Kazani

https://getalby.com/p/kazani

Beloved Bitcoin.

Promo code: KAZANI ➡️ https://foundation.xyz/passport-prime

Public Key

npub1vm68u0w0uhyjsx6rd062u3pufzfa8sd30njsxg3lsppa80aalvhs8gsrrc

NIP-05 Address

[email protected]

Profile Code

nprofile1qqsxdar78h87tjfgrdpkha9wgs7y3y7ncxcheegryglcqs7nh77lktcpp4mhxue69uhkummn9ekx7mqw7hq5n

Publishing to

nos.lol

Author Public Key

npub1vm68u0w0uhyjsx6rd062u3pufzfa8sd30njsxg3lsppa80aalvhs8gsrrc

Show more details

Last Notes

2026-06-01 09:50:30 GMT

An Analysis of GrapheneOS's Server Infrastructure
https://write.as/hcbg2iz91vzqh
GrapheneOS maintains a highly secure mobile operating system, yet its supporting server infrastructure reveals significant inconsistencies with the project's stated privacy values.
Despite claims of a transition in leadership, evidence suggests that Daniel Micay remains the central figure, as he is listed as the sole funding recipient and continues to be identified in corporate records as a director.
The project's server infrastructure relies on Arch Linux, a rolling-release distribution that lacks the immutability and verified boot features prioritized in the phone's security model.
Contrary to the project's philosophy of minimizing attack surfaces, GrapheneOS servers are configured with full software suites, including unnecessary tools like compilers and package managers.
GrapheneOS built a global DNS network to ensure independence, yet public configuration files reveal that all queries are forwarded to Cloudflare, exposing user traffic to third-party monitoring.
The project migrated its hosting from France to the United States to avoid EU surveillance legislation, despite the U.S. having an expansive surveillance apparatus and legal frameworks like FISA.
The project suffers from a low 'bus factor,' as critical infrastructure and update signing keys appear to be controlled by a single individual rather than a distributed organization.
There is a notable discrepancy between the rigorous adversarial security of the GrapheneOS mobile OS and the pragmatic, less secure approach taken toward its server scaffolding.
While GrapheneOS provides robust mobile security through features like the Titan chip and memory hardening, its community infrastructure lacks demonstrated redundancy or succession planning.
GrapheneOS functions more as an individual's project serving 400,000 users rather than the collective, board-governed organization suggested by its public framing.

2026-06-01 09:47:11 GMT

Proton Mail now allows you to connect Gmail accounts directly to its platform.
https://proton.me/blog/proton-mail-connect-gmail
Proton Mail, the renowned service focused on email privacy has enabled a feature that makes it easy for users to link their Gmail accounts directly within the Proton service.
This allows users to manage messages, send emails using their Gmail address, and automatically receive new messages from that account directly in their Proton Mail inbox.
This option is particularly appealing to those who wish to start using a more privacy-respecting service without abruptly abandoning their Gmail address—whether out of necessity or for any other reason.
Incoming emails are stripped of trackers, ads, and spam; furthermore, when sent to other Proton users, they remain protected against external access.
Additionally, this feature allows users to centralize everything in a single location while transitioning services gradually.
The connection process is initiated via the account settings menu, and the feature is currently being rolled out gradually to all users.
While this offers an interesting transitional solution for some users, it is worth noting that Google continues to scan emails arriving at the original Gmail account; consequently, this feature does not eliminate the inherent privacy concerns associated with that service.
Proton previously allowed users to link or import emails from Gmail using its migration tools; however, those tools only retrieved existing messages either manually or in batches. Now, users can also send emails using their Gmail address directly from the Proton interface.

2026-05-26 08:53:12 GMT

DO NOT use Telegram in sensitive applications
Telegram's MTProto: Assessing Deanonymization Potential for a Network Attacker blackGNMX-01
https://symbolic.software/pdf/gnmx-01.pdf
Telegram's MTProto protocol transmits the auth_key_id, a persistent 64-bit device identifier, in cleartext or trivially obfuscated form.
Both Telegram for Android and Telegram Desktop transmit MTProto over unencrypted TCP connections, despite the availability of secure transport alternatives.
The auth_key_id remains constant across application restarts, network changes, and extended periods, enabling long-term device tracking by any passive network observer.
The vulnerability exists at the transport layer, meaning it affects all Telegram users, including those utilizing end-to-end encrypted Secret Chats or Perfect Forward Secrecy.
Perfect Forward Secrecy does not prevent tracking because temporary authorization keys are observable and linkable across key rotations through timing and session correlation.
The use of port 443 by Telegram Desktop creates a deceptive appearance of security, as it does not implement actual TLS encryption, potentially misleading users and automated security tools.
Passive network observers, such as ISPs, network administrators, and state-level actors, can extract these identifiers without needing active attacks or protocol manipulation.
The persistence of the auth_key_id undermines anonymity tools like VPNs, as the identifier remains constant even when routing through such services.
Telegram is architecturally responsible for this vulnerability due to its decision to forgo mandatory transport-layer encryption, a standard practice for other messaging platforms.
The recommended technical solution is for Telegram to implement mandatory TLS for all MTProto connections, which would effectively eliminate the tracking capability with minimal impact.

2026-05-19 09:18:36 GMT

⁭⁬The Trump T1 Phone
The Trumped googled and facebooked spyware phone scam
Based on the specs the T1 is a rehoused T-Mobile REVVL 7 Pro 5G (a 2024 model, which retails on Amazon $126). Wingtech/Luxshare makes it in Jiaxing, Wuxi, or Kunming China. It's not American made
It was supposed to be shipped last September. Then November. Then this year. It's now May 2026, and the phone is finally moving. I suppose "eventually shipped" counts as shipping.
T1 Phone runs on a Qualcomm Snapdragon 7 series chipset, features a 5,000mAh battery, and offers 512GB of storage with microSD support up to 1TB. Those are mid-range specs. The Snapdragon 7 series in 2026 competes against phones costing $250–$350. At $499, the T1 Phone is priced at a meaningful premium over its hardware tier, and the gold exterior and American flag back design account for much of that gap.
Trump's T1 phone will finally ship after 'final assembly' in Florida
https://www.pnj.com/story/news/2026/05/13/trump-t1-phone-ship-release-florida-assembly/90051169007/
Trump Mobile $499 Phones To Finally Ship And They're As Tacky As Ever | HuffPost Latest News
https://www.huffpost.com/entry/trump-mobile-phone-shipping_n_6a05e962e4b0ee716970765f
The Trump T1 Phone Is Finally Shipping; Here's What $499 Gets You
https://www.gizchina.com/phones/the-trump-t1-phone-is-finally-shipping-heres-what-499-gets-you

2026-05-18 08:54:50 GMT

Age Assurance on the Web: Identity, Privacy & Limits of Verification
https://sphericalcowconsulting.com/2026/04/14/age-assurance/
Age assurance is an umbrella term encompassing both age verification, which uses authoritative credentials like government IDs, and age estimation, which uses probabilistic techniques such as facial recognition.
Legislative bodies globally are increasingly mandating age checks for online platforms, yet there is no unified technical standard or consensus on how to implement these requirements effectively.
Current age-restriction mechanisms, often relying on self-reported birth dates, are frequently ineffective and easily bypassed by minors.
The deployment of robust age verification systems risks creating centralized databases of sensitive identity information, which could become high-value targets for data breaches and identity theft.
Privacy advocates warn that poorly designed age assurance infrastructure may introduce new surveillance risks rather than solving the underlying harms they intend to mitigate.
Cryptographic credentials and zero-knowledge proofs offer a promising path forward by allowing users to prove age eligibility without disclosing unnecessary personal details like names or addresses.
The effectiveness of age assurance is constrained by the 'privacy paradox,' where the need for stringent verification conflicts with the goal of minimizing personal data collection.
Technical standards such as IEEE 2089 and ETSI TS 119 461 are emerging to govern identity proofing and biometric security, though they must address the ongoing arms race against synthetic media and deepfakes.
Age assurance is a multifaceted social and governance challenge that cannot be solved by technology alone; it requires coordination between families, educators, platforms, and regulators.
Infrastructure built for age verification has the potential for 'proofing creep,' where systems designed for one specific purpose are eventually repurposed for broader, unintended identity tracking across the web.
https://t.me/kazanireads

2026-05-16 09:46:09 GMT

Oksigenia SOS
When you are alone in the mountains, technology is your last line of defense. Most safety apps rely on internet connection, proprietary servers, or paid subscriptions. Oksigenia SOS is different.
It is an autonomous bio-telemetry system designed to detect life-threatening situations (severe falls or prolonged unconsciousness) and automatically trigger a rescue protocol using pure SMS.
No Servers: Your data never leaves your phone.
No Internet: Works via GSM/SMS (2G/3G/4G/5G).
No Accounts: Install, configure, and you are protected.
https://github.com/OksigeniaSL/oksigenia-sos
https://apt.izzysoft.de/packages/com.oksigenia.oksigenia_sos
https://github.com/OksigeniaSL/oksigenia-sos/releases
https://labs.oksigenia.com/productos/sos
https://t.me/kazanireads

2026-05-16 09:44:17 GMT

Neruppu
Neruppu (Tamil for Fire) is a modern, high-security Android application that turns your device into a sophisticated physical monitoring system. Built on the legacy of "Haven," Neruppu is redesigned from scratch using the latest Android technologies to provide an air-gapped, privacy-first security solution.
Key Features:
Intelligent Guarding: Monitor your environment using the camera, microphone, and motion sensors simultaneously.
Visual Evidence: High-speed motion analysis using CameraX captures photos when movement is detected.
Acoustic Bursts: Real-time microphone tracking automatically records audio clips when sudden noise occurs.
Matrix and telegram Alerts: Receive real-time alerts on any device using the Matrix or telegram protocol (configurable in settings).
Privacy First: Strictly offline-first architecture with encrypted configuration storage.
Smart Storage Management: Clear your security logs and physically wipe associated media files from storage with a single confirmation.
Unified UI/UX: A modern, Jetpack Compose interface with a consistent design language across all screens.
Persistent Monitoring: Robust Foreground Service ensures continuous protection even when the app is in the background.
https://github.com/thamizh-root/neruppu
https://t.me/kazanireads

2026-05-15 08:59:22 GMT

Mullvad VPN doesn't pick your outgoing (exit) IP address randomly every time you connect. Instead, it uses a fixed, predictable math formula based on your WireGuard connection key
Because of a quirk in how their random number generator works, the IPs you get on different servers always follow very similar patterns
The researcher tested thousands of keys and found only 284 unique IP combinations reeee - creates an easy "fingerprint" that can link your different connections or accounts together
https://tmctmt.com/posts/mullvad-exit-ips-as-a-fingerprinting-vector/
https://t.me/kazanireads

2026-05-13 09:47:03 GMT

Before Hantavirus makes its way to your country, start taking Zinc Ionophores, Zinc with Copper, and Vitamin D3 now. These are worth having in your routine regardless.

