Move Your Two-Factor Without Locking Yourself Out

Everyone tells you to move off SMS. Nobody tells you the order to do it in, which is how people end up locked out of the account they needed most.

Who Can Actually Read Your Cloud Backup

A phone hardened to the point of pain, backing up to a service that holds a compellable key, has moved the target rather than removed it. Who holds the key, ecosystem by ecosystem.

The Five Principles of Digital Privacy

Every day, in a thousand small trades, you and everyone around you exchange data for convenience

The Only Person Hiding Is the Easiest to Find

Eldo Kim did everything right. Tor held, the remailer held, nobody read a word he sent. He was arrested inside a day, because on that network at that hour he was the only one hiding.

You Told It Everything

What a free chatbot therapist and a company that paid teenagers twenty dollars for their whole phone reveal about the trade you make every time something is free.

Encrypted DNS on Every Platform

Everyone recommends encrypted DNS and almost nobody shows you where the setting is. Verified paths for six platforms, and an honest account of what you are actually buying.

You Cannot Protect Your Privacy Alone

What the Golden State Killer, a genealogy website, and 6.9 million innocent people reveal about the one privacy myth the other three depend on.

Intervening in the Attribution Chain

Attribution is a process, not a condition. It runs observation, collection, correlation, identity, and a countermeasure that fires at the wrong stage leaves everything downstream intact.

Lockdown Mode: Is It Worth It?

Two companies shipped a feature with the same name and almost nothing in common. One costs you nothing and everyone should know the button. The other breaks real things and is aimed at very few people.