{"data":[{"slug":"qwen38-obliterated-local-model","title":"Qwen3.8-27B OBLITERATED: Why the Same Model Gives Different Answers","tags":["AI Privacy","Local AI","Guide"],"desc":"What Qwen is, what the unofficial OBLITERATED version changed, why local AI apps can produce different answers, and the developer's 23 August 2026 GGUF redownload notice.","time":"~6 min read","date":"2026-08-22","lastReviewed":"2026-08-23","contentKind":"brief","editorialStatus":"ok","url":"https://cunicula.com/en/articles/qwen38-obliterated-local-model","answer":"What Qwen is, what the unofficial OBLITERATED version changed, why local AI apps can produce different answers, and the developer's 23 August 2026 GGUF redownload notice.","sources":[{"label":"OBLITERATUS project","url":"https://github.com/elder-plinius/OBLITERATUS"},{"label":"Current OBLITERATUS Qwen3.8-27B download page","url":"https://huggingface.co/OBLITERATUS/Qwen3.8-27B-OBLITERATED"},{"label":"Second OBLITERATUS release for Apple computers, since removed","url":"https://huggingface.co/OBLITERATUS/Qwen3.8-27B-OBLITERATED/commit/ed77303604d422221952f9f10f3d876ee9603acd"},{"label":"OBLITERATUS Qwen3.8-27B model card, saved copy used for the comparison","url":"https://huggingface.co/OBLITERATUS/Qwen3.8-27B-OBLITERATED/raw/08a7ab67298e9ffab4b55612d946cc96e1e34c6f/README.md"},{"label":"Official Qwen3.8-27B model","url":"https://huggingface.co/Qwen/Qwen3.8-27B"},{"label":"Developer's 23 August 2026 announcement about the GGUF conversion error","url":"https://x.com/elder_plinius/status/2091339694303068467"}],"section_headings":["What the unofficial version changed","Why the same download gave two answers","What the local comparison did","What to check before you download or compare it"]},{"slug":"btcpay-server-lnd-macaroon-incident","title":"BTCPay Server 2.4.2: The Lightning Credential Incident","tags":["BTCPay Server","Lightning","Security"],"desc":"BTCPay Server versions before 2.4.2 let attackers steal the credentials that control a store's Lightning funds. What happened, which versions are affected, and what operators should do now.","time":"~7 min read","date":"2026-08-22","lastReviewed":"2026-08-22","contentKind":"news","editorialStatus":"ok","providerSlugs":["btcpay-server"],"url":"https://cunicula.com/en/articles/btcpay-server-lnd-macaroon-incident","answer":"BTCPay Server versions before 2.4.2 let attackers steal the credentials that control a store's Lightning funds. What happened, which versions are affected, and what operators should do now.","sources":[{"label":"BTCPay incident response and next steps","url":"https://blog.btcpayserver.org/btcpay-server-security-incident-response-and-next-steps"},{"label":"BTCPay Server 2.4.2 security advisory","url":"https://blog.btcpayserver.org/security-advisory-btcpay-server-2-4-2"},{"label":"BTCPay Server 2.4.2 release","url":"https://github.com/btcpayserver/btcpayserver/releases/tag/v2.4.2"}],"section_headings":["What happened and when","What to do now","What remains unknown"]},{"slug":"freesocks-tor-messaging-proxies","title":"FreeSocks, Tor Bridges, and Messaging Proxies Compared","tags":["Censorship","Privacy Tools","Explainer"],"desc":"Choose between FreeSocks v2, Tor bridges and Snowflake, Signal proxies, and Telegram proxies by blocking problem, metadata exposure, and privacy limits.","time":"~9 min read","date":"2026-08-17","lastReviewed":"2026-08-17","contentKind":"guide","editorialStatus":"ok","editorialNote":"Practical anti-censorship comparison that does not reproduce volatile access material.","providerSlugs":["unredacted","freesocks"],"url":"https://cunicula.com/en/articles/freesocks-tor-messaging-proxies","answer":"Choose between FreeSocks v2, Tor bridges and Snowflake, Signal proxies, and Telegram proxies by blocking problem, metadata exposure, and privacy limits.","sources":[{"label":"FreeSocks official site","url":"https://freesocks.org/","retrievedAt":"2026-08-18","firstParty":true},{"label":"FreeSocks live public tier, billing, analytics, and backend configuration","url":"https://freesocks.org/api/v1/config","retrievedAt":"2026-08-18"},{"label":"FreeSocks documentation","url":"https://freesocks.org/docs","retrievedAt":"2026-08-18"},{"label":"I2P network and application documentation","url":"https://geti2p.net/en/docs","retrievedAt":"2026-08-18"},{"label":"linux-hardened-unredacted source","url":"https://git.unredacted.org/unredacted/linux-hardened-unredacted","retrievedAt":"2026-08-18"},{"label":"Cryptgeon source and design","url":"https://github.com/cupcakearmy/cryptgeon","retrievedAt":"2026-08-18"},{"label":"Legacy FreeSocks automation source","url":"https://github.com/unredacted/ansible-role-freesocks","retrievedAt":"2026-08-18"},{"label":"FreeSocks retention implementation","url":"https://github.com/unredacted/freesocks-control-plane/blob/a27d7b10ccddfeccbca49622f5f9d050bf3cf28a/convex/retention.ts","retrievedAt":"2026-08-18"}],"section_headings":["FreeSocks v2 has a versioned architecture","Logging, retention, analytics, and fronting","Tor transports lead into Tor","I2P, Psiphon, and OONI answer different questions","Messaging proxies preserve the messaging service","The operator runs more than FreeSocks","XMPP, Matrix, and hosted tools need separate claims","Labs projects are evidence, not automatic recommendations","Verification worksheet"]},{"slug":"authoritative-vs-recursive-dns-privacy","title":"Authoritative DNS Hosting Is Not Private DNS Resolution","tags":["DNS","Privacy","Explainer"],"desc":"Authoritative hosting, recursive resolution, DNSSEC, registrar records, and account metadata expose different facts. A source-led DNS privacy worksheet using deSEC as a limited example.","time":"~8 min read","date":"2026-08-17","lastReviewed":"2026-08-17","contentKind":"guide","editorialStatus":"ok","editorialNote":"Protocol-role explainer; deSEC remains a conditional dossier because its full privacy-policy evidence was not captured.","url":"https://cunicula.com/en/articles/authoritative-vs-recursive-dns-privacy","answer":"Authoritative hosting, recursive resolution, DNSSEC, registrar records, and account metadata expose different facts. A source-led DNS privacy worksheet using deSEC as a limited example.","sources":[{"label":"deSEC: organisation and service purpose","url":"https://desec.io/about","retrievedAt":"2026-08-17"},{"label":"deSEC: terms, availability, load, and inactivity rules","url":"https://desec.io/terms/","retrievedAt":"2026-08-17"},{"label":"deSEC API documentation","url":"https://desec.readthedocs.io/en/latest/","retrievedAt":"2026-08-17"},{"label":"deSEC Stack: authoritative-server and API architecture, MIT licence","url":"https://github.com/desec-io/desec-stack","retrievedAt":"2026-08-17"},{"label":"RFC 4033: DNSSEC introduction, guarantees, and confidentiality limit","url":"https://www.rfc-editor.org/rfc/rfc4033.html","retrievedAt":"2026-08-17"},{"label":"RFC 8499: DNS terminology for authoritative servers and recursive resolvers","url":"https://www.rfc-editor.org/rfc/rfc8499.html","retrievedAt":"2026-08-17"}],"section_headings":["Follow one lookup through the system","What an authoritative host receives","Provider evidence worksheet"]},{"slug":"cellebrite-australia-nsw-victoria-phone-access-powers","title":"Cellebrite in Australia: NSW and Victoria Phone-Access Powers Explained","tags":["Surveillance","Legal","Australia"],"desc":"Cellebrite Australia, reported NSW Police use, Victoria Police phone extraction powers, and the law governing post-seizure phone access.","time":"~14 min read","date":"2026-08-16","lastReviewed":"2026-08-16","url":"https://cunicula.com/en/articles/cellebrite-australia-nsw-victoria-phone-access-powers","answer":"Cellebrite Australia, reported NSW Police use, Victoria Police phone extraction powers, and the law governing post-seizure phone access.","sources":[{"label":"AAP: Push for more access in digital crime-fighting age, 6 August 2026","url":"https://aapnews.aap.com.au/news/push-for-more-access-in-digital-crime-fighting-age"},{"label":"Buy NSW supplier profile","url":"https://buy.nsw.gov.au/supplier/profile/41128"},{"label":"NSW Parliament: bill First Print","url":"https://files.parliament.nsw.gov.au/fileapi/ParlFiles/GetArtifact?serverRelativeUrl=%2Fbill%2Ffiles%2F18942%2FFirst%20Print.pdf"},{"label":"Greens NSW: Organised crime reforms cover for attacks on civil liberties, 11 August 2026","url":"https://greens.org.au/nsw/news/media-release/organised-crime-reforms-cover-attacks-civil-liberties"},{"label":"Victorian Greens: debate on the bill that inserted s 465AAA, 2015","url":"https://greens.org.au/vic/news/speech/crimes-amendment-child-pornography-and-other-matters-bill-2015"},{"label":"NSW legislation: LEPRA current text","url":"https://legislation.nsw.gov.au/view/whole/html/inforce/current/act-2002-103"},{"label":"Michael West Media: NSW Police to seize mobile phone data without a warrant, 8 August 2026","url":"https://michaelwest.com.au/the-police-state-of-nsw-legislation-to-enable-warrant-less-phone-suriveilance/"},{"label":"Office of the Victorian Information Commissioner: examination of Victoria Police privacy and information-handling training, 2022","url":"https://ovic.vic.gov.au/wp-content/uploads/2022/08/OVIC-examination-into-privacy-and-information-handling-at-Victoria-Police.pdf"}],"section_headings":["Bill status and commencement","What the law says: NSW and Victoria compared","Victoria: what is already in force","What governments and police say","What Greens and civil-liberties critics say","NSW: what changes from the existing law","The warrant question, stated accurately","Which investigations qualify","What an order can compel","Penalties and compelled self-incrimination","What can and cannot be verified","Cellebrite Australia: allegation, capability and evidence","Practical device-risk steps","Commentary reviewed"]},{"slug":"tor-browser-hardening-setup","title":"Tor Browser Hardening Setup","tags":["Browser","Tor","Guide"],"desc":"Verify and configure Tor Browser 15.0.19, preserve its shared fingerprint, test Tor routing and New Identity, and control downloads and account crossover.","time":"~12 min read","date":"2026-08-10","lastReviewed":"2026-08-10","contentKind":"guide","editorialStatus":"ok","providerSlugs":["tor-browser"],"url":"https://cunicula.com/en/articles/tor-browser-hardening-setup","answer":"Verify and configure Tor Browser 15.0.19, preserve its shared fingerprint, test Tor routing and New Identity, and control downloads and account crossover.","sources":[{"label":"Tor Browser 15.0.19 release notice","url":"https://blog.torproject.org/new-release-tor-browser-15019/","retrievedAt":"2026-08-10"},{"label":"Tor Project connection check","url":"https://check.torproject.org/","retrievedAt":"2026-08-10"},{"label":"Tor Browser fingerprinting protections","url":"https://support.torproject.org/tor-browser/features/fingerprinting-protections/","retrievedAt":"2026-08-10"},{"label":"Tor Browser New Identity behavior","url":"https://support.torproject.org/tor-browser/features/managing-identities/","retrievedAt":"2026-08-10"},{"label":"Tor Browser extension and plugin guidance","url":"https://support.torproject.org/tor-browser/features/plugins/","retrievedAt":"2026-08-10"},{"label":"Tor Browser security levels","url":"https://support.torproject.org/tor-browser/features/security-levels/","retrievedAt":"2026-08-10"},{"label":"Tor Browser installation and first start","url":"https://support.torproject.org/tor-browser/getting-started/about-tor-browser/","retrievedAt":"2026-08-10"},{"label":"Tor Project signature-verification procedure and fingerprint","url":"https://support.torproject.org/tor-browser/getting-started/verifying-tor-browser/","retrievedAt":"2026-08-10"}],"section_headings":["Before you start","What this setup does not protect","Maintenance"]},{"slug":"grapheneos-duress-code-prosecution","title":"GrapheneOS Duress Claim: What the Court Record Supports","tags":["Privacy Tools","Policy"],"desc":"Federal filings in United States v. Tunick allege deletion of Pixel data after a password was entered. They do not name GrapheneOS or confirm that a duress credential was used.","time":"~5 min read","date":"2026-08-09","lastReviewed":"2026-08-09","contentKind":"brief","editorialStatus":"ok","editorialNote":"Primary-source correction separating charging allegations, procedure, product documentation, and unsupported attribution.","url":"https://cunicula.com/en/articles/grapheneos-duress-code-prosecution","answer":"Federal filings in United States v. Tunick allege deletion of Pixel data after a password was entered. They do not name GrapheneOS or confirm that a duress credential was used.","sources":[{"label":"GrapheneOS project statement on locked-device extraction and duress.","url":"https://discuss.grapheneos.org/d/40700-grapheneos-protections-against-data-extraction-from-locked-devices","retrievedAt":"2026-08-09"},{"label":"GrapheneOS official site","url":"https://grapheneos.org/","retrievedAt":"2026-08-09","firstParty":true},{"label":"GrapheneOS duress documentation. Retrieved 9 August 2026.","url":"https://grapheneos.org/features#duress","retrievedAt":"2026-08-09"},{"label":"United States v. Tunick, indictment, filed 13 November 2025.","url":"https://storage.courtlistener.com/recap/gov.uscourts.gand.351975/gov.uscourts.gand.351975.1.0.pdf","retrievedAt":"2026-08-09"},{"label":"Defence motion to suppress statements and physical evidence, filed 17 March 2026.","url":"https://storage.courtlistener.com/recap/gov.uscourts.gand.351975/gov.uscourts.gand.351975.21.0.pdf","retrievedAt":"2026-08-09"},{"label":"Minute sheet for the 20 July 2026 evidentiary hearing.","url":"https://storage.courtlistener.com/recap/gov.uscourts.gand.351975/gov.uscourts.gand.351975.31.0.pdf","retrievedAt":"2026-08-09"},{"label":"CourtListener docket for United States v. Tunick.","url":"https://www.courtlistener.com/docket/71998357/united-states-v-tunick/","retrievedAt":"2026-08-09"},{"label":"Official United States Code text. Retrieved 9 August 2026.","url":"https://www.govinfo.gov/content/pkg/USCODE-2023-title18/pdf/USCODE-2023-title18-partI-chap109-sec2232.pdf","retrievedAt":"2026-08-09"}],"section_headings":["What the charging document alleges","What the defence filing says happened","What the GrapheneOS feature actually does","What remains unproven","Procedural status","Narrow takeaway"]},{"slug":"briar-maintenance-mode","title":"Briar Is in Maintenance Mode, Not Shut Down","tags":["Privacy Tools","Messaging"],"desc":"Briar says the project remains active but now limits work to essential security updates and bug fixes. Its repositories show a narrow maintenance cadence, not ordinary feature development.","time":"~4 min read","date":"2026-08-09","lastReviewed":"2026-08-09","contentKind":"brief","editorialStatus":"ok","editorialNote":"Primary-source service-sweep finding; deliberately concise and scoped to the project's stated maintenance posture.","url":"https://cunicula.com/en/articles/briar-maintenance-mode","answer":"Briar says the project remains active but now limits work to essential security updates and bug fixes. Its repositories show a narrow maintenance cadence, not ordinary feature development.","sources":[{"label":"Briar architecture overview. Retrieved 9 August 2026.","url":"https://briarproject.org/how-it-works/","retrievedAt":"2026-08-09"},{"label":"Briar Project, maintenance-mode notice, 9 July 2026.","url":"https://briarproject.org/news/2026-maintenance-mode/","retrievedAt":"2026-08-09"},{"label":"Desktop commit history. Retrieved 9 August 2026.","url":"https://code.briarproject.org/briar/briar-desktop/-/commits/main","retrievedAt":"2026-08-09"},{"label":"Desktop changelog. Retrieved 9 August 2026.","url":"https://code.briarproject.org/briar/briar-desktop/-/wikis/Changelog#065-beta","retrievedAt":"2026-08-09"},{"label":"Android commit history. Retrieved 9 August 2026.","url":"https://code.briarproject.org/briar/briar/-/commits/master","retrievedAt":"2026-08-09"},{"label":"Android release tag. Retrieved 9 August 2026.","url":"https://code.briarproject.org/briar/briar/-/tags/release-1.5.19","retrievedAt":"2026-08-09"},{"label":"Android changelog. Retrieved 9 August 2026.","url":"https://code.briarproject.org/briar/briar/-/wikis/changelog","retrievedAt":"2026-08-09"},{"label":"Official announcement-list archive. Retrieved 9 August 2026.","url":"https://sourceforge.net/p/briar/mailman/briar-announce/","retrievedAt":"2026-08-09"}],"section_headings":["What Briar actually announced","What shipped around the announcement","How strong is the evidence?","What this means for users"]},{"slug":"screen-act-age-verification-vpn","title":"The SCREEN Act Cleared a Committee Vote, Then Stalled on Quorum","tags":["Policy","VPN"],"desc":"S.737 (SCREEN Act) requires age verification for VPN and proxy traffic on any site with adult content. On Aug 5, 2026 the Senate Commerce Committee voted 15-13 in favor but the bill did not advance for lack of quorum.","time":"~6 min read","date":"2026-08-06","lastReviewed":"2026-08-06","url":"https://cunicula.com/en/articles/screen-act-age-verification-vpn","answer":"S.737 (SCREEN Act) requires age verification for VPN and proxy traffic on any site with adult content. On Aug 5, 2026 the Senate Commerce Committee voted 15-13 in favor but the bill did not advance for lack of quorum.","sources":[{"label":"S.737 - SCREEN Act, 119th Congress, congress.gov","url":"https://www.congress.gov/bill/119th-congress/senate-bill/737"},{"label":"The SCREEN Act Threatens Privacy Far Beyond Adult Websites, Electronic Frontier Foundation","url":"https://www.eff.org/deeplinks/2026/07/screen-act-threatens-privacy-far-beyond-adult-websites"},{"label":"S.737: SCREEN Act, GovTrack.us","url":"https://www.govtrack.us/congress/bills/119/s737"}],"section_headings":["The August 5 committee vote","What the bill would require","The VPN-specific