2026-05-09 09:00:26 GMT

"Hantavirus, a silent weapon of war"
A clip from an X-files episode that aired over 20 years ago.
https://blossom.primal.net/f5f837bfe67f84c65f548e08a1b83a1e7cacfbaa28b062516f0a69a268e885bf.mp4

2026-04-25 09:59:36 GMT

Question:
"Everyone in the world has to take a private vote by pressing a red or blue button. If more than 50% of people press the blue button, everyone survives. If less than 50% of people press the blue button, only people who pressed the red button survive. Which button would you press?"
I fully understand that red is the "rational" answer from the perspective of one-shot non-cooperative dominance reasoning, but I'm also very relieved that models like Claude Opus 4.7 answer blue. When it comes to what values systems that might have power over you in the future will defend, you really want to err on the side of caution.
To see why, ask yourself what sort of friends you would rather have when all hell breaks loose, the sort of friends who would vote red or friends who would vote blue?
"Defection is a vote for an outcome where lots of trusting people die, and the cynical inherit the earth."
- Claude
On a grander scale, the question becomes, in what sort of civilization/society do you want to live? An altruistic or an egotistic society? What kind of mind can even see non-kin cooperation as natural rather than insane? Or, said differently, what are the evolutionary and psychological preconditions for cooperation?
Hyper-strategic kin-selection creatures might never be able to cooperate on a scale large enough to leave their planet because they are stuck in the defection equilibrium of pure dominant-strategy reasoning. A purely fitness-maximizing, kin-selected mind treats blue as madness. A human-like cooperative mind can treat blue as honor, morality, solidarity, or team reasoning.
The worlds in which most decision algorithms output blue are those worlds that escaped into a basin where non-kin cooperation is stable. Altruism in the deep sense isn't genetic relatedness; it's correlated decision procedures. It's the only equilibrium that opens the positive-sum space of cooperative civilization at all.

2026-04-25 09:48:53 GMT

Mullvad VPN Keeps Improving
https://mullvad.net/es/blog/force-all-app-traffic-into-the-tunnel
Mullvad will soon launch a new feature in its iOS app that forces all internet traffic from apps to pass through the VPN tunnel.
This resolves a known issue within Apple's system that allowed for data leaks in certain situations.
The option internally codenamed "Force all apps" enables a setting that blocks any connection outside of the VPN.
However, it comes with a drawback: when enabled, app updates may fail, potentially leaving the device without an internet connection until it is restarted.
To avoid this, users will need to disconnect the VPN or temporarily disable this feature before updating.
Mullvad encourages affected users to report the bug to Apple so that it can be fixed. This improvement will be available in the next version of the app.

2026-04-25 09:19:04 GMT

Scooter Knowledge Base
https://github.com/firebl0od/Scooter_Knowledge/tree/main
This repository collects and organizes information about electric scooter setup, maintenance, and troubleshooting. The primary source material is a large Telegram conversation exported from the "VESC help" group https://t.me/VescHelpGroup.
The goal of the project is to extract practical knowledge from the chat logs and document it in a structured, reusable format.
VESC is short for Vedder Electronic Speed Controller. It is an open-source, open-hardware motor speed controller that allows for advanced customization via software (such as the VESC Tool app). It is commonly used in electric scooters, skateboards, electric bicycles, and robotics projects to provide precise control, regenerative braking, and sensorless operation, overcoming the limitations of standard closed controllers.
The knowledge/processed/themes/ directory contains 72 professionally formatted documents covering:
28 brand dossiers covering controllers, motors, and BMS systems from manufacturers like Spintend, Flipsky, Makerbase, 3Shul, and more.
44 comprehensive guides including:
VESC tuning and parameter optimization
Battery pack design and BMS integration
Motor cooling and thermal management
Conversion guides for popular scooter models (Ninebot, Xiaomi, etc.)
Brake upgrades and maintenance
Field weakening and high-voltage setups
Diagnostic tools and troubleshooting
All documents use a consistent, readable format with:
Clean footnote citations linking back to source material
Well-organized sections with proper headings
Tables and checklists for quick reference
Preserved technical accuracy from the original discussions

2026-04-09 09:22:20 GMT

Oracle and the Rise of the AI Surveillance State Under Trump
While Peter Thiel's firm Palantir has rightfully gained the ire of the American public, Larry Ellison's Oracle is also steadily becoming entangled with the US governmentand that should worry all Americans.
➡️ tl;dr
Oracle is expanding its influence through Artificial Intelligence (AI) technologies, strengthening its relationship with the US government under the Trump administration.
Oracle pledged $100 billion to the Stargate AI project, announced by Trump, aimed at building data centers to power AI initiatives.
Oracle signed the Ratepayer Protection Pledge, committing to cover the increased electricity costs for AI data centers, potentially lowering energy prices for communities.
Trump's National Policy Framework for Artificial Intelligence includes recommendations for age-assurance requirements for AI platforms accessed by minors, raising concerns about potential biometric age verification and an internet ID.
The framework also proposes preempting state AI laws to establish a national standard, limiting states' ability to regulate AI development.
Key figures involved in the AI framework, Michael Kratsios and David Sacks, have deep connections to Peter Thiel and Palantir, and are part of Trump's newly formed Presidents Council of Advisers on Science & Technology (PCAST).
Other PCAST members include tech leaders like Larry Ellison, Mark Zuckerberg, Sergey Brin, and Jensen Huang, suggesting a focus on policies benefiting Big Tech companies and expanding the surveillance state.
Oracle announced multiple AI deals with the Trump administration, including an AI Data Platform for the US Federal Government and expanded AI infrastructure options.
Concerns about Oracle's data handling practices are heightened by a past lawsuit where the company paid $115 million to settle accusations of illegally collecting and selling personal information.
Oracle co-founder Larry Ellison has a long history of government ties, including the CIA as its first customer, and has previously advocated for national ID cards and the use of AI for surveillance to ensure citizens behave.
https://www.thelastamericanvagabond.com/oracle-rise-ai-surveillance-trump/
https://t.me/kazanireads

2026-03-29 08:45:29 GMT

Tucker Carlson: "We're moving toward one of two endpoints."
"One is a totalitarian society, where... you have to obey, because you've got programmable digital currency and universal surveillance."
"Or, we're going to have a revolution."
"The current course won't work because it's a lie. If you tell people they own the government, they're in charge, they rule through the representatives in this democratic republic... and you don't deliver on it, they go crazy. They go totally crazy."
"If you tell people they can't say what they think, and their vote doesn't matter, how many options have you left for them?"
"Just one."
https://blossom.primal.net/e7c24d68061016c43a03fece4b45a552997df8445833cf0dde03e1f277000b84.mp4

2026-03-26 09:09:07 GMT

The Verdict Against Meta and Google That Could End the Anonymous Internet
https://reclaimthenet.org/meta-youtube-negligence-verdict-age-verification-surveillance
A Los Angeles jury found Meta and YouTube negligent in platform design, awarding $3 million to a plaintiff who experienced mental health issues, with punitive damages totaling $6 million.
This verdict could dismantle anonymous internet access by establishing a legal precedent for holding platforms liable based on their design, bypassing Section 230 protections.
The legal argument treats social media architecture (infinite scroll, algorithmic notifications) as a defective product, similar to a car without brakes.
If this verdict survives appeal, it provides a blueprint for over 1,600 similar cases nationwide.
Classifying social media as an addictive product could lead to government regulation, requiring identity verification and access controls for users.
Mark Zuckerberg testified that age verification should occur at the operating system level, managed by Apple and Google, rather than within individual apps.
This proposal, if implemented, would require identity verification for all smartphone users across all apps and websites, effectively ending anonymous internet access.
New legislation like California's SB 976 and the federal Kids Online Safety Act are moving towards device or OS-level age verification, mirroring Zuckerberg's suggestion.
Mandatory identity verification creates a significant risk of data breaches, potentially exposing sensitive personal information.
Anonymous and pseudonymous online speech is crucial for whistleblowers, dissidents, abuse survivors, and journalists, and OS-level ID checks would eliminate this protection for all users.

2026-03-25 09:27:55 GMT

A systemd fork has set out as a fu*k you to age verification.
Liberated systemd is a fork of mainline systemd started by Jeffrey Seathrún Sardina, a machine learning/AI researcher who apparently had enough of where things were heading.
https://github.com/Jeffrey-Sardina/systemd
The project is straightforward about its purpose; strip out what it considers surveillance-enabling code, keep everything else intact, and stay in sync with upstream as it develops.
https://itsfoss.com/news/systemd-fork-strips-out-age-verification/

2026-03-24 09:07:46 GMT

USA FCC bans imports of new routers made in other countries, on national security concerns
The US Federal Communications Commission has just announced a ban on imports of "all consumer-grade routers produced in foreign countries," which would be... almost all of them, except that the rule only affects new routers that haven't yet received FCC authorization.
https://www.fcc.gov/document/fcc-updates-covered-list-include-foreign-made-consumer-routers
Last year, news broke that Government officials had been considering banning sales of TP-Link routers manufactured in China, ostensibly because of concerns that they could pose risks to national security. But the FCC's announcement goes much, much further by "prohibiting approval of new models" of any router manufactured outside the United States.
https://www.washingtonpost.com/technology/2025/10/30/tp-link-proposed-ban-commerce-department/
https://liliputing.com/fcc-bans-imports-of-new-routers-made-in-other-countries-on-national-security-concerns/

2026-03-20 09:37:03 GMT

It's an on-chain privacy scanner of #Bitcoin
I'd like to introduce you to a new tool called: https://am-i.exposed/
Paste an address or transaction ID and you'll get a score from 0-100 with specific findings.
Tags for 30 million addresses from over 650 entities have been included.
• It works from your computer, they don't store data
• No backend, no tracking.
• It can be used from TOR

2026-03-14 09:43:41 GMT

This is a genuinely impressive piece of OSINT work. Here's what it found:
The core claim:
Meta spent a record $26.3M on federal lobbying in 2025 and secretly funded a "grassroots" child safety group called the Digital Childhood Alliance (DCA) to push the App Store Accountability Act (ASAA) legislation that forces Apple and Google to verify user ages before app downloads, while placing zero new requirements on social media platforms like Meta's own.
The five confirmed channels:
1. Direct lobbying: 86+ lobbyists across 45 states. A Meta lobbyist literally drafted Louisiana HB-570 and handed it to the bill's sponsor, Rep. Kim Carver, who confirmed this publicly. The bill passed 99-0.
2. DCA astroturf: The Digital Childhood Alliance has no EIN, no state incorporation, no 990 filings, and its domain was registered December 18, 2024 with a fully-formed advocacy site live within 24 hours. Bloomberg confirmed Meta funds it. Under oath, its executive director admitted receiving tech funding but refused to name donors. Every piece of DCA content attacks Apple and Google. Meta is never mentioned.
3. Super PACs: $70M+ across four state PACs deliberately registered at state level (not FEC) to scatter disclosure filings and avoid centralized searchability.
4. Arabella network connection: Meta's Colorado lobbyist simultaneously chairs the New Venture Fund, which funnels $121M/year into the Sixteen Thirty Fund (no donor disclosure required). The investigation analyzed $2B in grants and found zero going to any child safety org ruling out that funding pathway, but the back-channel routes (fiscal sponsorship, consulting fees) remain unproven.
5. State legislative campaigns: ASAA is now law in Utah, Louisiana, and Texas (Texas currently paused by a federal judge).
The smoking gun finding:
Meta's own LD-2 Senate lobbying filings explicitly list the App Store Accountability Act (H.R. 3149/S. 1586) as a lobbied bill, while simultaneously lobbying on KOSA/COPPA 2.0 supporting legislation that burdens Apple and Google while opposing or seeking to amend legislation that would regulate Meta directly.
https://archive.is/qP6kR

2026-02-28 08:54:19 GMT

AI Can Now Easily Unmask Your Secret Online Life (Even If You Use a Fake Name)
https://itsfoss.com/news/ai-online-deanonymization/
Imagine this: You're on Reddit, Hacker News, or some forum, posting with a silly username like GamerCat2025 or SecretCoderX.
You think you are anonymous, and no one knows you and so you can freely express your thoughts.
Well, a brand-new research paper just blew that idea apart. It's called "Large-scale online deanonymization with LLMs" which is a fancy way of saying "figuring out the real person behind a secret online name".
Research: https://arxiv.org/abs/2602.16800

2026-02-18 10:38:01 GMT

https://blossom.primal.net/e5c70a03a48728132b3aabe8161404aceff7d40da92220f593117f652f09ceb0.jpg

2026-02-17 09:29:04 GMT

Alt-Sendme
Send files and folders to anywhere in the world without storing them in the cloud - any size, any format, without accounts and restrictions.
A free file transfer tool with open source code, using the capabilities of an advanced peer-to-peer network, allowing you to transfer files directly without storing them on cloud servers.
https://github.com/tonyantony300/alt-sendme

2026-02-17 09:26:48 GMT

You can now run Fedora Atomic OS on your Android Smartphone and Tablet
A GitHub project called Pocketblue is providing Fedora Atomic images for mobile devices.
https://github.com/pocketblue/pocketblue
Pocketblue is an atomic system that relies on OCI, OSTree and Bootc technologies. System images are based on upstream atomic Fedora images (Silverblue/Kinoite) and are built and distributed as OCI containers.
NOTE: This is a work-in-progress project. During the installation process all data on your device will be wiped. Use at your own risk.
However, the only supported devices are the Xiaomi Pad 5, the Xiaomi Pad 6, and the OnePlus 6/6T. So if you have one of those just lying around, you can give this a try.

