privacy
7 posts
The trust boundary already moved
Android telemetry from Google runs at the platform layer, below the owner's only enforcement surface. A trust-model condition, not a vulnerability.
Access is the breach
The EU chat control mandate concentrates standing access to private messaging into a single point of compromise that no implementation quality can fix.
The Open Courts Act exposes what PACER fees hid
PACER's per-page fee was an accidental privacy brake. Making court records free is right - but only if redaction, governed bulk access, and security replace it.
It measures conformity, not security
Volkswagen blocks GrapheneOS while admitting baseline devices. The gate measures configuration identity, not security posture.
Mandatory ID is the breach, not the fix.
The FCC prepaid ID mandate produces a centralized identity-resolved communications graph inside carriers with documented breach history.
Your SSD is leaking what you're doing
How websites can use SSD response timing as a covert channel to infer user activity, and what browsers and users can do about it.
Your privacy settings are decoration.
Privacy is no longer a default state. A former black hat defines what failed, why it failed, and what operators must now assume.