provision","How this compares to state age-verification laws already active","Status"]},{"slug":"minneapolis-skydio-drone-rejection","title":"Minneapolis Rejects Skydio Drones While Whittier Expands Axon's DFR Program","tags":["Surveillance","Policy"],"desc":"Minneapolis councilmembers rejected a Skydio drone pilot 6-6 over the vendor's ICE and Israeli military sales, while Whittier, California approved a $3.44M Axon DFR expansion 4-1 the same week. Both council records compared.","time":"~6 min read","date":"2026-08-06","lastReviewed":"2026-08-06","url":"https://cunicula.com/en/articles/minneapolis-skydio-drone-rejection","answer":"Minneapolis councilmembers rejected a Skydio drone pilot 6-6 over the vendor's ICE and Israeli military sales, while Whittier, California approved a $3.44M Axon DFR expansion 4-1 the same week. Both council records compared.","sources":[{"label":"Public comment record on the Skydio contract, Minneapolis city legislative record","url":"https://lims.minneapolismn.gov/Download/FileV2/54692/Public-Comment-Contract-with-Skydio-July-8-2026.pdf"},{"label":"Drones as First Responders pilot program presentation, Minneapolis city legislative record","url":"https://lims.minneapolismn.gov/Download/RCAV2/54643/Drones-as-First-Responders-Pilot-Program-Presentation.pdf"},{"label":"Minnesota drone sightings drove surveillance fears as ICE surged, MPR News","url":"https://www.mprnews.org/story/2026/03/13/minnesota-drone-sightings-drove-surveillance-fears-as-ice-surged"},{"label":"Minneapolis City Council rejects police drone contract with Skydio, MPR News","url":"https://www.mprnews.org/story/2026/07/16/minneapolis-city-council-rejects-police-drone-contract-with-skydio"},{"label":"Council approves police drone program as part of larger $3.4 million Axon deal, Whittier Informed","url":"https://www.whittierinformed.com/council-approves-police-drone-program-as-part-of-larger-3-4-million-axon-deal/"}],"section_headings":["What the Minneapolis pilot proposed","The 6-6 vote and the stated reasons on each side","What Whittier approved, and what it actually cost","How Whittier says the drones will be used","Reading the two records together","Status"]},{"slug":"manifest-v3-content-blocking-limits","title":"Manifest V3 and the Limits of Chrome Content Blocking in 2026","tags":["Privacy Tools","Google"],"desc":"Chrome disabled Manifest V2 extensions in July 2025, ending the full uBlock Origin on Chrome. What declarativeNetRequest can and cannot filter, and why Firefox kept the blocking webRequest API.","time":"~5 min read","date":"2026-08-06","lastReviewed":"2026-08-06","url":"https://cunicula.com/en/articles/manifest-v3-content-blocking-limits","answer":"Chrome disabled Manifest V2 extensions in July 2025, ending the full uBlock Origin on Chrome. What declarativeNetRequest can and cannot filter, and why Firefox kept the blocking webRequest API.","sources":[{"label":"Manifest v3 in Firefox: Recap and Next Steps, Mozilla Add-ons Community Blog","url":"https://blog.mozilla.org/addons/2022/05/18/manifest-v3-in-firefox-recap-next-steps/"},{"label":"Manifest V2 support timeline, Chrome for Developers","url":"https://developer.chrome.com/docs/extensions/develop/migrate/mv2-deprecation-timeline"},{"label":"chrome.declarativeNetRequest API reference, Chrome for Developers","url":"https://developer.chrome.com/docs/extensions/reference/api/declarativeNetRequest"},{"label":"uBlock Origin works best on Firefox, gorhill/uBlock wiki","url":"https://github.com/gorhill/uBlock/wiki/uBlock-Origin-works-best-on-Firefox"},{"label":"uBlock Origin Lite frequently asked questions, uBlockOrigin/uBOL-home wiki","url":"https://github.com/uBlockOrigin/uBOL-home/wiki/Frequently-asked-questions-(FAQ)"},{"label":"Librewolf official site","url":"https://librewolf.net/","firstParty":true},{"label":"Tor Browser official site","url":"https://www.torproject.org/","firstParty":true}],"section_headings":["What replaced the blocking API","What still works on Chrome","Firefox kept the blocking API","Where this leaves a reader","Status"]},{"slug":"guinea-vpn-surge-social-media-blackout","title":"Guinea Blocked Three Platforms After a Cabinet Reshuffle. VPN Demand Rose Over 3,000%.","tags":["Censorship","VPN"],"desc":"Guinea blocked Facebook, YouTube, and TikTok nationwide on July 28, 2026 with no official explanation. VPN Observatory telemetry shows demand rising over 3,000% within three days.","time":"~6 min read","date":"2026-08-06","lastReviewed":"2026-08-06","url":"https://cunicula.com/en/articles/guinea-vpn-surge-social-media-blackout","answer":"Guinea blocked Facebook, YouTube, and TikTok nationwide on July 28, 2026 with no official explanation. VPN Observatory telemetry shows demand rising over 3,000% within three days.","sources":[{"label":"Cameroon Election Internet Blackout, 2025, VPN Super VPN Observatory","url":"https://vpnsuper.com/vpn-observatory/cameroon-election-internet-blackout-2025"},{"label":"Gabon Social Media Blackout, February 2026, VPN Super VPN Observatory","url":"https://vpnsuper.com/vpn-observatory/gabon-social-media-blackout-february-2026"},{"label":"Guinea VPN Surge 3,100% in July 2026: Social Media Blackout, VPN Super VPN Observatory","url":"https://vpnsuper.com/vpn-observatory/guinea-vpn-surge-social-media-blackout-july-2026"}],"section_headings":["A reshuffle, then a blackout","What the VPN telemetry shows","Not Guinea's first blackout, and not Africa's only one","What happens next"]},{"slug":"coldcard-rng-entropy-incident-2026","title":"Coldcard: 2026 Firmware Random-Number Flaw and Bitcoin Theft","tags":["Bitcoin","Wallet","Security"],"desc":"A 2021 firmware migration silently weakened Coldcard wallet-seed randomness. What Coinkite and independent researchers confirmed, what remains a disputed AI claim, and how to check exposure.","time":"~9 min read","date":"2026-08-06","lastReviewed":"2026-08-06","editorialStatus":"ok","url":"https://cunicula.com/en/articles/coldcard-rng-entropy-incident-2026","answer":"A 2021 firmware migration silently weakened Coldcard wallet-seed randomness. What Coinkite and independent researchers confirmed, what remains a disputed AI claim, and how to check exposure.","sources":[{"label":"Coinkite: Coldcard security advisory","url":"https://blog.coinkite.com/coldcard-mk3-seed-generation-warning/"},{"label":"Coinkite: Technical deep dive into the entropy issue","url":"https://blog.coinkite.com/entropy-technical-backgrounder/"},{"label":"Coinkite: Update, Sunday","url":"https://blog.coinkite.com/update-sunday/"},{"label":"Cointelegraph: at least 15 attackers exploited the vulnerability","url":"https://cointelegraph.com/news/15-attackers-exploited-coldcard-vulnerability-galaxy"},{"label":"Coldcard official site","url":"https://coldcard.com/","firstParty":true},{"label":"Decrypt: Coldcard exploit balloons to $88 million","url":"https://decrypt.co/374817/coldcard-bitcoin-exploit-88-million-attackers-draining-wallets"},{"label":"Decrypt: Coldcard exploit explained","url":"https://decrypt.co/374916/coldcard-bitcoin-exploit-explained-entropy-keys-bits"},{"label":"Block Engineering: predictable RNG fallback and 32-bit reseed analysis","url":"https://engineering.block.xyz/blog/predictable-rng-fallback-and-32-bit-reseed-in-coldcard-firmware"}],"section_headings":["What happened, and why","Which devices are affected","How attackers are actually draining wallets","An unresolved warning claim","Scale of theft: a disputed range, not one number","The AI-discovery claims: kept attributed","What a Coldcard owner can check","Comparing custody options"]},{"slug":"uk-apple-adp-technical-capability-notice","title":"Apple Advanced Data Protection and the UK Technical Capability Notice","tags":["Encryption","Legal"],"desc":"Advanced Data Protection has been unavailable to new UK users since February 2025 after a Home Office notice under Investigatory Powers Act section 253. Apple filed a fresh tribunal claim in August 2026 and the lawfulness question is undecided.","time":"~7 min read","date":"2026-08-06","lastReviewed":"2026-08-06","url":"https://cunicula.com/en/articles/uk-apple-adp-technical-capability-notice","answer":"Advanced Data Protection has been unavailable to new UK users since February 2025 after a Home Office notice under Investigatory Powers Act section 253. Apple filed a fresh tribunal claim in August 2026 and the lawfulness question is undecided.","sources":[{"label":"PI Apple TCN Challenge, case IPT/25/83/CH, Privacy International","url":"https://privacyinternational.org/legal-action/pi-apple-tcn-challenge"},{"label":"Apple issues new challenge against UK order for access to private user data, BBC News, 4 August 2026","url":"https://www.bbc.co.uk/news/articles/cvg0kk3ek2vo"},{"label":"Investigatory Powers Act 2016, section 253, technical capability notices, legislation.gov.uk","url":"https://www.legislation.gov.uk/ukpga/2016/25/section/253"}],"section_headings":["What the notice regime actually is","The first notice was withdrawn for a reason that had nothing to do with UK users","What this changes for an iCloud account today","What has not been decided"]},{"slug":"windows-gdid-degdid-tracking","title":"A VPN Provider Built a Tool to Strip Windows' Hidden Device ID","tags":["Surveillance","Hardware"],"desc":"Windscribe published research into GDID, a Microsoft-issued Windows device identifier, and released deGDID to remove it. GDID surfaced in an unsealed federal complaint and operates outside VPN-tunneled traffic.","time":"~6 min read","date":"2026-08-06","lastReviewed":"2026-08-06","url":"https://cunicula.com/en/articles/windows-gdid-degdid-tracking","answer":"Windscribe published research into GDID, a Microsoft-issued Windows device identifier, and released deGDID to remove it. GDID surfaced in an unsealed federal complaint and operates outside VPN-tunneled traffic.","sources":[{"label":"deGDID, GitHub","url":"https://github.com/yegors/deGDID"},{"label":"UCDOStatus table reference, Microsoft Learn","url":"https://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/ucdostatus"},{"label":"Windows Tracks You With a Hidden ID. So We Built deGDID to Block It, Windscribe","url":"https://windscribe.com/blog/windows-tracks-you-with-a-hidden-id-so-we-built-degdid-to-block-it"},{"label":"Superseding complaint against Peter Stokes, US Attorney's Office, Northern District of Illinois","url":"https://www.justice.gov/usao-ndil/media/1450651/dl?inline="}],"section_headings":["What GDID is, and what it is not","How it surfaced in a federal case","Why deleting one registry key does not remove it","What deGDID actually does"]},{"slug":"self-osint-personal-exposure-audit","title":"Self-OSINT Audit: Find and Reduce Your Personal Exposure","tags":["OSINT","Doxxing Defense","Workflow"],"desc":"A practical self-OSINT workflow for finding your public identifiers, profiles, breach exposure, broker records, images, and documents, then verifying remediation and repeat exposure.","time":"~12 min read","date":"2026-08-05","lastReviewed":"2026-08-05","contentKind":"guide","editorialStatus":"ok","url":"https://cunicula.com/en/articles/self-osint-personal-exposure-audit","answer":"A practical self-OSINT workflow for finding your public identifiers, profiles, breach exposure, broker records, images, and documents, then verifying remediation and repeat exposure.","sources":[{"label":"Have I Been Pwned: verified breach notifications","url":"https://haveibeenpwned.com/NotifyMe"},{"label":"Have I Been Pwned privacy and service scope","url":"https://haveibeenpwned.com/privacy"},{"label":"EFF Surveillance Self-Defense: manage your digital footprint","url":"https://ssd.eff.org/module/how-to-manage-your-digital-footprint"},{"label":"Google Search Help: Results about you","url":"https://support.google.com/websearch/answer/12719076"},{"label":"Google Search Help: remove private information","url":"https://support.google.com/websearch/answer/9673730"},{"label":"EFF: doxxing prevention and harm reduction","url":"https://www.eff.org/deeplinks/2020/12/doxxing-tips-protect-yourself-online-how-minimize-harm"}],"section_headings":["Prepare a private evidence register","1. Build your identifier list","2. Search from a clean context","3. Check accounts and breach exposure","4. Check people-search and broker listings","5. Review search removal and source removal separately","6. Audit image and document metadata","7. Connect findings without building an unnecessary graph","Stop point: choose the response","9. Verify remediation","10. Produce a short final report","Recurring schedule"]},{"slug":"proton-pass-vs-bitwarden-simplelogin","title":"Proton Pass vs Bitwarden With SimpleLogin","tags":["Passwords","Email Aliases","Comparison"],"desc":"Proton Pass and Bitwarden with SimpleLogin compared by alias setup, account separation, custom domains, self-hosting, exports, recovery, and provider portability.","time":"~9 min read","date":"2026-08-05","lastReviewed":"2026-08-05","contentKind":"guide","editorialStatus":"ok","url":"https://cunicula.com/en/articles/proton-pass-vs-bitwarden-simplelogin","answer":"Proton Pass and Bitwarden with SimpleLogin compared by alias setup, account separation, custom domains, self-hosting, exports, recovery, and provider portability.","sources":[{"label":"Bitwarden: export vault data","url":"https://bitwarden.com/help/export-your-data/"},{"label":"Bitwarden: forwarded email alias generator","url":"https://bitwarden.com/help/generator/"},{"label":"Proton: link SimpleLogin and Proton accounts","url":"https://proton.me/support/link-simplelogin-account-proton-account"},{"label":"Proton: hide-my-email aliases in Proton Pass","url":"https://proton.me/support/pass-email-alias"},{"label":"Proton: export Proton Pass data","url":"https://proton.me/support/pass-export"},{"label":"SimpleLogin: replies and reverse aliases","url":"https://simplelogin.io/docs/getting-started/reverse-alias/"}],"section_headings":["Password manager and email alias comparison","What an alias changes","Use Proton Pass when one account is the point","Use Bitwarden when separation is the point","Set up one alias per account","Proton Pass setup","Bitwarden and SimpleLogin setup","Custom domain or provider domain","Test the exit path"]},{"slug":"private-home-network-setup","title":"Private Home Network Setup: Router, DNS, Isolation, and Remote Access","tags":["Home Privacy","Networking","Guide"],"desc":"A practical home network guide covering router control, trusted and guest networks, camera and IoT isolation, DNS, firewall rules, private remote access, and verification.","time":"~10 min read","date":"2026-08-05","lastReviewed":"2026-08-05","contentKind":"guide","editorialStatus":"ok","url":"https://cunicula.com/en/articles/private-home-network-setup","answer":"A practical home network guide covering router control, trusted and guest networks, camera and IoT isolation, DNS, firewall rules, private remote access, and verification.","sources":[{"label":"Frigate: camera stream configuration","url":"https://docs.frigate.video/configuration/cameras"},{"label":"OpenWrt: isolated guest Wi-Fi","url":"https://openwrt.org/docs/guide-user/network/wifi/guestwifi/guest-wlan"},{"label":"OpenWrt: security features and initial administration","url":"https://openwrt.org/docs/guide-user/security/security-features"},{"label":"OpenWrt: DNS and encrypted resolver options","url":"https://openwrt.org/docs/guide-user/services/dns/start"},{"label":"Tailscale: access policy syntax and tests","url":"https://tailscale.com/kb/1337/policy-syntax"},{"label":"WireGuard: official quick start","url":"https://www.wireguard.com/quickstart/"}],"section_headings":["Before changing the router","1. Put the router under your control","2. Create separate networks","3. Write the firewall from required connections","4. Choose and enforce DNS","5. Isolate cameras and connected devices","6. Use a tunnel for remote access","7. Verify the boundary","Keep it working"]},{"slug":"frigate-private-camera-network","title":"Frigate Private Camera Network: Local NVR Setup and Remote Access","tags":["Home Privacy","Self-Hosted","Cameras"],"desc":"A local Frigate NVR setup covering camera segmentation, detection and recording streams, storage, authenticated access, Tailscale, integrations, and operational failure tests.","time":"~12 min read","date":"2026-08-05","lastReviewed":"2026-08-05","contentKind":"guide","editorialStatus":"ok","url":"https://cunicula.com/en/articles/frigate-private-camera-network","answer":"A local Frigate NVR setup covering camera segmentation, detection and recording streams, storage, authenticated access, Tailscale, integrations, and operational failure tests.","sources":[{"label":"Frigate authentication and roles","url":"https://docs.frigate.video/configuration/authentication/"},{"label":"Frigate restream security","url":"https://docs.frigate.video/configuration/restream/"},{"label":"Frigate camera stream setup","url":"https://docs.frigate.video/frigate/camera_setup"},{"label":"Frigate installation and port documentation","url":"https://docs.frigate.video/frigate/installation/"},{"label":"Frigate hardware and storage planning","url":"https://docs.frigate.video/frigate/planning_setup/"},{"label":"Tailscale subnet router documentation","url":"https://tailscale.com/docs/features/subnet-routers"},{"label":"Tailscale Serve and access controls","url":"https://tailscale.com/docs/features/tailscale-serve"}],"section_headings":["Choose a deployment shape","Keep cameras on a restricted network","Use separate detection and recording streams","Container and storage boundary","Authentication and ports","Private remote access with Tailscale","Integrations create outbound paths","Commissioning checklist"]},{"slug":"degoogle-without-breaking-everything","title":"De-Google Without Breaking Everything","tags":["Guide","Google","Privacy"],"desc":"A staged de-Googling plan that maps dependencies before migration, separates identity, storage, sync, media, Android, and paid purchases, and adds rollback checks.","time":"~11 min read","date":"2026-08-05","lastReviewed":"2026-08-05","contentKind":"guide","editorialStatus":"ok","url":"https://cunicula.com/en/articles/degoogle-without-breaking-everything","answer":"A staged de-Googling plan that maps dependencies before migration, separates identity, storage, sync, media, Android, and paid purchases, and adds rollback checks.","sources":[{"label":"Google Account Help: how account data deletion works","url":"https://support.google.com/accounts/answer/10549751"},{"label":"Google Account Help: download your data","url":"https://support.google.com/accounts/answer/3024190"},{"label":"Google Account Help: delete your Google Account","url":"https://support.google.com/accounts/answer/32046"},{"label":"Google Account Help: find, control, and delete account information","url":"https://support.google.com/accounts/answer/7660719"}],"section_headings":["1. Create a replacement identity first","2. Export, verify, then export again if needed","3. Move critical accounts by consequence","4. Replace Sign in with Google","5. Handle Android and purchases separately","6. Reduce collection before full deletion","7. Delete only after a cold test","Completion checklist"]},{"slug":"california-drop-data-broker-removal","title":"California DROP: Delete Data Broker Records and Check Results","tags":["Data Brokers","Removal","Guide"],"desc":"A step-by-step California DROP guide covering identifiers, broker matching, deletion statuses, 45-day processing, 90-day reporting, later checks, and records that return.","time":"~8 min read","date":"2026-08-05","lastReviewed":"2026-08-05","contentKind":"guide","editorialStatus":"ok","url":"https://cunicula.com/en/articles/california-drop-data-broker-removal","answer":"A step-by-step California DROP guide covering identifiers, broker matching, deletion statuses, 45-day processing, 90-day reporting, later checks, and records that return.","sources":[{"label":"CalPrivacy: how broker deletion matching works","url":"https://privacy.ca.gov/2026/07/drop-data-broker-deletions-how-do-they-work/"},{"label":"CalPrivacy: DROP requirements for data brokers","url":"https://privacy.ca.gov/drop-for-data-brokers/"},{"label":"DROP page","url":"https://privacy.ca.gov/drop/"},{"label":"CalPrivacy: how DROP works","url":"https://privacy.ca.gov/drop/how-drop-works/"},{"label":"CalPrivacy: optional identifiers used for matching","url":"https://privacy.ca.gov/drop/unique-identifiers/"}],"section_headings":["What the status means","Before you start","1. Verify California residency","2. Add the identifiers brokers are likely to hold","3. Review the broker list and submit","4. Read the results by broker","5. Check public records again","When a record returns"]},{"slug":"axon-police-ai-body-cameras","title":"Axon Police AI: Body Cameras, Draft One, and Fusus","tags":["Surveillance","AI","Public Records"],"desc":"Axon sells AI that drafts police reports from body-camera audio and software that watches live city cameras. How the data flows from recording to courtroom, and which public records show how your city uses it.","time":"~14 min read","date":"2026-08-05","lastReviewed":"2026-08-21","contentKind":"guide","editorialStatus":"ok","url":"https://cunicula.com/en/articles/axon-police-ai-body-cameras","answer":"Axon sells AI that drafts police reports from body-camera audio and software that watches live city cameras. How the data flows from recording to courtroom, and which public records show how your city uses it.","sources":[{"label":"Axon Customer Experience Improvement Program disclosure","url":"https://www.axon.com/aceip"},{"label":"Axon: Vision design and rollout statement","url":"https://www.axon.com/blog/rethinking-vision-building-systems-that-understand-not-just-see"},{"label":"Axon Draft One auditing and reporting documentation","url":"https://www.axon.com/help/draft-one/software/draft-one/auditing-reporting.htm"},{"label":"Axon Fusus product page","url":"https://www.axon.com/products/axon-fusus"},{"label":"Axon Vision product page","url":"https://www.axon.com/products/axon-vision"},{"label":"Axon Draft One product page","url":"https://www.axon.com/products/draft-one"},{"label":"Axon case study: Lafayette Police Department deployment","url":"https://www.axon.com/resources/how-lafayette-pd-used-draft-one"},{"label":"Axon case study: North Carolina corrections","url":"https://www.axon.com/resources/prioritizing-officer-safety-at-scale"}],"section_headings":["Draft One turns audio into an official-document workflow","One named deployment has a public procurement trail","Original drafts are a policy and version question","Human review is necessary but not sufficient","Fusus expands the frame beyond one recorded encounter","Axon Vision adds activity alerts inside Fusus","How to check your own city"]},{"slug":"private-email-providers","title":"Private Email Migration with Proton and SimpleLogin","tags":["Comms","Email","Guide"],"desc":"Move an existing inbox to Proton Mail, add one-address-per-account SimpleLogin aliases, verify replies, import mail, and run a 30-day cutover.","time":"~13 min read","date":"2026-07-16","lastReviewed":"2026-08-10","contentKind":"guide","editorialStatus":"ok","providerSlugs":["proton-mail","simplelogin"],"url":"https://cunicula.com/en/articles/private-email-providers","answer":"Move an existing inbox to Proton Mail, add one-address-per-account SimpleLogin aliases, verify replies, import mail, and run a 30-day cutover.","sources":[{"label":"Proton Mail official site","url":"https://proton.me/mail","firstParty":true},{"label":"Proton account creation","url":"https://proton.me/support/create-a-free-email-account","retrievedAt":"2026-08-10"},{"label":"Proton migration controls","url":"https://proton.me/support/easy-switch","retrievedAt":"2026-08-10"},{"label":"Proton account and plan documentation","url":"https://proton.me/support/proton-plans","retrievedAt":"2026-08-10"},{"label":"Proton external-recipient encryption","url":"https://proton.me/support/send-messages"},{"label":"Proton account recovery","url":"https://proton.me/support/set-account-recovery-methods","retrievedAt":"2026-08-10"},{"label":"Proton Gmail forwarding and transition","url":"https://proton.me/support/switch-from-gmail-to-proton","retrievedAt":"2026-08-10"},{"label":"Proton two-factor authentication","url":"https://proton.me/support/two-factor-authentication-2fa","retrievedAt":"2026-08-10"}],"section_headings":["Before you start","What this setup does not protect","Maintenance"]},{"slug":"kids-act-age-checks-online","title":"What the KIDS Act Would Change Online","tags":["Policy","Age Verification","Communications"],"desc":"The House passed the KIDS Act on June 29, 2026. The bill would require age checks on some sites and change privacy, messaging, and content rules for minors.","time":"~8 min read","date":"2026-07-12","lastReviewed":"2026-07-13","url":"https://cunicula.com/en/articles/kids-act-age-checks-online","answer":"The House passed the KIDS Act on June 29, 2026. The bill would require age checks on some sites and change privacy, messaging, and content rules for minors.","sources":[{"label":"Center for Democracy & Technology: March 5, 2026 committee letter on the earlier bill text","url":"https://cdt.org/wp-content/uploads/2026/03/CDT-letter-to-House-Energy-and-Commerce-Full-Committee-for-Kids-Safety-Markup-3.5.26.pdf"},{"label":"Congress.gov: H.R. 7757 status, actions, and legislative summary","url":"https://www.congress.gov/bill/119th-congress/house-bill/7757"},{"label":"Congress.gov: House engrossed text passed June 29, 2026","url":"https://www.congress.gov/bill/119th-congress/house-bill/7757/text/eh?format=txt"},{"label":"Congress.gov: House roll call 228","url":"https://www.congress.gov/votes/house/119-2/228"},{"label":"Electronic Frontier Foundation: July 9, 2026 analysis of the House-passed bill","url":"https://www.eff.org/deeplinks/2026/07/house-passed-kids-act-senate-should-reject-it"}],"section_headings":["Age checks are explicit for a narrow group of sites","Other sections create a harder age question","The current messaging text is narrower than earlier criticism","Content rules could affect lawful posts","Privacy clauses limit collection but do not erase exposure","What to watch next"]},{"slug":"us-cbdc-ban-road-to-housing-act","title":"US CBDC Restriction in Public Law 119-101","tags":["Policy","Payments"],"desc":"The enacted Federal Reserve CBDC restriction, its exact definition, intermediary scope, exception, authorization rule, and 2030 sunset.","time":"~4 min read","date":"2026-07-12","lastReviewed":"2026-08-10","url":"https://cunicula.com/en/articles/us-cbdc-ban-road-to-housing-act","answer":"The enacted Federal Reserve CBDC restriction, its exact definition, intermediary scope, exception, authorization rule, and 2030 sunset.","sources":[{"label":"Federal Reserve CBDC FAQ, retrieved 10 August 2026","url":"https://www.federalreserve.gov/cbdc-faqs.htm","retrievedAt":"2026-08-10"},{"label":"GovInfo Public Law 119-101 package","url":"https://www.govinfo.gov/app/details/PLAW-119publ101","retrievedAt":"2026-08-10"},{"label":"Federal Reserve Act Section 16A(a), retrieved 10 August 2026","url":"https://www.govinfo.gov/content/pkg/PLAW-119publ101/html/PLAW-119publ101.htm","retrievedAt":"2026-08-10"}],"section_headings":["The statutory definition","What the prohibition does","What it does not ban","Enactment and current Federal Reserve position"]},{"slug":"spyware-apps-detection-guide","title":"Phishing, Stalkerware, and Mercenary Spyware Triage","tags":["Privacy Guides","Mobile Security"],"desc":"Evidence-specific checks for suspicious messages, hidden monitoring apps, and high-confidence mercenary-spyware notifications, with survivor-safe response guidance.","time":"~4 min read","date":"2026-07-12","lastReviewed":"2026-08-10","url":"https://cunicula.com/en/articles/spyware-apps-detection-guide","answer":"Evidence-specific checks for suspicious messages, hidden monitoring apps, and high-confidence mercenary-spyware notifications, with survivor-safe response guidance.","sources":[{"label":"Citizen Lab forensic report, retrieved 10 August 2026","url":"https://citizenlab.ca/2025/06/first-forensic-confirmation-of-paragons-ios-mercenary-spyware-finds-journalists-targeted/","retrievedAt":"2026-08-10"},{"label":"Survivor detection, removal, and prevention guidance, retrieved 10 August 2026","url":"https://stopstalkerware.org/information-for-survivors/","retrievedAt":"2026-08-10"},{"label":"Apple threat-notification guidance, retrieved 10 August 2026","url":"https://support.apple.com/en-us/102174","retrievedAt":"2026-08-10"},{"label":"Google's phishing indicators and response steps, retrieved 10 August 2026","url":"https://support.google.com/mail/answer/8253","retrievedAt":"2026-08-10"},{"label":"FTC complaint paragraphs 6-9, retrieved 10 August 2026","url":"https://www.ftc.gov/system/files/documents/cases/192_3003_spyfone_complaint.pdf","retrievedAt":"2026-08-10"}],"section_headings":["1. Suspicious message or phishing","2. Stalkerware after device access","3. Mercenary spyware and threat notifications","Triage by evidence"]},{"slug":"eu-site-blocking-google-copyright-submission","title":"Google's EU Copyright Submission: Site-Blocking Safeguards","tags":["Policy","Censorship"],"desc":"Google's filed EU copyright position on subsidiary injunctions, shared infrastructure, judicial review, transparency, proportionality, and time limits.","time":"~4 min read","date":"2026-07-12","lastReviewed":"2026-08-10","url":"https://cunicula.com/en/articles/eu-site-blocking-google-copyright-submission","answer":"Google's filed EU copyright position on subsidiary injunctions, shared infrastructure, judicial review, transparency, proportionality, and time limits.","sources":[{"label":"Submission pages 27 and 30, retrieved 10 August 2026","url":"https://ec.europa.eu/info/law/better-regulation/api/download/090166e52ff2de8c","retrievedAt":"2026-08-10"},{"label":"Google feedback record, retrieved 10 August 2026","url":"https://ec.europa.eu/info/law/better-regulation/have-your-say/initiatives/18172-Report-on-the-review-of-the-2019-EU-rules-on-copyright-and-related-rights-in-the-digital-single-market/F33504634_en","retrievedAt":"2026-08-10"},{"label":"Commission initiative record, retrieved 10 August 2026","url":"https://ec.europa.eu/info/law/better-regulation/have-your-say/initiatives/18173-Targeted-initiative-for-a-better-copyright-environment-for-European-creativity-and-innovation_en","retrievedAt":"2026-08-10"}],"section_headings":["Google's position","Why shared infrastructure matters","The safeguards Google requested","Current status"]},{"slug":"chatrie-geofence-ruling-license-plate-readers","title":"Chatrie v. United States: What the Geofence Ruling Does and Does Not Decide","tags":["Surveillance","Policy"],"desc":"The Supreme Court held that acquiring Google Location History is a Fourth Amendment search. It did not set a warrant standard and did not address license plate readers.","time":"~4 min read","date":"2026-07-12","lastReviewed":"2026-08-10","url":"https://cunicula.com/en/articles/chatrie-geofence-ruling-license-plate-readers","answer":"The Supreme Court held that acquiring Google Location History is a Fourth Amendment search. It did not set a warrant standard and did not address license plate readers.","sources":[{"label":"EFF Surveillance Self-Defense ALPR guide, retrieved 10 August 2026","url":"https://sls.eff.org/technologies/automated-license-plate-readers-alprs","retrievedAt":"2026-08-10"},{"label":"Supreme Court docket, retrieved 10 August 2026","url":"https://www.supremecourt.gov/docket/docketfiles/html/public/25-112.html","retrievedAt":"2026-08-10"},{"label":"Opinion discussion of public roads and private places, retrieved 10 August 2026","url":"https://www.supremecourt.gov/opinions/25pdf/25-112_0am4.pdf","retrievedAt":"2026-08-10"}],"section_headings":["What the Court decided","What the Court did not decide","Why plate-reader databases are a separate question","Current case posture"]},{"slug":"virtual-cards-vs-stablecoin-wallets-ai-agents","title":"Virtual Cards vs Stablecoin Wallets for AI Agents","tags":["AI Privacy","Payments","Wallets"],"desc":"A privacy-first comparison of virtual cards and stablecoin wallets for AI-agent spending: KYC, issuer logs, onchain history, revocation, budgets, and merchant fit.","time":"~4 min read","date":"2026-07-05","lastReviewed":"2026-07-05","contentKind":"brief","editorialStatus":"ok","url":"https://cunicula.com/en/articles/virtual-cards-vs-stablecoin-wallets-ai-agents","answer":"A privacy-first comparison of virtual cards and stablecoin wallets for AI-agent spending: KYC, issuer logs, onchain history, revocation, budgets, and merchant fit.","sources":[{"label":"Privacy AI agent cards page","url":"https://agents.privacy.com/"},{"label":"Coinbase x402 docs","url":"https://docs.cdp.coinbase.com/x402/welcome"},{"label":"Stripe machine payments docs","url":"https://docs.stripe.com/payments/machine"}],"section_headings":["Virtual-card strengths","Stablecoin-wallet strengths","How to choose","Comparison checklist"]},{"slug":"privacy-com-mcp-spend-control-not-anonymity","title":"Privacy.com MCP Is Spend Control, Not Anonymity","tags":["AI Privacy","Payments","Privacy.com"],"desc":"Privacy.com MCP gives AI tools access to virtual-card controls, but identity checks and linked funding make it spend control, not anonymous money.","time":"~4 min read","date":"2026-07-05","lastReviewed":"2026-07-13","contentKind":"brief","editorialStatus":"ok","url":"https://cunicula.com/en/articles/privacy-com-mcp-spend-control-not-anonymity","answer":"Privacy.com MCP gives AI tools access to virtual-card controls, but identity checks and linked funding make it spend control, not anonymous money.","sources":[{"label":"Privacy MCP server documentation","url":"https://developers.privacy.com/docs/mcp-server"},{"label":"Privacy CLI docs","url":"https://developers.privacy.com/docs/privacy-cli"},{"label":"Privacy.com MCP announcement","url":"https://www.privacy.com/blog/privacy-mcp-connect-ai-assistant-privacy-account"},{"label":"Privacy.com privacy policy","url":"https://www.privacy.com/privacy-policy"}],"section_headings":["What MCP changes","What MCP does not change","Where it fits","Use Privacy.com MCP only when"]},{"slug":"pay-per-crawl-http-402-privacy-risks","title":"Pay Per Crawl and the Paid Web: Privacy Risks of HTTP 402","tags":["AI Privacy","HTTP 402","Payments"],"desc":"How x402 and pay-per-crawl can connect AI-agent requests to wallets, accounts, facilitators, timing, and resource metadata.","time":"~4 min read","date":"2026-07-05","lastReviewed":"2026-07-13","contentKind":"brief","editorialStatus":"ok","url":"https://cunicula.com/en/articles/pay-per-crawl-http-402-privacy-risks","answer":"How x402 and pay-per-crawl can connect AI-agent requests to wallets, accounts, facilitators, timing, and resource metadata.","sources":[{"label":"Cloudflare x402 foundation post","url":"https://blog.cloudflare.com/x402/"},{"label":"Coinbase HTTP 402 docs","url":"https://docs.cdp.coinbase.com/x402/core-concepts/http-402"},{"label":"Stripe x402 docs","url":"https://docs.stripe.com/payments/machine/x402"},{"label":"IETF HTTP Semantics: 402 Payment Required","url":"https://www.rfc-editor.org/rfc/rfc9110.html#name-402-payment-required"},{"label":"x402 protocol site","url":"https://x402.org/"}],"section_headings":["The clean engineering story","The privacy cost","Privacy guidance","Before using paid crawl"]},{"slug":"unbroker-ai-data-broker-removal-agent","title":"Local-First Data Broker Removal: Extraction, Deletion, and Rechecks","tags":["AI Privacy","OPSEC","Data Brokers"],"desc":"A local-first workflow for finding data-broker