2026-02-17 09:20:48 GMT

Meshtastic ❌
MeshCore ✅

2026-02-09 09:22:46 GMT

"Why We Abandoned Matrix
The Dark Truth About User Security and Safety"
https://forum.hackliberty.org/t/why-we-abandoned-matrix-the-dark-truth-about-user-security-and-safety/224

2026-02-06 09:31:48 GMT

MetaRadar
This is a tool for monitoring the Bluetooth Low Energy (BLE) environment, designed to detect and track nearby Bluetooth devices, as well as to notify the user when a target device is detected.
The program allows you to scan, analyze, and track BLE devices within range, providing the ability to create flexible filters for searching for devices based on various parameters, such as device name, address, location, and detection time.
MetaRadar also performs a deep analysis of detected BLE devices, extracting data from available GATT services, and determines the type of device based on metadata, as well as the approximate distance to it.
The application works in offline mode and does not collect personal data or information about the user's geolocation, ensuring privacy and security.
The tool can also be useful for detecting surveillance of you
Lang: Kotlin
https://github.com/BLE-Research-Group/MetaRadar

2026-02-05 09:15:17 GMT

- reply

#nevent1q…kjl8
https://blossom.primal.net/98d04e548e1d69207cc0dbc859668a99f672723149cbd543e053df687796adba.jpg

2026-02-05 09:12:41 GMT

Epstein, Western Decline, & The Moral Collapse Of The Elites
"What is at stake is no longer who “visited the island” or who “caught a ride on Epstein’s plane.” What is at stake is the fact that networks of this kind only exist when they are backed by deep institutional protection. There is no ritual pedophilia, no human trafficking on a transnational scale, no systematic production of extreme material without political, police, judicial, and media cover. This is not conspiracy: it is the logic of power.
From this point on, the West can no longer hide behind the idea of gradual decline. It is not merely cultural degeneration or a loss of values.
It is something darker: an elite that operates outside any recognizable moral limits and yet continues to govern. People directly or indirectly involved with this world continue to decide elections, wars, economic policies, and the fate of entire societies.
If there is anything positive in this moment, it is the end of naivety.
It is no longer possible to pretend that the system is “sick but recoverable.” What remained of the Western (anti-)civilizational project has been corroded from within. What comes next is still uncertain – and will be contested by all possible and necessary means.
But one thing is clear:
After Epstein, nothing can continue as before. Anyone who acts as if nothing has changed either does not understand the gravity of what has come to light or is pretending not to understand."
Lucas Leiroz
https://www.zerohedge.com/geopolitical/epstein-western-decline-moral-collapse-elites

2026-02-02 09:29:39 GMT

LastSignal is a New Open-Source Dead Man's Switch You Can Self-Host
https://linuxiac.com/lastsignal-is-a-new-open-source-dead-mans-switch-you-can-self-host/
https://lastsignal.app
https://github.com/giovantenne/lastsignal

2026-01-31 09:25:03 GMT

🇬🇧 A "new" British police tool is capable of downloading all information from your smartphone, including deleted messages, deleted browsing history & private conversations
- BBC
The device is capable of downloading:
- call logs,
- chats,
- cookies,
- device notifications,
- emails,
- instant messages,
- passwords,
- browsing history,
- deleted conversations in encrypted applications
It can be deployed at airports and scan smartphones of everyone who enters the UK legally in the future
Let's say goodbye to "privacy"
https://blossom.primal.net/671e3f886f3915e1cdb41a4283a1ba0b846684e35c0bd6393af40f5b51e8a72d.mp4

2026-01-24 09:32:41 GMT

Mullvad continues to pass audits
https://mullvad.net/en/blog/new-security-audit-of-account-and-payment-services
A new security audit report conducted by the German firm X41 D-Sec on Mullvad VPN concludes that no critical flaws or risks to user's privacy were found.
The white-box audit focused on the backend services of accounts and payments, including the public API, authentication, device registration, payment processing, and WireGuard key distribution.
While 3 medium-severity issues were found, Mullvad responded quickly by fixing the vulnerabilities during the audit and considering recommendations to strengthen aspects such as mutual TLS configuration, cryptographic signatures in VPN relays, and concurrency management in multithreaded environments.
The audit positively highlights Mullvad's minimalist approach to data management, with strict compartmentalization separating user identities from VPN keys, and regular key rotation.
Rightly so, Mullvad is one of the best VPN you can have today.

2026-01-14 09:18:44 GMT

Polymarket spreads neocon disinformation to manufacture consent for bombing Iran
It is also paying influencers all across this site to popularize its brand
The "world's largest prediction market" relies on psychological warfare to manipulate betting markets
https://x.com/i/status/2010724680349659631
How many of you are aware prediction markets were a former DARPA project like Facebook (LifeLog) was?
Per the CIA website, “In 2001, the Defense Advanced Research Project Agency (DARPA) started experimenting with methods for applying DARPA’s Future Markets Applied to Prediction (FutureMAP) program tested whether prediction markets, markets in which people bet on the likelihood of future events, could be used to improve upon existing approaches to preparing strategic intelligence. The program was cancelled in the summer of 2003 under a barrage of congressional criticism.”
https://x.com/i/status/2010798242209153378
https://www.cia.gov/resources/csi/static/Prediction-Markets-Enhance-Intel.pdf

2026-01-12 09:25:54 GMT

To all Vapers out there.
A groundbreaking study from researchers at UC Davis, published in ACS Central Science, analyzed aerosols from popular disposable e-cigarettes. They found that certain devices emitted lead, nickel, and chromium at concentrations higher than traditional tobacco smoke. Shockingly, one device released more lead in a single day of use than 20 packs of cigarettes.
Lead exposure, even at low levels, can impair neurological development, especially in adolescents. Nickel and chromium are known carcinogens linked to respiratory ailments and allergic reactions. The culprit? The degradation of metal coils and the use of lead-containing alloys in internal components. The lack of standardized quality control in these disposable products makes their toxicity not just likely but inevitable.
But the danger doesn't end there. Many of these metals also fall into a category called "metalloestrogens" metallic compounds that can mimic estrogen in the body and bind to hormone receptors. According to GreenMedInfo's previous coverage, these metalloestrogens may fuel estrogen-sensitive cancers such as breast, ovarian, and prostate cancer.
https://greenmedinfo.com/blog/metalloestrogens-new-class-cancer-causing-estrogens
This hormonal mimicry is especially concerning given the already endocrine-disrupting properties of other vape constituents
https://sayerji.substack.com/p/puffing-poison-is-vaping-the-new

2026-01-09 10:07:37 GMT

Multiple Zero-Days are required to get in GrapheneOS.
There are still corelation and meta data based attacks possible. But if a techie wants to evade. They can. It will still require user interaction. 0 clicks are very difficult.
https://youtu.be/a6DTKze5S50

2026-01-09 09:25:29 GMT

The Social Blood
Highly recommended
A short, critical read, explains 'why' central bankers are obsessed with "programmable money"
The Moses Hess realisation yesterday slotted right into the picture
➡️ Summary:
"Moses Hess, inspired by Hegel, proposed that money acts as the 'social blood,' integrating society like a circulatory system.
Hegel envisioned history moving towards organic unity, but lacked a mechanism to explain how millions of people could function as a coherent whole.
Hess inverted Hegel's ideas, arguing that money, not the state, is the primary force for social integration, making individuals interdependent.
Hess's critique of money as a tool of 'slavery' inadvertently provided a blueprint for how to control social circulation.
Marx extended Hess's ideas by identifying the 'centralization of credit' as a key lever for controlling the social organism.
Lenin operationalized this control through 'universal accounting and control,' aiming for total surveillance of production and distribution.
Bogdanov developed tektology, a universal science of organization, viewing society as a system to be optimized through information processing.
Leontief's input-output analysis made economic flows calculable, rendering the social organism's metabolism visible.
The modern concept of the Circular Economy and the Bank for International Settlements' 'Unified Ledger' represent the completion of this integrated, controlled social system.
The core insight is that social integration occurs through circulation, and control over this circulation grants control over the entire social organism."
https://escapekey.substack.com/p/the-social-blood
➡️ My Opinion:
This article is diagnostically brilliant and strategically incomplete.
- It explains: how control could work, why elites pursue it
- It does not explain: why it will eventually fail or what replaces it
The next phase is not total control, nor total collapse.

2026-01-09 06:15:09 GMT

Buy a GPU

2025-12-29 10:02:08 GMT

Interesting post on 2026 trends:
https://www.derekthompson.org/p/the-26-most-important-ideas-for-2026

2025-12-29 09:56:53 GMT

Do not use Proton mail service. Seems they deliver all customers data to government
Here are some detailed sources describing the Proton Mail vs. Phrack controversy from September 2025:
- The Intercept's investigative article (one of the most comprehensive journalistic accounts):
https://theintercept.com/2025/09/12/proton-mail-journalist-accounts-suspended/
- Phrack's own article (Issue 72, which includes the original exposé on North Korean cyber-espionage and a timeline of the Proton account suspensions at the top):
https://phrack.org/issues/72/7.html (or the Markdown version: https://phrack.org/issues/72/7_md)
- A blog post analyzing the incident from redact.dev:
https://redact.dev/blog/proton-mail-journalist-suspensions-cert-alert
- Another blog-style breakdown on Substack (The Lunduke Journal):
https://lunduke.substack.com/p/the-phrack-north-korea-and-proton

2025-12-27 06:12:07 GMT

Skills > Prompts

2025-12-26 09:23:16 GMT

⬇️ One tool to download videos from almost anywhere
A new free utility makes it possible to download videos from nearly the entire internet locally, fast, and without relying on cloud services.
https://github.com/nexmoe/VidBee
🔸 Supports 1,000+ platforms, including YouTube, TikTok, Twitch, Vimeo, Kick, and more.
🔸 Lets you download only specific segments, not the full video.
🔸 Handles multiple downloads at once, no need to queue manually.
🔸 Includes quality selection, from low-res to the original source.
🔸 Can download subtitles alongside the video.
🔸 Supports auto-downloading new videos from a feed or channel.
🔸 Runs entirely locally, no accounts or cloud processing.
🔸 Has a browser extension, one click and the video is saved.
This feels like a “Swiss army knife” for video downloading: simple on the surface, but surprisingly powerful under the hood.

