I.

After four days of indoor skydiving in Europe last week, my flight from Milan to New York with Emirates was diverted to Boston due to heavy rain, flash floods, and strong winds. There was even a tornado warning in effect for parts of the city. So I did what any respectable aviation geek would do: I set out to see just how much I could learn about flight EK 205 from publicly available sources.

Flightradar24 shows EK 205 performing a go-around at ~1,300 ft. LiveATC captured a Delta pilot reporting a go-around due to wind shear moments before Emirates. ATC then asked Emirates if the pilots wanted to try again. After a brief standby, Emirates requested to proceed to Boston as its alternate destination. Mike Sheward of ACARS Drama and I tried to find ACARS messages from Emirates, without any luck.

According to Flightradar24, a total of 16 JFK-bound flights diverted that evening: 13 to other airports and 3 air-return to origin. EK 205 continued its journey from Boston to New York the next day. The A380 completed the trip in 46 minutes. I’m pretty sure we spent longer on the ground waiting for a gate than we did in the air. (Compare: the shortest scheduled Emirates A380 flights – BKK to HKG and DXB to JED – are around two hours.)

II.

Speaking of ACARS Drama, I set up a Raspberry Pi with two Airspy receivers so that I can feed the project and access the full message archive. I’ve already found a Cargolux pilot report that a kettle is broken, and another asking “AS WE ARE ALREADY LATE, DO WE NEED TO FLY.”

III.

A new Netflix documentary about Boeing paints a picture of a company contributing to its own decline. (I forgot the company tried to outsource the majority of the 787 Dreamliner to suppliers around the world, resulting in puzzle pieces that did not fit together.) For a deep dive on the issues with the 737 Max, check out this podcast or this 2022 documentary.

IV.

The Secret World of Roald Dahl, published in January, is a podcast series about the creator of Willy Wonka, Matilda and The BFG. The series explores how Dahl, a former fighter pilot and British spy, became one of the most successful children’s authors in history. The podcast also asks whether we can separate the art from the artist as it digs into Dahl’s personal history of making deeply antisemitic and controversial public statements.

I.

“An unprecedented number of Apple customers have reported receiving a recent threat notification,” and the good news is that we are getting better and better at detecting use of sophisticated spyware. If you’re concerned about spyware, turn on Apple’s Lockdown Mode feature.

II.

A bungled bomb plot in Poland two years ago exposed a spy, but whose spy was he? The story of Igor Rogov is one about the shadow world of intelligence games and sabotage plots, with the Russian FSB, Ukrainian intelligence, and opposition activists in exile.

III.

Last week’s Hackers On Planet Earth conference in NYC included a panel with journalists who received the leaked Epstein emails, preserved the files, and reported the story. You can view a video trimmed from the live feed or read the transcript here.

I.

What happens when a political movement built on conspiracy theories becomes the target of its own creation? Here’s the story of how the conspiracists that Charlie Kirk once amplified are now spinning theories about his killing. Brandy Zadrozny, who’s investigated disinformation for years, has found that the right is “willing to embrace conspiracy theories as a means to a political end.”

II.

A few months ago, a medevac plane with two pilots and two nurses crashed into the side of a mountain in New Mexico. There were no survivors. WIRED asked whether a military GPS jamming exercise was to blame, seeing how it left the pilots unable to use modern navigation systems. I think it’s sadly more likely all the holes in the Swiss cheese lined up: navigation disruptions, unfavorable weather conditions, pilots with fewer hours and less experience than at the big airlines, and a rush to get a medevac plane to its destination.

III.

The story of the JetBlue flight that went into free fall last year has nothing to do with GPS jamming and everything to do with space, science, and bit flips.

IV.

Speaking of science, security researchers found a way to hack a Boeing 737 using a “roughly coin-sized, Wi-Fi-enabled prototype device that costs less than $100.” The device is capable of sending new commands to sensitive computer systems on the plane, redirecting the autopilot or sabotaging its flight plan. I think the research is fascinating, but the key takeaway is perhaps this: “the researchers note that a careful pilot would be able to recover from almost any of the attacks they’ve imagined.”

V.

Here’s a long read, but a good one: a 21-year-old man in Seattle built a “replica of his hero Andrew Tate’s webcam enterprise”, a community of porn addicts joined forces to take him down. The White Knights, as they called themselves, went all in: “obtaining police records, pooling information, contacting the models’ parents, and eventually even talking to” the man behind the operation, before handing the evidence over to law enforcement.

VI.

I hosted a Reddit AMA with Zack Whittaker of TechCrunch yesterday! We answered numerous questions about US border searches, device security, and protecting your digital data. You can read all the questions and answers here.

I.

I’m hosting a Reddit AMA with Zack Whittaker of TechCrunch on r/pwnhub on Wednesday, August 12 at 5PM PT! Ask us anything about the American citizen charged with a felony for wiping his phone at the US border, device security, and protecting your digital data. See this announcement for more information. I’ll be posting as runasand_.