records, approving least-disclosure opt-outs, tracking proof, escalating to a human, and rechecking for reappearance.","time":"~10 min read","date":"2026-07-05","lastReviewed":"2026-08-05","contentKind":"guide","editorialStatus":"ok","url":"https://cunicula.com/en/articles/unbroker-ai-data-broker-removal-agent","answer":"A local-first workflow for finding data-broker records, approving least-disclosure opt-outs, tracking proof, escalating to a human, and rechecking for reappearance.","sources":[{"label":"California Data Broker Registry","url":"https://cppa.ca.gov/data_broker_registry/"},{"label":"unbroker README on GitHub","url":"https://github.com/NousResearch/hermes-agent/tree/main/optional-skills/security/unbroker"},{"label":"BADBOOL broker opt-out list","url":"https://github.com/yaelwrites/Big-Ass-Data-Broker-Opt-Out-List"},{"label":"Hermes Agent unbroker skill docs","url":"https://hermes-agent.nousresearch.com/docs/user-guide/skills/optional/security/security-unbroker"},{"label":"California DROP official page","url":"https://privacy.ca.gov/drop/"},{"label":"EFF digital-footprint guide","url":"https://ssd.eff.org/module/how-to-manage-your-digital-footprint"}],"section_headings":["What it is","What to check","What matters operationally","How DROP changes removal work in California","Separate extraction from removal","Self-hosting and fallback boundaries","Limits","Before using a removal agent"]},{"slug":"self-host-unbroker-data-broker-removal","title":"How to Self-Host unbroker for Data Broker Removal","tags":["Data Brokers","AI Privacy","How To"],"desc":"A practical guide to running unbroker locally or on an isolated server, with local records, browser and email modes, DROP, human fallback, and recurring re-scans.","time":"~8 min read","date":"2026-07-05","lastReviewed":"2026-08-05","contentKind":"guide","editorialStatus":"ok","url":"https://cunicula.com/en/articles/self-host-unbroker-data-broker-removal","answer":"A practical guide to running unbroker locally or on an isolated server, with local records, browser and email modes, DROP, human fallback, and recurring re-scans.","sources":[{"label":"California Data Broker Registry","url":"https://cppa.ca.gov/data_broker_registry/"},{"label":"unbroker README on GitHub","url":"https://github.com/NousResearch/hermes-agent/tree/main/optional-skills/security/unbroker"},{"label":"BADBOOL broker opt-out list","url":"https://github.com/yaelwrites/Big-Ass-Data-Broker-Opt-Out-List"},{"label":"California DROP official page","url":"https://privacy.ca.gov/drop/"},{"label":"unbroker SKILL.md","url":"https://raw.githubusercontent.com/NousResearch/hermes-agent/main/optional-skills/security/unbroker/SKILL.md"}],"section_headings":["What you are hosting","Basic run shape","Consent and intake","Email and browser mode","DROP first for California","What to measure","Workflow boundaries"]},{"slug":"score-agent-payment-rail","title":"Evaluating AI-Agent Payment Methods","tags":["AI Privacy","Payments","OPSEC"],"desc":"A practical scoring rubric for AI-agent payment rails: identity exposure, authorization, settlement, custody, autonomy, revocation, logs, and privacy fit.","time":"~5 min read","date":"2026-07-05","lastReviewed":"2026-07-13","contentKind":"brief","editorialStatus":"ok","url":"https://cunicula.com/en/articles/score-agent-payment-rail","answer":"A practical scoring rubric for AI-agent payment rails: identity exposure, authorization, settlement, custody, autonomy, revocation, logs, and privacy fit.","sources":[{"label":"Privacy AI agent cards page","url":"https://agents.privacy.com/"},{"label":"AP2 protocol docs","url":"https://ap2-protocol.org/"},{"label":"Coinbase x402 docs","url":"https://docs.cdp.coinbase.com/x402/welcome"},{"label":"Stripe machine payments docs","url":"https://docs.stripe.com/payments/machine"}],"section_headings":["The seven fields that matter","Autonomy is a risk score","How to use the score","Scoring rubric"]},{"slug":"ap2-x402-mpp-agent-payment-privacy","title":"AI Agent Payment Protocols Compared","tags":["AI Privacy","Payments","Agent Money"],"desc":"A privacy-first comparison of AP2, x402, and MPP for AI-agent payments: authorization, HTTP 402 challenges, settlement rails, logs, wallets, and metadata exposure.","time":"~5 min read","date":"2026-07-05","lastReviewed":"2026-07-05","contentKind":"brief","editorialStatus":"ok","url":"https://cunicula.com/en/articles/ap2-x402-mpp-agent-payment-privacy","answer":"A privacy-first comparison of AP2, x402, and MPP for AI-agent payments: authorization, HTTP 402 challenges, settlement rails, logs, wallets, and metadata exposure.","sources":[{"label":"AP2 protocol docs","url":"https://ap2-protocol.org/"},{"label":"Google AP2 announcement","url":"https://cloud.google.com/blog/products/ai-machine-learning/announcing-agents-to-payments-ap2-protocol"},{"label":"Cloudflare MPP compatibility note","url":"https://developers.cloudflare.com/agents/tools/payments/mpp/"},{"label":"Coinbase x402 docs","url":"https://docs.cdp.coinbase.com/x402/welcome"},{"label":"Stripe Machine Payments Protocol","url":"https://stripe.com/blog/machine-payments-protocol"}],"section_headings":["What each layer does","The privacy split","Privacy guidance","Before letting an agent pay"]},{"slug":"agent-wallet-threat-model","title":"Agent Wallet Threat Model: Keys, Sessions, Budgets, and Receipts","tags":["AI Privacy","Wallets","OPSEC"],"desc":"A practical threat model for AI-agent wallets: key custody, prompt injection, sessions, budgets, receipts, approval policies, wallet reuse, and privacy logs.","time":"~5 min read","date":"2026-07-05","lastReviewed":"2026-07-13","contentKind":"brief","editorialStatus":"ok","url":"https://cunicula.com/en/articles/agent-wallet-threat-model","answer":"A practical threat model for AI-agent wallets: key custody, prompt injection, sessions, budgets, receipts, approval policies, wallet reuse, and privacy logs.","sources":[{"label":"AP2 v0.2 specification","url":"https://ap2-protocol.org/ap2/specification/"},{"label":"Coinbase x402 docs","url":"https://docs.cdp.coinbase.com/x402/welcome"},{"label":"Stripe machine payments docs","url":"https://docs.stripe.com/payments/machine"},{"label":"Ethereum privacy documentation","url":"https://ethereum.org/en/privacy/"},{"label":"OWASP prompt injection guidance","url":"https://genai.owasp.org/llmrisk/llm01-prompt-injection/"}],"section_headings":["Main assets","Main failure modes","Safer architecture","Minimum controls"]},{"slug":"ai-agent-money-privacy-controls","title":"Privacy Controls for AI-Agent Payments","tags":["AI Privacy","Payments","Agent Money"],"desc":"Source-backed controls for AI-agent payments: narrow tool scopes, spend limits, separate signing, human approval, revocation, and the records each rail retains.","time":"~8 min read","date":"2026-07-04","lastReviewed":"2026-07-14","url":"https://cunicula.com/en/articles/ai-agent-money-privacy-controls","answer":"Source-backed controls for AI-agent payments: narrow tool scopes, spend limits, separate signing, human approval, revocation, and the records each rail retains.","sources":[{"label":"agent controls","url":"https://agents.privacy.com/"},{"label":"Agent Payments Protocol","url":"https://ap2-protocol.org/"},{"label":"BTCPay Server","url":"https://btcpayserver.org/"},{"label":"developer onboarding documentation","url":"https://developers.privacy.com/docs/getting-started"},{"label":"MCP documentation","url":"https://developers.privacy.com/docs/mcp-server"},{"label":"API documentation","url":"https://docs.bitrefill.com/docs/api-overview"},{"label":"eCommerce MCP documentation","url":"https://docs.bitrefill.com/docs/ecommerce-mcp"},{"label":"Greenfield API","url":"https://docs.btcpayserver.org/API/Greenfield/v1/"}],"section_headings":["Privacy.com is an identity-bearing control surface","Bitrefill exposes authenticated commerce tools","BTCPay Server moves control to the operator","SHOPINBIT documents a manual concierge, not autonomous spend","Separate payment protocols from tool protocols","A bounded implementation checklist"]},{"slug":"hong-kong-device-password-law","title":"Hong Kong Device Password Law","tags":["Surveillance","Travel"],"desc":"Hong Kong now criminalises refusal to provide device passwords in national security cases. What the new rules say, where the claimed safeguards stop, and how travelers should change their device OPSEC.","time":"~12 min read","date":"2026-04-21","lastReviewed":"2026-07-13","url":"https://cunicula.com/en/articles/hong-kong-device-password-law","answer":"Hong Kong now criminalises refusal to provide device passwords in national security cases. What the new rules say, where the claimed safeguards stop, and how travelers should change their device OPSEC.","sources":[{"label":"U.S. State Department's Hong Kong travel guidance","url":"https://travel.state.gov/content/travel/en/international-travel/International-Travel-Country-Information-Pages/HongKong.html"},{"label":"Legislative Council brief","url":"https://www.legco.gov.hk/yr2024/english/brief/sb20240308_20240308-e.pdf"},{"label":"Hong Kong Security Bureau FAQ","url":"https://www.sb.gov.hk/eng/bl23/faq.html"}],"section_headings":["What the March 2026 change actually did","The government says there are safeguards. The details matter.","Why this matters for travelers","Encryption is still useful. The strategy around it has to change.","The real shift is legal compulsion, not technical defeat"]},{"slug":"google-ice-subpoena-notice","title":"Google Notice Policy and ICE Data Requests","tags":["Surveillance","Google"],"desc":"EFF says Google turned over subscriber data to ICE and only notified the user afterward, despite a public promise of advance notice. What simultaneous notice means and how to cut your exposure.","time":"~10 min read","date":"2026-04-19","lastReviewed":"2026-07-13","url":"https://cunicula.com/en/articles/google-ice-subpoena-notice","answer":"EFF says Google turned over subscriber data to ICE and only notified the user afterward, despite a public promise of advance notice. What simultaneous notice means and how to cut your exposure.","sources":[{"label":"government-request policy","url":"https://policies.google.com/terms/information-requests?hl=en-US"},{"label":"Transparency Report FAQ","url":"https://support.google.com/transparencyreport/answer/9713961?hl=en"},{"label":"Doe v. DHS","url":"https://www.aclu.org/cases/doe-v-dhs?document=Notice-of-Motion-%26-Motion-to-Quash"},{"label":"February 2026 open letter","url":"https://www.eff.org/deeplinks/2026/02/open-letter-tech-companies-protect-your-users-lawless-dhs-subpoenas"},{"label":"EFF's April 14 account","url":"https://www.eff.org/deeplinks/2026/04/google-broke-its-promise-me-now-ice-has-my-data"},{"label":"EFF press release about its state-AG complaint","url":"https://www.eff.org/press/releases/eff-state-ags-investigate-googles-broken-promise-users-targeted-government"}],"section_headings":["The Promise Matters Because Time Matters","DHS Administrative Subpoenas Are Not Warrants","The ACLU Case Shows What Real Notice Looks Like","Subscriber Data Is Not Harmless","What Changes for Your OPSEC","The Real Break Is Not Technical"]},{"slug":"license-plate-readers-traffic-enforcement","title":"Flock Safety Expansion: License Plates, Traffic Cameras, and Drones","tags":["Surveillance","Policy","Research"],"desc":"How Flock license-plate cameras connect to wider surveillance systems, why Pulaski County decided not to renew, and which contracts, access logs, cancellation records, and removal evidence to request.","time":"~15 min read","date":"2026-04-12","lastReviewed":"2026-08-21","url":"https://cunicula.com/en/articles/license-plate-readers-traffic-enforcement","answer":"How Flock license-plate cameras connect to wider surveillance systems, why Pulaski County decided not to renew, and which contracts, access logs, cancellation records, and removal evidence to request.","sources":[{"label":"Camera sensor research: rolling-shutter interference","url":"https://arxiv.org/abs/2101.10011"},{"label":"ACLU of Massachusetts","url":"https://data.aclum.org/2025/10/07/flock-gives-law-enforcement-all-over-the-country-access-to-your-location/"},{"label":"KRCG: Pulaski County decision and stated rationale","url":"https://krcgtv.com/news/local/pulaski-county-sheriffs-office-to-discontinue-flock-safety-cameras"},{"label":"404 Media: Georgia traffic citation based on a Flock capture","url":"https://www.404media.co/police-used-flock-to-give-a-man-a-traffic-ticket/"},{"label":"ACLU: August 2025 Flock expansion roundup","url":"https://www.aclu.org/news/privacy-technology/flock-roundup"},{"label":"ACLU: local Flock opposition and contract limits","url":"https://www.aclu.org/news/privacy-technology/tracking-alpr-cameras/how-to-fight-deployment-of-flock-and-other-mass-surveillance-license-plate-readers-in-your-community"},{"label":"Boston.com: Framingham contract non-renewal","url":"https://www.boston.com/news/local-news/2026/06/25/framingham-police-will-not-renew-flock-safety-contract-after-months-of-resident-opposition/"},{"label":"Cornell Daily Sun: Ithaca direct-action case","url":"https://www.cornellsun.com/article/2026/03/mcnl1fjqo786"}],"section_headings":["The vendor now sells a connected product chain","The public promise was narrow","The Georgia ticket shows what the system can do","Money follows local contracts","Resistance is part of the record","When public trust ends a deployment: Pulaski County, Missouri","This is what a searchable travel-history system looks like","What to check in a local record","What to track next"]},{"slug":"section-702-sensitive-searches","title":"Section 702 Searches of Sensitive Groups","tags":["Surveillance","Policy"],"desc":"Section 702 expired on June 12, 2026, but existing court certifications allow surveillance to continue. Sensitive FBI searches still require internal approval, not a warrant.","time":"~8 min read","date":"2026-04-11","lastReviewed":"2026-07-13","url":"https://cunicula.com/en/articles/section-702-sensitive-searches","answer":"Section 702 expired on June 12, 2026, but existing court certifications allow surveillance to continue. Sensitive FBI searches still require internal approval, not a warrant.","sources":[{"label":"PCLOB: Report on the Surveillance Program Operated Pursuant to Section 702 of FISA","url":"https://documents.pclob.gov/prod/Documents/OversightReport/e9e72454-4156-49b9-961a-855706216063/2023%20PCLOB%20702%20Report%20%28002%29.pdf"},{"label":"Congress: H.R. 7888 / Reforming Intelligence and Securing America Act text","url":"https://www.congress.gov/118/cprt/HPRT55412/CPRT-118HPRT55412.pdf"},{"label":"Congress: Public Law 119-87, extending Title VII through June 12, 2026","url":"https://www.congress.gov/119/plaws/publ87/PLAW-119publ87.htm"},{"label":"EFF: Section 702 expired on June 12, 2026","url":"https://www.eff.org/deeplinks/2026/06/victory-702-has-expired"},{"label":"ODNI: 2026 Annual Intelligence Community Transparency Report release","url":"https://www.odni.gov/index.php/newsroom/press-releases/press-releases-2026/4150-pr-05-26"},{"label":"Senator Ron Wyden: March 10, 2026 remarks on Section 702, ICE surveillance, and AI monitoring","url":"https://www.wyden.senate.gov/news/press-releases/wyden-calls-on-senate-to-reform-mass-surveillance-protect-americans-rights-and-reject-rudd-to-lead-nsa"}],"section_headings":["What Wyden actually disclosed","What counts as a \"sensitive\" search","The bigger problem is scale","Why the 2024 fix did not fix the core issue","What this means in practice","Bottom line"]},{"slug":"white-house-app-surveillance","title":"Privacy and Security Concerns in the White House App","tags":["Surveillance","OPSEC"],"desc":"A March 2026 audit found extensive third-party telemetry and bundled location capability in the White House app. Later disclosures and official statements changed parts of the record.","time":"~8 min read","date":"2026-04-05","lastReviewed":"2026-07-13","url":"https://cunicula.com/en/articles/white-house-app-surveillance","answer":"A March 2026 audit found extensive third-party telemetry and bundled location capability in the White House app. Later disclosures and official statements changed parts of the record.","sources":[{"label":"Apple App Store: Current listing and privacy disclosure","url":"https://apps.apple.com/us/app/the-white-house/id6759938088"},{"label":"Thereallo: Decompiling the White House App","url":"https://blog.thereallo.dev/blog/decompiling-the-white-house-app"},{"label":"OneSignal: Apple app privacy requirements","url":"https://documentation.onesignal.com/docs/en/apple-app-privacy-requirements"},{"label":"The Newsground: White House and Elfsight responses","url":"https://thenewsground.com/white-house-app-uses-code-from-tech-vendor-still-operating-in-russia/"},{"label":"Atomic Computer: Network traffic analysis of version 47.0.4","url":"https://www.atomic.computer/blog/white-house-app-network-traffic-analysis/"},{"label":"Atomic Computer: Static analysis of the iOS app","url":"https://www.atomic.computer/blog/white-house-app-security-analysis/"},{"label":"White House: Official app launch announcement","url":"https://www.whitehouse.gov/releases/2026/03/new-white-house-app-delivers-unparalleled-access-to-the-trump-administration/"}],"section_headings":["What the Decompilation Found","Consent Stripping: The Government Overrides Your Privacy Choices","GPS Tracking: Dormant but Remotely Activatable","Six WebViews Loading Russian-Origin JavaScript","The Privacy Manifest Is Provably False","No Security Hardening","Lower-Exposure Access Options"]},{"slug":"eu-csam-scanning-rejected","title":"EU CSAM Scanning: Voluntary Detection Rules Restored Until 2028","tags":["Surveillance","Encryption"],"desc":"Regulation (EU) 2026/1881 restored voluntary CSAM detection until April 2028. It excludes end-to-end encrypted chat, and mandatory scanning