Even State Department-funded Human Rights Watch admits that authorities combine legal and illegal methods to obtain convictions: https://text.hrw.org/report/2018/01/09/dark-side/secret-origins-evidence-us-criminal-cases
GrapheneOS will remain usable by anyone around the world without requiring personal information, identification or an account. GrapheneOS and our services will remain available internationally. If GrapheneOS devices can’t be sold in a region due to their regulations, so be it.
Signal is drawing a hard line on the federal government’s proposed surveillance legislation: comply with Bill C-22 or leave the country. The secure messaging app says it would rather ditch the Canadian market than be forced to weaken the privacy protections it has built its reputation on. In an interview with The Globe and Mail
My app suddenly said “your account expires in two days”. Weekend was around the corner and there is no way that I could receive one of their refill vouchers in time (I use this method for privacy). I reached out to them, asking them to add a few more days to my account so that all my devices don’t get deleted when my account expires. I also emphasized, that they can of course subtract that amount of days from my next refill. I sent them my account number, encrypted with PGP, and within 12 hours, they replied: I added three more days. It’s on the house. Have a good day! :)
For example: in Canada, the bank accounts of those who protested were literally frozen (for simply speaking out or being critical) and talks of potential CBDCs (aka. used to deduct funds from one’s account as a fine) whilst considering on abolishing cash altogether.
They are currently voting on amends to the regulation.
The “Chat Control” proposal would legalise scanning of all private digital communications, including encrypted messages and photos. This threatens fundamental privacy rights and digital security for all EU citizens.
Google is tightening control over Android under the guise of ‘security,’ but this crackdown on sideloading is a direct hit to digital sovereignty and FOSS. I’ve written about why this matters for our privacy and the future of open platforms. What do you think—is this the end of Android’s ’open’ era?
School computers are riddled with spyware & proprietary software, the fact that they use windows is bad enough, but then you are forced to use edge or chrome and other proprietary software and often you are blocked from installing open source alternatives like librewolf or duck duck go may be blocked.
I have been testing Tor Browser and Mullvad Browser using fingerprint.com. I get unique persistent identifiers that are unique per machine and persist over rebooting sessions. Javascript was on during this test.
Japan protects children online very differently to the UK.
(Shout out to red rose for the heads up - it was interesting.)
While the UK Online Safety Act is driving biometric age verification and platform-based ID checks, Japan has taken another route: mobile carrier filtering enabled by default for under-18s, combined with parental control and digital literacy.
Originally Umbrachat was a web app named Peersuite ( that I also developed) that was distributed as a docker image, web site, or electron app. Umbrachat has chat with channels, file sharing, threaded replies, and image preview in chat. Also, audio/video conferencing and screenshare.
Brazil’s authoritarian age verification law became active this month. It won’t be implemented by GrapheneOS. Complying would require integrating a mandatory process for each user where a third party service checks government identification and confirms a match using the camera.
This is a concept still in the making. I came across a few people discussing it, and I found next to nothing about it online. I thought it is important and I post it here to give it some traction.
Fauxx is an open-source Android privacy tool that poisons data broker and ad-tech profiles by generating continuous, plausible, off-demographic synthetic activity from your device. The goal is simple: make your real behavioral signal statistically indistinguishable from noise.
A security researcher decompiled the White House’s new official app and found some alarming stuff buried in the code, including a hidden GPS tracking pipeline, JavaScript loaded from a random GitHub account, no SSL certificate pinning, and an in-app browser that silently strips cookie consent dialogs and paywalls from every page you visit.
military contractor Palantir is helping the IRS analyze dozens of different data sets on Americans to investigate a broad range of financial crimes, according to records shared with The Intercept.
As the UK, Australia, and other countries appear to be introducing ID requirements and banning the anonymous access, Russia reveals it has the ability to block VPN access.
The UK government is like: “submit ID first before you use iPhone”, like WTF? As apparently, they are considering on making that the default way to unlock a cellphone whilst spying on you (like they already are) keeping tabs on what apps you’re currently using, have downloaded or purchases made online.
A few days back I watched a SomeOrdinaryGamers video, in which he states to drive a Tesla car, despite expressing the obvious privacy concerns surrounding the built-in camera system; but doesn’t seem to consider the privacy-impact to those around the vehicle, he chooses to drive through public streets. And another example being Rob Braxman, while ironically, both known to frequently criticize other public-facing, internet connected surveillance systems (like Ring for example).
There are at least a dozen people spending at least several hours attacking GrapheneOS across platforms on a daily basis. It’s a very strange situation. How do these people have so much time and dedication to keep making posts across platforms attacking us? It’s relentless.
TL;DR tried to leave Gmail for Proton Mail, but ended up running them both simultaneously which created a mess. Later added Proton Pass over Bitwarden and SimpleLogin, but run into autofill bugs and a growing sense of vendor lock-in. I’m planning to consolidate everything into Mailbox.org, Bitwarden and either SimpleLogin or Addy and use a personal domain this time to avoid being locked in again. My fumble was never fully committing to one solution.
Is it still viable to use Signal for privacy in 2026? It’s centralized, and has had many suspicious occurrences in the past.(Unopen source server code, careless whisper exploit which is still active as far as I know, and the whole mobile coin situation.)
Indeed from outside STF seem like a pretty strong foundation with a plan lied out and everything, but the reality says a different story.. Session is on life support
It’s funny, since they are fixated on framing China as a “mass surveillance” dystopia (and propagation of their so called social credit score) but there’s hypocrisy since they implement similar tactics in the Anglosphere (though less obvious) while China is openly flexing that.
LLM-generated passwords (generated directly by the LLM, rather than by an agent using a tool) appear strong, but are fundamentally insecure, because LLMs are designed to predict tokens – the opposite of securely and uniformly sampling random characters.
PieFed
kamayatu24
LiamBox
geneva_convenience
inimzi
☆ Yσɠƚԋσʂ ☆
64bithero
DJ Putler
UnknowableNight
Cantaloupe
Philara
Matty Roses
Salamence
ExtremeDullard
printf("%s", name);
JiffyBag
War5oldier
sveltecider
TheIPW
Alas Poor Erinaceus
Nuvalon
J.R. Cruciani
ki9
Lenins cat
Arthur Besse
StopTech
ell1e
SocialistVibes01
LtDan
PierceTheBubble
Innerworld
ᥫ᭡ 𐑖ミꪜᴵ𝔦 ᥫ᭡
Hellfire103
SilentStriker
🦊 helloyanis :veripawed3: