precedent. It has been beaten by the person the administration accidentally turned into the poster boy for racist immigration efforts.

05:00 AM

‘The Worst Leak I’ve Witnessed’: A CISA Contractor Left AWS GovCloud Credentials Sitting In A Public GitHub Repo [Techdirt]

The Cybersecurity & Infrastructure Security Agency (CISA) was one of the few genuinely good things Donald Trump was talked into doing during his first term. It was an agency within the Department of Homeland Security that was focused on coordination between the government and industry when there were larger cybersecurity threats that needed coordination to deal with in a manner that protected Americans.

It was staffed with genuinely competent people who understood cybersecurity risks, and who did serious work keeping critical systems safe and secure. Everything started to go south in late 2020 when its then-director, Chris Krebs, made the factually accurate statement that the 2020 election had been incredibly secure. That MAGA narrative violation made it so Trump had to fire Krebs and for MAGA to decide that this factual statement was the equivalent of treason.

From about that point onwards, CISA has been basically seen by the MAGA world as suspect, and that was helped along by some bad reporting and conspiracy theory nonsense pretending that CISA was involved in “censoring social media,” something that was not even remotely true. The real story was that, given CISA’s involvement in sharing cybersecurity threat information across industries, there were some efforts to see if they could also coordinate information sharing for things like election disinformation: not as a tool of censorship, but if an election official in some random area saw someone posting information telling people to (for example) “vote by phone” or whatever, there would be a way to route that issue to the relevant internet company to review against its own guidelines.

But because of the false reporting, the MAGA world took it on faith that CISA was commanding a vast censorship empire which simply never actually existed. Either way that made it ripe for the chopping block. Rand Paul, in particular, wanted to destroy the whole thing, falsely believing it was engaged in censorship.

However, he barely needed to do anything because the Donald Trump / Kristi Noem DHS moved many CISA officials away from actually worrying about cybersecurity to… processing deportation paperwork for ICE. And then, of course, came the firings, gutting the agency.

But, you know, having people who actually understand the basics of cybersecurity is probably useful for the [checks notes] cybersecurity agency of the United States. And as a recent Brian Krebs (unrelated to Chris Krebs) report details, whoever was left at CISA apparently was so bad at cybersecurity that they leaked the government’s AWS GovCloud keys by… putting them in a public Github repo.

On May 15, KrebsOnSecurity heard from Guillaume Valadon, a researcher with the security firm GitGuardian. Valadon’s company constantly scans public code repositories at GitHub and elsewhere for exposed secrets, automatically alerting the offending accounts of any apparent sensitive data exposures. Valadon said he reached out because the owner in this case wasn’t responding and the information exposed was highly sensitive.

The GitHub repository that Valadon flagged was named “Private-CISA,” and it harbored a vast number of internal CISA/DHS credentials and files, including cloud keys, tokens, plaintext passwords, logs and other sensitive CISA assets.

Valadon said the exposed CISA credentials represent a textbook example of poor security hygiene, noting that the commit logs in the offending GitHub account show that the CISA administrator disabled the default setting in GitHub that blocks users from publishing SSH keys or other secrets in public code repositories.

This is really bad in so many ways. First, as already mentioned, GitHub has literal protections against just this thing which you have to actively go and disable, which whoever is left at CISA clearly did.

On top of that, any developer with even the slightest knowledge of how this works knows you put credentials and tokens in a .gitignore file — which, as the name implies, makes sure they never end up in an accessible repository.

Here it was even worse — this wasn’t just tokens buried in the code, but a CSV file with plaintext passwords. What are they even doing?

“Passwords stored in plain text in a csv, backups in git, explicit commands to disable GitHub secrets detection feature,” Valadon wrote in an email. “I honestly believed that it was all fake before analyzing the content deeper. This is indeed the worst leak that I’ve witnessed in my career. It is obviously an individual’s mistake, but I believe that it might reveal internal practices.”

One of the exposed files, titled “importantAWStokens,” included the administrative credentials to three Amazon AWS GovCloud servers. Another file exposed in their public GitHub repository — “AWS-Workspace-Firefox-Passwords.csv” — listed plaintext usernames and passwords for dozens of internal CISA systems. According to Caturegli, those systems included one called “LZ-DSO,” which appears short for “Landing Zone DevSecOps,” the agency’s secure code development environment.

It is difficult to explain how incredibly insecure and, well, amateurish all this is. And these don’t appear to be dummy data or old and obsolete data either. Again from Krebs:

Caturegli said he validated that the exposed credentials could authenticate to three AWS GovCloud accounts at a high privilege level. He said the archive also includes plain text credentials to CISA’s internal “artifactory” — essentially a repository of all the code packages they are using to build software — and that this would represent a juicy target for malicious attackers looking for ways to maintain a persistent foothold in CISA systems.

“That would be a prime place to move laterally,” he said. “Backdoor in some software packages, and every time they build something new they deploy your backdoor left and right.”

This kind of security blunder would be embarrassing for anyone. But for the US government’s Cybersecurity & Infrastructure Security Agency to have a fuckup this bad is unforgivable.

Hell, even when Krebs reached out to CISA about this they did a poor job reacting. While they, thankfully, pulled the repo right after being alerted, it appears it took them over two days to actually rotate the keys to make the exposed ones inactive:

The GitHub account that included the Private CISA repo was taken offline shortly after both KrebsOnSecurity and Seralys notified CISA about the exposure. But Caturegli said the exposed AWS keys inexplicably continued to remain valid for another 48 hours.

Krebs points out that CISA has lost a third of its workforce to Trumpian purges, but the bigger story is how the agency was so thoroughly demonized — made the villain in so many MAGA conspiracy theories about censorship — that it drove away the people who actually know how to run a secure operation.

Daily Deal: The Complete Arduino, Raspberry Pi & ESP32 Bundle [Techdirt]

The Complete Arduino, Raspberry Pi, and ESP32 Bundle has 14 courses covering what you need to get started on building out your own smart home. After learning the basics, courses show you how to create a weather monitoring system, a smart home security system, a plant watering system, and more. Courses also cover getting familiar with Home Assistant, Tasmoto firmware, networking, and electrical systems. It’s on sale for $50.

Note: The Techdirt Deals Store is powered and curated by StackCommerce. A portion of all sales from Techdirt Deals helps support Techdirt. The products featured do not reflect endorsements by our editorial team.

04:00 AM

Kanji of the Day: 賀 [Kanji of the Day]

✍12

小4

congratulations, joy

年賀状   (ねんがじょう)   —   New Year's card
滋賀県   (しがけん)   —   Shiga Prefecture (Kinki area)
佐賀県   (さがけん)   —   Saga Prefecture
年賀   (ねんが)   —   New Year's greetings
古賀派   (こがは)   —   Koga Faction (of the LDP)
祝賀会   (しゅくがかい)   —   celebration
祝賀   (しゅくが)   —   celebration
賀状   (がじょう)   —   New Year's card
賀詞   (がし)   —   congratulations
参賀   (さんが)   —   congratulatory visit to the Imperial Palace (e.g., at New Year)

Generated with kanjioftheday by Douglas Perkins.

Kanji of the Day: 壱 [Kanji of the Day]

✍7

中学

one (in documents)

イチ イツ

ひとつ

壱万円   (いちまんえん)   —   10,000 yen
壱越調   (いちこちちょう)   —   ichikotsu mode (one of the six main gagaku modes)

Generated with kanjioftheday by Douglas Perkins.

03:00 AM

Predictions, prescriptions and systems change [Seth Godin's Blog on marketing, tribes and respect]

Moore’s Law was stated 60 years ago, but it only became a law once its predictions came true.

The reason that your laptop doesn’t cost as much as your house is that computer chips get relentlessly cheaper and more powerful. Just as Gordon Moore predicted.

But perhaps it wasn’t a prediction. Perhaps he wasn’t imagining what would happen. It might be that it was a prescription. That computer chips get faster on his schedule precisely because he said they would. We build fabs and new business models in anticipation of the drop in prices, and that causes the drops to happen.

We’ve seen this happen with economic forecasts, bank runs and even, with Joe Namath at the helm, football teams.

Eric Ries has a new book, Incorruptible. It’s based on the clear truth that our economic system is filled with incentives that cause well-meaning people (especially bosses) to make short-term, selfish and toxic decisions. It also describes a different way forward.

It’s easy to point to the power of selfish extractive capitalism and imagine that there’s nothing to be done about it. But perhaps we’ve been waiting for a map, one that can be a scripture and a Baedeker to people seeking coordinated change.