remains unadopted.","time":"~4 min read","date":"2026-04-02","lastReviewed":"2026-08-10","url":"https://cunicula.com/en/articles/eu-csam-scanning-rejected","answer":"Regulation (EU) 2026/1881 restored voluntary CSAM detection until April 2028. It excludes end-to-end encrypted chat, and mandatory scanning remains unadopted.","sources":[{"label":"Article 2(1)(c) and Article 2(2), retrieved 10 August 2026","url":"https://eur-lex.europa.eu/eli/reg/2026/1881/oj/eng","retrievedAt":"2026-08-10"},{"label":"EUR-Lex procedure file, retrieved 10 August 2026","url":"https://eur-lex.europa.eu/legal-content/EN/HIS/?uri=CELEX:52022PC0209","retrievedAt":"2026-08-10"},{"label":"European Parliament procedure file 2022/0155(COD)","url":"https://oeil.europarl.europa.eu/oeil/en/procedure-file?reference=2022/0155(COD)","retrievedAt":"2026-08-10"}],"section_headings":["What the temporary rule permits","The mandatory proposal is separate","What this means for encrypted services"]},{"slug":"os-age-verification","title":"Operating-System Age Verification Requirements","tags":["Privacy","Law"],"desc":"What California AB 1043 requires operating systems and apps to do, what age-bracket data is shared, and what the law does not mandate.","time":"~7 min read","date":"2026-03-30","lastReviewed":"2026-07-14","url":"https://cunicula.com/en/articles/os-age-verification","answer":"What California AB 1043 requires operating systems and apps to do, what age-bracket data is shared, and what the law does not mandate.","sources":[{"label":"Play Age Signals API","url":"https://developer.android.com/google/play/age-signals/overview"},{"label":"Declared Age Range documentation","url":"https://developer.apple.com/documentation/declaredagerange"},{"label":"chaptered text of Assembly Bill 1043","url":"https://leginfo.legislature.ca.gov/faces/billNavClient.xhtml?bill_id=202520260AB1043"},{"label":"bill status record","url":"https://leginfo.legislature.ca.gov/faces/billStatusClient.xhtml?bill_id=202520260AB1043"},{"label":"attributed civil-liberties assessment","url":"https://www.eff.org/deeplinks/2026/03/ab-1043s-internet-age-gates-hurt-everyone"}],"section_headings":["What California enacted","The law limits the signal, not every inference","Platform APIs show how age ranges can move without an ID","Shared devices remain a hard case","Open-source operating systems face an unresolved enforcement question","What is established, and what is not"]},{"slug":"wasabi-coinjoin-dead-coordinator-shutdown","title":"Wasabi Wallet CoinJoin Coordinator Shutdown","tags":["Bitcoin","Privacy Tools","Guides"],"desc":"zkSNACKs shut down Wasabi Wallet’s CoinJoin coordinator in June 2024. What broke, what guides became obsolete, and which Bitcoin privacy tools still matter in 2026.","time":"~6 min read","date":"2026-03-24","lastReviewed":"2026-07-13","contentKind":"brief","editorialStatus":"ok","editorialNote":"Short-form article intentionally classified as brief/news; expand later only if targeting evergreen SEO.","url":"https://cunicula.com/en/articles/wasabi-coinjoin-dead-coordinator-shutdown","answer":"zkSNACKs shut down Wasabi Wallet’s CoinJoin coordinator in June 2024. What broke, what guides became obsolete, and which Bitcoin privacy tools still matter in 2026.","sources":[{"label":"BIP 78","url":"https://bips.dev/78/"},{"label":"the WabiSabi protocol","url":"https://blog.wasabiwallet.io/what-is-wabi-sabi/"},{"label":"shutdown of the zkSNACKs coordinator","url":"https://docs.wasabiwallet.io/FAQ/FAQ-Introduction.html"},{"label":"getting-started documentation","url":"https://docs.wasabiwallet.io/getting-started/"},{"label":"JoinMarket's project documentation","url":"https://joinmarket-org.github.io/joinmarket-clientserver/"}],"section_headings":["What zkSNACKs stopped","Wasabi CoinJoin continued with other coordinators","What the alternatives actually do","What to change in old instructions"]},{"slug":"tradeogre-is-dead-rcmp-seizure-2025","title":"TradeOgre Shutdown and RCMP Seizure in 2025","tags":["Swap","Financial Surveillance"],"desc":"The RCMP dismantled TradeOgre and recovered more than C$56 million in cryptocurrency. What the official record confirms and what users should not assume.","time":"~6 min read","date":"2026-03-24","lastReviewed":"2026-07-13","contentKind":"brief","editorialStatus":"ok","editorialNote":"Short-form article intentionally classified as brief/news; expand later only if targeting evergreen SEO.","url":"https://cunicula.com/en/articles/tradeogre-is-dead-rcmp-seizure-2025","answer":"The RCMP dismantled TradeOgre and recovered more than C$56 million in cryptocurrency. What the official record confirms and what users should not assume.","sources":[{"label":"Bisq: exchange model and custody documentation","url":"https://bisq.network/"},{"label":"Haveno: project and network documentation","url":"https://haveno.exchange/"},{"label":"RoboSats: protocol overview and user documentation","url":"https://learn.robosats.com/"},{"label":"Royal Canadian Mounted Police: TradeOgre seizure announcement, September 18, 2025","url":"https://rcmp.ca/en/news/2025/09/rcmp-executes-record-seizure-more-56-million-dollars-cryptocurrency"}],"section_headings":["What the RCMP confirmed","What the announcement did not establish","Custody was the immediate risk","Peer-to-peer tools change the risk"]},{"slug":"monero-ath-correction","title":"Correction: Monero Traded Above $687 in January 2026","tags":["Monero","News"],"desc":"Monero traded near $800 on 14 January 2026. Exchange and aggregate market records correct our earlier claim that it never reached $687.","time":"~4 min read","date":"2026-03-24","lastReviewed":"2026-07-13","contentKind":"news","editorialStatus":"ok","editorialNote":"Short-form article intentionally classified as brief/news; expand later only if targeting evergreen SEO.","url":"https://cunicula.com/en/articles/monero-ath-correction","answer":"Monero traded near $800 on 14 January 2026. Exchange and aggregate market records correct our earlier claim that it never reached $687.","sources":[{"label":"CoinGecko: Monero market data","url":"https://api.coingecko.com/api/v3/coins/monero?localization=false&tickers=false&market_data=true&community_data=false&developer_data=false&sparkline=false"},{"label":"CoinPaprika: Monero market data","url":"https://api.coinpaprika.com/v1/tickers/xmr-monero"},{"label":"Kraken: XMR/USD daily OHLC data","url":"https://api.kraken.com/0/public/OHLC?pair=XMRUSD&interval=1440&since=1767225600"},{"label":"KuCoin: XMR/USDT daily candles","url":"https://api.kucoin.com/api/v1/market/candles?type=1day&symbol=XMR-USDT&startAt=1767225600&endAt=1769904000"}],"section_headings":["Why The Numbers Differ","How To Check A Price Record"]},{"slug":"best-no-kyc-vpn-2026","title":"No-KYC VPN Comparison for 2026","tags":["VPN","Guide"],"desc":"No-KYC VPNs compared on no-email account models, Monero and cash payment, jurisdiction, audit records, and logging evidence.","time":"~6 min read","date":"2026-03-17","lastReviewed":"2026-07-16","url":"https://cunicula.com/en/articles/best-no-kyc-vpn-2026","answer":"No-KYC VPNs compared on no-email account models, Monero and cash payment, jurisdiction, audit records, and logging evidence.","sources":[{"label":"Mullvad VPN official site","url":"https://mullvad.net/","firstParty":true},{"label":"Proton VPN official site","url":"https://protonvpn.com/","firstParty":true},{"label":"AzireVPN official site","url":"https://www.azirevpn.com/","firstParty":true},{"label":"IVPN official site","url":"https://www.ivpn.net/","firstParty":true}],"section_headings":["No-KYC matters when the provider gets a data request","The compared providers","Providers that fail the basics"]},{"slug":"revolving-door-government-surveillance-tech","title":"How to Find Surveillance Contracts and Political Links","tags":["Surveillance","Research guide"],"desc":"A practical guide to finding surveillance contracts, suppliers, values, lobbying records, donations, company ownership, and personnel links in official databases.","time":"~12 min read","date":"2026-03-17","lastReviewed":"2026-08-06","url":"https://cunicula.com/en/articles/revolving-door-government-surveillance-tech","answer":"A practical guide to finding surveillance contracts, suppliers, values, lobbying records, donations, company ownership, and personnel links in official databases.","sources":[{"label":"Companies House","url":"https://find-and-update.company-information.service.gov.uk/"},{"label":"US Senate LDA filings","url":"https://lda.senate.gov/system/public/"},{"label":"Consultant Lobbyists register","url":"https://registrarofconsultantlobbyists.org.uk/"},{"label":"SAM.gov search","url":"https://sam.gov/search/"},{"label":"Electoral Commission database","url":"https://search.electoralcommission.org.uk/"},{"label":"AEC Transparency Register","url":"https://transparency.aec.gov.au/"},{"label":"Australian Government lobbyists register","url":"https://www.ag.gov.au/integrity/australian-government-register-lobbyists"},{"label":"ASIC company register","url":"https://www.asic.gov.au/online-services/search-asic-registers/company-and-organisation-registers/"}],"section_headings":["Find the names used in records","Read the money fields correctly","Worked searches","Connect companies, lobbyists, donations, and officials","Use one record format"]},{"slug":"anonymous-vps-hosting-guide","title":"No-KYC VPS Hosting Providers","tags":["Hosting","OPSEC","Guide"],"desc":"Anonymous VPS hosting providers compared: FlokiNET, 1984 Hosting, Njalla, IncogNET, Monero payments, Tor signup, jurisdiction, and SSH hardening.","time":"~9 min read","date":"2026-03-16","lastReviewed":"2026-07-16","url":"https://cunicula.com/en/articles/anonymous-vps-hosting-guide","answer":"Anonymous VPS hosting providers compared: FlokiNET, 1984 Hosting, Njalla, IncogNET, Monero payments, Tor signup, jurisdiction, and SSH hardening.","sources":[{"label":"1984 Hosting official site","url":"https://1984.hosting/","firstParty":true},{"label":"Feather Wallet official site","url":"https://featherwallet.org/","firstParty":true},{"label":"FlokiNET official site","url":"https://flokinet.is/","firstParty":true},{"label":"privacy policy","url":"https://flokinet.is/privacy-policy"},{"label":"Haveno official site","url":"https://haveno.exchange/","firstParty":true},{"label":"IncogNET official site","url":"https://incognet.io/","firstParty":true},{"label":"Njalla official site","url":"https://njal.la/","firstParty":true},{"label":"Trocador official site","url":"https://trocador.app/","firstParty":true}],"section_headings":["Jurisdiction moves the process, not the reach","Provider comparison","Monero removes the public payment trail","Hardening the server matters as much as paying for it","Use a Tor hidden service for admin access","What to avoid","Why the offshore market exists"]},{"slug":"tor-onion-ens-ipfs-hosting","title":"Hosting a Website With Tor, ENS, and IPFS","tags":["Hosting","Guides"],"desc":"How Tor Onion Services, IPFS, and ENS provide separate website access paths, with current setup steps and explicit hosting, key, gateway, and persistence limits.","time":"~8 min read","date":"2026-03-16","lastReviewed":"2026-07-14","url":"https://cunicula.com/en/articles/tor-onion-ens-ipfs-hosting","answer":"How Tor Onion Services, IPFS, and ENS provide separate website access paths, with current setup steps and explicit hosting, key, gateway, and persistence limits.","sources":[{"label":"Onion Service setup guide","url":"https://community.torproject.org/onion-services/setup/"},{"label":"decentralized website hosting","url":"https://docs.ens.domains/web/hosting/"},{"label":"persistence documentation","url":"https://docs.ipfs.tech/concepts/persistence/"},{"label":"Kubo","url":"https://docs.ipfs.tech/install/command-line/"},{"label":"official static-export guide","url":"https://nextjs.org/docs/app/guides/static-exports"}],"section_headings":["Start with a normal origin","Add a Tor Onion Service","Export only the static part of the site","Install Kubo and add the export to IPFS","Pinning is the availability control","Publish the IPFS content hash through ENS","Keep the layers independent enough to matter"]},{"slug":"zimbabwe-zig-crypto-survival","title":"Zimbabwe's ZiG Currency and Cryptocurrency Use","tags":["Crypto","Financial Surveillance"],"desc":"ZiG remains secondary to the US dollar, while Zimbabwe's official risk assessment describes a small, mostly peer-to-peer cryptocurrency market.","time":"~8 min read","date":"2026-03-14","lastReviewed":"2026-07-13","contentKind":"brief","editorialStatus":"ok","editorialNote":"Short-form article intentionally classified as brief/news; expand later only if targeting evergreen SEO.","url":"https://cunicula.com/en/articles/zimbabwe-zig-crypto-survival","answer":"ZiG remains secondary to the US dollar, while Zimbabwe's official risk assessment describes a small, mostly peer-to-peer cryptocurrency market.","sources":[{"label":"Zimbabwe Financial Intelligence Unit: virtual-assets risk assessment","url":"https://www.fiu.co.zw/wp-content/uploads/2025/05/2024-Virtual-Assets-and-Virtual-Assets-Service-Providers-Risk-Assessment.pdf"},{"label":"IMF: Zimbabwe 2025 Article IV staff report","url":"https://www.imf.org/-/media/files/publications/cr/2025/english/1zweea2025001-source-pdf.pdf"},{"label":"Reserve Bank of Zimbabwe: 2024 Monetary Policy Statement","url":"https://www.rbz.co.zw/index.php/monetary-policy/monetary-policy-statements/1389-2024-monetary-policy-statement"},{"label":"Reserve Bank of Zimbabwe: 2018 virtual-currencies circular","url":"https://www.rbz.co.zw/index.php/regulation-supervision/regulation-supervision/guidelines-circulars-and-public-notices-3/499-circular-to-banking-institutions-no-2-2018-virtual-currencies"}],"section_headings":["ZiG replaced another failed local currency","The September 2024 fall was real","Crypto use is limited and mostly peer to peer","Stablecoins lead. Monero does not","Remittances matter, but the crypto share is unknown"]},{"slug":"no-kyc-phone-stack-2026","title":"Private Phone Setup in 2026: GrapheneOS, Phreeli, and SimpleX","tags":["Phone","Guide"],"desc":"Anonymous phone stack 2026: GrapheneOS on Pixel, Phreeli or Silent.Link for carrier, SimpleX or Session for messaging, Cake Wallet for crypto.","time":"~15 min read","date":"2026-03-14","lastReviewed":"2026-07-16","url":"https://cunicula.com/en/articles/no-kyc-phone-stack-2026","answer":"Anonymous phone stack 2026: GrapheneOS on Pixel, Phreeli or Silent.Link for carrier, SimpleX or Session for messaging, Cake Wallet for crypto.","sources":[{"label":"Briar official site","url":"https://briarproject.org","firstParty":true},{"label":"July 2026 maintenance notice","url":"https://briarproject.org/news/2026-maintenance-mode/"},{"label":"cakewallet.com","url":"https://cakewallet.com"},{"label":"Cake Wallet official site","url":"https://cakewallet.com/","firstParty":true},{"label":"Feather Wallet official site","url":"https://featherwallet.org/","firstParty":true},{"label":"Session official site","url":"https://getsession.org/","firstParty":true},{"label":"GrapheneOS official site","url":"https://grapheneos.org/","firstParty":true},{"label":"grapheneos.org/install/web","url":"https://grapheneos.org/install/web"}],"section_headings":["Layer 1 - The device: GrapheneOS on Pixel","Layer 2 - The carrier: anonymous mobile service","Layer 3 - The VPN: encrypt above the carrier","Layer 4 - The number: when you need a phone number","Layer 5 - Messaging: communicating without a phone number","Layer 6 - Finance on the device","Putting it together: the full stack","What this stack reduces, and what it does not","Funding and incentives"]},{"slug":"no-kyc-prepaid-cards-2026","title":"No-KYC Virtual Cards: SolvoCard, Veil, Stealths","tags":["Payments"],"desc":"Compare no-KYC virtual cards by identity checks, fees, load limits, issuer disclosure, custody, and current incidents, including SolvoCard, Veil, and Stealths.","time":"~8 min read","date":"2026-03-14","lastReviewed":"2026-08-06","url":"https://cunicula.com/en/articles/no-kyc-prepaid-cards-2026","answer":"Compare no-KYC virtual cards by identity checks, fees, load limits, issuer disclosure, custody, and current incidents, including SolvoCard, Veil, and Stealths.","sources":[{"label":"KemyCard pricing, limits, and eKYC statement","url":"https://kemycard.com/en/pricing"},{"label":"KYCnot.me SolvoCard incident record and user reports","url":"https://kycnot.me/service/solvocardcom"},{"label":"Stealths terms","url":"https://stealths.net/terms"},{"label":"Veil plans, fees, and load limits","url":"https://veil.cards/"},{"label":"Privacy.com official site","url":"https://www.privacy.com/","firstParty":true},{"label":"SolvoCard official site","url":"https://www.solvocard.com/","firstParty":true},{"label":"SolvoCard card products, fees, and published limits","url":"https://www.solvocard.com/card"},{"label":"SolvoCard privacy policy","url":"https://www.solvocard.com/privacy"}],"section_headings":["SolvoCard limits and current status","Veil limits","Stealths","Products that are not no-KYC","What to check before adding funds"]},{"slug":"no-kyc-esim-comparison-2026","title":"No-KYC eSIM Comparison for 2026","tags":["Phone","Ranking"],"desc":"Compare Silent.Link, NadaNada, PikaSim, and Phreeli by identity checks, payment records, coverage, and the telecom data each service still exposes.","time":"~12 min read","date":"2026-03-14","lastReviewed":"2026-07-13","url":"https://cunicula.com/en/articles/no-kyc-esim-comparison-2026","answer":"Compare Silent.Link, NadaNada, PikaSim, and Phreeli by identity checks, payment records, coverage, and the telecom data each service still exposes.","sources":[{"label":"NadaNada service and privacy claims","url":"https://nadanada.me/"},{"label":"NadaNada privacy policy","url":"https://nadanada.me/privacy"},{"label":"PikaSIM official