Joseph Cox

@josephfcox

journalist covering hackers/crime/platforms for . Signal ☎️+44 20 8133 5190. Wickr 📳 josephcox. XMPP 🔑 jfcox@jabber.ccc.de 📨joseph.cox@vice.com

Joined March 2011
303 Photos and videos Photos and videos

Tweets

You blocked @josephfcox

Are you sure you want to view these Tweets? Viewing Tweets won't unblock @josephfcox

  1. Pinned Tweet
    Apr 23

    Following this, do you work at Twitter? I would love to hear from you. Using a non-work computer or phone, you can contact me securely on Signal on +44 20 8133 5190, Wickr on josephcox, or our SecureDrop for anonymously sending files is . Don't Twitter DM.

    6 replies 113 retweets 218 likes
    Show this thread
    Show this thread
    Undo
  2. 2 hours ago

    So a video of a John Deere branded USB stick that hijacks your browser to open their website once plugged in has floated around Reddit and Twitter. Spoke to the company; yep, they confirmed it

    11 replies 145 retweets 234 likes
    Undo
  3. Jun 17

    New: game streaming platform is suing to identify some of its users who uploaded the Christchurch attack video and other violating material, the company confirms in a statement. If identified, Twitch will then ask the court to get users to pay damages

    7 replies 88 retweets 180 likes
    Undo
  4. Jun 17

    Looks like I'll be talking at this year's DEF CON on a behind the scenes of how we bought real-time phone location data on the black market, and other details that we haven't spoken about yet

    10 replies 55 retweets 319 likes
    Undo
  5. Jun 17

    Spoke to a source in the underground account stealing community. Said the measures were cool, and would likely stop bots that auto claim accounts, because Instagram will freeze a username change for a period of time. Will just slow, not stop, others though

    1 reply 6 retweets 19 likes
    Show this thread
    Show this thread
    Undo
  6. Jun 17

    Here's how the new Instagram recovery process looks—users asked to enter the email/number linked to the account, or the one used to initially sign up to Insta. Hackers may have access to those too; so Insta has measures to stop logins from new devices

    2 replies 13 retweets 31 likes
    Show this thread
    Show this thread
    Undo
  7. Jun 17

    New: after a wave of complaints about hacked accounts, Instagram is today testing new features that should make it easier for users to regain access to their Instagram account. Comes after we reported users were relying on white-hat hackers for help

    1 reply 38 retweets 80 likes
    Show this thread
    Show this thread
    Undo
  8. Jun 14

    As ever, read 's full piece if you want to see what the proliferation of deepfakes and, crucially, Facebook's response to it really means

    1 reply 10 retweets 28 likes
    Show this thread
    Show this thread
    Undo
  9. Jun 14

    This is wild: Facebook is fact checking art. After artists uploaded a deep fake of Mark Zuckerberg, Facebook's fact checkers flagged the video, meaning its distribution is now limited (Facebook down-ranks it in peoples' news feeds).

    5 replies 40 retweets 69 likes
    Show this thread
    Show this thread
    Undo
  10. Jun 14

    In this week's episode of CYBER, we discuss the hack of a CBP contractor, the likely leak of data on the dark web, and how the CBP made everyone think this is a much, much bigger than it is with a bad PR response

    1 reply 1 retweet 8 likes
    Show this thread
    Show this thread
    Undo
  11. Retweeted
    Jun 14

    Hmmm...Facebook plans to determine the “trustworthiness” of individual reporters, not just news organizations

    40 replies 164 retweets 153 likes
    Show this thread
    Show this thread
    Undo
  12. Jun 14

    Here's the complaint to the FCC over Verizon, AT&T, T-Mobile, and Sprint selling their customers location data to, among other things, ultimately bounty hunters

    10 retweets 13 likes
    Show this thread
    Show this thread
    Undo
  13. Jun 14

    FWIW, the hacker behind the Perceptics breach just sent several screenshots, allegedly of Perceptics email addresses/usernames and passwords for a variety of services. Some external, some internal services.

    1 reply 4 retweets 12 likes
    Show this thread
    Show this thread
    Undo
  14. Jun 14

    New: , , file a FCC complaint—AT&T, T-Mobile, Sprint, Verizon sold their customers' real-time location data, in some cases ended up in the hands of bounty hunters. "The Carriers' actions have threatened public safety."

    3 replies 49 retweets 42 likes
    Show this thread
    Show this thread
    Undo
  15. Jun 14

    I've updated the piece where we downloaded 50GB of hacked license plate images, including peoples' faces, from the dark web. U.S. Customs and Border Protection says its forensic investigation is ongoing

    1 reply 8 retweets 9 likes
    Show this thread
    Show this thread
    Undo
  16. Jun 13

    It's funny going back to the ~insane~ media coverage this breach got when CBP first announced it (despite it being reported a month earlier). Here's NYTimes on how it could help foreign governments. Not sure if NYTimes or others actually looked at the data

    3 replies 4 retweets 11 likes
    Show this thread
    Show this thread
    Undo
  17. Jun 13

    Spoke to the hacker behind the Perceptics breach, which is likely the hacked CBP contractor. "I think that idiots manage the company Perceptics."

    1 reply 10 retweets 26 likes
    Show this thread
    Show this thread
    Undo
  18. Jun 13

    Here's another image from the hacked CBP contractor that was leaked on the dark web. Could see the person's face and vehicle license plate clearly (we've blurred). There are thousands of these images free for anyone to download on the dark web site

    1 reply 7 retweets 16 likes
    Show this thread
    Show this thread
    Undo
  19. Jun 13

    Here is a presentation made for CBP by the contractor (Perceptics) that was hacked. I downloaded this from a dark web site earlier. We've blurred the images, but the photos clearly showed drivers faces

    3 replies 17 retweets 30 likes
    Show this thread
    Show this thread
    Undo
  20. Jun 13

    New: CBP said the traveler and license plate image data hacked from its contractor was not found on the dark web. Here are some of the images we downloaded from the dark web stolen from the likely contractor, and some from a presentation for CBP

    12 replies 188 retweets 257 likes
    Show this thread
    Show this thread
    Undo
  21. Jun 13

    GrayShift, the company that makes tech for local and federal law enforcement to unlock iPhones, plans to expand onto hard Android targets, like Google's own phones. Company also detailed how it can extract a lot of data from an iPhone without unlocking it

    33 retweets 29 likes
    Undo

@josephfcox hasn't Tweeted yet.

Loading seems to be taking a while.

Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.

    You may also like

    ·