Systemic change requires systemic action. And the prescription is often a good place to begin.

      

Super Meth Isn’t The Hero We Want, But It’s The Hero We Deserve [Techdirt]

Our war on drugs began with a simple man with a simple plan. That plan was this: give the government more powers at the expense of civil rights, all under the “leadership” of soon-to-be-deposed president Richard Nixon and known drug enthusiast, Elvis Presley.

While that summary is long on pithiness and short on detail, it’s not that far from the truth. The government wanted more ways to lock people up and take their stuff, and a “war” on drugs was the best way to sidestep constitutional protections that might otherwise prevent the government from locking up as many minorities as possible.

The “War on Drugs” has always been racist. Pretty much the only reason marijuana and opium were originally determined to be illegal was because Black and Chinese people became the convenient scapegoats, even when it was clear whites were far more likely to abuse these drugs, especially the opiates.

Racism and the Drug War have gone hand in hand since the early 1900s. It gained even more traction following the passage of laws protecting the civil rights of minorities, which saw Richard Nixon trying to undo the good Lyndon Johnson had done as perhaps the only redneck-with-a-conscience this nation has ever elected as president.

Since the usual racist shit doesn’t play quite as well as it used to 50 years ago (well, except for at the federal level), cops are now pretending drugs currently on the market are more powerful and dangerous than ever. This should be an indictment of the War on Drugs, but drug warriors are incapable of recognizing their contribution to the purity and easy availability of the same drugs they claim they’re fighting on behalf of America.

Cops like to pretend that the mere presence of fentanyl during busts and arrests is enough to kill officers, even though it’s impossible to overdose on any drug without actually ingesting it. Meth used to be the drug scourge of choice when the government felt like getting its racism on, but that fell out of favor when it was discovered to be the substance of choice of white people residing in the Midwest and southern Bible Belt.

Efforts were made to tie drug use to non-whites, which has resulted in the Trump administration declaring it’s legally in the right to drone strike any boats cruising through international waters south of the US border.

Panic artists continue to pretend every drug is the mass murderer, including former reality TV stars hoping to contain control of one this nation’s largest cities, as Miles Klee reports for Wired.

Spencer Pratt, once the villain of the 2000s MTV reality show The Hills and now an insurgent candidate in this year’s Los Angeles mayoral race, had a breakthrough moment in his first debate performance last Wednesday.

Turning to his signature issue of public safety, Pratt berated his opponents—Mayor Karen Bass and city councilmember Nithya Raman—for not doing enough about unhoused people dealing with drug addiction.

“The reality is, no matter how many beds you give these people, they are on super meth,” Pratt said, criticizing Raman’s plan to expand addiction treatment. “I will go below the Harbor Freeway tomorrow with her, and we can find some of the people she’s gonna offer treatment for. She’s gonna get stabbed in the neck. These people do not want a bed. They want fentanyl or super meth.”

SUPER METH. Dang.

Hopefully, it’s as cheap and easy to obtain as regular meth. I mean, it should be.

What is “super” meth, you might ask? Well, if it actually exists at all, it’s a direct result of this nation’s Drug War efforts to prevent regular non-drug users from obtaining stuff like Sudafed without having to get pharmacy staff involved.

Super Meth Is More Potent Than Traditional Meth: After U.S. restrictions on meth precursors in 2006, cartels developed a purer form—often at least 93% pure—that can produce a high lasting up to 24 hours, significantly increasing addiction and overdose risk.

That’s from “rehab” super group Aliya, which helpfully has a “brands” page on its website, along with this statement (no citations included) about the existence and origin of “super meth.”

It would seem the most rational response to US efforts to curtail local efforts to brew up acceptable meth would be to offer a cheap knockoff that undercut US restrictions by giving users what they wanted without generating more expenses on the supply side. I’ll tap the screen again to remind readers that this claim by a for-profit rehab center that — at the end of April 2026 — laid off 80 employees and closed at least two California rehab facilities. This may or may not be related to Aliya’s legal troubles with the federal government:

Not long after Johnson’s appointment, the company found itself the target of a U.S. Federal Trade Commission lawsuit in June 2025. The FTC accused that a former owner of an addiction treatment center that Aliya acquired, consultant groups and others of engaging in deceptive marketing practices

A lot of this is neither here nor there. But it’s hardly encouraging that the first few so-called expert sources on “super meth” have been generated by entities in the for-profit rehab business. And so it is for opportunists/political hopefuls like Spencer Pratt. It doesn’t matter whether or not any of this adds up. It doesn’t matter than it doesn’t make sense for international drug cartels to make a stronger product to compete with tepid domestic US meth and then apparently sell it at the same price point.

These are words of opportunists who want regular people to believe a new drug scourge is worth throwing money at. Whether that money is harvested by a corporation that offers for-profit rehab services or a politician who thinks adding the word “super” to something makes them a better candidate doesn’t matter. Both entities are exploiting a knowledge gap to enrich themselves.

Pratt can be forgiven for just being a mayoral hopeful willing to traffic in lies to get elected. Aliya (and others like it) have no excuse. They’re leveraging ignorance to increase profits. They’re both entirely wrong about this supposed new drug plague.

“Thankfully, super meth isn’t real,” says Claire Zagorski, a paramedic, harm reductionist, and PhD candidate at the University of Texas at Austin College of Pharmacy. “If there really was a new type of meth, it’d have its own chemical name and we’d be hearing about it from much more reputable sources than Mr. Pratt.”

The reality of the situation is far more mundane than these people are willing to admit. Meth production relied on phenyl-2-propanone (P2P) for decades before it was placed on the DEA’s drug schedule in 1980. The next closest thing was pseudoephedrine (Sudafed, etc.), which meth producers used until the government cracked down on that by treating regular people like drug dealers by limiting their purchases and requiring they turn over their identifying info to obtain what used to be an over-the-counter medication.

Now that pseudoephedrine is about as difficult to obtain as P2P, the drug has undergone iterations depending on what’s more easily available. It didn’t suddenly make meth “super.” All it did was change (depending on what’s available) the end product. And yet, we’re getting another wave of panic led by aspiring politicians and rehab centers who want potential clients to feel that the meth they’re currently using is far more potent than the meth they’ve always been using.

Color me cynical. Everyone knows meth will fuck you up on multiple levels. Meth users aren’t going to be dissuaded just because someone is saying weird stuff about “super meth.” Everything about this is performative and does a disservice to everyone — including the people these entities (public and private) claim to be helping — by pretending whatever meth is currently available is an insta-killer that can only be stopped by (1) oppressive government action and/or (2) paying a whole lot of money to people who would have charged less for services if “super meth” wasn’t currently making national headlines.

In the end, it’s the same old bullshit. People in government want more power, so they’ll use the most convenient excuse to obtain it. People in the business of milking every last dollar out of the victims of the US’s failed Drug War will do the same thing. Meanwhile, no one gets better and the flow of drugs to users doesn’t decrease. But these middlemen will continue to see steady profits, all while they pretend to care about the people they’re using as pawns.

Pluralistic: The AI bubble isn't like the internet bubble (26 May 2026) [Pluralistic: Daily links from Cory Doctorow]

->->->->->->->->->->->->->->->->->->->->->->->->->->->->-> Top Sources: None -->

Today's links



The head and shoulder of a supine bearded man in a chambray shirt. He is tied down with ropes around his shoulders. Four tiny figures with suits and grotesque plutocratic heads are prying his mouth open by yanking at his hair and beard. Once of the men is shoving an evil robot into his mouth.

The AI bubble isn't like the internet bubble (permalink)

One of the surprise breakout software products of the early web was Lotus Notes, a kind of primitive precursor to all-in-one office productivity suites like GDocs, Office365, etc. It was so important that its creator, Ray Ozzie, was promoted to Microsoft's Chief Software Architect, succeeding Bill Gates himself:

https://knowledge.wharton.upenn.edu/podcast/knowledge-at-wharton-podcast/the-man-who-would-change-microsoft-ray-ozzies-vision-for-connected-software/

People who remember Notes tend to deride it for its clunky user interface and demi-functional administrative tools. But what made Notes so central to Microsoft wasn't its polish – it was the fact that Notes represented a brokered peace between IT managers, who wanted mainframe-like control over everything their users could do with business equipment, and the users themselves – workers who kept smuggling internet-based tools into the enterprise network on the very sensible grounds that they had a job to do, and these were the best tools to do it.