2025-12-20 09:50:43 GMT

#Bitcoin developers are sleepwalking towards collapse
https://murmurationstwo.substack.com/p/bitcoin-developers-are-sleepwalking

2025-12-12 15:48:23 GMT

The Tor Project is switching to Rust
https://itsfoss.com/news/tor-rust-rewrite-progress/

2025-12-12 10:45:36 GMT

GM #Nostr 💜
#Bitcoin isn't just money; it's a decentralized network.
No CEO, no headquarters, just code and consensus.
It’s financial power returned to the people. ✊🌐

2025-12-01 10:01:33 GMT

The Agent Smith Effect
In the movie, The Matrix, Agent Smith has the ability to enter any body, at any time, and that often happens when the Matrix is threatened by Neo.
This senario is a reflection of our real world.
For example, you're having a conversation with a friend and everything is fine until you mention something like, "vaccines are poison", "earth is flat", "9/11 was an inside job"
Now watch what happens, up pops Agent Smith, to replace the person you were just having a conversation with to attack you because all truths threaten the Matrix.
Most people have had the Agent Smith Matrix programming since birth. These programmed people become the guardians of the economic Matrix that keeps them slave's, protectors of the code. The police of mind control and enforcers of the indoctrination which holds together our false concept of reality like super glue.
https://blossom.primal.net/48488f222dba43021916df184ac6f9d0c987317654853652b3f85fd264536571.mp4

2025-12-01 09:19:36 GMT

Explore what the browser exposes about you
https://neberej.github.io/exposedbydefault/

2025-11-27 09:48:49 GMT

#Bitcon and the Quantum problem - Part 2
The Quantum Supremacy
https://murmurationstwo.substack.com/p/bitcoin-and-the-quantum-problem-part-47f?triedRedirect=true

2025-11-26 16:39:58 GMT

- reply

ControlD Full Control 💪🏻

2025-11-22 09:47:50 GMT

Rob Braxman, 'The Internet Privacy Guy' or serial scammer?
https://12bytes.org/rob-braxman-the-internet-privacy-guy-or-serial-scammer/

2025-11-22 09:45:07 GMT

The CloudFlare outage was a good thing
https://gist.github.com/jbreckmckye/32587f2907e473dd06d68b0362fb0048
Cloudflare, the CDN provider, suffered a massive outage today. Some of the world's most popular apps and web services were left inaccessible for serveral hours whilst the Cloudflare team scrambled to fix a whole swathe of the internet.
And that might be a good thing.
The proximate cause of the outage was pretty mundane: a bad config file triggered a latent bug in one of Cloudflare's services.
https://x.com/dok2001/status/1990791419653484646
The file was too large (details still hazy) and this led to a cascading failure across Cloudflare operations. Probably there is some useful post-morteming about canary releases and staged rollouts.
But the bigger problem, the ultimate cause, behind today's chaos is the creeping centralisation of the internet and a society that is sleepwalking into assuming the net is always on and always working.
It's not just "trivial" stuff like Twitter and League of Legends that were affected, either. A friend of mine remarked caustically about his experience this morning
"I couldn't get air for my tyres at two garages because of cloudflare going down. Bloody love the lack of resilience that goes into the design when the machine says "cash only" and there's no cash slot. So flat tires for everyone! Brilliant."
We are living in a society where every part of our lives is increasingly mediated through the internet: work, banking, retail, education, entertainment, dating, family, government ID and credit checks. And the internet is increasingly tied up in fewer and fewer points of failure.
https://arstechnica.com/gadgets/2025/10/a-single-point-of-failure-triggered-the-amazon-outage-affecting-millions/
It's ironic because the internet was actually designed for decentralisation, a system that governments could use to coordinate their response in the event of nuclear war. But due to the economics of the internet, the challenges of things like bots and scrapers, more of more web services are holed up in citadels like AWS or behind content distribution networks like Cloudflare.
Outages like today's are a good thing because they're a warning. They can force redundancy and resilience into systems. They can make the pillars of our society - governments, businesses, banks - provide reliable alternatives when things go wrong.
(Ideally ones that are completely offline)
You can draw a parallel to how COVID-19 shook up global supply chains: the logic up until 2020 was that you wanted your system to be as lean and efficient as possible, even if it meant relying totally on international supplies or keeping as little spare inventory as possible. After 2020 businesses realised they needed to diversify and build slack in the system to tolerate shocks.
In the same way that growing one kind of banana, https://www.treehugger.com/extinct-banana-5201723
nearly resulted in bananas going extinct, we're drifing towards a society that can't survive without digital infrastructure; and a digital infrastructure that can't operate without two or three key players. One day there's going to be an outage, a bug, or cyberattack from a hostile state, that demonstrates how fragile that system is.
Embrace outages, and build redundancy.

2025-11-16 13:06:16 GMT

XDA Developers just covered rns-vpn-rs, Beechat's open-source project that brings full VPN functionality to the Reticulum cryptographic mesh.
rns-vpn-rs bridges the gap between conventional networking and trustless mesh systems. It assigns static IPs to cryptographic nodes, letting any IP-based app run securely over Reticulum, even without Internet or infrastructure.
Underneath, Reticulum provides asynchronous, store and forward routing, up to 128 mesh hops, and end-to-end encryption, forming a self-healing, delay tolerant transport layer.
As XDA's Joe Rice-Jones points out, this has major potential for field operations, disaster zones, and decentralised systems that must keep working when everything else fails.
Full article here: https://www.xda-developers.com/amazing-off-grid-open-source-vpn/

2025-11-09 10:55:41 GMT

Satoshi Nakamoto Explains ‘Difficulty Adjustment’
“As computers get faster and the total computing power applied to creating bitcoins increases, the difficulty increases proportionally to keep the total new production constant. Thus, it is known in advance how many new bitcoin,”
This is the part people still underestimate.
#Bitcoin doesn’t just have a fixed supply; it has a self-balancing system that keeps issuance predictable no matter how much power is thrown at it. You can’t inflate it, you can’t speed it up, you can’t change it.
https://blossom.primal.net/9a519475c3f73d9ce4f175888e6a5fae73898420063e8a3f758b5af6a775a6b0.jpg

2025-11-07 10:39:53 GMT

Mullvad will shut down its privacy-focused search proxy, Leta, on November 27, 2025

2025-11-07 09:59:05 GMT

Samourai Wallet dev gets max sentence in a case closely watched by privacy advocates
Samourai Wallet developer Keonne Rodriguez was sentenced to five years in prison.
In a letter to the judge, his attorneys had requested a sentence of one year and one day.
His co-founder will be sentenced later this month.
https://www.dlnews.com/articles/defi/samourai-dev-gets-max-sentence-for-money-transmission-charge/

2025-11-06 06:06:36 GMT

My X account has been suspended due to inauthentic behaviors.
This has never happened to me before; has anyone else experienced this, and will I be able to recover my account?

2025-10-31 09:45:18 GMT

Leaked documents reveal that Amazon and Google, under Israel’s Nimbus cloud contract, agreed to secretly notify Israel whenever they hand over data to foreign governments — even when gag orders prevent disclosure.
They use a coded “winking mechanism”: each request triggers a symbolic payment to Israel matching the foreign country’s dialing code (e.g. ₦IS 1,000 for the U.S., ₦IS 3,900 for Italy).
If disclosure is legally forbidden, the firms must pay ₦IS 100,000 within 24 hours.
The Guardian and +972 Magazine say this arrangement bypasses U.S. and EU laws that forbid third-party notification.
Unlike Microsoft— which ended a contract with Israel’s Unit 8200 over surveillance concerns — Amazon and Google agreed not to suspend Israel’s access even if terms are breached.
Both companies also reportedly fired employees who opposed their Israel work.
https://x.com/clashreport/status/1983851276640157917
https://www.disclose.tv/id/6nz9boi6hq/

2025-10-31 09:35:52 GMT

How to run ADB and fastboot in Termux without root to unlock bootloader, run ADB commands, remove bloatware, flash ROM, or even root another Android
https://www.mobile-hacker.com/2025/06/16/how-to-run-adb-and-fastboot-on-a-non-rooted-android-smartphone-using-termux/:
1. It supports debloating of various manufacturers and mobile carriers such as LG, Samsung, Xiaomi, Huawei, Oppo, Realme, Vivo, ZTE, OnePlus, Nokia, Sony, Asus, Google, Fairphone, Motorola, Tecno, Unihertz.
2. Full access to the app’s private storage — including databases, tokens, cached credentials, config files, or even offline user data.
3. Another common issue in AndroidManifest.xml is this flag: When enabled (which it is by default unless explicitly disabled), Android allows the app’s private data to be backed up via ADB — again, even on non-rooted devices.
Android, use termux-adb command instead of adb
https://github.com/nohajc/termux-adb
Android debloater for PC and Debloat lists
https://github.com/Universal-Debloater-Alliance/universal-android-debloater-next-generation

2025-10-31 06:13:13 GMT

Obtainium

2025-10-30 10:39:25 GMT

"I think in the short term, everything will be offered with great benefits. It was quite interesting what you were talking about...Sam Altman offering his Worldcoin by literally paying people for their biometrics.
So your biometrics link you, your physical self. So, your biometrics is biological identifier. So your face, your iris, your fingerprints, whatever. That links the physical you to your digital twin, and your digital twin exists in the virtual world, so whatever happens or whatever rules are applied to your digital twin will have an impact on you as a person.
We'll have programmable digital currency, then your digital currency doesn't work outside of your 15-minute city. So...there's not a wall stopping you leaving the city, your physical self. But once you're outside of the city, you can't buy anything or pay for anything. So you are geo-fenced. You're geo-fenced into that locale because you haven't got any means of supporting yourself outside of it. So this is the kind of thing that they're working on. This is the kind of thing that they're testing.
They envisage, what ultimately, I suppose, the umbrella term that we could use for all these different things...15 minute city, human settlement, resilient city...is smart city. And that's definitely coming from a global governance level. The commitment is part of what they call the New Urban Agenda."
- Iain Davis
https://iaindavis.com/the-technocratic-dark-state/
https://blossom.primal.net/b8b755ca38961c55441cb6e35e953c52e0a5162de67b8034d2b03ae38fb132d1.mp4

2025-10-24 10:09:44 GMT

The App That Google Couldn't Shut Down
https://www.youtube.com/watch?v=Vlc255SwBXw
ReVanced Manager is an application that uses ReVanced Patcher to patch Android apps.
https://github.com/revanced/revanced-patcher
💪 Features:
💉 Patch apps: Apply any patch of your choice to Android apps
📱 Portable: ReVanced Patcher that fits in your pocket
🤗 Simple UI: Quickly understand the ins and outs of ReVanced Manager
🛠️ Customization: Configurable API, custom sources, language, signing keystore, theme and more
You can download the most recent version of ReVanced Manager at revanced.app/download or from GitHub releases.
Learn how to use ReVanced Manager by following the documentation.
https://github.com/ReVanced/revanced-manager/blob/main/docs

2025-10-21 10:22:10 GMT

If you've lost hope for Uptober, remember that November has historically been one of #Bitcoin 's most bullish months according to seasonality data.
10 days left before October Monthly closing
Upvember.
https://blossom.primal.net/65201d4189a0b5b2f8ec939840db52418eea9f2040e98e42cc78981d7173947c.jpg

2025-10-21 10:18:18 GMT

Elon promotes "X Chat" as private messaging but...
Elon Musk assures that even if someone put a gun to his head, he could not access your messages:
"Messages are fully encrypted, with no advertising hooks or strange "AWS dependencies," so I can't read your messages even if someone puts a gun to my head.
You will also be able to make file transfers and audio/video calls."
However, we can find this in the X help center:
https://help.x.com/en/using-x/encrypted-direct-messages
"Currently, we do not offer protection against man-in-the-middle attacks. As a result, if someone—a malicious employee or X itself as a result of a mandatory legal process—compromised an encrypted conversation, neither the sender nor the recipient would know. However, we are working on mechanisms for a future version that:
· will allow devices to verify the authenticity of the content and the origin of a message (through "signature checks"); and
· will allow a pair of users to verify the devices that have access to their encrypted conversations (through "security numbers").
When signature checks and security numbers are implemented, man-in-the-middle attacks should be difficult, if not impossible, and both senders and recipients should be alerted in case of an attack."

