Micah Lee 🫡

Micah Lee 🫡 @micahflee

@LemonSlayerUS @emptywheel totally. But if you notice they take your device out of sight for awhile, you can choose not to use it anymore — PolitiTweet.org

Micah Lee 🫡 @micahflee

@LemonSlayerUS @emptywheel I never let my laptop go out of sight except for brief moment in x-ray belt, but they can't do an attack then — PolitiTweet.org

Micah Lee 🫡 @micahflee

@WilliamsEast15 you can corrupt bootloader to run malware on boot, which can then make itself persist and even clean up bootloader again — PolitiTweet.org

Micah Lee 🫡 @micahflee

@LemonSlayerUS @emptywheel for evil maid attacks to work, the victim can't know. Attacker needs victim to keep using their device later — PolitiTweet.org

Micah Lee 🫡 @micahflee

@djjohnso most PCs have a TPM, which allows Windows to protect against it. Not quite the same attack, but see https://t.co/aE4Owoywc0 — PolitiTweet.org

Micah Lee 🫡 @micahflee

@djjohnso Macs exec the OS bootloader without cryptographically proving it wasn't tampered with. Macs don't have HSM, which is needed — PolitiTweet.org

Micah Lee 🫡 @micahflee

@LemonSlayerUS @emptywheel DHS is requiring people to check devices, giving US government easy access to tamper with them if they choose — PolitiTweet.org

Micah Lee 🫡 @micahflee

@WilliamsEast15 they don't. Evil maid attacks can install malware within the OS, can give the attacker remote access — PolitiTweet.org

Micah Lee 🫡 @micahflee

@diffalot @mjg59 it needs to be in your computer and mounted when installing kernel updates, or some other packages — PolitiTweet.org

Micah Lee 🫡 @micahflee

@diffalot @mjg59 simplest is to put /boot on a USB stick while installing the OS. Boot from it, carry it with you when you leave your laptop — PolitiTweet.org

Micah Lee 🫡 @micahflee

@Viss but most of that can be pretty automated — PolitiTweet.org

Micah Lee 🫡 @micahflee

@Viss "max" :). They may need time to determine OS version, architecture, if there are UEFI passwords, if they have to remove the drive — PolitiTweet.org

Micah Lee 🫡 @micahflee

But that's if you're using disk encryption. If not, attackers can easily copy all your data and install malware on your laptop — PolitiTweet.org

Micah Lee 🫡 @micahflee

This is an attack to bypass disk encryption. Windows/BitLocker with TPMs does a decent job defending against it, Mac/Linux doesn't (afaik) — PolitiTweet.org

Micah Lee 🫡 @micahflee

An attacker only needs a short amount of time with a laptop (maybe 30 minutes max) to do an "evil maid attack"… https://t.co/qUtvr2tboR — PolitiTweet.org

Micah Lee 🫡 @micahflee

RT @evan_greer: BREAKING: US authorities secretly ban devices larger than cellphones on flights from 13 countries. TSA memo revealed https:… — PolitiTweet.org

Micah Lee 🫡 @micahflee

FBI and NSA chiefs give Trump his worst day yet https://t.co/bJxdnrHfec — PolitiTweet.org

Micah Lee 🫡 @micahflee

RT @Snowden: This is simply not true. Even monstrously unjust sentences (Manning) have been shown insufficient to deter the next whistleblo… — PolitiTweet.org

Micah Lee 🫡 @micahflee

RT @maggiekb1: AWESOME https://t.co/SORWAayVQ0 — PolitiTweet.org

Micah Lee 🫡 @micahflee

@nickastew I don't know which keyboard to recommend. I always just use the default. But definitely at least turn off personalization — PolitiTweet.org

Micah Lee 🫡 @micahflee

@nickastew yes that is a threat. Make sure you use a keyboard that doesn't record your keystrokes and send them to a server — PolitiTweet.org

Micah Lee 🫡 @micahflee

RT @ACLU: Thought The Onion was supposed to be satire? https://t.co/VFg5v0hNJV — PolitiTweet.org

Micah Lee 🫡 @micahflee

RT @SenatorPhD: When I am in the Senate I will introduce legislation placing all work funded by the US government into the public domain ht… — PolitiTweet.org

Micah Lee 🫡 @micahflee

RT @Spacekatgal: The Trump administration has actual, literal Nazis that have infiltrated our government. This is like a bad Captian Americ… — PolitiTweet.org

Micah Lee 🫡 @micahflee

Everyone loves Bernie Sanders. Except, it seems, the Democratic party https://t.co/fuOrQX5BJI — PolitiTweet.org

Micah Lee 🫡 @micahflee

RT @RossalynWarren: Horrific: Teenager 'murdered by ex-boyfriend' after police fined her for wasting their time over fears about him https:… — PolitiTweet.org

Micah Lee 🫡 @micahflee

RT @ddale8: It's cliche by now, but Man Denouncing Obamacare Doesn't Know He's On Obamacare is such a great anecdote genre https://t.co/Ov7… — PolitiTweet.org

Micah Lee 🫡 @micahflee

RT @EricaJoy: 🙅🏾 to the “their ‘bad’ work performance negates the harassment they’ve experienced” b.s. https://t.co/b6UKvQYyOx https://t.co… — PolitiTweet.org

Micah Lee 🫡 @micahflee

RT @sarahkendzior: I was in New Mexico last week. Went to Los Alamos museum and photographed this letter by J Robert Oppenheimer. Appropria… — PolitiTweet.org

Micah Lee 🫡 @micahflee

RT @ShaunKing: Wow. When you dig even a little bit on anybody in the White House, it gets ugly real quick. Bigotry is taught. https://t.c… — PolitiTweet.org