The arrival of internet-based tools – especially ones that ran in browsers – represented a major challenge to IT departments, who had been long accustomed to dictating terms to their users. If the IT manager and the compliance department decided that the best way to manage disclosure and leak risks was to block all email attachments for outside users, then that was that: no one could send those attachments.

But after the internet arrived on the corporate desktop, employees who needed to get documents to supply chain partners and customers could treat these IT policies as damage and route around them. Just fire up your Hotmail or Yahoo mail window, or hop on MSN Messenger or ICQ or AIM, or drop the file on an anonymous FTP server and send the link to your counterparty. Job done!

IT managers hated this, and to be fair to them, they weren't (always) wrong. These outside tools came from a variety of untrustworthy sources, including malicious sites that pushed virus-infected versions to their users. Also, by evading firewall rules with these tools, users made it impossible to achieve the compliance goals that IT had been charged with enforcing, and it was IT's asses on the line if the company got in trouble as a result.

Foundationally, IT was being asked to do two irreconcilable things: they were supposed to be enabling workers to get their jobs done, and they were supposed to be stopping those workers from doing things that could harm the business. This can't be done, because the only way to eliminate the possibility that a worker will take an action that harms the business is to gag that worker and lock them in a dungeon. Workers need flexibility and freedom to achieve business goals, and that flexibility and freedom means that those workers might (deliberately or accidentally) thwart the business's goals.

What's more, workers will always run into situations that were not anticipated by policy, and if they are denied any agency or initiative, they will fail to get their jobs done. In work, the exception is the rule, hence the importance of "process knowledge" (all the implicit knowledge shared among workers across the firm and its suppliers and customers, which cannot be captured or recorded):

https://pluralistic.net/2025/09/08/process-knowledge/#dance-monkey-dance

Indeed, there's a form of labor action called a "work to rule," in which workers only do the things dictated by their rulebooks, without taking any of the routine additional measures dictated by process knowledge. Merely by following every rule to the letter, workers can grind a shop to a halt:

https://en.wikipedia.org/wiki/Work-to-rule

Since the dawn of personal computers, workers and IT departments have come into conflict, as workers literally smuggled technology into the business that could do things the IT department had (often arbitrarily and capriciously) prohibited. When Visicalc emerged as the killer app for the Apple ][+, workers snuck these computers into work and used them to sort spreadsheets in ways that IT had declined to permit. They didn't do this to cheat or steal from the company – the whole point was to do a better job.

So it was with the early web: workers discovered a myriad of new capabilities in the free-to-use world of web-based tools and realized how these tools would make them much more effective at their jobs. The fact that IT wouldn't let them do these things was just more evidence that IT – and the managers who set IT's agenda – didn't understand the business as well as workers.

It didn't help that IT managers' first line of defense was the high-tech version of abstinence-only education: "You only think you need your work computers to do this, but really, you don't, so stop trying":

https://www.theguardian.com/technology/2009/jun/16/computer-security-abstinence

Abstinence-only education never works, but where "you only think you need this" failed, Lotus Notes succeeded. Lotus Notes provided a whole suite of tools that largely (if imperfectly) replaced the universe of free tools that workers were using to evade their IT departments' edicts, so they could get their jobs done. At the same time, Lotus Notes provided a set of management tools that let IT fine-tune how these tools worked, giving them (some) of the controls they needed to achieve their compliance goals.

Like all brokered peace settlements, Lotus Notes left both sides feeling like they'd made a compromise they could live with, giving up some of their goals, but keeping the things that really mattered to them.

It's impossible to overstate how important Lotus Notes and similar products were, because workers demanded the right to use the web on their work computers, and they made those demands so forcefully that managers had to completely re-do their IT policies, lest those workers treat them as damage and route around them. Back then, the tech press was full of stories about these conflicts, as workers insisted that the new technology that was sweeping the nation was so foundational and transformative that they had to be allowed to use it.

What we never saw back then were stories about how managers had to monitor workers to ensure that they were using the web as much as possible. No one had to force workers to find ways to integrate the web into their workflows.

In other words, the story of the web at work was the opposite of the story of AI at work. Today, you can't turn around without reading a story about bosses who are threatening to fire workers if they don't increase their AI usage:

https://www.businessinsider.com/boss-track-ai-use-career-2025-8

Virtually every major company now has a program to force workers into using AI:

https://www.cnbc.com/2026/05/05/ai-use-work-employee-monitoring-tech-surveillance.html

It's conceivable that over the past quarter-century, bosses have become technophiles while workers have fallen prey to superstitious technophobia, but it hardly seems likely. Historically, workers have always been enthusiastic about tools that let them do a better job – indeed, it's a truism that labor-led automation produces improvements in quality, while capital-driven automation increases throughput (often at the expense of quality).

Workers aren't the only typical early adopters who find AI lacking. As a group, teenagers and young adults hate AI:

https://www.nytimes.com/2026/04/09/style/gen-z-ai-gallup-study.html

That's not what it was like during the early web days. Back then, young people entering the workforce were passionate devotees of the web, to the point where the business press routinely ran articles asking how today's workplaces were going to adapt to the demands of these webbed-up workers.

https://www.nber.org/digest/apr03/internet-changes-labor-market

AI boosters insist that the deficits we see in AI – its lack of profitability, its primitive and error-riddled outputs – are no different from the shakedown problems of the early web (and we know how the web turned out!). But this is a profoundly flawed comparison: the early web and AI are very different from one another.

For one thing, the early web may have lost money, but it had great unit economics. Every new web user brought the web closer to profitability, as did every new use of the web, and every new generation of web technology. By contrast, AI has – in the memorable phrasing of Ed Zitron – "dogshit unit economics." Every new AI user makes AI less profitable, as does every new use for AI, and each generation of AI loses more money than the last. AI is the money-losingest endeavor in human history:

https://pluralistic.net/2025/09/27/econopocalypse/#subprime-intelligence

In other words, the early web was a technology that grew more profitable every day, which workers and young people had to force on their bosses – and AI is a technology that grows less profitable every day, and bosses have to force it on workers and young people.

Now, it's true that some workers don't have to be forced to use AI. Workers who enjoy a high degree of autonomy (that is to say, workers who are positioned to ignore workplace coercion) can adopt AI in ways that they feel suited to, just as those early web users and Visicalc smugglers did. They can fulfill the maxim that labor-driven automation improves quality, while resisting capital's insistence that automation be used to increase throughput at quality's expense.

They can act as centaurs (workers assisted by technology), not as reverse-centaurs (workers who are recruited to serve as peripherals for machines). As with all technology questions, what the technology does is nowhere near as important as who the tech does it for and who the tech does it to:

https://pluralistic.net/2025/09/11/vulgar-thatcherism/#there-is-an-alternative

And there's another group of workers who adopt AI voluntarily: workers who see that AI can do a lot of work that they view as dull and unimportant for them. These workers might be right – there are plenty of bullshit jobs out there:

https://memex.craphound.com/2018/06/20/david-graebers-bullshit-jobs-why-does-the-economy-sustain-jobs-that-no-one-values/

But it's also possible that they're wrong, and they're substituting AI for something that really should be done by a person.

But on the plus side, at least no one has to force them to adopt AI.


Hey look at this (permalink)



A shelf of leatherbound history books with a gilt-stamped series title, 'The World's Famous Events.'