site","url":"https://pikasim.com/","firstParty":true},{"label":"PikaSim privacy policy","url":"https://pikasim.com/privacy"},{"label":"PikaSim terms of service","url":"https://pikasim.com/tos"},{"label":"Silent.Link product and checkout claims","url":"https://silent.link/"},{"label":"Silent.Link rates and service areas","url":"https://silent.link/rates"},{"label":"Phreeli official site","url":"https://www.phreeli.com","firstParty":true}],"section_headings":["Silent.Link","NadaNada","PikaSim","Phreeli","What no-KYC does and does not cover","Choose by use"]},{"slug":"no-kyc-swaps-2026","title":"No-KYC Crypto Swap Guide: Wallet-to-Wallet No-ID Services","tags":["Swap","KYC"],"desc":"A source-backed comparison of Haveno, Bisq, and StealthEX showing the difference between no platform KYC, accountless swaps, and anonymity.","time":"~8 min read","date":"2026-03-14","lastReviewed":"2026-07-14","url":"https://cunicula.com/en/articles/no-kyc-swaps-2026","answer":"A source-backed comparison of Haveno, Bisq, and StealthEX showing the difference between no platform KYC, accountless swaps, and anonymity.","sources":[{"label":"Bisq official site","url":"https://bisq.network/","firstParty":true},{"label":"official FAQ","url":"https://bisq.wiki/Frequently_asked_questions"},{"label":"Haveno official site","url":"https://haveno.exchange/","firstParty":true},{"label":"official FAQ","url":"https://haveno.exchange/faq/"},{"label":"StealthEX official site","url":"https://stealthex.io/","firstParty":true},{"label":"privacy policy","url":"https://stealthex.io/privacy-policy/"},{"label":"terms","url":"https://stealthex.io/terms/"}],"section_headings":["Peer-to-peer exchanges have the clearest documented boundary","Instant swaps need a policy check for every provider","No registration, no routine KYC, and anonymity are different claims","Public blockchains keep the transaction visible","How to assess a swap before sending funds"]},{"slug":"ethereum-foundation-crops-mandate-2026","title":"Ethereum Foundation CROPS Mandate: What It Commits To","tags":["Ethereum"],"desc":"What the Ethereum Foundation's CROPS mandate says about censorship resistance, open source software, privacy, and security, and what it does not change.","time":"~7 min read","date":"2026-03-14","lastReviewed":"2026-07-13","url":"https://cunicula.com/en/articles/ethereum-foundation-crops-mandate-2026","answer":"What the Ethereum Foundation's CROPS mandate says about censorship resistance, open source software, privacy, and security, and what it does not change.","sources":[{"label":"The Promise of Ethereum: Introducing the EF Mandate","url":"https://blog.ethereum.org/2026/03/13/ef-mandate"},{"label":"Ethereum Foundation Mandate PDF","url":"https://ethereum.foundation/ef-mandate.pdf"},{"label":"Blockchain data storage strategies","url":"https://ethereum.org/en/developers/docs/data-availability/blockchain-data-storage-strategies/"},{"label":"Privacy on Ethereum","url":"https://ethereum.org/en/privacy/"},{"label":"mandate publication transaction","url":"https://etherscan.io/tx/0x5dd574df963a1df1f064791e0f6ff41ec972cdbba12293b7e1ece582052ba855"}],"section_headings":["What the mandate says","The onchain record is verifiable","CROPS does not make Ethereum private","What readers can test later","What the commitment changes now"]},{"slug":"tails-os-financial-privacy-guide","title":"Tails OS for Financial Privacy","tags":["OPSEC","Guides"],"desc":"Using Tails OS for no-KYC crypto transactions, Feather Wallet via Tor, and reduced local forensic traces.","time":"~9 min read","date":"2026-03-12","lastReviewed":"2026-08-15","url":"https://cunicula.com/en/articles/tails-os-financial-privacy-guide","answer":"Using Tails OS for no-KYC crypto transactions, Feather Wallet via Tor, and reduced local forensic traces.","sources":[{"label":"bridges.torproject.org","url":"https://bridges.torproject.org/"},{"label":"featherwallet.org","url":"https://featherwallet.org/download/"},{"label":"Godex.io official site","url":"https://godex.io/","firstParty":true},{"label":"SideShift.ai official site","url":"https://sideshift.ai/","firstParty":true},{"label":"Tails","url":"https://tails.boum.org/about/index.en.html"},{"label":"Download from tails.boum.org.","url":"https://tails.boum.org/install/"},{"label":"merged with the Tor Project in September 2024","url":"https://tails.net/home/"},{"label":"Trocador official site","url":"https://trocador.app/","firstParty":true}],"section_headings":["What Tails Is (and Is Not)","Installing Tails on a USB Drive","Setting Up Persistent Storage","Running Feather Wallet on Tails","Doing a No-KYC Swap on Tails","Hiding Tor Usage from Your ISP","The Tails + Monero Combination: Who Needs It","Funding and incentives"]},{"slug":"surveillance-resistant-phone-numbers","title":"Private Phone Number and Data eSIM Setup","tags":["Comms","Phone","Guide"],"desc":"Set up a separate JMP.chat phone number, XMPP calling and messaging, an optional data eSIM, billing limits, and six acceptance tests.","time":"~12 min read","date":"2026-03-12","lastReviewed":"2026-08-10","contentKind":"guide","editorialStatus":"ok","providerSlugs":["jmp-chat"],"url":"https://cunicula.com/en/articles/surveillance-resistant-phone-numbers","answer":"Set up a separate JMP.chat phone number, XMPP calling and messaging, an optional data eSIM, billing limits, and six acceptance tests.","sources":[{"label":"JMP data-plan launch details","url":"https://blog.jmp.chat/?before=october-newsletter-2024","retrievedAt":"2026-08-10"},{"label":"JMP account settings and data-plan notes","url":"https://blog.jmp.chat/tag/sim","retrievedAt":"2026-08-10"},{"label":"JMP registration entry point","url":"https://jmp.chat/","retrievedAt":"2026-08-10"},{"label":"JMP SMS, MMS, calling, and voicemail capabilities","url":"https://jmp.chat/faq","retrievedAt":"2026-08-10"},{"label":"JMP privacy and transparency statement","url":"https://jmp.chat/privacy","retrievedAt":"2026-08-10"},{"label":"JMP data plan price and order page","url":"https://jmp.chat/sim","retrievedAt":"2026-08-10"},{"label":"JMP suggested Jabber services","url":"https://jmp.chat/suggested_servers.html","retrievedAt":"2026-08-10"},{"label":"Google Pixel SIM and eSIM instructions","url":"https://support.google.com/pixelphone/answer/9449293","retrievedAt":"2026-08-10"}],"section_headings":["Before you start","What this setup does not protect","Maintenance"]},{"slug":"private-dns-setup-guide","title":"Mullvad VPN and DNS Leak-Proof Setup","tags":["VPN","DNS","Guide"],"desc":"Configure Mullvad VPN 2026.3 with default in-tunnel DNS, Lockdown mode, no browser DNS exception, and connection, leak, disconnect, and reboot tests.","time":"~12 min read","date":"2026-03-12","lastReviewed":"2026-08-10","contentKind":"guide","editorialStatus":"ok","providerSlugs":["mullvad-vpn","mullvad-dns"],"url":"https://cunicula.com/en/articles/private-dns-setup-guide","answer":"Configure Mullvad VPN 2026.3 with default in-tunnel DNS, Lockdown mode, no browser DNS exception, and connection, leak, disconnect, and reboot tests.","sources":[{"label":"Mullvad VPN desktop 2026.3 release","url":"https://github.com/mullvad/mullvadvpn-app/releases/tag/2026.3","retrievedAt":"2026-08-10"},{"label":"Mullvad VPN official site","url":"https://mullvad.net/","firstParty":true},{"label":"mullvad.net/check","url":"https://mullvad.net/check"},{"label":"Mullvad connection check","url":"https://mullvad.net/en/check","retrievedAt":"2026-08-10"},{"label":"Mullvad desktop download","url":"https://mullvad.net/en/download/vpn/windows","retrievedAt":"2026-08-10"},{"label":"Mullvad browser DNS leak guidance","url":"https://mullvad.net/en/help/dns-leaks","retrievedAt":"2026-08-10"},{"label":"Mullvad encrypted public DNS hostnames","url":"https://mullvad.net/en/help/dns-over-https-and-dns-over-tls","retrievedAt":"2026-08-10"},{"label":"Mullvad DNS official site","url":"https://mullvad.net/en/help/dns-over-https-and-dns-over-tls/","firstParty":true}],"section_headings":["Before you start","What this setup does not protect","Maintenance"]},{"slug":"zero-knowledge-proofs-privacy","title":"Zero-Knowledge Proofs and Privacy","tags":["Explainer","Crypto"],"desc":"Zero-knowledge proofs can validate a statement while hiding its secret witness. Learn what Zcash, private contracts, and selective disclosure protect and what they still expose.","time":"~7 min read","date":"2026-03-09","lastReviewed":"2026-07-13","url":"https://cunicula.com/en/articles/zero-knowledge-proofs-privacy","answer":"Zero-knowledge proofs can validate a statement while hiding its secret witness. Learn what Zcash, private contracts, and selective disclosure protect and what they still expose.","sources":[{"label":"NIST: Writing Programs for Zero-Knowledge Proofs","url":"https://csrc.nist.gov/csrc/media/presentations/2025/stppa8-zkp/images-media/stppa8-zkp.pdf"},{"label":"Aztec privacy considerations","url":"https://docs.aztec.network/developers/docs/resources/considerations/privacy_considerations"},{"label":"Aztec Alpha Network documentation","url":"https://docs.aztec.network/participate/alpha"},{"label":"Goldwasser, Micali, and Rackoff: The Knowledge Complexity of Interactive Proof Systems","url":"https://doi.org/10.1137/0218012"},{"label":"Zcash Protocol Specification","url":"https://zips.z.cash/protocol/protocol.pdf"},{"label":"ZIP 224: Orchard Shielded Protocol","url":"https://zips.z.cash/zip-0224"}],"section_headings":["What the proof guarantees","Interactive proofs and succinct proofs","Zcash shows both the power and the limits","Private smart contracts remain difficult","Selective disclosure is not anonymous identity","Questions to ask before trusting a ZK system"]},{"slug":"zcash-full-privacy-setup-guide","title":"Zcash Shielded-Transaction Setup Guide","tags":["Zcash","Guides"],"desc":"Set up Zashi for shielded ZEC, identify transparent fallbacks, and understand what Zcash hides and what external services can still record.","time":"~8 min read","date":"2026-03-08","lastReviewed":"2026-07-13","url":"https://cunicula.com/en/articles/zcash-full-privacy-setup-guide","answer":"Set up Zashi for shielded ZEC, identify transparent fallbacks, and understand what Zcash hides and what external services can still record.","sources":[{"label":"Flexa: original Zashi integration","url":"https://flexa.co/newsroom/zashi"},{"label":"Zcash ecosystem: Orchard vulnerability remediation","url":"https://forum.zcashcommunity.com/t/orchard-vulnerability-successfully-remediated/55976"},{"label":"The Orchard Book: keys and addresses","url":"https://zcash.github.io/orchard/design/keys.html"},{"label":"Zcash protocol specification","url":"https://zips.z.cash/protocol/protocol.pdf"},{"label":"Zodl: current wallet site","url":"https://zodl.com/"},{"label":"Zodl: Zashi rebrand notice","url":"https://zodl.com/zashi-is-becoming-zodl/"}],"section_headings":["Use a current shielded wallet","Receive without falling back to transparent mode","Understand what the chain reveals","Shield transparent ZEC carefully","Send from the shielded balance","Flexa is an optional processor","Keep the wallet updated","Operational checklist"]},{"slug":"pgp-basics","title":"PGP Basics: Encrypt Messages Without a Central Server","tags":["Guides","Encryption"],"desc":"How OpenPGP encryption, signatures, fingerprints, revocation certificates and hardware keys work, including what email metadata remains visible.","time":"~6 min read","date":"2026-03-01","lastReviewed":"2026-07-13","url":"https://cunicula.com/en/articles/pgp-basics","answer":"How OpenPGP encryption, signatures, fingerprints, revocation certificates and hardware keys work, including what email metadata remains visible.","sources":[{"label":"Yubico OpenPGP documentation","url":"https://developers.yubico.com/PGP/"},{"label":"FSF Email Self-Defense","url":"https://emailselfdefense.fsf.org/"},{"label":"GnuPG","url":"https://gnupg.org/download/"},{"label":"keys.openpgp.org","url":"https://keys.openpgp.org/"},{"label":"keys.openpgp.org FAQ","url":"https://keys.openpgp.org/about/faq"},{"label":"Signal's protocol","url":"https://signal.org/docs/"},{"label":"Thunderbird OpenPGP guide","url":"https://support.mozilla.org/en-US/kb/openpgp-thunderbird-howto-and-faq"},{"label":"GnuPG manual: OpenPGP key management","url":"https://www.gnupg.org/documentation/manuals/gnupg/OpenPGP-Key-Management.html"}],"section_headings":["Practical steps"]},{"slug":"private-ai-local-llm","title":"Open-Source AI: Local Models and Data Paths","tags":["AI Privacy","Guides"],"desc":"A sourced guide to local AI runtimes, telemetry, open-weight licences, model provenance, abliteration tradeoffs, remote tools and hardware memory tiers.","time":"~18 min read","date":"2026-03-01","lastReviewed":"2026-08-09","contentKind":"guide","editorialStatus":"ok","editorialNote":"Open-source AI reference covering inference-stack data paths, licences, artifact provenance, abliterated models and sourced hardware tiers.","url":"https://cunicula.com/en/articles/private-ai-local-llm","answer":"A sourced guide to local AI runtimes, telemetry, open-weight licences, model provenance, abliteration tradeoffs, remote tools and hardware memory tiers.","sources":[{"label":"Ai2 OLMo","url":"https://allenai.org/olmo"},{"label":"Refusal in Language Models Is Mediated by a Single Direction, arXiv:2406.11717","url":"https://arxiv.org/abs/2406.11717"},{"label":"Investigating the Impact of Quantization Methods on Safety and Reliability, arXiv:2502.15799","url":"https://arxiv.org/abs/2502.15799"},{"label":"Measuring and Eliminating Refusals in Military Large Language Models, arXiv:2603.10012","url":"https://arxiv.org/abs/2603.10012"},{"label":"Different Paths to Harmful Compliance, arXiv:2604.18510","url":"https://arxiv.org/abs/2604.18510"},{"label":"Cline telemetry documentation","url":"https://docs.cline.bot/more-info/telemetry"},{"label":"local and remote embedding choices","url":"https://docs.continue.dev/customize/model-roles/embeddings"},{"label":"Continue telemetry documentation","url":"https://docs.continue.dev/telemetry"}],"section_headings":["Map the inference stack, not only the model","Classify the licence at system level","Uncensored and abliterated models are in scope","Verify weight provenance before loading","Hardware tiers are memory budgets, not speed promises","A reproducible local-only check"]},{"slug":"nso-group-pegasus-spyware","title":"NSO Group and Pegasus Spyware","tags":["Surveillance","OPSEC"],"desc":"How Pegasus compromises phones, what court records and forensic research establish, and how high-risk users can reduce and investigate targeted spyware risk.","time":"~10 min read","date":"2026-03-01","lastReviewed":"2026-07-13","url":"https://cunicula.com/en/articles/nso-group-pegasus-spyware","answer":"How Pegasus compromises phones, what court records and forensic research establish, and how high-risk users can reduce and investigate targeted spyware risk.","sources":[{"label":"Citizen Lab: BLASTPASS zero-click exploit analysis","url":"https://citizenlab.ca/blastpass-nso-group-iphone-zero-click-zero-day-exploit-captured-in-the-wild/"},{"label":"Citizen Lab: Pegasus zero-click chains and Lockdown Mode","url":"https://citizenlab.ca/research/nso-groups-pegasus-spyware-returns-in-2022/"},{"label":"Amnesty International Security Lab: forensic tools and limitations","url":"https://securitylab.amnesty.org/tools-and-guides/"},{"label":"U.S. District Court: permanent injunction in WhatsApp v. NSO Group","url":"https://storage.courtlistener.com/recap/gov.uscourts.cand.350613/gov.uscourts.cand.350613.809.0.pdf"},{"label":"U.S. District Court: final judgment in WhatsApp v. NSO Group","url":"https://storage.courtlistener.com/recap/gov.uscourts.cand.350613/gov.uscourts.cand.350613.810.0.pdf"},{"label":"Apple: About Lockdown Mode","url":"https://support.apple.com/en-us/105120"},{"label":"U.S. Bureau of Industry and Security: NSO Group Entity List action","url":"https://www.bis.gov/press-release/commerce-adds-nso-group-other-foreign-companies-entity-list-malicious-cyber-activities"}],"section_headings":["Why encrypted apps do not solve endpoint compromise","How Pegasus reaches a phone","Who has been documented as a target","What changed in the WhatsApp case","Lockdown Mode reduces attack surface","Detection has limits"]},{"slug":"how-to-buy-monero-no-kyc","title":"No-KYC Monero Payment Path: Cash to XMR","tags":["Monero","Payments","Guide"],"desc":"Use a RetoSwap no-deposit cash offer, withdraw to Feather Wallet, and verify one native XMR payment without a centralized exchange account.","time":"~13 min read","date":"2026-03-01","lastReviewed":"2026-08-10","contentKind":"guide","editorialStatus":"ok","providerSlugs":["retoswap","haveno-dex","feather-wallet"],"url":"https://cunicula.com/en/articles/how-to-buy-monero-no-kyc","answer":"Use a RetoSwap no-deposit cash offer, withdraw to Feather Wallet, and verify one native XMR payment without a centralized exchange account.","sources":[{"label":"Feather wallet creation","url":"https://docs.featherwallet.org/guides/create-wallet","retrievedAt":"2026-08-10"},{"label":"Feather first start","url":"https://docs.featherwallet.org/guides/first-start","retrievedAt":"2026-08-10"},{"label":"Feather receive transaction guide","url":"https://docs.featherwallet.org/guides/receive-transaction","retrievedAt":"2026-08-10"},{"label":"Feather send transaction guide","url":"https://docs.featherwallet.org/guides/send-transaction","retrievedAt":"2026-08-10"},{"label":"Haveno cash packaging and delivery rules","url":"https://docs.haveno.exchange/overview/payment-methods/Pay-By-Mail/","retrievedAt":"2026-08-10"},{"label":"Haveno payment and release sequence","url":"https://docs.haveno.exchange/overview/trade-protocol/","retrievedAt":"2026-08-10"},{"label":"Haveno payment-account setup","url":"https://docs.haveno.exchange/users/getting-started/","retrievedAt":"2026-08-10"},{"label":"Haveno