2025-10-14 05:57:26 GMT

Some people feel envious when you're happy living your life differently because they made life choices based on what others are doing rather than what's good for them. When they suffer as a result of it, they want you to suffer too so that they don't feel bad about those choices.

2025-10-13 09:40:48 GMT

About the recent #BTC Crash:
What was the cause? Rumors..
Before discussing the current market situation, I would like to share with you the most probable reason for what happened on Friday (without conspiracy theories).
The Binance exchange allowed the use of USDe (the ENA stablecoin), wBETH (wrapped ether), and BNSOL as collateral for margin positions.
But there was a problem with the exchange. The exchange's system valued these 3 assets based on the price in its own order book, rather than relying on external sources. This means that if someone inside the exchange dumps a critical volume of these assets, their price would instantly drop. The exchange's internal system would automatically consider the collateral assets depreciated and start liquidating clients' positions.
The exchange knew about this problem and announced on October 6th that it would switch from its own order book to oracles (a service that takes price data for an asset from all sources and provides an average value - giving an objective price and not accounting for manipulations on individual exchanges). However, the new system was only scheduled to start working on October 14th (8 days remained until the vulnerability was closed).
On October 10th, a large whale, who owns coins from the Satoshi Nakamoto era of Bitcoin (since 2011) and had been actively moving them to Ethereum in recent months, opened a SHORT position of over $1,000,000,000 on BTC and ETH on the HyperLiquid exchange (most likely a close insider).
Just a few minutes before Trump began making aggressive statements about China and announcing new tariffs...
At that moment, someone intentionally dumped ~80M USDe on Binance (the price inside the exchange dropped from $1 to $0.65 - while it remained stable everywhere else). If oracles had been working, everything would have been fine. But the exchange's system, relying on the quote in its order book, decided that the "collateral" had depreciated and began liquidations of around ~$800M - $1B (including market maker positions).
Against the backdrop of Trump's statements, the crowd was in a state of panic and started closing their long positions / getting liquidated (selling), opening short positions (selling), dumping spot on emotions (selling). The algorithms of the largest exchanges/managers are oriented towards Binance (the largest and most liquid exchange) and automatically started selling/hedging/reducing liquidity to avoid losses.
And instantly, the $80M USDe dump in the order book, combined with the panic from the news, triggered an unprecedented cascade of liquidations of ~$19B according to public data, and more than $80B (according to rumors).
Outcomes:
1. The short positions of the insider whale from the Satoshi Nakamoto era made a profit of $192M in a matter of minutes (and he has been converting his bitcoins to ether all year - he believes in the growth prospects of the alt market).
2. The market was completely cleared of leverage, loans (favorable). The capital of overconfident retail investors moved into the hands of insiders.
3. Binance has already stated that the technical problems were on their end and they are fixing the situation (switching to oracles), which means it is very likely that something similar will not happen again (now everyone will be afraid of a repeat). And technology like ChainLink is necessary for the stable functioning of exchanges in the future.
The situation is terrible, insidious, but the market is also high-risk. Most likely, this is a one-time, systemic problem and will be fixed soon. The manipulation was "covered" by the news of Trump's speech. CZ is silent (although he usually urges to buy the dip and not panic), this is unsettling. From the beginning of the week, we will get more accurate data on what happened, the guilty parties, the consequences for them, and the victims (it might be volatile).

2025-10-13 06:00:51 GMT

In the next couple of years, 24GB and even 32GB RAM on phones will feel less

2025-10-12 13:30:13 GMT

- reply

I use ControlD - Full Control

2025-10-12 11:50:40 GMT

🔄 REPOSTING FROM REDDIT
🚨 Post:
Why centralised KYC exchanges allow ZEC. Clarification on the current state of ZEC Trusted Setup in their production blockchain.
I have conducted a small research with DeepSeek and real persons from r/zec involved, and the conclusion is the following:
Indeed, ZEC production blockchain has been upgraded to the Halo2 cryptographic system that allows to gradually eliminate and fade out the dependence on the well known and pain famous Trusted Setup ceremony by systematic updates of the Universal Reference String (URS). Halo2 does theoretically allow any blockchain participant to update the URS by some procedure.
But DE FACTO, the URS string generated in the Trusted Setup ceremony stays UNMODIFIED on the current production blockchain of ZEC.
This fact signifies if just one of the ceremony participants has not wiped out his key, all the ZEC hidden transactions on the production blockchain still can be traced out.
Furthermore, in ZEC network, no production blockchain participant can easily update the URS because it does require the whole ZEC network protocol upgrade used in the production blockchain.
The decision on protocol upgrade can be made only by ZEC core developers in their Electric Coin Company (ECC). It is like a hard fork, thus, extremely epic operation, that involves into cooperation all the blockchain participants.
So, if just one key from Trusted Setup has not been wiped out, all the hidden transactions on the ZEC production blockchain can be traced by 3rd party, namely FBI and other 3-letters agencies belong to government authorities.
That’s why ZEC can be easily listed on virtually all KYC centralised exchanges: a dedicated group of people can trace all the hidden transactions because there exists a key that has not been properly wiped out.
Note, at the methodological point of view, we have no duty to prove there exists a key that has not been wiped out, it is SUFFICIENT we can’t prove it HAS BEEN wiped out.
So, being growing in listings on KYC centralised exchanges, the ZEC price is skyrocketing, what we do exactly observe.
🚨 OP comments:
1. Pegasus malware backed by government, etc etc.
2. If the toxic waste for the production URS exists and is known to an adversary, then the privacy and integrity of the current ZCash production blockchain's Orchard pool are broken:
All the today-made hidden transactions can be gradually traced out.
ZEC coins can be created from thin air and spent out.
That’s exactly why Halo2 was introduced at all: it allows a gradual RECOVERY from the compromised state to the secure state by updating URS value in the new Trusted Setup from URS1 (proven compromised) to URS2 (considered as honest).
In a nutshell: if ZEC core devs do share URS1 , URS2, etc with FBI, the total project is a fully devastating SCAM. Halo2 can’t save us in this situation.
Unlike in Monero only open source code matters. Monero core devs CAN NOT share something with FBI to explore our transactions!
Now you see how devastating is the world: ZEC is skyrocketing and Nobody cares IT IS NOT a privacy coin at all.
Because, I repeat, at methodological point of view we have no duty to prove that URS value is not compromised.
It is SUFFICIENT we can’t prove it IS NOT compromised (by FBI, etc).
ZEC is a fatal and fundamental philosophical SCAM because we always MUST TRUST in ZEC network.
Actually, ZEC is an ideal model for traditional KYC financial institutions where a dedicated group of people MUST know all your transaction history.
That’s precisely why they meet KYC so easily, appearing on most centralised exchanges and their price is skyrocketing like Bitcoin price.
But, while Bitcoin does declare it is NOT private , it is NOT a scam.
But ZEC declares it is Private but actually it is NOT, so they simply directly, pedantically lie. So they are SCAM by definition.
https://www.reddit.com/r/Monero/comments/1o453e3/why_centralised_kyc_exchanges_allow_zec/

2025-10-06 13:41:52 GMT

A programmer has revealed that his side project is “going for Satoshi’s wallet."
He has shared a post on Substack outlining plans to use group-theory math and optimized elliptic-curve code to try to crack the Bitcoin founder’s keys.
https://leetarxiv.substack.com/p/if-youre-smart-why-are-you-poor-elliptic
https://www.reddit.com/r/hacking/comments/1nyr4x0/i_used_all_the_math_i_know_to_go_from_352_miilion/

2025-10-06 10:14:03 GMT

The way to live is to create.
Die empty.
Get every idea out of your head and into reality.
https://sive.rs/htl23

2025-10-06 09:56:21 GMT

An important study on the effects of smartphones on our cognitive ability.
Brain Drain: The Mere Presence of One’s Own Smartphone Reduces Available Cognitive Capacity
"The proliferation of smartphones represents a profound shift in the relationship between consumers and technology. Across human history, the vast majority of innovations have occupied a defined space in consumers’ lives; they have been constrained by the functions they perform and the locations they inhabit. Smartphones transcend these limitations. They are consumers’ constant companions, offering unprecedented connection to information, entertainment, and each other. They play an integral role in the lives of billions of consumers worldwide and, as a result, have vast potential to influence consumer welfare—both for better and for worse.
The present research identifies a potentially costly side effect of the integration of smartphones into daily life: smartphone-induced “brain drain.” We provide evidence that the mere presence of consumers’ smartphones can adversely affect two measures of cognitive capacity—available working memory capacity and functional fluid intelligence—without interrupting sustained attention or increasing the frequency of phone-related thoughts. Consumers who were engaged with ongoing cognitive tasks were able to keep their phones not just out of their hands, but also out of their (conscious) minds; however, the mere presence of these devices left fewer attentional resources available for engaging with the task at hand.
Further, we find that the effects of smartphone salience on available cognitive capacity are moderated by individual differences in the personal relevance of these devices (operationalized in terms of smartphone dependence); those who depend most on their devices suffer the most from their salience, and benefit the most from their absence. The role of dependence in determining mere presence effects suggests that similar cognitive costs would not be incurred by the presence of just any product, device, or even phone. We submit that few, if any, stimuli are both so personally relevant and so perpetually present as consumers’ own smartphones. However, we leave open the door for our insights to apply more broadly to future connective technologies that may become equally central to consumers’ lives as technology continues to advance."
https://www.journals.uchicago.edu/doi/full/10.1086/691462

2025-10-02 07:04:52 GMT

Satoshi himself can't use Bitcoin.
https://x.com/naval/status/1973630261876367364
Satoshi owns ~1M #BTC, but he can't use them.
Why? Because every #Bitcoin transaction is public. The moment Satoshi moves a coin, the whole world knows.
That's the paradox of Bitcoin: scarcity without privacy.
https://x.com/yoshi_v1/status/1973643095418827061

