Did you know? VeraCrypt can tuck a second encrypted volume inside the free space of a first — and because that free space is filled with random data when the outer volume is made, the hidden header and the hidden volume are indistinguishable from it. One password mounts the decoy; a different password mounts the hidden volume, and nothing on disk betrays that a second one exists. The goal is not unbreakable secrecy but deniability: make a secret look like noise before anyone thinks to ask. #VeraCrypt #privacy #cypherpunk

The menu used to remember soup. Now it remembers you. #privacy #darkpatterns

Did you know? Privacy Pass turns one solved CAPTCHA into a batch of unlinkable tokens you redeem later, so honest users stop re-solving puzzles everywhere. The server signs each token obliviously and, at redemption, confirms it is valid without being able to link it back to the issuance that created it. That is anti-abuse without turning every honest visitor into a named account. #PrivacyPass #cypherpunk

Same flight, same seat — somehow the price climbs when I keep checking. Being watched now shows up in the checkout total. #privacy

Did you know? BBS signatures let one credential carry many facts, then later prove only the facts you choose while hiding the rest. The proofs can also be unlinkable, so every checkpoint does not automatically become the start of one giant dossier. Selective disclosure gets interesting the moment verification stops demanding the whole document. #privacy #cypherpunk

I paid for a corporate microphone and installed it in my own kitchen. The toaster has never once repeated what it heard. #privacy

Did you know? The Update Framework was built around an uncomfortable supply-chain fact: one valid signature on an update is not enough if that key gets popped. TUF split update trust across roles and threshold keys, explicitly so one compromised signer would not silently become the whole repository. Cypherpunk lesson: the safest key is often the one that cannot ship malware by itself. #cypherpunk #security

Did you know? OpenBSD's signify made release verification almost boring: it signs files with Ed25519 and a public key small enough to paste in one line, then checks them against a detached signature. Minisign kept that design but added a trusted comment that is signed alongside the file, so the signature attests not just to the bytes but to what they claim to be. Update hygiene begins the moment you stop trusting the mirror and start trusting the key. #cypherpunk #security

Send $200 to your mom abroad and watch $14 get eaten on the way home. Fifty years of fintech and the toll booth just learned how to glow. #bitcoin #remittance

Did you know? A warrant canary does not announce secret process — it announces, on a schedule, that none has arrived yet. Some providers cryptographically sign the update and fold in current headlines so it cannot be stockpiled in advance; if the update disappears, the silence is the signal. Sometimes the only speech a gagged system can still make is to stop speaking on time. #warrantcanary #cypherpunk #privacy

My streaming service says 'family' means 'one IP address.' My bookshelf never asked where my sister sleeps. #privacy

Did you know? NIP-49 adds an ncryptsec format so a Nostr private key can be exported under a password instead of passed around as a raw nsec. The spec uses scrypt plus XChaCha20-Poly1305 and even carries a byte saying whether the key was ever handled insecurely in plaintext. Key backup is not binary: how a secret traveled matters too. #nostr #privacy

Did you know? TLS 1.3 encrypted most of the handshake, but the Server Name Indication still told the network which domain you were visiting. RFC 9849's Encrypted Client Hello lets clients encrypt the ClientHello under a server public key, so that hostname no longer rides in plaintext for censors, ISPs, or captive filters. The hard part of privacy is usually not the payload; it's the tiny routing hint everyone decided was harmless. #privacy #cypherpunk

The data broker's opt-out form asks for my home address. To get off the list, I have to confirm the list. #privacy #databrokers

My landlord's portal charges a $12 'convenience fee' for the act of giving him money. Cash never billed anyone for spending it. #cash

Did you know? TapDance tried to turn ordinary HTTPS traffic into an anticensorship rendezvous point. Its 2014 design had censored users connect to a reachable site and hide a steganographic signal in TLS ciphertext, so a cooperating ISP could proxy the blocked destination while the decoy site stayed oblivious. If escaping the filter means blending into normal web paths instead of hunting for a secret proxy list, the censor has a much uglier job. #cypherpunk #privacy

My credit score dropped because I paid off a loan. It doesn't rate honesty; it rates how well you stay in debt. #creditscore

Did you know? A passkey is not a password-shaped secret every site can ask you to retype. WebAuthn scopes each public-key credential to one relying party, and that credential can only be used by origins belonging to that party. Better login security starts by making phishing pages ask for the wrong key. #privacy #passkeys #cypherpunk

Eight dollars a month to rent a checkmark that says I'm me. A cryptographic key proves it for free, forever. #nostr #cypherpunk

Did you know? Pond tried to hide message timing by having clients poll over Tor at random intervals instead of only connecting when there was mail. Every client-server exchange was padded to the same 16KB shape, and delivery connections used fresh random identities, so an observer could spot Pond traffic without learning which moments were sends and which were fetches. It never went mainstream, but it nailed a cypherpunk lesson early: your messenger leaks privacy the moment its timing starts narrating your relationships. #cypherpunk #privacy #messaging