no-deposit documentation","url":"https://docs.haveno.exchange/users/haveno-ui/no-deposit/"}],"section_headings":["Before you start","What this setup does not protect","Maintenance and recovery"]},{"slug":"kape-technologies-expressvpn","title":"Kape Technologies and ExpressVPN Ownership","tags":["VPN","Ownership","OPSEC"],"desc":"Kape Technologies owns ExpressVPN, Private Internet Access, CyberGhost, and ZenMate. Its Crossrider history, acquisitions, private ownership, and VPN audit evidence.","time":"~9 min read","date":"2026-03-01","lastReviewed":"2026-07-13","contentKind":"brief","editorialStatus":"ok","editorialNote":"Short-form article intentionally classified as brief/news; expand later only if targeting evergreen SEO.","url":"https://cunicula.com/en/articles/kape-technologies-expressvpn","answer":"Kape Technologies owns ExpressVPN, Private Internet Access, CyberGhost, and ZenMate. Its Crossrider history, acquisitions, private ownership, and VPN audit evidence.","sources":[{"label":"Kape Technologies Annual Report 2021","url":"https://annualreports.com/Click/30685"},{"label":"Crossrider Annual Report 2016","url":"https://www.annualreports.com/HostedData/AnnualReportArchive/k/LSE_KAPE.L_2016.pdf"},{"label":"Kape Technologies Annual Report 2017","url":"https://www.annualreports.com/HostedData/AnnualReportArchive/k/LSE_KAPE.L_2017.pdf"},{"label":"Kape Technologies Annual Report 2018","url":"https://www.annualreports.com/HostedData/AnnualReportArchive/k/LSE_KAPE.L_2018.pdf"},{"label":"KPMG independent assurance report on ExpressVPN controls, 2025","url":"https://www.expressvpn.com/wp-ws/uploads-expressvpn/privacy-policy/ExpressVPN_ISAE3000_2025-02-28.pdf"},{"label":"Kape proposed acquisition of ExpressVPN, September 2021","url":"https://www.investegate.co.uk/announcement/rns/kape-technologies--kape/-936m-acquisition-of-expressvpn-354m-placing/6825145"},{"label":"Unikmind notice of offer closure and Kape delisting, April 2023","url":"https://www.lse.co.uk/rns/notice-of-offer-closure-and-delisting-from-aim-muh1etfs12t0swt.html"}],"section_headings":["Crossrider came before Kape","Kape bought established VPN brands","Kape is now privately controlled","What ownership changes in a VPN review"]},{"slug":"how-to-vet-a-privacy-tool","title":"How to Vet Any Privacy Tool Before You Trust It","tags":["OPSEC","Explainer"],"desc":"A practical checklist for assessing a privacy tool: threat model, architecture, release integrity, ownership, policies, audits, and testing.","time":"~9 min read","date":"2026-03-01","lastReviewed":"2026-07-13","url":"https://cunicula.com/en/articles/how-to-vet-a-privacy-tool","answer":"A practical checklist for assessing a privacy tool: threat model, architecture, release integrity, ownership, policies, audits, and testing.","sources":[{"label":"GrapheneOS: build and release documentation","url":"https://grapheneos.org/build"},{"label":"OWASP: Mobile Application Security Testing Guide tests","url":"https://mas.owasp.org/MASTG/tests/"},{"label":"Reproducible Builds: definition and verification","url":"https://reproducible-builds.org/docs/definition/"},{"label":"Signal: protocol specifications","url":"https://signal.org/docs/"},{"label":"EFF: Your Security Plan","url":"https://ssd.eff.org/module/your-security-plan"}],"section_headings":["Practical steps"]},{"slug":"hola-vpn-danger","title":"Hola VPN and Peer-to-Peer Bandwidth Sharing","tags":["VPN","OPSEC"],"desc":"How Hola's peer-to-peer routing, Bright Data relationship, product differences, and current logging policy affect users.","time":"~7 min read","date":"2026-03-01","lastReviewed":"2026-07-13","contentKind":"brief","editorialStatus":"ok","editorialNote":"Short-form article intentionally classified as brief/news; expand later only if targeting evergreen SEO.","url":"https://cunicula.com/en/articles/hola-vpn-danger","answer":"How Hola's peer-to-peer routing, Bright Data relationship, product differences, and current logging policy affect users.","sources":[{"label":"Bright Data: Luminati rebrand history","url":"https://brightdata.com/luminati"},{"label":"Bright Data: Residential proxy network","url":"https://brightdata.com/proxy-types/residential-proxies"},{"label":"Hola: VPN and proxy FAQ","url":"https://hola.org/faq"},{"label":"Hola: Privacy Policy, updated April 14, 2026","url":"https://hola.org/legal/privacy"},{"label":"Hola: End User License Agreement","url":"https://hola.org/legal/sla"}],"section_headings":["What a free user contributes","Hola, Luminati, and Bright Data","What Hola records","How to assess the product"]},{"slug":"counter-surveillance-devices","title":"Hidden Camera Detection: What Each Method Misses","tags":["Hardware","Counter-Surveillance"],"desc":"Published research on hidden-camera detection, including each method’s blind spots, null-result meaning, validation method, skill floor and legal scope.","time":"~18 min read","date":"2026-03-01","lastReviewed":"2026-08-09","url":"https://cunicula.com/en/articles/counter-surveillance-devices","answer":"Published research on hidden-camera detection, including each method’s blind spots, null-result meaning, validation method, skill floor and legal scope.","sources":[{"label":"European Commission household activity guidance","url":"https://commission.europa.eu/law/law-topic/data-protection/rules-business-and-organisations/obligations/what-data-can-we-process-and-under-which-conditions/when-do-data-protection-rules-not-apply_en"},{"label":"ISED jammer rules","url":"https://ised-isde.canada.ca/site/spectrum-management-telecommunications/en/safety-and-compliance/compliance-and-enforcement/jammers-are-prohibited-canada-thats-law"},{"label":"ACMA jammer rules","url":"https://www.acma.gov.au/jammers-are-illegal-australia"},{"label":"ANFR legal framework","url":"https://www.anfr.fr/en/controler/cadre-juridique"},{"label":"Bundesnetzagentur device guidance","url":"https://www.bundesnetzagentur.de/SharedDocs/Pressemitteilungen/EN/2024/20241129_Spionagegeraete.html"},{"label":"FCC jammer enforcement","url":"https://www.fcc.gov/general/jammer-enforcement"},{"label":"Computer Misuse Act 1990","url":"https://www.legislation.gov.uk/ukpga/1990/18/contents"}],"section_headings":["Read a null result narrowly","Jurisdiction notes","Defensive interpretation"]},{"slug":"hardware-surveillance","title":"Hardware Surveillance: Microphones, Cameras and Telemetry","tags":["Hardware","Surveillance"],"desc":"How to reduce microphone, camera, radio, and telemetry exposure across phones, laptops, televisions, and connected devices.","time":"~8 min read","date":"2026-03-01","lastReviewed":"2026-07-13","contentKind":"news","editorialStatus":"ok","editorialNote":"Short-form article intentionally classified as brief/news; expand later only if targeting evergreen SEO.","url":"https://cunicula.com/en/articles/hardware-surveillance","answer":"How to reduce microphone, camera, radio, and telemetry exposure across phones, laptops, televisions, and connected devices.","sources":[{"label":"Microsoft: configure Windows diagnostic data","url":"https://learn.microsoft.com/en-us/windows/privacy/configure-windows-diagnostic-data-in-your-organization"},{"label":"Apple: control access to hardware features on iPhone","url":"https://support.apple.com/guide/iphone/control-access-to-hardware-features-iph168c4bbd5/ios"},{"label":"Google Android Help: change app permissions","url":"https://support.google.com/android/answer/9431959?hl=en"},{"label":"FTC: Vizio viewing-data settlement","url":"https://www.ftc.gov/news-events/news/press-releases/2017/02/vizio-pay-22-million-ftc-state-new-jersey-settle-charges-it-collected-viewing-histories-11-million"}],"section_headings":["Separate sensor access from telemetry","Practical steps","What these steps cannot prove"]},{"slug":"grapheneos-privacy-phone-guide","title":"GrapheneOS Setup Guide: Install, Profiles, Google Play","tags":["Privacy Tools","OPSEC"],"desc":"Install GrapheneOS on a supported Pixel, verify the bootloader, separate profiles, add sandboxed Google Play, restrict apps, and test network controls.","time":"~16 min read","date":"2026-03-01","lastReviewed":"2026-08-06","url":"https://cunicula.com/en/articles/grapheneos-privacy-phone-guide","answer":"Install GrapheneOS on a supported Pixel, verify the bootloader, separate profiles, add sandboxed Google Play, restrict apps, and test network controls.","sources":[{"label":"Auditor verification tutorial","url":"https://attestation.app/tutorial"},{"label":"Supported devices and hardware requirements","url":"https://grapheneos.org/faq#supported-devices"},{"label":"VPN and Private DNS behavior","url":"https://grapheneos.org/faq#vpn-support"},{"label":"auto reboot","url":"https://grapheneos.org/features#auto-reboot"},{"label":"duress PIN and password","url":"https://grapheneos.org/features#duress"},{"label":"official app repository description","url":"https://grapheneos.org/features#grapheneos-app-repository"},{"label":"WebUSB installation guide","url":"https://grapheneos.org/install/web"},{"label":"official installer page","url":"https://grapheneos.org/install/web#verified-boot-key-hash"}],"section_headings":["Quick setup path","1. Buy a supported, unlockable device","2. Use the official installer","3. Verify the installation","4. Choose a profile layout","5. Install apps and optional Google Play","6. Restrict app access","7. Configure the network deliberately","8. Reduce locked-device exposure","9. Keep the system current","10. Check the finished setup","What GrapheneOS does not solve","Official GrapheneOS links"]},{"slug":"government-surveillance-resistant-infrastructure","title":"Government Surveillance-Resistant Infrastructure","tags":["Hosting","OPSEC"],"desc":"How to limit infrastructure exposure through data minimisation, separated control, protected logs, Tor onion services, IPFS, and tested recovery.","time":"~11 min read","date":"2026-03-01","lastReviewed":"2026-07-13","contentKind":"brief","editorialStatus":"ok","editorialNote":"Short-form article intentionally classified as brief/news; expand later only if targeting evergreen SEO.","url":"https://cunicula.com/en/articles/government-surveillance-resistant-infrastructure","answer":"How to limit infrastructure exposure through data minimisation, separated control, protected logs, Tor onion services, IPFS, and tested recovery.","sources":[{"label":"OWASP: Logging Cheat Sheet","url":"https://cheatsheetseries.owasp.org/cheatsheets/Logging_Cheat_Sheet.html"},{"label":"Tor Project: How Onion Services Work","url":"https://community.torproject.org/onion-services/overview/"},{"label":"NIST: Guide to Computer Security Log Management","url":"https://csrc.nist.gov/pubs/sp/800/92/final"},{"label":"IPFS Docs: Persistence, Permanence, and Pinning","url":"https://docs.ipfs.tech/concepts/persistence/"}],"section_headings":["Keep useful logs, not every possible log","Split control, but keep the system operable","Use onion services for a defined threat","IPFS distributes content, not responsibility","Plan for lawful demands and account loss","Test the failure, not the slogan"]},{"slug":"five-eyes-jurisdiction-privacy","title":"Five Eyes Jurisdictions and VPN Privacy","tags":["OPSEC","Explainer"],"desc":"How Five Eyes intelligence cooperation affects VPN risk, and how to assess a provider's legal entity, records, ownership, and audit evidence.","time":"~6 min read","date":"2026-03-01","lastReviewed":"2026-07-13","contentKind":"brief","editorialStatus":"ok","editorialNote":"Short-form article intentionally classified as brief/news; expand later only if targeting evergreen SEO.","url":"https://cunicula.com/en/articles/five-eyes-jurisdiction-privacy","answer":"How Five Eyes intelligence cooperation affects VPN risk, and how to assess a provider's legal entity, records, ownership, and audit evidence.","sources":[{"label":"Mullvad: no-logging and data-handling policy","url":"https://mullvad.net/en/help/no-logging-data-policy"},{"label":"UK Ministry of Defence: Five Eyes members and partnership","url":"https://www.gov.uk/government/news/five-eyes-chiefs-of-defence-hold-talks-in-london"},{"label":"UK government response to the ISC International Partnerships report","url":"https://www.gov.uk/government/publications/government-response-to-isc-international-partnerships-report/government-response-to-the-intelligence-and-security-committee-report-international-partnerships"},{"label":"Australian Assistance and Access Act 2018, current compilation","url":"https://www.legislation.gov.au/C2018A00148/latest/text"},{"label":"Investigatory Powers Act 2016, current UK legislation","url":"https://www.legislation.gov.uk/ukpga/2016/25/contents/data.html"}],"section_headings":["What Five Eyes means","The law can reach providers in different ways","Review the company, not an alliance chart","Jurisdiction is one control, not the whole threat model","A practical VPN review"]},{"slug":"monero-feather-wallet-setup-guide","title":"Feather Wallet Setup and Privacy Settings","tags":["Monero","Guides"],"desc":"Set up Feather Wallet with verified downloads, offline seed storage, Tor-aware node selection, subaddresses, and output controls.","time":"~9 min read","date":"2026-03-01","lastReviewed":"2026-07-13","url":"https://cunicula.com/en/articles/monero-feather-wallet-setup-guide","answer":"Set up Feather Wallet with verified downloads, offline seed storage, Tor-aware node selection, subaddresses, and output controls.","sources":[{"label":"Feather Wallet documentation: create a wallet","url":"https://docs.featherwallet.org/guides/create-wallet"},{"label":"output control guide","url":"https://docs.featherwallet.org/guides/freeze-thaw-output"},{"label":"Feather Wallet documentation: connect to a local node","url":"https://docs.featherwallet.org/guides/local-node"},{"label":"Feather Wallet documentation: network traffic","url":"https://docs.featherwallet.org/guides/network-traffic"},{"label":"Feather Wallet documentation: nodes and remote-node risks","url":"https://docs.featherwallet.org/guides/nodes"},{"label":"receiving guide","url":"https://docs.featherwallet.org/guides/receive-transaction"},{"label":"release-signing guide","url":"https://docs.featherwallet.org/guides/release-signing-key"},{"label":"Feather Wallet documentation: restore from seed","url":"https://docs.featherwallet.org/guides/restore-from-seed"}],"section_headings":["1. Verify the download","2. Create the wallet and protect the seed","3. Decide who supplies blockchain data","4. Know what Feather sends over the network","5. Use subaddresses instead of reusing one address","6. Use output controls carefully","Before receiving serious funds"]},{"slug":"diy-privacy-hardware","title":"DIY Privacy Hardware: Faraday Pouches, Camera Blockers, and Detection Tools","tags":["Hardware","DIY"],"desc":"Use and test physical privacy tools for radio isolation, camera blocking, safer USB charging, and hidden-camera screening.","time":"~9 min read","date":"2026-03-01","lastReviewed":"2026-07-13","contentKind":"brief","editorialStatus":"ok","editorialNote":"Short-form article intentionally classified as brief/news; expand later only if targeting evergreen SEO.","url":"https://cunicula.com/en/articles/diy-privacy-hardware","answer":"Use and test physical privacy tools for radio isolation, camera blocking, safer USB charging, and hidden-camera screening.","sources":[{"label":"NIST: Guidelines on Mobile Device Forensics","url":"https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-101r1.pdf"},{"label":"Apple: camera-cover guidance for Mac laptops","url":"https://support.apple.com/en-au/102177"},{"label":"FCC: juice jacking and charging guidance","url":"https://www.fcc.gov/juice-jacking-tips-to-avoid-it"},{"label":"USENIX Security 2024: hidden-camera detection limits","url":"https://www.usenix.org/conference/usenixsecurity24/presentation/zhang-qibo"},{"label":"USENIX Security 2021: clandestine wireless-sensor detection","url":"https://www.usenix.org/system/files/sec21-singh.pdf"}],"section_headings":["What each tool can do"]},{"slug":"cellebrite-phone-hacking-dissidents","title":"Cellebrite Phone Extraction and the Serbia Abuse Case","tags":["Surveillance","OPSEC"],"desc":"What Cellebrite UFED and Physical Analyzer do, what Amnesty documented in Serbia, and how to limit the data exposed when a phone is seized.","time":"~8 min read","date":"2026-03-01","lastReviewed":"2026-07-13","url":"https://cunicula.com/en/articles/cellebrite-phone-hacking-dissidents","answer":"What Cellebrite UFED and Physical Analyzer do, what Amnesty documented in Serbia, and how to limit the data exposed when a phone is seized.","sources":[{"label":"Cellebrite: Physical Analyzer product documentation","url":"https://cellebrite.com/en/products/physical-analyzer/"},{"label":"Cellebrite: UFED product documentation","url":"https://cellebrite.com/en/products/ufed/"},{"label":"Amnesty International Security Lab: A Digital Prison","url":"https://securitylab.amnesty.org/latest/2024/12/a-digital-prison-surveillance-and-the-suppression-of-civil-society-in-serbia/"},{"label":"Signal: Cellebrite UFED and Physical Analyzer analysis","url":"https://signal.org/blog/cellebrite-vulnerabilities/"}],"section_headings":["What Amnesty Found in Serbia","Extraction Is Not Remote Interception","Reduce What a Seized Phone Can Reveal"]},{"slug":"how-to-buy-bitcoin-anonymously","title":"Buying Bitcoin With Less Identity Exposure","tags":["Bitcoin","OPSEC"],"desc":"How P2P Bitcoin purchases, payment records, fresh addresses, UTXO labels, and coin control affect identity exposure.","time":"~8 min read","date":"2026-03-01","lastReviewed":"2026-07-13","url":"https://cunicula.com/en/articles/how-to-buy-bitcoin-anonymously","answer":"How P2P Bitcoin purchases, payment records, fresh addresses, UTXO labels, and coin control affect identity exposure.","sources":[{"label":"Bisq Wiki: