Runa Sandvik

Runa Sandvik

Creator
0 followers

Runa Sandvik is a former Tor developer and NY Times infosec director turned independent researcher, focusing on press freedom, privacy, and digital security.

UAE Police Rely on Snitches to Track WhatsApp War Photos
SocialApr 4, 2026

UAE Police Rely on Snitches to Track WhatsApp War Photos

If you're wondering how the authorities in the UAE catch those who share pictures of Iranian drone and missile attacks on WhatsApp: police ask, people snitch. https://t.co/POJq6fBEej https://t.co/njFeJQXZpE

By Runa Sandvik
Reuters Saudi Reporter Warns of WhatsApp Impersonation Scam
SocialApr 4, 2026

Reuters Saudi Reporter Warns of WhatsApp Impersonation Scam

The chief Saudi correspondent for @Reuters warns that someone's impersonating him on WhatsApp with links and requests for information; at least one individual in the UAE was contacted by this number already. https://t.co/OkG01CK0TK

By Runa Sandvik
Lofoten Hydrogen Ferry Project Fails to Meet Promises
SocialMar 28, 2026

Lofoten Hydrogen Ferry Project Fails to Meet Promises

An investigation by journalists with NRK in Norway and SVT in Sweden found that a multimillion-dollar, prestige ferry project in Lofoten, Norway relies on hydrogen fuel cell technology that "cannot live up to what it promises." https://t.co/2Sr1sxyPXw

By Runa Sandvik
No Known Danish or Swedish Cases of Biometric Device Seizure
SocialMar 28, 2026

No Known Danish or Swedish Cases of Biometric Device Seizure

Have there been any cases in Denmark or Sweden where the authorities have gained access to a journalist’s device using Touch ID or Face ID? Ref: the FBI and WaPo in January. https://t.co/v0vfip6VUz

By Runa Sandvik
China's Ongoing Assault on Overseas Civil Society
SocialMar 28, 2026

China's Ongoing Assault on Overseas Civil Society

I wrote an article a few years ago about how China targets civil society abroad, still very relevant today. https://t.co/0Ic7yxpWrM

By Runa Sandvik
Apple’s Lockdown Mode Remains Unbreached Spyware Shield
SocialMar 27, 2026

Apple’s Lockdown Mode Remains Unbreached Spyware Shield

Apple’s Lockdown Mode feature is the best defense we have against spyware on iOS, macOS, watchOS, and iPadOS. Apple launched the feature four years ago and has not yet seen a device with Lockdown Mode on be compromised. https://t.co/0lF1BbEWZE

By Runa Sandvik
Hungary Charges Journalist with Espionage over Lavrov Leak Claim
SocialMar 27, 2026

Hungary Charges Journalist with Espionage over Lavrov Leak Claim

Wild story from Hungary where the authorities charged journalist @panyiszabolcs with espionage following an article claiming the country's foreign minister shared EU information with Sergei Lavrov, his Russian counterpart. https://t.co/NzCU3HsnSG

By Runa Sandvik
JFK Terminal 1 Lines Begin After Boarding Pass Check
SocialMar 24, 2026

JFK Terminal 1 Lines Begin After Boarding Pass Check

JFK T1 lines appear normal, both start after the entry point where the agents first check your boarding pass and ID.

By Runa Sandvik
Instagram Should Default to Encryption, Not Cancel It
SocialMar 14, 2026

Instagram Should Default to Encryption, Not Cancel It

Instagram should’ve made end-to-end encryption the default for everyone, not shut it down because “very few people were opting in.” https://t.co/dc2xX4WNbt https://t.co/HLmKFqGLOD

By Runa Sandvik
Unclear if Firms Warned Apple About Stolen iPhone Hack Toolkit
SocialMar 10, 2026

Unclear if Firms Warned Apple About Stolen iPhone Hack Toolkit

We still don't know if Trenchant and L3Harris notified Apple once it learned its iPhone-hacking toolkit had been stolen/leaked. The toolkit was later used to target people in China and Ukraine. https://t.co/XBCHssnaQO https://t.co/y6g1IuwfVZ

By Runa Sandvik
Russian Spy Nomma Zarubina Sent to U.S. Prison
SocialFeb 25, 2026

Russian Spy Nomma Zarubina Sent to U.S. Prison

Nomma Zarubina, who once drunk-texted an FBI agent saying "Catch me baby. So many spies," is heading to U.S. prison for spying for Russian intelligence. https://t.co/UnZ15LNWq6

By Runa Sandvik
Angolan Journalist Targeted with Predator Spyware, Study Shows
SocialFeb 18, 2026

Angolan Journalist Targeted with Predator Spyware, Study Shows

A new investigation from @AmnestyTech found that a journalist in Angola was targeted with Predator spyware in 2024. We also know that @citizenlab found links to Predator infrastructure in Angola in 2023, and links to FinFisher infrastructure in 2015. https://t.co/N2TIUdGKkn

By Runa Sandvik
15 Minutes, Terminal Power Reveal OS X Implant
SocialFeb 14, 2026

15 Minutes, Terminal Power Reveal OS X Implant

Decided to try Claude by revisiting a malware analysis project that I originally presented at @objective_see in 2021: the CIA's OS X implant called Green Lambert. It's amazing what you can do with a terminal and ~15 min of free...

By Runa Sandvik
Ex‑Trenchant Exec Sold Internal Hacks to Russian Broker
SocialFeb 12, 2026

Ex‑Trenchant Exec Sold Internal Hacks to Russian Broker

Former exec at exploit development firm Trenchant, owned by L3Harris, admitted to selling internal hacking tools to a Russian broker. Did the company notify the vendors whose products were exploited so that they could be patched? https://t.co/4wKJgZoIkl

By Runa Sandvik