II.

China’s shadow war is an investigative podcast series from The Observer, published in late March, exploring transnational repression, state-backed intimidation, and covert operations conducted by the Chinese state in the UK and the US. I wrote about how China targets civil society abroad in 2023. Last year, ICIJ published an investigation into China’s sinister tactics based on interviews with more than 100 victims in 23 countries. In April, ICIJ reported that its journalists had been targeted by Chinese actors following the publication.

III.

Here’s a Google Map with a handful of restaurants, cafes, and ice cream shops I love in NYC. Let me know if you have a favorite spot I should add!

I.

I’ve been reading For the Sun After Long Nights about Iran’s 2022 Woman, Life, Freedom uprising by Fatemeh Jamalpour and former New York Times colleague Nilo Tabrizy. A beautifully written and powerful record of Iranian women’s resilience and strength against an oppressive regime.

II.

The U.S. Justice Department is prosecuting an American for allegedly wiping his GrapheneOS phone with a duress password during a border search. Zack Whittaker at TechCrunch has the full story here. As I told Zack, I’ve discussed the potential scenario with activists and journalists over the years, but this is the first time I’m seeing authorities bring charges in this way.

III.

Following the news that the Tate brothers were arrested in the U.S., I watched Louis Theroux: Inside the Manosphere on Netflix and read Heidi Blake’s New Yorker piece on Andrew Tate’s empire of abuse. I also found a one hour video of Tate talking about how he built his “pimping business” in the UK, including how he lies to, profits off of, and maintains financial control over women.

I.

Crazy to think that while Edward Snowden and I taught people to keep their data safe with TrueCrypt, the tool’s alleged creator Paul Le Roux was busy plotting murders, buying drugs from the North Koreans, and helping the Colombians set up their own meth lab. Evan Ratliff details Le Roux’s life as a criminal kingpin in The Mastermind – the U.S. sentenced him to 25 years in 2020. Turns out Lorenzo Franceschi-Bicchierai was right when he told me “Le Roux’s involvement with TrueCrypt is the least interesting part of the story.”

II.

I wrote about Louis Budenz – labor activist, journalist and decade-long communist spy – in my Journalist and Spy newsletter a couple of months ago, based on FOIA documents I had recently obtained from the CIA. I finally got around to uploading those documents, so you can view them here.

III.

Madison Square Garden – where Taylor Swift got married this month – is suing WIRED for its reporting on the company’s surveillance operation. An internal database tracked and categorized hundreds of individuals, labeling some “LGBTQIA,” “DO NOT HOST,” and low to high “risk.” In response, WIRED removed the paywall from two stories Madison Square Garden does not want you to read, making them free for everyone. You can read them here and here.

IV.

The Wall Street Journal has the backstory on the U.S. - UAE agreement on AI, complete with spycraft, diplomacy, and lobbying. Emirati AI giant G24 is mentioned too, run by former DarkMatter staff – the firm created to help the Gulf state spy on rivals, activists, and journalists with former NSA hackers. In November, Microsoft announced a strategic partnership with G24 as part of a $15.2 billion investment in the UAE.

I.

I miss microblogging. I miss Twitter. I still enjoy sharing bits and pieces on a regular basis. So in between navigating wildfire smoke in New York City and dodging the cyclosporiasis outbreak, I had the great idea to create yet-another-newsletter.

II.

Binding Hook says it’s “past time to do something about” spyware, following a Citizen Lab report on a Greek MEP who was targeted (twice) while investigating spyware in Europe. Back in 2023, I wrote an article for Binding Hook arguing that “civil society organizations have been sounding the alarm on spyware for over a decade, yet very little has been done to counter the growing threat.”

III.

New reporting from Amnesty International, Forbidden Stories, and OCCRP details the evolution of the Pegasus spyware and shows how Morocco used it to spy on a journalist, contradicting the government’s public claims to have never used the spyware. In early 2023, Morocco organized an in-person hearing to “disprove” years of spyware research by Amnesty International and Citizen Lab. I fact-checked that here.

IV.

If you’re looking for a podcast to binge this summer and don’t mind an older story, check out The Missing Cryptoqueen from the BBC about the OneCoin fraud scheme. OneCoin’s founder, Dr. Ruja Ignatova disappeared in October 2017 – her whereabouts remain a mystery to this day. Authorities are slowly but surely seizing assets and recovering funds on behalf of the victims.

V.

I finished The Missing Cryptoqueen on Tuesday and jumped straight into We Call Her Emma from Tortoise Investigates and The Observer. Published in 2023, the series takes a closer look at Asma al-Assad – former First Lady of Syria – and her journey from middle-class girl in West London to becoming the First Lady. The Guardian reported last year that the “Assad family are living an isolated, quiet life of luxury in Moscow and the UAE.”