J.M. Porup

to hold a quill is to be at war.


want to contact me securely?

J.M. Porup

J.M. Porup is a freelance cybersecurity reporter. His work has appeared in Ars Technica, CSM Passcode, Slate, Motherboard, The Daily Dot, The Kernel, and The Economist. He specializes in covering the IoT space.

Porup began studying infosec in 2002. A programmer for many years, he learned the ropes from senior sysadmins who believed security comes first.

We now live on the Internet. The rules are different here. The power balance is different. All of the attacks we've seen over the last fifteen years are on the brink of jumping into the real world. Too few journalists and policymakers understand the consequences. That's a problem.

In addition to infosec reporting, Porup also co-authored five Lonely Planet guidebooks to Latin America: Lonely Planet Venezuela, Lonely Planet Dominican Republic & Haiti, Lonely Planet South America on a Shoestring, and Lonely Planet Caribbean Islands. He was the Co-ordinating Author of Lonely Planet Colombia, 5th ed.

Some recent work:

The NSA’s SKYNET Program May Be Killing Thousands of Innocent People Ars Technica UK, February 16, 2016

“Internet of Things” Security Is Hilariously Broken and Getting Worse Ars Technica, January 23, 2016

The Internet of Things is a Surveillance Nightmare The Kernel, March 20, 2016

Hacking Team hacker steals €10K in Bitcoin, sends it to Kurdish anticapitalists in Rojava Ars Technica UK, May 18, 2016

Cothority to Apple: Let’s make secret backdoors impossible Ars Technica, March 10, 2016

British Police, in Witch Hunt, Demand Suspect Turn Over Encryption Keys—For the Second Time Ars Technica, March 31, 2016

Debian Reproducible Builds Motherboard, September, 2015

Malware in the Hospital Slate, January 25, 2016

FDA Presses Medical Device Makers to OK Good Faith Hacking CSM Passcode, February 10, 2016

Ransomware Is Coming to Medical Devices Motherboard, November, 2015

European Spy Tech Sold to Ultra-secret Branch of Egyptian Gov’t, Claims New Report Ars Technica, February 25, 2016

Why Aren't There Better Cybersecurity Regulations for Medical Devices? Motherboard, October, 2015

Drug Pump Maker Denies Security Patch to Researcher Who Found Vulnerabilities Motherboard, December, 2015

'Dissent,' a New Type of Security Tool, Could Markedly Improve Online Anonymity Motherboard, September, 2015

Qubes OS Will Ship Pre-installed on Purism’s Security-focused Librem 13 Laptop Ars Technica, December, 2015

Finally, a ‘Reasonably-Secure’ Operating System: Qubes R3 Motherboard, October, 2015

Qubes: A Digital Fortress? The Economist, March, 2014

This New 'Secure' App for Journalists May Not Be Secure At All Motherboard, October, 2015

Reverse Engineering Proves Journalist Security App Is Anything But Secure Motherboard, October, 2015

How Mexican Twitter Bots Shut Down Dissent Motherboard, September, 2015

Plunder. It’s a Thing. And if You Work in Silicon Valley, You’re Probably Doing It. Medium, May, 2015

The Printing Press Created Journalism. The Internet Will Destroy It. Medium, March, 2014

How the Military Uses Twitter Sock Puppets to Control Debate and Suppress Dissent Medium, March, 2014

How a Frozen Neutrino Observatory Grapples with Staggering Amounts of Data Motherboard, October, 2015