Matt Brooks

Our crew 🤝 The Crew Good luck this season @Brewers

Appreciate the SMTP alias for urgent issues as well as being heads down for infrastructure improvements. While my issue doesn't fall into the urgent category, I sent the initial email 10 days ago with my own follow-up 2 days later, then provided my account email 7 days ago as requested - then things went silent.

@cmatthewbrooks Sorry about that! The support team has been heads down the last two days investing in better cx infrastructure, and so might be a little behind normal response times. If you have an urgent issue make sure to forward to hello+urgent@readwise.io -- we hop on top of those ASAP.

Loving the @ReadwiseReader product - but not so much the lack of responsiveness from e-mail support.

Talks from the first [un]prompted conference are live: youtube.com/playlist?list=…

Phelddagrif is my favorite commander deck, especially with the custom Hippo tokens I just picked up at @SCGCON 😍

To any of my RE followers who focus on firmware targets: are any of you regularly looking at medical devices? Specifically devices designed to prevent and/or record data on epileptic seizures?

@l33tdawg has a history of building cool stuff and this looks like something worth adding to the list!

Happy Lunar New Year! As always, I’m giving away a briefing pass to @BlackHatEvents Asia 2026. Priority goes to students, non-profit organizations, or anyone who needs support to attend. Please DM me if you’re interested. #BHASIA

Happy Lunar New Year to those celebrating!🐎 May you have an auspicious year filled with good health and fortune! And to those tracking threat actors who celebrate, enjoy your week of being able to focus on tasks that might typically fall by the wayside.😜

This section of the README speaking truth:

ICYMI: A much more human-friendly C++ SDK for IDA.

You only have 1 life. Don't waste it trying to impress strangers on the internet.

After 17 years, malware is finally approaching the sophistication of this ACM CCS 2009 paper

Obsidian "Daily Note" quote hitting hard today: "If you don't design your own life plan, chances are you'll fall into someone else's plan. And guess what they have planned for you? Not much." - Jim Rohn

💯 all day. I imagine it’s the same feeling folks who enjoy puzzling experience.

I'm a Hacker. I attend DEF CON every year. We play a fun game called "Spot the Fed". Last week, the Department of Justice released three million pages of Epstein documents. I read them professionally. Not for the names. For the tradecraft. The tradecraft is immaculate. But here's what made me put down my coffee. An FBI informant told authorities in 2017 that Epstein had a "personal hacker." An Italian. Born in the southern region of Calabria. I've met hackers from Calabria. At DEF CON. At Black Hat. The informant said this hacker developed zero-day exploits. For iOS. For BlackBerry. For Firefox. The informant said this hacker sold the exploits to the United States. To the United Kingdom. To an unnamed central African government. And to Hezbollah. Hezbollah paid with "a trunk of cash." That's not how the US government pays. The US government uses purchase orders. But the exploits were the same. Same zero-days. Different payment methods. Different clients. Same hacker. Speaking of hackers in Epstein's emails. If you've been to Black Hat, you know the name. He's on the Black Hat conference board. He co-founded Trail of Bits. He co-wrote the iOS Hacker's Handbook. On April 14, 2018, the hackersent an email. To jeevacation@gmail.com. That's Epstein's personal email address. Subject line: "New Yorker." Document reference: HOUSE_OVERSIGHT_033280. I don't know what was in the email. The email exists. In the files. In the congressional oversight documents. I've been to Black Hat with the hacker in question. Not personally. In the same room. Watching the same talks. About zero-days. About offensive security. About "responsible disclosure." Epstein had a personal hacker selling zero-days to governments and Hezbollah. Epstein was in contact with a Black Hat board member. Epstein funded MIT Media Lab. Where they research AI. And security. And "the future." I don't know what this means. I know what it looks like. It looks like my industry. But there's more. US security officials say Epstein ran "the world's largest honeytrap operation." For Russian intelligence. The KGB. The documents mention Putin 1,056 times. Moscow 9,629 times. An email from September 2011: "You had an appointment with Putin on September 16th." Scheduled like a dentist visit. Security sources say a Russian oil tycoon introduced Epstein to the Maxwells. Robert Maxwell. Ghislaine's father. Called "Israel's Superspy." Alleged KGB. Alleged Mossad. Alleged MI6. Three agencies. One family. Plus a personal hacker. Plus a network of security researchers. Plus MIT. Plus zero-days sold to multiple governments and terrorist organizations. At DEF CON, we have a saying. "Spot the fed." It's a game. You try to identify the government agents in the crowd. It's funny. Until it isn't. Until you realize the game goes both ways. They're spotting you too. And taking notes. And building networks. And buying exploits. Epstein wasn't just an intelligence asset. He was an intelligence infrastructure. A platform. Multi-tenant. Multi-cloud. Russia. Israel. US. UK. Hezbollah. Everyone got access. Everyone paid differently. Same exploits. Same kompromat. Same network. Different clients. The question everyone asks: Was Epstein an intelligence asset? That's the wrong question. The right question: Was the entire security research community compromised? The answer is in the files. Three million pages. We just haven't read them all yet. Was the entire security research community compromised? Anyway, see you at DEF CON!

I'm keeping an eye on @jsrailton timeline as he's watching this Moltbot drama unfold. It's pretty wild.

Looking forward to @CYBERWARCON today. Let me know if you’re around and want to say hi. #CYBERWARCON

I’m not sure how to feel about this but I’m not necessarily upset.

Recon recon.cx/2026/en/index.… Conference: June 19 to 21 2026. More announcements coming soon.