Posts for: #Security

// grapheneos: the ungoverned phone

Every phone ships with a remote. Pre-pointed, from the factory, at your data, your location, your habits and your wallet, held by people who paid for the access. It decides what the device records, who it reports to, what it gets up to while you sleep. You were given the handset. Someone else kept the remote, by design, and it was never going to change hands on its own. This guide is about taking it. Not throwing the phone away. Picking up the control that should have been yours from the first day.

[keep reading]

// identity: your digital fingerprint

Your email address is not a username. It’s a fingerprint.

Unlike a password, you can’t rotate it. Unlike a username, it follows you across systems, survives account deletions, and persists in breach databases long after you’ve forgotten you ever signed up. Hand it to enough services and it becomes the thread that ties your entire digital life together, quietly, invisibly, until someone pulls it.

Most people treat email like a mailing address: something you give out freely because that’s just how it works. It isn’t. It’s a persistent, irrevocable identifier that you’re voluntarily handing to strangers, and the only question is how many of them will eventually misuse it.

[keep reading]