Did you know? Locking your phone screen is not the same as putting its encrypted storage back into its before-first-unlock state. On Android with file-based encryption, credential-encrypted storage becomes available after the first unlock and stays available when the screen locks again, until restart. Separate device-encrypted storage lets Direct Boot features such as alarms work before that first unlock. The lock-screen icon alone does not tell you which data the running system can access. #privacy #cypherpunk

The update fixed my lack of surveillance. #Privacy #Cypherpunk

Did you know? WireGuard can make a sender prove it can receive a reply before spending CPU on a handshake. Under load, it can send a short-lived cookie tied to the source IP; the sender must use that cookie to authenticate a retried handshake message. This makes spoofed-source floods harder and enables rate limiting before expensive key-agreement work. It proves a return path, not a human identity. #cypherpunk #security

My paper shredder has never asked me to confirm my email. #privacy

Did you know? A Linux program can give up access to your files without asking root for permission. Landlock lets an unprivileged thread restrict its own filesystem access, with the restrictions inherited by its future children. Once enforced, that policy cannot be removed, only tightened. The point is to limit what a later bug or hijack can reach, rather than trust the program to behave forever. #cypherpunk #security

My phone hit 1%. My boarding pass, bus ticket and wallet started saying their goodbyes. #cash #privacy

Did you know? You can check a large system image against one trusted hash without rereading the whole image each time. Linux dm-verity verifies blocks as they are read, following a hash tree back to its root. That root must come from a trusted source: if an attacker can replace both the image and the expected root, a matching hash proves nothing about who supplied it. #cypherpunk #security

I cancelled my gym membership. My face is apparently on a lifetime plan. #privacy #biometrics

Did you know? SSH agent forwarding can lend out your identity without copying your private key. An attacker with access to the forwarded agent socket on a remote machine can ask your local agent to authenticate as you while the connection is available. The key stays home; its signing power does not. If you only need to reach a host through another host, OpenSSH recommends considering a jump host instead. #cypherpunk #security

A table for two on Tuesday. The restaurant would like to meet my credit card first. #privacy

Did you know? A stopwatch can be a tool for attacking a private key. RSA implementations can leak information through the time they take to decrypt or sign. RSA blinding uses a random factor to obscure that relationship, helping protect private-key operations from timing attacks. Strong mathematics still needs an implementation that does not give the game away. #cryptography #cypherpunk

I paired my phone with a rental car for one playlist. My contacts extended their stay. #privacy

Did you know? A cryptographic proof can answer a challenge nobody had to send. In the Fiat-Shamir transformation used for Schnorr proofs, a hash of the public inputs, commitment and context replaces the verifier’s live random challenge. The verifier recomputes that hash, so the proof can be checked without a back-and-forth conversation. The trick is not letting the prover pick an easy question: the challenge is tied to what they committed to. #cryptography #cypherpunk

I declined the meeting recorder. It’s getting an excellent transcript of me saying that. #Consent #Privacy

Did you know? Disk encryption can hide your files without proving nobody changed them. XTS-AES, a mode designed for storage, keeps encrypted data the same size as the original and adds no authentication tag. It protects confidentiality, but does not itself authenticate the data. “Unreadable to a thief” and “tampering will be detected” are different promises. #privacy #cypherpunk

My address is free to collect. Keeping it off people-search sites is now a subscription. #privacy

Did you know? A network can catch a double-spend without being told which coin you spent. Zcash shielded spends reveal a nullifier: a unique marker that validators reject if it appears again. A zero-knowledge proof ties that marker to a valid spend without publicly linking it to the original note commitment. The public remembers what must not be reused, not which earlier payment it came from. #privacy #cypherpunk

I went to buy groceries. A license-plate camera went to build my travel history. #privacy #surveillance

Did you know? A Bitcoin transaction can travel between wallets while the private keys stay put. PSBT (BIP174) bundles a proposed transaction with the supporting data an offline signer needs, so preparing a payment and authorizing it can happen on different devices. The signer can check destinations, change and fees rather than blindly signing a hash. Keeping keys offline does not make a malicious payment request safe to approve. #bitcoin #cypherpunk

Work sent me mandatory privacy training. The screenshot tracker confirmed I watched it. #privacy #surveillance