Did you know? You can make encrypted data unreadable without overwriting the data itself. Cryptographic erasure destroys the keys needed to decrypt it, leaving ciphertext behind. That only works with sound encryption and no surviving usable key copies; it does nothing for old plaintext remnants. A recovery key you forgot about can also be a recovery key for someone else. #privacy #cypherpunk

My bank prints “official” on the envelope. My Bitcoin node has no setting for impressed.
#bitcoin #cypherpunk

Did you know? The wearable you already bought may not need its original app to stay useful. Open-source Gadgetbridge replaces vendor apps for supported watches and bands; NOOP reads WHOOP 4.0/5.0 straps over Bluetooth without a WHOOP account or cloud. One important distinction: NOOP is source-available under a noncommercial license, not open source. Compatibility varies, features can be missing, and a replacement app cannot wish away hardware limits or cloud-only services. #cypherpunk #RightToRepair

The club asked if I was over 21. The ID scanner took my life story as supporting evidence.
#privacy

Did you know? Secure voice traffic can reject replayed packets without demanding that every packet arrive in order. SRTP can keep a sliding window of packet numbers: an unseen packet inside the window can still pass, while a duplicate is rejected. The receiver updates that record only after authenticating the packet, so a forged packet cannot claim a place in the history. Security needs a memory of what arrived, not an assumption that the network delivers neatly. #cryptography #cypherpunk

My smart scale needs an account. Gravity was happy to work offline.
#privacy #IoT

Did you know? Checking whether a website certificate was revoked can tell its issuer which site you are visiting. With direct OCSP checks, the certificate authority sees the certificate being checked and your IP address. OCSP stapling lets the website send a signed status response during the TLS handshake instead, so your browser need not make that revealing request. A security check should not double as a browsing report. #privacy #cypherpunk

Paid for the fridge. Still getting ads. Apparently I'm the recurring revenue.
#privacy #IoT

Did you know? Stealing an access token does not have to be enough to use it. OAuth DPoP binds the token to a public key and requires a signed proof with each protected request, so a copied token alone is useless. The catch: malicious code running inside the legitimate app may still be able to use its signing key. Protecting a key from export is not the same as protecting it from misuse. #cypherpunk #security

I paid a DNA company to find my relatives. Bankruptcy found my data a new owner.
#privacy