Federal discovery in the prosecution of 15 Minnesota residents describes an extensive ICE Homeland Security Investigations campaign against people opposing the Trump administration’s immigration enforcement. The investigation, Project Whipple Shield, was funded through Operation Keyhole, an undercover program dating to 2008. Records indicate that more than 100 HSI agents, including at least 11 undercover operatives, took part. They infiltrated activist groups and Signal chats, attended trainings and meetings, monitored conferences in several states, photographed vehicles and checked license plates, and used drone footage. The investigation followed activists who used encrypted messaging, vehicle databases, and dispatch systems to track federal agents during Operation Metro Surge. Prosecutors characterize those activities as conspiracy, stalking, doxing, and obstruction; defense lawyers argue the charges vastly exceed the conduct alleged.
The records also show investigators combining financial, digital, and commercial data: scrutinizing wire transfers and online reimbursements, analyzing website traffic and Signal messages, and consulting data brokers and government databases to identify people. Some tools, including Patriot Act authorities generally used in terrorism and financial-crime cases, were reportedly brought to bear. Former law enforcement officials compare the campaign to past federal efforts to suppress civil rights and anti-war movements, noting that the Minnesota investigation alone involved more personnel than the CIA’s peak staffing for Operation MH/Chaos. They see it as part of a wider national effort, supported by new federal resources and a presidential directive targeting critics and groups deemed “anti-Christian,” rather than an isolated local case.
Summary generated by AI from the linked article. hn.today is not affiliated with Hacker News or Y Combinator.
A leak of DHS records exposed personal and workplace details for more than 41,000 employees and contractors, including undercover ICE agents and information about surveillance programs. Distributed Denial of Secrets published the data, while Okta said it had no evidence its systems were breached. (wired.com)
Several PDF tools generate advertised AES-256 keys from weak randomness, making encrypted files vulnerable to passwordless decryption. MuPDF versions before 1.28.5 expose only 9 bits of random state in the key, while Foxit relies on predictable time-based randomness. (v12.sh)
Distributed Denial of Secrets published a searchable database with contact information for nearly 40,000 DHS employees, reportedly obtained through an Okta single sign-on leak. The group says the database highlights officials overseeing agency policies and operations, including immigration enforcement and covert programs. (techdirt.com)
Distributed Denial of Secrets released personal and job data on more than 40,000 DHS employees, including staff in surveillance, intelligence, and undercover roles. The group says the data came from a hack of DHS’s Okta sign-on service, but Reuters could not verify the full trove and Okta reported no evidence of a compromise. (reuters.com)
An Android user says Claude Code uncovered 14,219 front-camera and infrared face-unlock images in system and Google Play Services caches, many with timestamps and location data. The user says images kept appearing and recommends checking device backups, though the claim has not been independently verified. (twitter.com)
Amplitude suffered a security incident that exposed contact information for a small subset of Coinbase customers and other clients. Coinbase says its systems and customer funds were unaffected, and it is notifying impacted customers and regulators. (twitter.com)
Today's best Hacker News stories, summarized and screenshotted, one email a day.