Object permanence (permalink)

#25yrsago Website graveyard https://web.archive.org/web/20010516224100/http://www.disobey.com/ghostsites/

#20yrsago Canadian students ask govt to save them from copyright https://web.archive.org/web/20060629014007/https://action.web.ca/home/cfs/en_alerts.shtml?x=88910&AA_EX_Session=d56bebd39174d9839ec3ee5fa6fe93a4

#20yrsago Lifespan of best-sellers falls 6/7ths in 40 years https://web.archive.org/web/20060601231943/https://www.lulu.com/static/pr/05_19_06.php

#15yrsago Sarkozy’s false-flag E-G8 attracts withering scorn https://web.archive.org/web/20121109010803/https://arstechnica.com/tech-policy/2011/05/france-attempts-to-civilize-the-internet-internet-fights-back/

#15yrsago Tool reveals ISP traffic-shaping https://web.archive.org/web/20120514151210/https://arstechnica.com/tech-policy/2011/05/new-shaperprobe-tool-detects-isp-traffic-shaping/

#15yrsago Falun Gong sues Cisco over complicity in China’s “Golden Shield” – allege torture, murder https://web.archive.org/web/20110524065718/http://news.cnet.com/8301-1023_3-20065219-93.html

#15yrsago Scenes from Los Angeles’s teacher-librarian witch-hunt https://mizzmurphy.blogspot.com/2011/05/message-received.html

#15yrsago Denmark bans Marmite https://www.theguardian.com/theguardian/2011/may/24/uk-should-ban-sandi-toksvig

#10yrsago As mobile carriers ramp up bribery program, Internet coalition says no to “zero rating” https://web.archive.org/web/20160524233609/https://motherboard.vice.com/read/medium-mozilla-and-kickstarter-signed-a-letter-against-zero-rating

#10yrsago Philippines’ new “dictator” will give a hero’s burial to Ferdinand Marcos https://web.archive.org/web/20160526135257/http://www.msn.com/en-ph/news/world/philippine-dictator-marcos-to-get-heros-burial-duterte/ar-BBtnPJH

#10yrsago Judge handcuffs public defender for speaking out in court https://web.archive.org/web/20160525151444/http://www.reviewjournal.com/news/las-vegas/las-vegas-judge-handcuffs-public-defender-courtroom

#10yrsago Sanders donors flock to Tim Canova’s campaign against DNC Chair Debbie Wasserman Schultz https://edition.cnn.com/2016/05/23/politics/debbie-wasserman-schultz-primary-opponent-fundraising/index.html

#10yrsago Algorithmic risk-assessment: hiding racism behind “empirical” black boxes https://www.propublica.org/article/machine-bias-risk-assessments-in-criminal-sentencing

#10yrsago Plagiarism detection app vs Russia’s elites: 1-2 fake PhDs discovered every day https://www.slate.com/articles/news_and_politics/cover_story/2016/05/the_thriving_russian_black_market_in_dissertations_and_the_crusaders_fighting.html

#10yrsago Technology’s “culture of compliance” must be beaten back in the name of justice https://bb9.berlinbiennale.de/all-problems-can-be-illuminated-not-all-problems-can-be-solved/

#10yrsago Grass in the park at the center of San Francisco gentrification debate is now for rent https://sfist.com/2016/05/23/rec_parks_pilot_program_allows_you/

#10yrsago Lawsuit: Texas’s largest jail is full of people who are locked up for being poor https://web.archive.org/web/20160524134738/https://thinkprogress.org/economy/2016/05/23/3781076/texas-bail-lawsuit/

#10yrsago After the precariat, the unnecessariat: the humans who are superfluous to corporations https://morecrows.wordpress.com/2016/05/10/unnecessariat/

#5yrsago Watomatic, for lower Whatsapp switching costs https://pluralistic.net/2021/05/24/how-about-nah/#comcom


Upcoming appearances (permalink)

A photo of me onstage, giving a speech, pounding the podium.



A screenshot of me at my desk, doing a livecast.

Recent appearances (permalink)



A grid of my books with Will Stahle covers..

Latest books (permalink)



A cardboard book box with the Macmillan logo.

Upcoming books (permalink)

  • "The Reverse-Centaur's Guide to AI," a short book about being a better AI critic, Farrar, Straus and Giroux, June 2026 (https://us.macmillan.com/books/9780374621568/thereversecentaursguidetolifeafterai/)

  • "Enshittification, Why Everything Suddenly Got Worse and What to Do About It" (the graphic novel), Firstsecond, 2026

  • "The Post-American Internet," a geopolitical sequel of sorts to Enshittification, Farrar, Straus and Giroux, 2027

  • "Unauthorized Bread": a middle-grades graphic novel adapted from my novella about refugees, toasters and DRM, FirstSecond, April 20, 2027

  • "The Memex Method," Farrar, Straus, Giroux, 2027



Colophon (permalink)

Today's top sources:

Currently writing: "The Post-American Internet," a sequel to "Enshittification," about the better world the rest of us get to have now that Trump has torched America. Third draft completed. Submitted to editor.

  • "The Reverse Centaur's Guide to AI," a short book for Farrar, Straus and Giroux about being an effective AI critic. LEGAL REVIEW AND COPYEDIT COMPLETE.

  • "The Post-American Internet," a short book about internet policy in the age of Trumpism. PLANNING.

  • A Little Brother short story about DIY insulin PLANNING


This work – excluding any serialized fiction – is licensed under a Creative Commons Attribution 4.0 license. That means you can use it any way you like, including commercially, provided that you attribute it to me, Cory Doctorow, and include a link to pluralistic.net.

https://creativecommons.org/licenses/by/4.0/

Quotations and images are not included in this license; they are included either under a limitation or exception to copyright, or on the basis of a separate license. Please exercise caution.


How to get Pluralistic:

Blog (no ads, tracking, or data-collection):

Pluralistic.net

Newsletter (no ads, tracking, or data-collection):

https://pluralistic.net/plura-list

Mastodon (no ads, tracking, or data-collection):

https://mamot.fr/@pluralistic

Bluesky (no ads, possible tracking and data-collection):

https://bsky.app/profile/doctorow.pluralistic.net

Medium (no ads, paywalled):

https://doctorow.medium.com/

Tumblr (mass-scale, unrestricted, third-party surveillance and advertising):

https://mostlysignssomeportents.tumblr.com/tagged/pluralistic

"When life gives you SARS, you make sarsaparilla" -Joey "Accordion Guy" DeVilla

READ CAREFULLY: By reading this, you agree, on behalf of your employer, to release me from all obligations and waivers arising from any and all NON-NEGOTIATED agreements, licenses, terms-of-service, shrinkwrap, clickwrap, browsewrap, confidentiality, non-disclosure, non-compete and acceptable use policies ("BOGUS AGREEMENTS") that I have entered into with your employer, its partners, licensors, agents and assigns, in perpetuity, without prejudice to my ongoing rights and privileges. You further represent that you have the authority to release me from any BOGUS AGREEMENTS on behalf of your employer.

ISSN: 3066-764X

The Homeric Twin Dangers of the Strait [The Status Kuo]

I’m writing for The Big Picture today. Perhaps it’s because I’m excited for the upcoming Christopher Nolan film, or perhaps looking at what’s happening in the Strait of Hormuz reminds me of what I learned back when we studied The Odyssey in a literature course.

Trump has sailed us into a dangerous waterway, and we now face an impossible choice, with the monster Scylla on one side and the vortex of Charybdis on the other. I’ll say no more here, but to see how this Homeric tale plays out in modern form, look for my piece in your inboxes later this afternoon.

By now, you know the drill: If you’re not subscribed yet to The Big Picture, you can do so for free at the link below. My content there is free of charge, but for our valued paid subscribers, we offer a host of additional content, including our weekly news summaries, guest contributor columns and our popular Sunday Week in Wins:

Yes! Sign Me Up For the Big Picture

I’ll be back here tomorrow with my regular installment of The Status Kuo.

Jay

Tuesday 2026-05-26

11:00 PM

NPR Flubs Its Recovery From Brutal Republican Funding Attacks [Techdirt]

NPR is imposing a new round of buyouts and layoffs as it tries to survive the brutal Trump GOP attacks on public broadcasting. According to NPR, it’s being forced to trim $8 million of its $300-million annual budget because of the illegal (for whatever that word is worth any more) Trump administration attacks on NPR, PBS and their member station funding earlier this year.

The original executive order resulted in Congress obliterating the entire Corporation for Public Broadcasting (CPB) budget of $1.1 billion for fiscal years 2026 and 2027. With no money left to function, the CPB voted to dissolve itself last January. A judge subsequently ruled that the defunding was illegal and violated the First Amendment, but the ruling came too late to save the CPB.

According to NPR, it received $113 million in private donations ($80 million of it coming from Connie and Steve Ballmer) to offset the losses, but that money won’t be used to save the jobs of human beings doing actual reporting. Instead, it can only be spent on “technological innovation” (read: likely given to Microsoft for enterprise services):

“Paradoxically, just prior to the announcement of these cost-cutting measures, NPR received a pair of private gifts totaling $113 million — representing the network’s second- and third-largest in its 56-year history. Most of that money, however, is dedicated to technological innovation.”

While NPR doesn’t really take all that much money from the public anymore (roughly 1% of NPR’s annual budget comes from the government), the CPB distributed over 70 percent of its funding to about 1,500 public radio and TV stations. Much of them providing popular and useful educational programming.

As we’ve noted previously, right wingers, corporations, and authoritarians loathe public broadcasting because, in its ideal form, it can untether public interest journalism from the often perverse financial incentives inherent in our consolidated, billionaire-owned, ad-engagement-based corporate media.

