Move Your Two-Factor Without Locking Yourself Out
Everyone tells you to move off SMS. Nobody tells you the order to do it in, which is how people end up locked out of the account they needed most.
Topic
Mobile
A collection of 12 issues
Lockdown Mode: Is It Worth It?
Two companies shipped a feature with the same name and almost nothing in common. One costs you nothing and everyone should know the button. The other breaks real things and is aimed at very few people.
The Complete SimpleX Chat Hardening Guide (2025–2026)
SimpleX is the only messenger with no user IDs at all. Here's how to harden it — profiles, relays, Tor, and self-hosting — for real metadata privacy.
Signal Messenger: 2026
Signal is the closest thing to a trustworthy commercial messaging app that exists. End-to-end encryption is on by default, the protocol is open and audited, and the organization behind it collects almost nothing about you.
They Have Your Data. Here’s How They Track You with It
Someone can say where you were last Tuesday at 8:42 PM and who you were probably with. Not because they broke into your phone, but because your phone was doing exactly what it was built to do.
Call Detail Records (CDRs)
Nobody has to listen to the call. The number dialed, the second it started, and the tower that carried it are enough to reconstruct where you were standing and who you keep coming back to.
Mobile Data Collection Pyramid
Three layers, and they are not equally hard to reach. The top one is bought from data brokers. The bottom one needs a warrant. Knowing which layer a given adversary can reach tells you what is actually worth defending.
Faraday Bags
A bag that genuinely works turns your phone into a brick until you take it out. That is the whole feature, and it is also the whole complaint. Which bags and key fob boxes earn their price, and when the trade is worth making.
SPAM CALLS BE GONE!
Registering takes five minutes and costs nothing, but it only binds callers who were already following the law. Scammers were never checking the list — here is what the registry actually buys you.
Phishing, Vishing, and Spam
Urgency is the tell. Your bank will happily let you hang up and call the number on the back of the card. A vishing caller cannot afford to let you do that, so they will not.