Security researcher/engineer working on mobile privacy/security. Founder of @GrapheneOS.

Joined June 2018
108 Photos and videos
Daniel Micay retweeted
6 Apr 2025
no shit
6 Apr 2025
🚨Trump: We're on track to fully eliminate capital gains tax in 2025
214
1,539
30,091
2,028,795
Daniel Micay retweeted
Just figured out where these fake tariff rates come from. They didn't actually calculate tariff rates non-tariff barriers, as they say they did. Instead, for every country, they just took our trade deficit with that country and divided it by the country's exports to us. So we have a $17.9 billion trade deficit with Indonesia. Its exports to us are $28 billion. $17.9/$28 = 64%, which Trump claims is the tariff rate Indonesia charges us. What extraordinary nonsense this is.
Replying to @JamesSurowiecki
It's also important to understand that the tariff rates that foreign countries are supposedly charging us are just made-up numbers. South Korea, with which we have a trade agreement, is not charging a 50% tariff on U.S. exports. Nor is the EU charging a 39% tariff.
2,346
21,029
92,015
19,768,222
Daniel Micay retweeted
Replying to @wartranslated
The "small man" @radeksikorski during the fighting against the Soviet Union in Afghanistan in 1986.
138
1,282
11,840
395,742
Daniel Micay retweeted
9 Mar 2025
What a deal! Surrender, resign, and give us a ransom in exchange for nothing!
9 Mar 2025
Trump reportedly won’t restore military aid or intelligence sharing with Ukraine β€” even if Kyiv and Washington strike a deal on mineral resources β€” NBC News He wants Zelensky to cede territory to Russia, take steps toward holding elections, and possibly step down.
1,177
3,720
21,507
735,207
Daniel Micay retweeted
5 Mar 2025
So when U.S. Key Hole reconnaissance satellites see Kh-101 cruise missiles targeted at power plants and hospitals being loaded on to Tu-95’s in Russia, they won’t be warning Ukraine in advance. Nice, another absolutely unconscionable decision.
UPDATE: The US has stopped sharing "all" intelligence with Ukraine, a Ukrainian source has said.Β  Previously the source, with knowledge of the situation, said the halt in the follow of intelligence had been "selective", only affecting information that could be used for attacks inside Russia.Β  "A few hours ago, the exchange of all information was stopped," the source said.Β  With @safarov_
269
1,802
7,357
359,756
Daniel Micay retweeted
In an 1997 AI class at UT Austin, a neural net playing "infinite-board" Tic-Tac-Toe found an unbeatable strategy: Choose moves billions of squares away, causing your opponent's to run out of memory and crash, forfeiting their turn. The winning move was to kill your enemy.
78
438
8,591
204,995
Daniel Micay retweeted
2 Mar 2025
Replying to @elonmusk
This was never Zelensky's choice. Peace makes sense only with REAL security guarantees, which no one is willing to provide. US, UK, France, and Russia all "guaranteed" Ukraine's security when it surrendered its nukes 20 yrs ago. Russia has been breaking each and every deal since!
20
33
620
25,449
Can someone in the US file a FOIA request about arstechnica.com/security/202… to find out if they were the person paid to try to have me killed by law enforcement? There's a chance it could be traced back to the person who paid for it. I can contact the detectives here about it.
1
10
1,963
Daniel Micay retweeted
I will just point out that this was how the University of Michigan announced its current DEI program in 2022. Seems like they are living up to their promise!
15
145
1,118
129,818
Daniel Micay retweeted
At Keflavik airport, there’s a guy whose job it is to guess the nationality of anyone leaving the country and click the right flag. They must be hiring only the advanced racists for this job, someone who can tell a Norwegian from a Swede with just a glance
387
3,152
78,541
3,234,077
Daniel Micay retweeted
It’s incredible how powerful this idea is once you apply it to the rest of the economy. For example, 100% of catastrophic aviation accidents happen during the last 30 minutes of the flight.
31 Oct 2024
Healthcare for the last 30 days of life accounts for trillions of federal spending, far beyond military spending or any other category. How many years are you willing to work beyond your planned retirement age to keep seniors alive at end of life? Your options are: β€’ Work 5 more years to keep old people alive 1 extra week β€’ 10 years for 2 extra weeks β€’ 15 years for 3 extra weeks β€’ 20 years for 4 extra weeks
Community note
The cost shown is false. Approximately 13% health care costs in the United States was (in 2011) devoted to care of individuals in their last year of life. pmc.ncbi.nlm.nih.gov/articles/PMC46… All of national health care expenditure was $4.5 trillion in 2022. cms.gov/data-research/….
61
215
6,249
409,524
Trail of Bits spun off iVerify into an independent company last year and it's already clearly a scam being pushed with blatant misinformation: x.com/GrapheneOS/status/1824… Trail of Bits and Dan Guido repeating their clearly false claims and backing them up is next level hypocrisy.

15 Aug 2024
Wired was manipulated into spreading misinformation to market Palantir and iVerify by misrepresenting a vulnerability in a disabled demo app as being a serious problem which could be exploited in the real world. They should retract the article but won't. wired.com/story/google-andro…
2
26
2,654
A company acting as if their app can usefully defend iOS devices or detect compromise from within the iOS app sandbox is a complete joke. Attackers can trivially avoid it. Android allows granting more access to apps they can use for this but it's still a ridiculous premise.
2
12
1,403
Makes sense that they would spin it off since it's pretty much a complete scam but now Trail of Bits is destroying their credibility. They've succeeded with initial news coverage based on news publications wanting to attack Google and ignoring them explaining this is wrong.
9
1,292
well actually because of the objc_msgSend branch prediction on apple silicon its really "Objective-C is how the computer works"
1
7
35
6,509
Daniel Micay retweeted
30 Mar 2024
i hope the xz author is alright. it's gotta suck having something you created and cared for getting undercut and infiltrated by someone maliciously. to them your project is just a means to get something elsewhere. to you, the thing you were both making was the point
11
98
1,667
60,300
Daniel Micay retweeted
31 Mar 2024
I disagree with many of the "long-term, planned = state-sponsored attacker" takes on the #xzbackdoor. I once spent a few months becoming a Facebook subcontractor, just to poke around in their internal SRT review tool for bugs. (I explicitly asked their team first if I could try!)
2
3
50
18,858
344
Daniel Micay retweeted
18 Mar 2024
Root programs need to implement a policy that removes CAs, or specific trust bits for a usage they do not utilize, after a certain period. These CAs represent an unnecessary threat surface for the web if they are not contributing to its greater good.
2
4
10
4,828
Daniel Micay retweeted
18 Mar 2024
There are 7 CAs that issue 99% of all certificates that are un-expired the web as of today.
1
3
17
6,152