A media, if you hadn’t noticed, that is easily bullied, cowed, and manipulated by bad actors looking to normalize, downplay, or validate no limit of terrible and illegal bullshit (see: CBSWashington Post, the New York Times, and countless others). In functional countries, taxpayer-funded journalism functions as a public interest firewall from corporatism and authoritarianism.

In the United States, decades of attacks and defunding have left us with outlets like NPR that barely even qualify as a “public broadcaster.” And as NPR became a more traditional, corporate ad-driven outlet you could watch in real time how it became friendlier and friendlier to right wing narratives for fear of being accused of a “liberal bias” (for all the good it wound up doing them).

But after decades of under-funding and attacks, what passes for U.S. public media is a distant shadow of the idea’s full potential. And now even that’s been left reeling. Should we survive authoritarianism, maybe there will be a few useful lessons buried in the rubble.

07:00 AM

03:00 AM

Kanji of the Day: 湯 [Kanji of the Day]

✍12

小3

hot water, bath, hot spring

トウ

お湯   (おゆ)   —   hot water
銭湯   (せんとう)   —   public bath
湯船   (ゆぶね)   —   bathtub
足湯   (あしゆ)   —   footbath
熱湯   (あつゆ)   —   warmer than usual bath
湯気   (ゆげ)   —   steam
ぬるま湯   (ぬるまゆ)   —   tepid water
給湯   (きゅうとう)   —   hot-water supply
湯たんぽ   (ゆたんぽ)   —   hot-water bottle
内湯   (うちゆ)   —   indoor bath using water from a hot-spring

Generated with kanjioftheday by Douglas Perkins.

Kanji of the Day: 辣 [Kanji of the Day]

✍14

中学

pungent, spicy, harsh, cruel, severe

ラツ

から.い

辛辣   (しんらつ)   —   bitter (e.g., criticism)
悪辣   (あくらつ)   —   crafty
辣腕   (らつわん)   —   shrewdness
辣油   (ラーユ)   —   chili oil (chi:)
辣韮   (らっきょ)   —   Japanese leek (Allium chinense)
辣韭   (らっきょ)   —   Japanese leek (Allium chinense)
山辣韮   (やまらっきょう)   —   Japanese onion (Allium thunbergii)

Generated with kanjioftheday by Douglas Perkins.

01:00 AM

Laughing at you behind your back [Seth Godin's Blog on marketing, tribes and respect]

If that’s not happening, it’s possible you’re not being bold enough, generous enough or creative enough.

It might be teenagers, competitors or that stranger down the street, but generous creative leadership always creates skeptics.

      

Pluralistic: No honor among (ad-tech) thieves (25 May 2026) [Pluralistic: Daily links from Cory Doctorow]

->->->->->->->->->->->->->->->->->->->->->->->->->->->->-> Top Sources: None -->

Today's links

  • No honor among (ad-tech) thieves: Including "and" and "the."
  • Hey look at this: Delights to delectate.
  • Object permanence: Budweiser nunchuks; GOP vote-suppressor voted illegally; Airbnb enshittifies; Oculus enshittifies; Nintendo copyfrauds its fans; Meritocracy to eugenics pipeline; Ultima Online crisis management; SNES cartridge urinal; JJ Abrams x Axanar, "Sex Criminals"; Beating school filters for fun; Orphan works; Japanese ATM heist; How the Sacklers rigged the game.
  • Upcoming appearances: London, Kansas City, LA, Menlo Park, Toronto, NYC, Edinburgh.
  • Recent appearances: Where I've been.
  • Latest books: You keep readin' em, I'll keep writin' 'em.
  • Upcoming books: Like I said, I'll keep writin' 'em.
  • Colophon: All the rest.



A painting of three lemons on a white background. Each has been altered to add a horrific eye staring out of it. From behind two of the lemons loom carny barkers, gesticulating wildly and waving canes.

No honor among (ad-tech) thieves (permalink)

It shouldn't come as a surprise to learn that a company that uses dishonest tactics to spy on you for profit will also use dishonest tactics to sell the resulting surveillance data.

The only reason this wouldn't be obvious is if you've fallen into the trap of thinking "if you're not paying for the product, you're the product." Companies that cheat when the opportunity arises will cheat everyone: customers, users, regulators, suppliers and employees. You're the product if the company can get away with making you the product:

https://pluralistic.net/2022/11/14/luxury-surveillance/#liar-liar

The digital surveillance swindle is a con from top to bottom: it's not just that they spy on you, it's also that they lie to you about how and why and where they spy on you and what happens to the data they swindle out of you. They're not just cheats, in other words – they're also liars.

Of course they're liars! If their terms of service were honest, they'd say something like, "By being desperate enough to use this product, you 'agree' that we're allowed to come over to your house and punch your grandmother, wear your underwear, make long-distance calls and eat all the food in your fridge."

So they lie like crazy. But they don't just lie to us: they lie to the people they sell our surveillance data to as well. Of course they do! Those people are the ones giving them the money! By tricking the people paying for the product, these surveillance swindlers can get them to pay more!

This is the basis of Tim Hwang's essential 2020 book Subprime Attention Crisis:

https://pluralistic.net/2020/10/05/florida-man/#wannamakers-ghost

Core to Hwang's thesis is that these ads aren't just dangerous, they're also ineffective. The danger of these ads is the erosion of privacy and the mobilization of private data for state repression and fraud, but not particularly for persuasion. The idea that ad-tech companies have realized the ancient dream of building a mind-control ray via the novel technique of "hacking your dopamine loop" is a story that the ad-tech swindlers cooked up to help them sell ads:

https://pluralistic.net/2021/09/30/dont-believe-the-criti-hype/#ordinary-mediocrities

Critics who repeat these outlandish claims are helping these companies sell ads to credulous advertisers, who are getting robbed to the tune of hundreds of billions of dollars. This is the process that Lee Vinsel calls "criti-hype," which is when you "take the sensational claims of boosters and entrepreneurs, flip them, and start talking about 'risks'":

https://peoples-things.ghost.io/youre-doing-it-wrong-notes-on-criticism-and-technology-hype/

Criti-hype is satisfying because the hype itself is so fantastically overblown. These companies claim they're going to save/destroy/conquer the world, transform the very nature of humanity, etc, and so critics who repeat those claims (brackets derogatory) can style themselves as defenders of the world and humanity itself.

This is also a very profitable style of criticism: there's a huge commercial market for people who claim to be defending the world from conquest by evil dopamine-hacking sorcerers and/or superintelligent paperclip-maximizers that can chatbot you into killing yourself and/or voting for Trump (brackets derogatory).

The opposite of criti-hype is materialistic criticism, grounded in independently verifiable claims about how these scams work. To be a good tech critic, you need to start by assuming that a company that lies to its users about what it's doing is perfectly capable of lying to its customers and investors about what it's doing (that is, "even if you're paying for the product, you're still the product").

That's demonstrably, verifiably true of the commercial surveillance industry. Commercial spies lie to their customers like crazy, and always have. Think of the department store magnate John Wannamaker's famous quip that "half my advertising dollars are wasted, I just don't know which half." Man, did someone ever do a sell-job on old Wannamaker: imagine believing that only half of your advertising dollars are wasted. Today, thanks to creepy ad-tech analytics, we know that the true figure is around 99%.

Hwang's book documents lots more ad-tech fraud that's every bit as audacious as the Wannamaker-era con-jobs. For example, there's the fact that when Procter and Gamble zeroed out its $200m/year surveillance advertising program, they saw a zero percent drop in sales because (to a first approximation) all $200m of that annual spend was disappearing down the fraud-hole.

There's been plenty more examples since, rivaling previous eras for audacity and outlandishness. In 2023, Mozilla Labs investigated the ways that modern cars spy on their drivers and concluded that, when it came to privacy, cars were "the worst product category" they had ever evaluated, and recommended that you not buy any of the cars currently offered for sale:

https://www.mozillafoundation.org/en/privacynotincluded/articles/its-official-cars-are-the-worst-product-category-we-have-ever-reviewed-for-privacy/

Mozilla's report investigated two things: which data your car was collecting and selling about you (lots) and what data your car company claimed it had collected about you and was offering for sale (way, way more).

For example, Nissan and Kia claimed that they had data about your sex life, a thing that cannot be reasonably inferred from the sensors in your car (unless you have a highly specific sex life). Six car companies claimed they had your genetic data (again, not a thing that any of the sensors in your car can know about).