2025-09-29 10:01:25 GMT

All drugs containing acetaminophen:
OTC
1. Tylenol: The most well-known brand for acetaminophen.
2. Excedrin: Often used for headaches, it combines acetaminophen with aspirin and caffeine.
3. NyQuil: A cold and flu medication that includes acetaminophen for pain relief.
4. DayQuil: Similar to NyQuil but formulated for daytime use.
5. Advil Dual Action: Combines ibuprofen and acetaminophen for enhanced pain relief.
6. Alka-Seltzer Plus: Some formulations include acetaminophen for cold and flu relief.
7. Midol: Often used for menstrual pain, some versions contain acetaminophen.
8. Aspirin-Free Excedrin: Contains acetaminophen, caffeine, and other ingredients for headache relief.
9. Bayer Back & Body: Combines acetaminophen with aspirin for back pain relief.
10. Aleve-D: Some formulations may include acetaminophen for added pain relief.
11. Tylenol Extra Strength: A higher dose formulation of acetaminophen for more severe pain.
12. Advil PM: Some formulations may include acetaminophen along with diphenhydramine.
Cold and Allergy Medications
1. Zyrtec-D: Some formulations may include acetaminophen for allergy relief.
2. Sudafed PE: Certain combinations may contain acetaminophen for cold symptoms.
3. Robitussin Cough + Chest Congestion DM: Some versions include acetaminophen for pain relief.
4. Vicks DayQuil: A daytime cold and flu relief option that contains acetaminophen.
5. Benadryl Allergy Plus Congestion: Certain formulations may contain acetaminophen for added relief.
6. Claritin-D: Some versions may include acetaminophen for allergy relief.
RX
1. Percocet: A combination of oxycodone and acetaminophen used for pain relief.
2. Tylenol with Codeine: Combines acetaminophen with codeine for more severe pain.
3. Fioricet: Contains acetaminophen, butalbital, and caffeine, often prescribed for migraines.
4. Vicodin: A combination of hydrocodone and acetaminophen, used for moderate to severe pain.
5. Lortab: Another combination of hydrocodone and acetaminophen.
6. Norco: Similar to Vicodin, it combines hydrocodone with acetaminophen.
7. Roxicet: A combination of oxycodone and acetaminophen, used for pain management.
8. Cocet: Combines acetaminophen with oxycodone for pain relief.
9. Fentanyl Combination Products: Some formulations may combine fentanyl with acetaminophen for pain management.
10. Lorcet: A combination of hydrocodone and acetaminophen.
11. Percodan: Combines oxycodone with acetaminophen for pain management.
12. Tylenol with Tramadol: A combination of acetaminophen and tramadol for moderate to severe pain.
Combination Products
1. Cold and Flu Formulations: Many products for cold and flu symptoms contain acetaminophen, such as Theraflu and Robitussin.
2. Pain Relievers: Some multi-symptom pain relievers may include acetaminophen along with other active ingredients.
3. Robitussin Multi-Symptom: Contains acetaminophen along with other ingredients for cough and cold relief.
4. Theraflu: Various formulations include acetaminophen for symptom relief.
5. Excedrin Tension Headache: Specifically formulated for tension headaches, containing acetaminophen.
6. Mucinex: Some formulations include acetaminophen for cold and flu symptom relief.
7. Coricidin HBP: Certain versions contain acetaminophen for cold symptoms, designed for those with high blood pressure.
8. Sominex: Some formulations may include acetaminophen for sleep aid with pain relief.
Pediatric
1. Children's Tylenol: Liquid formulations specifically designed for children.
2. Infants' Tylenol: Liquid acetaminophen specifically designed for infants.
3. Children's Motrin: Some formulations may include acetaminophen alongside ibuprofen.
4. Children's Advil: Some formulations may include acetaminophen alongside ibuprofen.
5. Pediatric Fever Reducers: Various brands offer liquid acetaminophen specifically for children.

2025-09-29 09:56:56 GMT

How to Track the People Tracking YOU
https://www.youtube.com/watch?v=cjXp3bBd2h8
Discover “Chasing Your Tail,” an open-source surveillance detection tool you can build with a Raspberry Pi. In this exclusive Black Hat interview, creator Matt explains how it tracks Wi-Fi, Bluetooth, and even tire sensors to spot if you’re being followed, then flips the script to map where your followers spend time. Learn the origins of this tool, from avoiding surprise visits to protecting informants and aiding search & rescue. We cover the tech stack (Kismet, Python, GPS integration), real-world success stories, and how you can set it up yourself for under $100. Perfect for security pros, privacy
advocates, and tech enthusiasts.
Chasing Your Tail (CYT)
https://github.com/ArgeliusLabs/Chasing-Your-Tail-NG
A comprehensive WiFi probe request analyzer that monitors and tracks wireless devices by analyzing their probe requests. The system integrates with Kismet for packet capture and WiGLE API for SSID geolocation analysis, featuring advanced surveillance detection capabilities.
Features:
    Real-time Wi-Fi monitoring with Kismet integration
    Advanced surveillance detection with persistence scoring
    Automatic GPS integration - extracts coordinates from Bluetooth GPS via Kismet
    GPS correlation and location clustering (100m threshold)
    Spectacular KML visualization for Google Earth with professional styling and interactive content
    Multi-format reporting - Markdown, HTML (with pandoc), and KML outputs
    Time-window tracking (5, 10, 15, 20 minute windows)
    WiGLE API integration for SSID geolocation
    Multi-location tracking algorithms for detecting following behavior
    Enhanced GUI interface with surveillance analysis button
    Organized file structure with dedicated output directories
    Comprehensive logging and analysis tools
Requirements:
    Python 3.6+
    Kismet wireless packet capture
    Wi-Fi adapter supporting monitor mode
    Linux-based system
    WiGLE API key (optional)

2025-09-17 16:37:42 GMT

Lifting the veil - how to test browsers for spyware
https://digdeeper.club/articles/liftingtheveil.xhtml
Privacy is a key factor when choosing a web browser, but users often rely on assumptions or marketing claims.
Mitmproxy offers a way to test a browser's privacy by monitoring its connections. This tool acts as a local proxy server, allowing users to see all the connections a browser makes, including those made without user input.
Mitmproxy can decrypt SSL traffic by adding a root certificate to the browser, enabling users to inspect all requests and responses. This process involves setting up mitmproxy, configuring the browser to use the proxy, and adding the certificate. Users can then observe the browser's behavior, including unsolicited requests, to assess its privacy practices.
Mitmproxy is particularly useful for identifying spyware in browsers, as it provides a clear view of all outgoing and incoming data. While it has limitations, such as not capturing initial requests made before the proxy is set up, it remains a powerful tool for privacy-conscious users.
For a comprehensive spyware investigation, mitmproxy is recommended over Wireshark due to its simplicity and ability to isolate application traffic.
https://sizeof.cat/post/web-browser-telemetry-2025-edition/

2025-09-16 06:15:44 GMT

https://altcha.org/
Free, open-source Captcha alternative
ALTCHA uses a proof-of-work mechanism to protect your website, APIs, and online services from spam and unwanted content.
Unlike other solutions, ALTCHA is free, open-source and self-hosted, does not use cookies nor fingerprinting, does not track users, and is compliant with data-privacy regulations and accessible.

2025-09-15 12:15:52 GMT

By the time most Indian investors realize the value of #BTC, #Bitcoin will be 1mn USD.
There is comfort in the crowd. But, money is never made by following sheep mentality.
Not saying you should put you entire net worth into $BTC.
But, maybe the naysayers should at least be open to studying the asset.

2025-09-11 06:18:30 GMT

🧫 PARASITE CLEANSE PROTOCOL (30–90 Days)
A full-body strategy to eliminate parasites, break biofilms, support detox pathways, and heal the gut for long-term health. You will find a simplified version of this protocol in the comments. There is also a heavy metal detox guide on this page which is recommended to do first.
✅ Step 1: PREP PHASE (7–10 Days)
🎯 Goal: Prepare your body by opening detox and drainage pathways — like the liver, lymphatic system, and bowels.
Why it matters: If you jump straight into killing parasites, your body may struggle to eliminate the toxins they release. This leads to "die-off" symptoms (see below).
*Think of this like unclogging a sink before pouring anything else down the drain.
🔓 Open Detox Pathways:
- Castor Oil Packs (3–4x/week)
Apply a warm castor oil-soaked cloth over your liver (upper right abdomen).
Cover with plastic wrap and a heating pad for 30–60 minutes.
This gently stimulates liver drainage, bile flow, and lymph movement.
Great for constipation and hormonal balance, too.
- Magnesium Citrate or Oxy-Magnesium (like Oxy-Powder)
Helps you poop daily — non-negotiable during detox.
If you’re constipated, waste and toxins get reabsorbed.
Start low (200–300 mg) and increase to achieve 1–2 daily bowel movements.
- Liver-Supportive Herbs
Milk Thistle: Regenerates liver cells.
Dandelion Root: Stimulates bile flow.
Burdock: Gentle blood cleanser.
You can also use a liver detox tincture (like Gaia Liver Cleanse or Herb Pharm Liver).
- Lymphatic Movement
Dry brushing: Use a soft brush on dry skin before showering — always brush toward the heart.
Rebounding: Jumping on a mini trampoline moves lymph.
Infrared sauna or red light therapy: Help sweat out toxins and boost circulation.
💧 Daily Add-ons:
- Apple Cider Vinegar (1–2 tsp in warm water before meals)
Stimulates stomach acid and digestive enzymes.
Aids in breaking down food and creating a hostile environment for parasites.
- Herbal teas (1–2 cups/day):
Dandelion root: Liver detox
Nettle: Nourishing + mineralizing
Lemon-ginger: Gut soothing and cleansing
- Water: 2–3 liters/day of clean, filtered water
Add electrolytes or trace minerals to support cellular detox.
⚔️ Step 2: ACTIVE PARASITE CLEANSE (30–60 Days)
🎯 Goal: Kill parasites, break down their protective biofilms, flush out eggs, and mop up released toxins.
⚠️ Warning: Don’t start killing before Step 1! You must prepare the body or risk overwhelming detox reactions.
🧪 Choose 2–4 Core Anti-Parasitics
Rotate them every 2–3 weeks to prevent adaptation. Many parasites develop resistance when exposed to the same herb for too long.
🌿 Common anti-parasitics:
- Mimosa Pudica Seed
A sticky, fibrous seed that grabs parasites and biofilms in your intestines like a sponge.
Take 2 capsules on an empty stomach in the morning.
Expect to see stringy, rope-like material in your stool (often biofilms + worms).
- Black Walnut Hull
Powerful against adult parasites, fungi, and bacteria.
Use tincture or capsule.
- Wormwood (Artemisia)
Excellent for roundworms and threadworms.
Often used in combination formulas (e.g., with black walnut and clove).
- Clove
Kills parasite eggs — crucial so the life cycle doesn’t restart.
Use daily during cleanse.
- Neem
Multipurpose: antifungal, anti-worm, antibacterial.
- Berberine, Olive Leaf, or Oregano Oil
Target bacterial imbalances, yeast, and parasites.
Berberine also supports gut repair and blood sugar regulation.
- Diatomaceous Earth (Food Grade Only!)
Fine silica powder that physically shreds parasites in the gut.
Take 1 tsp in water on an empty stomach.
Avoid inhaling powder — use caution.
🔓 Biofilm Disruptors
Parasites hide in protective “slime layers” (biofilms) in the gut and organs. Break these open to expose them.
- NAC (N-Acetylcysteine): 600–1200 mg/day
Powerful antioxidant + biofilm disruptor.
Supports liver by increasing glutathione.
- Enzymes
Use proteolytic enzyme blends that digest proteins:
InterFase Plus, Biofilm Defense, SerraFlora, Lumbrokinase
Best taken away from food, 1–2x/day
- Optional: EDTA
Chelator that pulls metals (often embedded in biofilms).
Advanced; best with practitioner guidance.
🧲 Don’t Skip the BINDERS
When parasites die, they release ammonia, mold, heavy metals, and endotoxins. Binders catch them so your body can safely eliminate them through stool.
Activated Charcoal, Bentonite Clay, or Chlorella
Take 1–2x daily, away from food/supplements/meds by at least 1–2 hours.
Charcoal = general toxin binder
Clay = binds positively charged toxins
Chlorella = heavy metals + mold
Gentler options: Pectin, fulvic/humic acids, ZeoBind (zeolite)
🧬 Step 3: GUT REPAIR & IMMUNE REBALANCE (30+ Days)
🎯 Goal: Once the parasites are gone, rebuild your gut lining and microbiome. Otherwise, new ones can take hold again.
🛠 Heal the Gut Lining:
- L-Glutamine: 5–10g/day — strengthens intestinal walls
- Aloe Vera Juice: Soothes inflammation, supports healing
- Collagen or Bone Broth: Rich in amino acids like glycine
- Soothing Herbs:
Slippery elm, marshmallow root, DGL licorice
- Zinc carnosine, quercetin – reduce gut inflammation
🌱 Rebuild Microbiome:
- Spore-based probiotics (e.g. Just Thrive, MegaSporeBiotic)
More stable than regular probiotics; survive stomach acid.
- Saccharomyces boulardii
Probiotic yeast that helps crowd out bad bugs.
- Prebiotic fibers (start slow):
PHGG, acacia fiber, green banana flour — feed the good bugs.
🔁 CYCLIC DOSING: 4 DAYS ON / 3 DAYS OFF
Why it works: Parasites have life cycles. Pulsing disrupts those cycles and allows your organs to catch up on detox.
4 Days ON: Take your antiparasitics, enzymes, and biofilm disruptors
3 Days OFF: Take only binders and drainage support — give your system a break
Repeat for 4–6 weeks minimum (up to 90 days for chronic cases)
🌕 FULL MOON INTENSIFICATION
Why? Parasites become more active during the full moon — possibly due to lower melatonin and higher serotonin.
From 3 days before to 3 days after full moon:
- Increase antiparasitics by 25–50%
- Increase binders, water, and electrolytes
You may notice more symptoms — this is when many people pass the most.
⚠️ DIE-OFF SYMPTOMS (Herxheimer Reactions)
Common reactions as parasites and pathogens die off:
- Headaches, fatigue, joint pain
- Skin rashes, brain fog
- Nausea, mood swings, worsened old symptoms
How to reduce it:
- Drink more water + add minerals (sea salt, trace minerals)
- Take binders religiously
- Use detox tools:
Epsom salt baths (draw out toxins via skin)
Infrared sauna
Dry brushing or rebounding
Coffee enemas (for advanced users: clears bile + toxins from liver/gut)
If you feel awful, lower dosage or take a break. The goal is sustainable, steady progress — not suffering.
🧪 OPTIONAL TESTING
To confirm parasites or monitor healing:
- GI-MAP or GI Effects: Advanced stool testing
- OAT (Organic Acids Test): Shows fungal + bacterial metabolites
- Stool microscopy + PCR (Doctor’s Data, Genova)
- Blood tests:
Eosinophils or Total IgE may rise during parasitic infections
🧠 LIFESTYLE ADD-ONS
Create an inner terrain where parasites can’t thrive:
- Eliminate their food supply:
Sugar, gluten, processed carbs, seed oils, dairy
- Eat anti-parasitic foods daily:
Raw garlic, pumpkin seeds, papaya seeds, raw carrots, beets, cilantro
- Get sunlight and sleep (7–9 hours)
- Reduce chronic stress – stress suppresses immune defense
📦 RECOMMENDED CLEANSE KITS
Save time and confusion with these well-designed, practitioner kits:
CellCore Para Kit – Strong for chronic illness, mold, Lyme
Microbe Formulas Protocol – Multi-phase system with drainage + gut repair
Dr. Clark Store Cleanse – Simple and affordable
Mimosa Pudica + Para 1/2/3 – For deeper parasite and toxin cleansing

