Daniel Micay (@DanielMicay) / X

Daniel Micay

21K posts

Daniel Micay

@DanielMicay

Security researcher/engineer working on mobile privacy/security. Founder of @GrapheneOS.

Joined June 2018

Daniel Micay
@DanielMicay
Feb 13, 2025
Can someone in the US file a FOIA request about arstechnica.com/security/2025/… to find out if they were the person paid to try to have me killed by law enforcement? There's a chance it could be traced back to the person who paid for it. I can contact the detectives here about it.
Serial “swatter” behind 375 violent hoaxes targeted his own home to look like a victim
From arstechnica.com
Daniel Micay
@DanielMicay
Aug 16, 2024
Trail of Bits spun off iVerify into an independent company last year and it's already clearly a scam being pushed with blatant misinformation: x.com/GrapheneOS/sta… Trail of Bits and Dan Guido repeating their clearly false claims and backing them up is next level hypocrisy.
GrapheneOS
@GrapheneOS
Aug 15, 2024
Wired was manipulated into spreading misinformation to market Palantir and iVerify by misrepresenting a vulnerability in a disabled demo app as being a serious problem which could be exploited in the real world. They should retract the article but won't. wired.com/story/google-a…
Daniel Micay
@DanielMicay
Apr 10, 2024
@pcwalton would appreciate if you could read the direct messages I sent and potentially get me in contact with someone you know who could talk to me about it even though you're not in a position to help with it yourself.
Daniel Micay
@DanielMicay
Dec 21, 2023
Our forum has been consistently targeted by Biterika Group LLC (AS35048) in Russia since shortly after Russia's 2022 escalation of their Ukraine invasion. It's a ridiculous form of attack. The goal appears to be sending email confirmation spam to enemies of the Russian state.
Daniel Micay
@DanielMicay
Dec 4, 2023
Banks telling users they entered the wrong username/password because they aren't running a Google certified OS is a new one. Play Integrity API is such an anti-competitive system and it's not at all justifiable considering that there's a standard hardware attestation API.