What's more, all of these scams have only gotten worse in the intervening three years:

https://cleantechnica.com/2026/05/22/mozilla-foundation-condemns-data-collection-by-cars/

These companies are spying on you, and lying to you about how much they respect your privacy, and lying to their commercial customers about all the fiendish ways they've cooked up for invading your privacy.

Everyone in the ad-tech sector is lying to everyone else in the ad-tech sector, in other words. It's your basic hive of scum and villainy. Back in 2023, Cox Media – part of the sprawling media conglomerate that includes Cox Cable – told advertisers that they had a new product called "Active Listening" that recorded and transcribed all the conversations you have around your smart speakers, smart TVs, smart watches and phones:

https://www.404media.co/heres-the-pitch-deck-for-active-listening-ad-targeting/

It was a lie. There are plenty of ways that these devices spy on you, of course. Your smart TV is a cesspool of surveillance and data-exfiltration, but that data doesn't include your conversations:

https://pluralistic.net/2022/12/03/painful-burning-dribble/#law-of-intended-consequences

Same for your smart speaker, which not only gathers tons of information about you for sale and targeting, but also leaks your voice data all the time, whenever you utter any of its "trigger words," which include over 1,000 phrases that sound like its trigger words:

https://pluralistic.net/2020/07/02/big-river/#triggered

Cox, in other words, was running the same equal-opportunity scam that your auto-maker runs: deceiving you about how little data they were stealing from you, and deceiving their customers about how much data they were gathering on you.

That said, there was something remarkable and unique about Cox's fraud: because they were ripping off other (better-connected) fraudsters, their lies triggered an investigation by Donald Trump's FTC, who never met a scammer they wouldn't defend (from another scammer):

https://arstechnica.com/tech-policy/2026/05/marketer-that-claimed-it-could-tap-devices-for-ad-targeting-will-pay-880k-settlement/

Still, there are limits to this "honor among thieves" business. The settlement Trump's FTC extracted from Cox for lying to other liars is less than $1m – basically, change that Cox can find down the back of its sofa:

https://arstechnica.com/tech-policy/2026/05/marketer-that-claimed-it-could-tap-devices-for-ad-targeting-will-pay-880k-settlement/

Still, the Cox settlement is a great criti-hype object lesson, a reminder that these creepy, lying companies lie to everyone, including their customers, which means that even if you're paying for the product, you're still the product.


Hey look at this (permalink)



A shelf of leatherbound history books with a gilt-stamped series title, 'The World's Famous Events.'

Object permanence (permalink)

#25yrsago Best email disclaimer award https://web.archive.org/web/20010526174903/http://www.theregister.co.uk/content/35/19057.html

#25yrsago Kaycee hoax FAQ https://web.archive.org/web/20010629212706/https://rootnode.org/article.php?sid=26

#25yrsago Crisis management in Ultima Online https://web.archive.org/web/20010605015828/http://www.newyorker.com/FACT/

#25yrsago E3 is all softcore porn now https://web.archive.org/web/20010702122044/https://www.salon.com/tech/feature/2001/05/22/e3_2001/print.html

#25yrsago Canadian payphone infinite long distance glitch https://web.archive.org/web/20010608183145/https://www.wired.com/news/culture/0,1284,43967,00.html

#20yrsago Kids make a sport out of outsmarting school web-filters https://web.archive.org/web/20060821224237/http://news.com.com/Kids+outsmart+Web+filters/2009-1041-6062548.html

#20yrsago Orphan works legislation https://web.archive.org/web/20060531135239/http://www.copybites.com/2006/05/chairman_lamar_.html

#20yrsago U. Florida cops ask fiction writer for fingerprints, DNA https://memex.craphound.com/2006/05/22/u-florida-cops-ask-fiction-writer-for-fingerprints-dna/

#20yrsago HDMI, the Manchurian DRM – a Broadcast Flag dormant until 2010 https://web.archive.org/web/20060523193853/https://arstechnica.com/news.ars/post/20060521-6880.html

#15yrsago The Filter Bubble: how personalization changes society https://memex.craphound.com/2011/05/22/the-filter-bubble-how-personalization-changes-society/

#15yrsago Last decade’s English libel legal sharks poised to make a new fortune on stupid privacy lawsuits and superinjuctions https://memex.craphound.com/2011/05/22/last-decades-english-libel-legal-sharks-poised-to-make-a-new-fortune-on-stupid-privacy-lawsuits-and-superinjuctions/

#15yrsago RIAA boss takes home $3 mil+ https://lefsetz.com/wordpress/2011/05/21/another-member-of-the-overpaid/

#15yrsago Vindictive game company invites employees to pan reviewer’s novel after bad review https://maroonersrock.com/2011/05/conduit-2-developer-calls-for-internal-retaliation-against-author-of-negative-joystiq-review/

#15yrsago France lobbies G8 for Internet control and censorship https://www.laquadrature.net/en/2011/05/20/frances-g8-focuses-on-control-and-restrictions-to-online-freedoms/

#15yrsago Budweiser nunchuks: American Ninja https://web.archive.org/web/20110701153712/http://www.todayandtomorrow.net/2011/05/19/american-ninja/

#15yrsago GOP legislative aide works on punitive voter ID bill, boasts of illegally voting in another district https://web.archive.org/web/20110522014606/http://host.madison.com/wsj/news/local/govt-and-politics/elections/article_ede5d49e-8272-11e0-a6e0-001cc4c03286.html

#15yrsago Raising a kid without disclosing their sex https://web.archive.org/web/20110523180952/http://www.parentcentral.ca/parent/babiespregnancy/babies/article/995112–parents-keep-child-s-gender-secret

#15yrsago Byron Sonne: Canadian security geek jailed for taunting G20 security theatre https://web.archive.org/web/20110518195236/http://www.torontolife.com/daily/informer/from-print-edition-informer/2011/05/03/how-byron-sonne’s-obsessions-with-the-g20-security-apparatus-cost-him-everything/

#15yrsago HOWTO make a SNES cartridge urinal https://blog.pricecharting.com/2011/05/how-to-build-video-game-urinal.html

#15yrsago German police raid German Pirate Party’s servers two days before election https://web.archive.org/web/20120516010632/https://arstechnica.com/tech-policy/2011/05/german-police-seize-pirate-party-servers-looking-at-anons-toolkit/

#10yrsago JJ Abrams urges Paramount to drop its lawsuit over fan Star Trek movie https://web.archive.org/web/20160522121940/https://deadline.com/2016/05/star-trek-axanar-lawsuit-ending-jj-abrams-paramount-1201760721/

#10yrsago Pat Buchanan on the Republican Party’s historical opposition to free trade deals https://web.archive.org/web/20160521162845/http://www.theamericanconservative.com/buchanan/free-trade-vs-the-republican-party/

#10yrsago United offered men-only “executive” flights until 1970 https://viewfromthewing.com/united-airlines-men-only-executive-service/

#10yrsago Elderly man kills wife because they couldn’t afford her medicine https://www.nytimes.com/2016/05/20/us/florida-man-says-he-killed-sick-wife-because-he-couldnt-afford-her-medicine-sheriffs-say.html?_r=0

#10yrsago Sex Criminals: Robin Hood bank robbers who can stop time when they orgasm https://memex.craphound.com/2016/05/21/sex-criminals-robin-hood-bank-robbers-who-can-stop-time-when-they-orgasm/

#10yrsago Airbnb stealth-updates terms of service, says it’s not an insurer and requires binding arbitration https://memex.craphound.com/2016/05/20/airbnb-stealth-updates-terms-of-service-says-its-not-an-insurer-and-requires-binding-arbitration/

#10yrsago Oculus breaks promise, uses DRM to kill app that let you switch VR systems https://web.archive.org/web/20160520161939/https://motherboard.vice.com/read/new-oculus-drm-cross-platform

#10yrsago Nintendo claims ownership over fans’ Minecraft/Mario mashups https://web.archive.org/web/20160521193334/http://arstechnica.com/gaming/2016/05/nintendo-issues-copyright-claims-on-mario-themed-minecraft-videos/

#10yrsago Paypal refuses to deliver online purchases to UK addresses containing “Isis” https://b2fxxx.blogspot.com/2016/05/the-tyranny-of-algorithm-yet-again.html

#10yrsago 30 students debate mass surveillance on Capitol Hill https://web.archive.org/web/20160521000031/https://theintercept.com/2016/05/20/high-school-debaters-bring-surveillance-encryption-arguments-to-capitol-hill/