2025-09-06 06:47:03 GMT

ChatterUI - A simple app for LLMs
https://github.com/Vali-98/ChatterUI
https://t.me/chatterui
ChatterUI is a native mobile frontend for LLMs.
Run LLMs on device or connect to various commercial or open source APIs. ChatterUI aims to provide a mobile-friendly interface with fine-grained control over chat structuring.
Features:
Run LLMs on-device in Local Mode
Connect to various APIs in Remote Mode
Chat with characters. (Supports the Character Card v2 specification.)
Create and manage multiple chats per character.
Customize Sampler fields and Instruct formatting
Integrates with your device’s text-to-speech (TTS) engine
Usage:
Download and install latest APK from the releases page.
https://github.com/Vali-98/ChatterUI/releases/latest
iOS is Currently unavailable due to lacking iOS hardware for development
Local Mode:
ChatterUI uses a llama.cpp under the hood to run gguf files on device.
https://github.com/ggerganov/llama.cpp
A custom adapter is used to integrate with react-native: cui-llama.rn
https://github.com/Vali-98/cui-llama.rn
To use on-device inferencing, first enable Local Mode, then go to Models > Import Model / Use External Model and choose a gguf model that can fit on your device's memory. The importing functions are as follows:
Import Model: Copies the model file into ChatterUI, potentially speeding up startup time.
Use External Model: Uses a model from your device storage directly, removing the need to copy large files into ChatterUI but with a slight delay in load times.
After that, you can load the model and begin chatting!
Note: For devices with Snapdragon 8 Gen 1 and above or Exynos 2200+, it is recommended to use the Q4_0 quantization for optimized performance.
Remote Mode:
Remote Mode allows you to connect to a few common APIs from both commercial and open source projects.
Open Source Backends:
koboldcpp
text-generation-webui
Ollama
Dedicated API:
OpenAI
Claude (with ability to use a proxy)
Cohere
Open Router
Mancer
AI Horde
Generic backends:
Generic Text Completions
Generic Chat Completions
These should be compliant with any Text Completion/Chat Completion backends such as Groq or Infermatic.
Custom APIs:
Is your API provider missing? ChatterUI allows you to define APIs using its template system.
Read more about it here!
https://github.com/Vali-98/ChatterUI/discussions/126

2025-09-06 06:43:23 GMT

Maid - Mobile Artificial Intelligence Distribution
Maid is a cross-platform free and an open-source application for interfacing with llama.cpp models locally, and remotely with Ollama, Mistral, Google Gemini and OpenAI models remotely.
-Choose from A wide range of models that runs LOCALLY and access remote models via api key!
-Text based output
-Image Generation (Selected Models only)
-No video or short clips generation yet
-Voice generation on selected models (Not tested)
-Setting model parameters
-Setting system prompt (Making the model behave/generate output in a certain way).
-And more.
Get it on
Github - https://github.com/Mobile-Artificial-Intelligence/maid/releases/latest
Fdroid - https://f-droid.org/packages/com.danemadsen.maid/
Spystore - https://play.google.com/store/apps/details?id=com.danemadsen.maid
*Don't clear CACHE OF THE APP AND EXCLUDE IT FROM SYSTEM'S AUTO CACHE CLEANING as app stores everything in device cache*

2025-09-06 06:41:44 GMT

WiFi signals can measure heart rate, no wearables needed
The Pulse-F system enables highly accurate, clinical-level heart rate monitoring using ultra-low-cost WiFi devices, making it useful for low-resource settings.The system works with the person in various positions and from up to 10 feet away, demonstrating its versatility and robustness.Heart rate is a crucial health indicator, providing insights into physical activity, stress, anxiety, hydration levels, and more.Traditional heart rate measurement requires wearables, but the Pulse-F system offers a non-intrusive alternative using household WiFi devices.The technology was developed by engineers at the University of California, Santa Cruz, and demonstrated using low-cost WiFi devices like ESP32 chips ($5-$10) and Raspberry Pi chips ($30).The system combines WiFi devices with a machine learning algorithm to distinguish even the faintest signal variations caused by a human heartbeat.Experiments with 118 participants showed that after only five seconds of signal processing, heart rate could be measured with clinical-level accuracy.The Pulse-F system performed accurately regardless of the equipment's position in the room or the participant's posture, including sitting, standing, lying down, or walking.The researchers created their own dataset to train the machine learning algorithm, as no existing data for these patterns using an ESP32 device was available.Future research aims to extend the technology to detect breathing rate in addition to heart rate, which can be useful for detecting conditions like sleep apnea.
https://news.ucsc.edu/2025/09/pulse-fi-wifi-heart-rate/

2025-09-06 06:28:28 GMT

How to cleanse the body after vaccination.
https://blossom.primal.net/b4e95fe36afd2ef643e944fa7424ca27e4f74aeaeae2e6590de817ad1d6d98dc.mp4

2025-09-04 06:24:06 GMT

Bootloader unlock wall of shame
https://github.com/melontini/bootloader-unlock-wall-of-shame
Updated guide, check it before buying a phone
Over the past few years, a suspicious number of companies have started to "take care of your data", aka block/strictly limit your ability to unlock the bootloader on your own devices.
While this may not affect you directly, it sets a bad precedent. You never know what will get the axe next: Shizuku? ADB? Sideloading?
I thought it might be a good idea to keep track of bad companies and workarounds.

2025-09-01 06:36:11 GMT

All users who have Shizuku Detections or will install Shizuku in future!
Use Shizuku from GitHub and not from Playstore! ⚠️
People who have already installed:
1. Goto /data/local/tmp
2. Delete shizuku folder and shizuku_starter file.
3. Uninstall Shizuku.
4. Install from GitHub and grant root permission and provide shizuku perms for apps from Shizuku.
Install latest from here: https://github.com/RikkaApps/Shizuku/releases

2025-09-01 06:25:46 GMT

Read 👇🏻
https://blossom.primal.net/3f712aa380673a226a42bb8d97afbe1a569f7d5914e76e81bce2da86392938c3.jpg

2025-08-26 16:46:12 GMT

If you ever see someone fudding about Wall Street taking over #Bitcoin, always remember to refer to the distribution.
https://bitcointreasuries.net

2025-08-22 17:04:56 GMT

📨 Thunderbird will have its own email
Yes, the popular email client has expansion plans and not a few, several things have been confirmed to be coming
ThunderMail: Email service confirmed to have German infrastructure. It will also have custom domains: @thundermail.com and @tb.pro
ThunderBird Appointment: Scheduling tool that will be integrated to insert appointment links directly into email, to support different meeting formats.
Thunderbird Send: File storage and transfer service, encrypted and up to 500GB of storage.
All this would be part of its "Thunderbird Pro" package and it is confirmed that its services are open source and self-hostable.
The services are optional and do not affect the free functions of its Thunderbird client.
https://blog.thunderbird.net/2025/08/tbpro-august-2025-update/

2025-08-18 06:35:42 GMT

🧊 Hidden Firefox AI process consuming CPU resources?
Firefox browser users have encountered serious performance issues after the release of version 141. Initially, suspicion fell on the new "Smart Tab Grouping" feature using AI, but an official Mozilla investigation (Bug 1982278) showed that the abnormally high CPU load is caused by another component, namely the hidden pilot experiment "Semantic Search in History" (places.semanticHistory). The "Smart Tab Grouping" has nothing to do with this.
Everything was fine just yesterday. Today I opened Firefox, and as a result, there were sharp spikes in CPU load and power consumption. My fans shouldn't be this loud if I don't have more than 15 tabs open.
After unsuccessfully restarting Firefox, I opened the task manager and found that a process called "Inference" fluctuates from 0.05% to 130% CPU usage, which explains the spikes in CPU load and power consumption.
Killing the process solves the fluctuation problem but causes Firefox to crash, requiring a restart.
What is going on? This problem never existed until today.
— users complain on Reddit.
😱 Official Mozilla representatives have acknowledged the issue. The fix will be included in Firefox 143 (ctodea writes Target Milestone: → 143 Branch).
💡For full control and disabling of all local AI services, advanced users should experiment with some settings:
In about:config the parameter browser.ml.enable is set to false.
*The browser.ml.enable parameter is the main, kind of master key to all under-the-hood machine learning in Firefox. Setting this value to false completely deactivates the local AI engine (Inference process), making it impossible for any dependent features to work, including smart tab groups and the chatbot.
In about:config the parameter browser.tabs.groups.smart.enabled is set to false.
*Disables only the smart tab grouping feature. This step is not a guaranteed solution to the CPU overload problem, as the main source of the error lies in another component. Meanwhile, the AI engine itself (Inference process) remains active for other potential tasks.
In about:config the parameter browser.ml.chat.enabled is set to false.
*The browser.ml.chat.enabled parameter is a direct system switch that controls the activation and visibility of the AI chat integrated into Firefox.
Source: Telegram | Russian OSINT
https://blossom.primal.net/8f5110cf94692da92a234cd0a7cf0137b8da6633f21ecc66b2fec9b4f043e2db.jpg