#10yrsago What the NSA’s assault on whistleblowers taught Snowden https://www.theguardian.com/us-news/2016/may/22/how-pentagon-punished-nsa-whistleblowers

#10yrsago Massive, coordinated ATM heist in Japan nets $12.7 million (¥‎1.4 billion) https://web.archive.org/web/20160523102154/http://mainichi.jp/english/articles/20160522/p2g/00m/0dm/044000c

#5yrsago How the Sacklers rigged the game https://pluralistic.net/2021/05/23/a-bankrupt-process/#sacklers

#5yrsago Consent theater https://pluralistic.net/2021/05/20/consent-theater/

#5yrsago Debunking the arguments for vaccine apartheid https://pluralistic.net/2021/05/21/wait-your-turn/#vaccine-apartheid

#5yrsago How the filibuster dies https://pluralistic.net/2021/05/22/not-with-a-bang/#theory-of-change

#1yrago Strange Bedfellows and Long Knives https://pluralistic.net/2025/05/21/et-tu-sloppy-steve/#fractured-fairytales

#1yrago The meritocracy to eugenics pipeline https://pluralistic.net/2025/05/20/big-cornflakes-energy/#caliper-pilled


Upcoming appearances (permalink)

A photo of me onstage, giving a speech, pounding the podium.



A screenshot of me at my desk, doing a livecast.

Recent appearances (permalink)



A grid of my books with Will Stahle covers..

Latest books (permalink)



A cardboard book box with the Macmillan logo.

Upcoming books (permalink)

  • "The Reverse-Centaur's Guide to AI," a short book about being a better AI critic, Farrar, Straus and Giroux, June 2026 (https://us.macmillan.com/books/9780374621568/thereversecentaursguidetolifeafterai/)

  • "Enshittification, Why Everything Suddenly Got Worse and What to Do About It" (the graphic novel), Firstsecond, 2026

  • "The Post-American Internet," a geopolitical sequel of sorts to Enshittification, Farrar, Straus and Giroux, 2027

  • "Unauthorized Bread": a middle-grades graphic novel adapted from my novella about refugees, toasters and DRM, FirstSecond, April 20, 2027

  • "The Memex Method," Farrar, Straus, Giroux, 2027



Colophon (permalink)

Today's top sources:

Currently writing: "The Post-American Internet," a sequel to "Enshittification," about the better world the rest of us get to have now that Trump has torched America. Third draft completed. Submitted to editor.

  • "The Reverse Centaur's Guide to AI," a short book for Farrar, Straus and Giroux about being an effective AI critic. LEGAL REVIEW AND COPYEDIT COMPLETE.

  • "The Post-American Internet," a short book about internet policy in the age of Trumpism. PLANNING.

  • A Little Brother short story about DIY insulin PLANNING


This work – excluding any serialized fiction – is licensed under a Creative Commons Attribution 4.0 license. That means you can use it any way you like, including commercially, provided that you attribute it to me, Cory Doctorow, and include a link to pluralistic.net.

https://creativecommons.org/licenses/by/4.0/

Quotations and images are not included in this license; they are included either under a limitation or exception to copyright, or on the basis of a separate license. Please exercise caution.


How to get Pluralistic:

Blog (no ads, tracking, or data-collection):

Pluralistic.net

Newsletter (no ads, tracking, or data-collection):

https://pluralistic.net/plura-list

Mastodon (no ads, tracking, or data-collection):

https://mamot.fr/@pluralistic

Bluesky (no ads, possible tracking and data-collection):

https://bsky.app/profile/doctorow.pluralistic.net

Medium (no ads, paywalled):

https://doctorow.medium.com/

Tumblr (mass-scale, unrestricted, third-party surveillance and advertising):

https://mostlysignssomeportents.tumblr.com/tagged/pluralistic

"When life gives you SARS, you make sarsaparilla" -Joey "Accordion Guy" DeVilla

READ CAREFULLY: By reading this, you agree, on behalf of your employer, to release me from all obligations and waivers arising from any and all NON-NEGOTIATED agreements, licenses, terms-of-service, shrinkwrap, clickwrap, browsewrap, confidentiality, non-disclosure, non-compete and acceptable use policies ("BOGUS AGREEMENTS") that I have entered into with your employer, its partners, licensors, agents and assigns, in perpetuity, without prejudice to my ongoing rights and privileges. You further represent that you have the authority to release me from any BOGUS AGREEMENTS on behalf of your employer.

ISSN: 3066-764X

Monday 2026-05-25

07:00 PM

Italian Police Target “Previously Unseen” Streaming Piracy Tech That Looks Familiar [TorrentFreak]

gdfLaw enforcement operations against pirate streaming networks have been a regular occurrence, particularly inside the EU.

This includes Italy, where the financial police, Guardia di Finanza (GdF), has routinely cracked down on the “pezzotto,” the term used for selling IPTV streaming boxes and subscriptions.

This week the financial police in Ravenna announced something they say is different. In an operation named “Tutto Chiaro” (“All Clear”), coordinated by the Bologna prosecutor’s office, around 200 officers carried out more than 100 searches and seizures across Italy, with parallel action in France and Germany.

At the center of the crackdown is an app called CinemaGoal. The GdF calls the technology behind it “highly advanced and previously unseen”.

“The operation, which stemmed from social media monitoring, uncovered, for the first time, the existence of an innovative technology,” GdF explained, noting that the app offered superior viewing quality while the anti-piracy detection rate was minimal.

How the GdF Says It Worked

According to the GdF, CinemaGoal was installed on a customer’s device, connecting it to a foreign server that decrypted the premium content. This included content from premium broadcasters such as Sky and DAZN, but the authorities also named Netflix, Disney+, and Spotify as targets.

Pirate streaming

gdf video

The police explain that, every three minutes, virtual machines captured the “original” codes of legitimate subscriptions and instantly relayed them, sending a “clear” signal to pirate subscribers. Those legitimate accounts were registered to fictitious names, as well as some who have been identified.

Because the system tapped into the official streaming feeds, GdF says the quality of the streams was superior. Paired with a low anti-piracy detection rate and relative anonymity for its subscribers, the more than 70 identified resellers had little trouble selling these subscriptions.

New Anti-Piracy Tech?

The “previously unseen” framing relied on a broad description by GdF, referencing “Original codes,” a “clear” signal, a foreign server that “decrypts” content. This is press release language, not a technical explanation. But just how “new” is this technology?

The few concrete details shared by authorities are reminiscent of one of the oldest piracy tricks. For over two decades, pirates have hijacked pay-TV by copying the constantly changing key that unlocks a single legitimate subscription and sharing it out to everyone else. This is typically known as card sharing.

GdF video

However, with card-sharing, keys typically change every few seconds. The GdF suggests that CinemaGoal refreshes codes every three minutes, which is significantly slower.

That timing, together with the claim that CinemaGoal actually looked better than an ordinary pirate stream, hints at something more modern. This would be largely in line with CDN leeching, which is an emerging problem that anti-piracy outfits have been referring to over the past years.

In 2024, anti-piracy group Irdeto noted that this technical breach is particularly popular among operations that use piracy-enabling devices.

“Typically, they will reverse engineer video applications to understand how to access and extract the CDN content, enabling them to distribute pirated material more efficiently,” the blog post explained, while also referencing the quality improvement.

“Pirates leverage CDN infrastructure to deliver pirated content more quickly and with lower latency, thus enhancing the streaming experience for their illicit users,” Irdeto added.

What type of operation was targeted by operation “Tutto Chiaro” remains unclear for now. The police reportedly have the source code, however, so more information may come out in the future.

Perhaps that will also explain a more straightforward problem with the official press release. Currently, the same “grab the codes every three minutes” description is used for all streaming services, from live sports on DAZN to on-demand video on Netflix, to music on Spotify. These platforms do not all work the same way, however, and cannot all be unlocked by a single trick.

Subscribers in the Crosshairs

Interestingly, public searches show that CinemaGoal has left no notable public footprint. TorrentFreak found no app store listing, APK mirror, reseller storefront, or forum thread predating the operation. Every reference dates to the announcement by the Italian police.

The GdF says the investigation began with “monitoring social media,” and, according to Italian outlet Il Post, the app was promoted through networks such as Telegram, with agents selling online or meeting customers in person. This would confirm that there was no public sales outlet mentioning the CinemaGoal app.

Through Eurojust, the authorities seized foreign servers holding the decryption data and the app’s source code. The same investigation found that the same operation also relied on the more traditional IPTV “pezzotto”, in addition to CinemaGoal.

Rightsholders have welcomed the latest streaming piracy crackdown. Sky Italia’s CEO Andrea Duilio thanked the GdF and the Bologna prosecutors, and warned that people who choose illegal streaming risk fines and expose their personal data to theft and fraud.

Whether the enforcement actions will effectively end the operation is unclear. There haven’t been any reports of arrests of the people who ran the operation.

GdF’s press release does suggest that many pirate subscribers are at risk. It notes that fines will be issued to the first 1,000 identified subscribers, who will receive claims ranging from €154 to €5,000. The GdF puts the total involved in the “thousands.”

This is not the first time that pirate streaming subscribers have come in the crosshairs of the authorities. Last year, thousands of subscribers, connected to an IPTV crackdown, received similar fines in the mail.

From: TF, for the latest news on copyright battles, piracy and more.

05:00 AM

Funniest/Most Insightful Comments Of The Week At Techdirt [Techdirt]

This week, our first place winner on the insightful side is Thad pushing back on some of our criticism about John Oliver’s AI chatbot segment and his call for regulation:

Isn’t the logical conclusion of this argument that we shouldn’t have government regulations on vaccines or antidepressants?

Like, you’re arguing that we shouldn’t put this particular thing under the control of HHS because it’s currently run by a lunatic, but…couldn’t you apply that argument to literally everything?

Hell, why stop at HHS? RFK is hardly the only corrupt moron in Trump’s cabinet. Carr’s corrupt; I guess we shouldn’t have any regulations on the broadcast spectrum. Chavez-DeRemer resigned due to misconduct; I guess we should get rid of OSHA. Kristi Noem —

…okay, actually we should abolish DHS; I’ll give you that one.

In second place, it’s Nimrod with a comment about Border Patrol chief Michael Banks:

Anyone who brags about their sexual exploits clearly lacks the maturity to be put in charge of anything more serious that a lemonade stand. Even then, they should probably be supervised.

For editor’s choice on the insightful side, we’ve got a pair of comments about the latest example of a judge smacking down the DOJ. First it’s Ninja asking the all-important question of whether it will matter at all:

So what exactly is preventing the DOJ and the people they represent from doing this again trying different paths? Any meaningful punishment? Threat of disbarring if it continues? Fines to the DOJ itself and those repeatedly doing this kind of persecution against trans people? Perhaps jail time? No?

It will keep happening.

Next, it’s Nathan F with thoughts about the future:

In two and a half years the DOJ is going to have an almost insurmountable hill to climb in redeeming themselves in the eyes of the court. I have no doubt the the current administration is going to continue to lie to the court and abuse their power.

Over on the funny side, our first place winner is Asst DA BA Baracus with a reply to a commenter complaining about “activist judges”:

Neat how 10,000 decisions are wrong on the law because they’re not YOUR preferred interpretation of the law. And amazing how, without further reasoning from you, you’re able to come to the obvious implication that these are 10,000 decisions by the “lots” of activist judges. How do we know they’re not fair jurists? Because you disagree with them.

The view from your own navel must be glorious.

In second place, it’s Bloof with another comment on the same subject:

Every judge is an activist judge, unless they were handpicked by the federalist society or have worked for Trump in some capacity, then they’re non partisan champions of justice.

For editor’s choice on the funny side, we start out with a comment from Stephen T. Stone, deploying a movie quote in response to Bill Cassidy’s primary loss:

Of all the movies I could quote, Ocean’s Thirteen has the most appropriate two lines I could think of for this:

You think this is funny?

Well … it sure as shit ain’t sad.

Finally, it’s one more comment from Nathan F, this time about Trump’s absurdly corrupt IRS shenanigans:

Soooo… Now that Trump is no longer and can no longer be audited by the IRS.. he is going to release his tax returns right? Right??

That’s all for this week, folks!

03:00 AM

Kanji of the Day: 害 [Kanji of the Day]

✍10

小4

harm, injury

ガイ

被害   (ひがい)   —   damage
障害   (しょうがい)   —   obstacle
被害者   (ひがいしゃ)   —   victim
障害者   (しょうがいしゃ)   —   disabled person
殺害   (さつがい)   —   killing
災害   (さいがい)   —   calamity
傷害   (しょうがい)   —   injury
妨害   (ぼうがい)   —   obstruction
視覚障害者   (しかくしょうがいしゃ)   —   visually impaired person
損害賠償   (そんがいばいしょう)   —   restitution

Generated with kanjioftheday by Douglas Perkins.

Kanji of the Day: 勅 [Kanji of the Day]

✍9

中学

imperial order

チョク

いまし.める みことのり

勅使   (ちょくし)   —   imperial envoy
勅令   (ちょくれい)   —   edict
教育勅語   (きょういくちょくご)   —   Imperial Rescript on Education (1890)
勅語   (ちょくご)   —   imperial rescript
勅撰   (ちょくせん)   —   compilation for the emperor
勅額   (ちょくがく)   —   imperial scroll
勅命   (ちょくめい)   —   imperial command
軍人勅諭   (ぐんじんちょくゆ)   —   Imperial Rescript to Soldiers and Sailors (1882)
詔勅   (しょうちょく)   —   imperial edict
勅任官   (ちょくにんかん)   —   imperial appointee

Generated with kanjioftheday by Douglas Perkins.

12:00 AM

The real AI [Seth Godin's Blog on marketing, tribes and respect]

To quote the great Steve Wozniak, “Actual Intelligence.” The kind we’re born with and can develop if we choose. It’s worth more now than ever before. Alas, it’s rarely taught in school.

The difficult work of making choices.

The act of curation.

The responsibility of putting your name on it.

The judgment to ask the right questions and skip the other ones.

The imperative to ship useful work.

The pursuit of good taste.

The patience to sit with the right problem rather than solving the wrong one.

The generosity to create for someone specific.

Seeking justice.

Offering dignity.

Knowing when to stop.

Investing in deep empathy, not a shallow substitute.

Taking initiative and doing the reading.

Being patient, or impatient, depending on what’s needed.

Ignoring the noise.

Making something that matters.

Caring.

      
RSSSiteUpdated
XML About Tagaini Jisho on Tagaini Jisho 2026-05-28 02:00 AM
XML Arch Linux: Releases 2026-05-27 04:00 AM
XML Carlson Calamities 2026-05-27 04:00 AM
XML Debian News 2026-05-28 02:00 AM
XML Debian Security 2026-05-28 02:00 AM
XML debito.org 2026-05-28 02:00 AM
XML dperkins 2026-05-27 04:00 PM
XML F-Droid - Free and Open Source Android App Repository 2026-05-27 10:00 PM
XML GIMP 2026-05-27 04:00 AM
XML Japan Bash 2026-05-28 02:00 AM
XML Japan English Teacher Feed 2026-05-28 02:00 AM
XML Kanji of the Day 2026-05-27 04:00 AM
XML Kanji of the Day 2026-05-27 04:00 AM
XML Let's Encrypt 2026-05-27 04:00 AM
XML Marc Jones 2026-05-27 04:00 AM
XML Marjorie's Blog 2026-05-27 04:00 AM
XML OpenStreetMap Japan 2026-05-27 04:00 AM
XML OsmAnd Blog 2026-05-27 04:00 AM
XML Pluralistic: Daily links from Cory Doctorow 2026-05-27 04:00 PM
XML Popehat 2026-05-27 04:00 AM
XML Ramen Adventures 2026-05-27 04:00 AM
XML Release notes from server 2026-05-27 04:00 AM
XML Seth Godin's Blog on marketing, tribes and respect 2026-05-27 04:00 PM
XML SNA Japan 2026-05-27 04:00 PM
XML Tatoeba Project Blog 2026-05-28 02:00 AM
XML Techdirt 2026-05-28 02:00 AM
XML The Business of Printing Books 2026-05-27 04:00 AM
XML The Luddite 2026-05-27 04:00 AM
XML The Popehat Report 2026-05-27 04:00 PM
XML The Status Kuo 2026-05-27 04:00 PM
XML The Stranger 2026-05-27 04:00 AM
XML Tor Project blog 2026-05-28 02:00 AM
XML TorrentFreak 2026-05-28 02:00 AM
XML what if? 2026-05-28 02:00 AM
XML Wikimedia Commons picture of the day feed 2026-05-20 06:00 AM
XML xkcd.com 2026-05-28 02:00 AM