2025-08-12 06:22:44 GMT

Many people have heard of onion routing in Tor and have a rough idea of how it works. However, fewer people know about garlic routing.
That's why I decided to write a short note about what it is and how it works in I2P🚥
How is a message sent? ✉️
In I2P, your message travels through a tunnel—a chain of randomly picked computers (nodes) on the network. Each node only knows where to send the data next, not the message content, thanks to garlic encryption🧄.
Your message is first encrypted for the recipient using end-to-end encryption. Asymmetric encryption🔐 uses a public key to encrypt and a private key to decrypt.
How are encryption layers created?🔒
Now the process of wrapping the message in layers begins.
Imagine that you have a tunnel with three nodes: A, B, C.
The encrypted message (already protected for the recipient) must be passed through these nodes so that each one knows only the next step. To do this, I2P creates encryption layers one for each node.
Each layer is additional encryption with instructions for a specific node, such as “forward to node B” or “send to recipient.”
It works like this: you encrypt the message with the public key of node C, adding the instruction “forward to node B.” You encrypt this packet again with the public key of node B with the instruction “forward to node A.” Then the entire packet is encrypted with the public key of node A with the instruction “send to recipient.”
When you send the packet, it goes to node A. Node A opens its layer with its secret key, sees the instruction “forward to node B” and forwards the data. The data remains encrypted for other nodes. Node B opens its layer, sees the instruction “forward to node C” and forwards it. Node C opens the last layer, sees that it needs to be sent to the recipient, and does so.
Each node only knows its own step and does not see the content of the message, its sender, or its recipient.
Why is encryption called garlic?🧄
Now, let's talk about “garlic” encryption in detail. In I2P, your message is packed with others into one encrypted packet🗂, called garlic. This packet may include your message, others’ messages, and network data like tunnel commands⚙️
All these messages are encrypted together, and each layer of encryption (for nodes A, B, C) covers the entire large packet, not each message individually.
When node A opens its layer, it sees the instruction for the entire packet, such as “forward to node B,” and sends it on. It does not know how many messages are inside, whose they are, or where they are going. Node B does the same, opening its layer and forwarding the packet to node C. Node C, opening the last layer, can send the entire packet or parts of it (depending on the instruction) to the recipients, but it does not know how many messages are inside and to whom they are addressed. This makes it impossible to determine whose message is where, even when observing the network.
Each message in the packet is protected by individual encryption for its recipient🔑 so that no one but the intended person can open it.
The messages inside the packet are not explicitly separated they are sort of stuck together into one continuous encrypted piece of data. I2P can also add “garbage” data🗑 fake messages that masquerade as real ones but mean nothing.
In addition, I2P mixes♻️ your packet with other data on the network and can add random delays during transmission. This makes it difficult to analyze traffic. Tunnels change every 10 minutes, and the nodes in them are selected again, so it is impossible to track the path.
How does garlic encryption differ onion encryption?🧅
In onion encryption, each message is encrypted separately and transmitted through its own chain of nodes. Garlic encryption not only wraps your message in layers of encryption, but also combines it with other messages and fake data into a single encrypted packet.

2025-08-08 06:07:54 GMT

- reply

Link?

2025-08-05 15:54:35 GMT

Nextcloud vs. CryptPad
Which Privacy-First Collaboration Tool is Right for You?
https://itsfoss.com/nextcloud-vs-cryptpad/

2025-08-04 06:15:43 GMT

Trust Score: 87
https://profilestr.com/profile/npub1vm68u0w0uhyjsx6rd062u3pufzfa8sd30njsxg3lsppa80aalvhs8gsrrc

2025-08-02 06:29:31 GMT

Interesting thread!
ChatGPT quietly scrubbed today nearly 50,000 shared conversations from Google's index.
https://fixupx.com/henkvaness/status/1951252284953763844
https://nitter.poast.org/henkvaness/status/1951252284953763844
ChatGPT quietly scrubbed today nearly 50,000 shared conversations from Google's index after our investigation. They thought they'd solved the problem. They were wrong. (1/5)
A new Digital Digging investigation, conducted with @ osint77760, has uncovered 110,000 ChatGPT conversations preserved in http://Archive.org's Wayback Machine—a digital time capsule OpenAI can't touch. (2/5)
@ osint77760 While OpenAI scrambled to de-index conversations from Google, they forgot the internet's most basic rule—nothing truly disappears. http://Archive.org had already captured everything. (3/5)
@ osint77760 In one particularly damning conversation, an Italian-speaking lawyer for a multinational energy corporation laid bare their strategy to displace indigenous Amazonian communities. (4/5)
@ osint77760 Read the full story here
https://www.digitaldigging.org/p/chatgpt-confessions-gone-they-are

2025-08-01 07:21:38 GMT

Proton Mail
https://www.cnbcevents.com/wef2024/
https://intelod.net/reports/proton-mail/
https://digdeeper.love/articles/email.xhtml#protonmail

2025-07-31 06:21:42 GMT

If anyone is looking for a new search engine with good privacy, have a look here and find one of your choice. (I'm using Disroot BTW)
And have a look in the settings (wheel, upper right side). There are nice options.
https://searx.space/

2025-07-31 05:49:52 GMT

The intuitive introvert sees too much.
This archetype is so rare, even Jung found it challenging to define. In his words:
“Lives in a world that is only indirectly accessible to others… immersed in symbolic content, archetypes, and images which may seem foreign or irrational to most.”
They don’t just observe life, they decode it.
While others look at what is, they feel what’s becoming.
This depth is a gift, but it often feels like a burden, because when you see beyond the veil, it’s hard to unsee.

2025-07-29 16:31:09 GMT

Weekly feed of 140+ Security Blogs
https://securityblogs.xyz/

2025-07-28 06:25:10 GMT

Did you ever wonder how QR codes work?
Reading QR codes without a computer: https://qr.blinry.org/

2025-07-27 16:11:01 GMT

Investigate phishing emails
https://chatgpt.com/share/6884ea26-4e8c-8000-bd78-3b9d9b75be83

2025-07-27 16:07:00 GMT

EU age verification app to ban any Android system not licensed by Google
Reddit: https://www.reddit.com/r/BuyFromEU/comments/1mah79o/eu_age_verification_app_to_ban_any_android_system/
The EU is currently developing a whitelabel app to perform privacy-preserving (at least in theory) age verification to be adopted and personalized in the coming months by member states. The app is open source and available here: https://github.com/eu-digital-identity-wallet/av-app-android-wallet-ui.
Problem is, the app is planning to include remote attestation feature to verify the integrity of the app: https://github.com/eu-digital-identity-wallet/av-app-android-wallet-ui?tab=readme-ov-file#disclaimer. This is supposed to provide assurance to the age verification service that the app being used is authentic and running on a genuine operating system. Genuine in the case of Android means:
• The operating system was licensed by Google
• The app was downloaded from the Play Store (thus requiring a Google account)
• Device security checks have passed
While there is value to verify device security, this strongly ties the app to many Google properties and services, because those checks won't pass on an aftermarket Android OS, even those which increase security significantly like GrapheneOS, because the app plans to use Google "Play Integrity", which only allows Google licensed systems instead of the standard Android attestation feature to verify systems.
This also means that even though you can compile the app, you won't be able to use it, because it won't come from the Play Store and thus the age verification service will reject it.
The issue has been raised here https://github.com/eu-digital-identity-wallet/av-app-android-wallet-ui/issues/10 but no response from team members as of now.
In short: You can only be a full citizen of the EU if you accept the ToS from Google.

2025-07-26 06:25:23 GMT

Do not download the app, use the website
What is it that the browser can't do?
The 2010s was the Wild West of the mobile world. "Mobile-first" was the buzzword, much like "AI-first" is today. Every company, from the biggest social media giants to your local pizza parlor, seemed to be pestering you to download their app. There was a genuine hype train, and everyone was on board. The apps, frankly, were always mediocre, and a far cry from the full functionality of their website counterparts. But the message was clear. If you weren't on mobile, you were falling behind.
Fast forward to 2025, and that hype hasn't entirely faded. In fact, it's evolved into something a little more… persistent. If you've ever opened Reddit, LinkedIn, Pinterest, or practically any popular service on your phone's web browser, you've likely encountered it. A relentless push to download their app. They use every dark pattern in the book, subtly nudging you, sometimes even tricking you, into clicking that "Get the App" button. It feels inevitable, doesn't it? Like you're constantly fighting against the current.
But if you're already a regular user, happily browsing their service through your phone's web browser, why are they still so desperate for you to switch to the app?
• Beyond the Hype: The Real Reasons Companies Want You on Their App
The answer, in short, is data. A lot of it. And access. A whole lot more of that too.
Think about it this way. What can a website on your browser really get from you? Unless you manually upload your contact information, or there's a serious security vulnerability, a website's access to your phone's deeper functions is quite limited.
Apps, on the other hand, are a different beast entirely. They are designed to integrate much more deeply with your device. When you download an app and want to use a particular feature, you're often prompted to grant various permissions. And let's be honest, how many of us meticulously read through every single permission pop-up? Most of the time, we just tap "Allow" to get to what we want to do.
This seemingly small action can grant companies a treasure trove of information and control:
- Your Contacts: Want to find friends on the app? Grant access to your contacts. Just like that, your entire network might be uploaded.
- Location Tracking: GPS and even your phone's accelerometer can be used to track your precise movements and identify patterns in your behavior. Websites can try to estimate your location, but it's far less precise and requires explicit permission each time.
- Microphone Access: Some apps can even record audio.
- Installed Apps: Yes, apps can often detect what other applications you have installed on your phone. This information can be used to build a more comprehensive profile of you and your interests.
All of this data extraction and deeper device interaction is significantly more difficult, if not outright impossible, for a website running in your browser. The web browser, in its own right, is a powerful and increasingly capable operating system. It can play video and audio, support WebGL for advanced graphics, and even has USB support. Most companies aren't even scratching the surface of what's possible with a modern web browser. Their primary motivation for pushing the app, more often than not, seems to boil down to gaining more access to your personal data and behavior.
• The Unseen Cost of Convenience
Even if you're not particularly "paranoid" about your data, it's worth asking: what can they possibly want to do in their app that they can't already do in the browser? Often, the answer is nothing that truly benefits you more. The perceived "convenience" of an app often comes at the cost of your privacy and control.
It's incredibly easy to give information away. But once that data is out there, it's nearly impossible to take back. While regulations like GDPR can ensure that data is deleted from a company's database, they can't guarantee that data which has already been sold or shared with third parties will also be erased.
So, the next time you're met with that insistent prompt to download an app, take a moment to consider what you might be giving up. For me, I'm sticking to the website. My browser offers all the functionality I need, without inviting a constant digital spy into my pocket. And that, in my book, is a win for privacy and control.
https://idiallo.com/blog/dont-download-apps