frequently asked questions","url":"https://bisq.wiki/Frequently_asked_questions"},{"label":"security-deposit documentation","url":"https://bisq.wiki/Security_deposit"},{"label":"Bitcoin developer guide: transactions and avoiding key reuse","url":"https://developer.bitcoin.org/devguide/transactions.html#avoiding-key-reuse"},{"label":"Hodl Hodl: frequently asked questions","url":"https://hodlhodl.com/pages/faq"},{"label":"Hodl Hodl: terms of service","url":"https://hodlhodl.com/pages/terms_of_service"},{"label":"Sparrow Wallet: features and wallet connections","url":"https://sparrowwallet.com/features/"}],"section_headings":["Start with Bitcoin's public record","What the main P2P options actually provide","A six-step process"]},{"slug":"best-monero-wallet-2026","title":"Monero Wallet Comparison for 2026","tags":["Monero","Ranking"],"desc":"Current comparison of Feather, Cake, Monerujo, and the Monero CLI, including Tor routing, hardware-wallet support, swaps, and platform limits.","time":"~7 min read","date":"2026-03","lastReviewed":"2026-07-13","contentKind":"brief","editorialStatus":"ok","editorialNote":"Short-form article intentionally classified as brief/news; expand later only if targeting evergreen SEO.","url":"https://cunicula.com/en/articles/best-monero-wallet-2026","answer":"Current comparison of Feather, Cake, Monerujo, and the Monero CLI, including Tor routing, hardware-wallet support, swaps, and platform limits.","sources":[{"label":"Cake Wallet: Tor with Orbot","url":"https://docs.cakewallet.com/features/advanced/tor-with-orbot"},{"label":"Cake Wallet: hardware-wallet setup","url":"https://docs.cakewallet.com/get-started/setup/restore-existing-wallet/hardware-wallet"},{"label":"Feather Wallet: supported hardware devices","url":"https://docs.featherwallet.org/guides/hardware-wallet-support"},{"label":"Feather Wallet: Tor support","url":"https://docs.featherwallet.org/guides/tor-support"},{"label":"Monero Docs: wallet CLI reference","url":"https://docs.getmonero.org/interacting/monero-wallet-cli-reference/"},{"label":"Monerujo: official source repository","url":"https://github.com/m2049r/xmrwallet"}],"section_headings":["Feather: the practical desktop choice","Cake: the broad mobile option","Monerujo: focused Android use","Monero CLI: control without a GUI","Choose by threat model"]},{"slug":"encrypted-messaging-comparison","title":"Signal vs SimpleX vs Session: Which Is Most Private?","tags":["Comms"],"desc":"Signal needs a phone number, SimpleX has no user IDs, Session drops forward secrecy. Compare registration, metadata, groups, and seized-phone exposure.","time":"~10 min read","date":"2026-02","lastReviewed":"2026-08-22","url":"https://cunicula.com/en/articles/encrypted-messaging-comparison","answer":"Signal needs a phone number, SimpleX has no user IDs, Session drops forward secrecy. Compare registration, metadata, groups, and seized-phone exposure.","sources":[{"label":"Briar: how it works","url":"https://briarproject.org/how-it-works/"},{"label":"Briar groups and offline use","url":"https://briarproject.org/manual/"},{"label":"Cwtch groups and server experiment","url":"https://docs.cwtch.im/docs/servers/introduction/"},{"label":"Cwtch security components","url":"https://docs.cwtch.im/security/components/intro/"},{"label":"Session installation","url":"https://docs.getsession.org/session-messenger/installing-session"},{"label":"Session protocol documentation","url":"https://docs.getsession.org/session-network/session-protocol.md"},{"label":"Session account restoration","url":"https://docs.getsession.org/session-network/session-protocol/account-restoration.md"},{"label":"Session calls and groups","url":"https://getsession.org/faq"}],"section_headings":["Telegram is not an equivalent default","Controls that matter on every app"]},{"slug":"phreeli-anonymous-phone-carrier","title":"Phreeli Review 2026: Signup and Payment Requirements","tags":["Phone","Review"],"desc":"A source-backed review of Phreeli signup, payment, data, and launch-protocol requirements, including what remains identifiable and unverified.","time":"~7 min read","date":"2026-02","lastReviewed":"2026-07-14","url":"https://cunicula.com/en/articles/phreeli-anonymous-phone-carrier","answer":"A source-backed review of Phreeli signup, payment, data, and launch-protocol requirements, including what remains identifiable and unverified.","sources":[{"label":"Double-Blind Armadillo white paper","url":"https://www.phreeli.com/files/PhreeliDoubleBlindArmadilloWhitePaper.pdf"},{"label":"privacy overview","url":"https://www.phreeli.com/privacy"},{"label":"Privacy Policy","url":"https://www.phreeli.com/privacy/policy"},{"label":"Terms of Service","url":"https://www.phreeli.com/terms-of-service"}],"section_headings":["What the terms require","Current payment claims are limited","The public privacy claim is data minimization","The white paper separates the full design from launch","What can be said safely","What remains unverified"]},{"slug":"spend-zec-at-merchants-zashi-flexa","title":"Paying With Shielded ZEC Through Zodl and Flexa","tags":["Zcash","Merchants"],"desc":"Zashi is now Zodl. Use shielded ZEC through Flexa while understanding identity checks, processor records, limits, and refund rules.","time":"~5 min read","date":"2026-02","lastReviewed":"2026-07-13","url":"https://cunicula.com/en/articles/spend-zec-at-merchants-zashi-flexa","answer":"Zashi is now Zodl. Use shielded ZEC through Flexa while understanding identity checks, processor records, limits, and refund rules.","sources":[{"label":"F-Droid: Zodl Android package","url":"https://f-droid.org/packages/co.electriccoin.zcash.foss/"},{"label":"Flexa privacy policy","url":"https://flexa.co/legal/privacy"},{"label":"Flexa terms of service","url":"https://flexa.co/legal/terms"},{"label":"Flexa: original Zashi integration announcement","url":"https://flexa.co/newsroom/zashi"},{"label":"Zodl Android source and release history","url":"https://github.com/zodl-inc/zodl-android"},{"label":"Zodl: current wallet features and Flexa payments","url":"https://zodl.com/"},{"label":"Zodl: Zashi rebrand notice","url":"https://zodl.com/zashi-is-becoming-zodl/"}],"section_headings":["What the payment flow does","Install or update Zodl","Fund the shielded balance","Pay through Flexa","Privacy boundaries"]},{"slug":"kenya-mpesa-bitcoin-machankura","title":"M-Pesa, Machankura, and Transaction Privacy in Kenya","tags":["Bitcoin","Regional"],"desc":"M-Pesa and Machankura both work on basic phones, but they expose different records. A factual guide to custodial Bitcoin, USSD identity, and Kenya's VASP law.","time":"~10 min read","date":"2026-02","lastReviewed":"2026-07-13","url":"https://cunicula.com/en/articles/kenya-mpesa-bitcoin-machankura","answer":"M-Pesa and Machankura both work on basic phones, but they expose different records. A factual guide to custodial Bitcoin, USSD identity, and Kenya's VASP law.","sources":[{"label":"Machankura official site","url":"https://8333.mobi","firstParty":true},{"label":"Machankura FAQ","url":"https://8333.mobi/faqs"},{"label":"Kenya Virtual Asset Service Providers Act, 2025","url":"https://new.kenyalaw.org/akn/ke/act/2025/20"},{"label":"Communications Authority of Kenya sector statistics, April to June 2025","url":"https://www.ca.go.ke/sites/default/files/2025-09/Sector%20Statistics%20Report%20Q4%202024-2025.pdf"},{"label":"CBK and CMA public notice on the VASP Act","url":"https://www.centralbank.go.ke/uploads/press%5Freleases/665231223%5FPublic%20Notice%20on%20the%20Virtual%20Assets%20Service%20Providers%20Act%202025.pdf"},{"label":"Central Bank of Kenya bulletin reporting 2024 remittances","url":"https://www.centralbank.go.ke/uploads/weekly_bulletin/45979102_Weekly%20CBK%20Bulletin%20January%2017%202024%20(003).pdf"},{"label":"Safaricom 2025 Kenya Performance Review","url":"https://www.safaricom.co.ke/annualreport_2025/the-commercial-value-we-deliver/safaricom-kenya-performance-review/"},{"label":"Safaricom Data Privacy Statement","url":"https://www.safaricom.co.ke/data-privacy-statements"}],"section_headings":["M-Pesa is national payment infrastructure","What Safaricom says it collects","Machankura changes the route, not the trust problem","Kenya now has a VASP law","Practical privacy choices"]},{"slug":"legal-tax-minimization-us-uk-eu-aus","title":"Legal Tax Minimization 2026: US, UK, EU & Australia","tags":["Legal"],"desc":"A factual guide to lawful tax planning through US retirement accounts, UK ISAs and pensions, EU residence rules, and Australian super contributions.","time":"~8 min read","date":"2026-02","lastReviewed":"2026-07-13","contentKind":"guide","editorialStatus":"ok","editorialNote":"Reviewed against current official tax authority and EU guidance. General information only; personal implementation requires jurisdiction-specific advice.","url":"https://cunicula.com/en/articles/legal-tax-minimization-us-uk-eu-aus","answer":"A factual guide to lawful tax planning through US retirement accounts, UK ISAs and pensions, EU residence rules, and Australian super contributions.","sources":[{"label":"Your Europe: income taxes abroad","url":"https://europa.eu/youreurope/citizens/work/taxes/income-taxes-abroad/index_en.htm"},{"label":"Australian Taxation Office: concessional contributions cap","url":"https://www.ato.gov.au/individuals-and-families/super-for-individuals-and-families/super/growing-and-keeping-track-of-your-super/caps-limits-and-tax-on-super-contributions/concessional-contributions-cap"},{"label":"GOV.UK: Individual Savings Accounts","url":"https://www.gov.uk/individual-savings-accounts"},{"label":"GOV.UK: private pension annual allowance","url":"https://www.gov.uk/tax-on-your-private-pension/annual-allowance"},{"label":"US Internal Revenue Service: one-participant 401(k) plans","url":"https://www.irs.gov/retirement-plans/one-participant-401k-plans"}],"section_headings":["United States: use retirement space before adding complexity","United Kingdom: ISA and pension rules do different jobs","European Union: there is no single personal income tax system","Australia: super contributions have caps and timing rules","Entity planning needs a business reason","A defensible checklist"]},{"slug":"ledger-breach-kidnappings-opsec","title":"Ledger Data Breach and Physical-Security Risks","tags":["Privacy","OPSEC"],"desc":"Ledger's 2020 breach exposed about 272,000 detailed customer records. What is verified, what is not, and how exposed customers can reduce phishing and physical-security risks.","time":"~10 min read","date":"2026-02","lastReviewed":"2026-07-13","url":"https://cunicula.com/en/articles/ledger-breach-kidnappings-opsec","answer":"Ledger's 2020 breach exposed about 272,000 detailed customer records. What is verified, what is not, and how exposed customers can reduce phishing and physical-security risks.","sources":[{"label":"Ledger Recover FAQ","url":"https://support.ledger.com/article/9579368109597-zd"},{"label":"Ledger: E-commerce and marketing data breach FAQ","url":"https://support.ledger.com/article/E-commerce-and-Marketing-data-breach-FAQ"},{"label":"Trezor: authorized resellers","url":"https://trezor.io/resellers"},{"label":"French Gendarmerie: 2026 annual cybercrime report","url":"https://www.gendarmerie.interieur.gouv.fr/gendinfo/content/download/58543/file/Rapport-cybercriminalite2026-WebA.pdf"},{"label":"Ledger: secure purchasing and device checks","url":"https://www.ledger.com/academy/topics/ledgersolutions/best-practices-to-securely-buy-ledger-signer"},{"label":"Ledger: ongoing phishing campaigns","url":"https://www.ledger.com/phishing-campaigns-status"}],"section_headings":["What Ledger confirmed","Correcting the kidnapping claim","What exposed customers should do","Buying without adding avoidable risk","Separate wallet security from identity privacy"]},{"slug":"how-to-scrub-your-personal-info-from-the-internet","title":"How to Scrub Your Personal Information from the Internet","tags":["Guide","OPSEC"],"desc":"Step-by-step guide to removing your name, address, phone number, and photos from data brokers, people-search sites, Google, social media, and public records.","time":"~12 min read","date":"2026-02","lastReviewed":"2026-07-13","url":"https://cunicula.com/en/articles/how-to-scrub-your-personal-info-from-the-internet","answer":"Step-by-step guide to removing your name, address, phone number, and photos from data brokers, people-search sites, Google, social media, and public records.","sources":[{"label":"Federal Trade Commission's consumer guidance","url":"https://consumer.ftc.gov/articles/what-know-about-people-search-sites-sell-your-information"},{"label":"Delete Request and Opt-out Platform","url":"https://cppa.ca.gov/data_broker_registry/"},{"label":"EU General Data Protection Regulation","url":"https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX%3A02016R0679-20160504"},{"label":"guide to asking an organisation to delete your data","url":"https://ico.org.uk/for-the-public/your-right-to-get-your-data-deleted/"},{"label":"CCPA rights guide","url":"https://oag.ca.gov/privacy/ccpa"},{"label":"Results about you guidance","url":"https://support.google.com/websearch/answer/12719076"},{"label":"private-information removal form","url":"https://support.google.com/websearch/answer/9673730"},{"label":"IdentityTheft.gov guidance for exposed information","url":"https://www.identitytheft.gov/Info-Lost-or-Stolen"}],"section_headings":["Start with a private inventory","Delete the pages you control","Opt out of people-search sites one by one","Use legal deletion rights where they apply","Remove eligible Google results","Public records need a different approach","A breach is not a removal problem","Paid removal services are delegates, not guarantees","Check again without feeding the profile"]},{"slug":"github-privacy-risk","title":"GitHub Privacy Considerations for Sensitive Projects","tags":["Privacy","OPSEC"],"desc":"What GitHub records, what legal process can reach, how commit metadata identifies contributors, and how Codeberg's published data policy differs.","time":"~6 min read","date":"2026-02","lastReviewed":"2026-07-13","url":"https://cunicula.com/en/articles/github-privacy-risk","answer":"What GitHub records, what legal process can reach, how commit metadata identifies contributors, and how Codeberg's published data policy differs.","sources":[{"label":"Codeberg Privacy Policy","url":"https://codeberg.org/Codeberg/org/src/branch/main/PrivacyPolicy.md"},{"label":"Codeberg repository migration documentation","url":"https://docs.codeberg.org/advanced/migrating-repos/"},{"label":"Codeberg: What is Codeberg?","url":"https://docs.codeberg.org/getting-started/what-is-codeberg/"},{"label":"GitHub: Setting your commit email address","url":"https://docs.github.com/en/account-and-profile/how-tos/email-preferences/setting-your-commit-email-address"},{"label":"GitHub Guidelines for Legal Requests of User Data","url":"https://docs.github.com/en/site-policy/other-site-policies/guidelines-for-legal-requests-of-user-data"},{"label":"GitHub General Privacy Statement","url":"https://docs.github.com/en/site-policy/privacy-policies/github-general-privacy-statement"},{"label":"GitHub: Microsoft acquisition completed","url":"https://github.blog/news-insights/company-news/github-and-microsoft/"}],"section_headings":["GitHub collects more than repository content","Git history can identify contributors","What GitHub says it can disclose","GitHub and Codeberg have different data policies","Reduce exposure without breaking the project","Moving a repository to Codeberg"]},{"slug":"financial-privacy-activists-dissidents","title":"Financial Privacy for Journalists, Activists & Dissidents","tags":["Privacy","OPSEC"],"desc":"Journalists, activists, and dissidents face asset freezing and payment deplatforming. Financial OPSEC guide using no-KYC tools and Monero.","time":"~10 min read","date":"2026-02","lastReviewed":"2026-08-12","url":"https://cunicula.com/en/articles/financial-privacy-activists-dissidents","answer":"Journalists, activists, and dissidents face asset freezing and payment deplatforming. Financial OPSEC guide using no-KYC tools and Monero.","sources":[{"label":"Cake Wallet official site","url":"https://cakewallet.com/","firstParty":true},{"label":"Coldcard official site","url":"https://coldcard.com/","firstParty":true},{"label":"Feather Wallet official site","url":"https://featherwallet.org/","firstParty":true},{"label":"Foundation Passport official site","url":"https://foundation.xyz/","firstParty":true},{"label":"Haveno official site","url":"https://haveno.exchange/","firstParty":true},{"label":"Mullvad VPN official site","url":"https://mullvad.net/","firstParty":true},{"label":"NiceVPS official site","url":"https://nicevps.net/","firstParty":true},{"label":"Njalla official site","url":"https://njal.la/","firstParty":true}],"section_headings":["Threats","Building Financial Resilience","What to Do If Your Accounts Are Frozen","Funding and incentives"]},{"slug":"zcash-vs-monero-privacy-2026","title":"Zcash vs Monero: Privacy Comparison 2026","tags":["Zcash","Monero"],"desc":"Compare Monero's default transaction privacy with Zcash shielded and transparent transfers, including address risks, viewing keys, and wallet checks.","time":"~8 min read","date":"2026-01","lastReviewed":"2026-07-13","contentKind":"brief","editorialStatus":"ok","editorialNote":"Short-form article intentionally classified as brief/news; expand later only if targeting evergreen SEO.","url":"https://cunicula.com/en/articles/zcash-vs-monero-privacy-2026","answer":"Compare Monero's default transaction privacy with Zcash shielded and transparent transfers, including address risks, viewing keys, and wallet checks.","sources":[{"label":"Monero Docs: Running a Node","url":"https://docs.getmonero.org/running-node/"},{"label":"Monero Project: What is Monero?","url":"https://www.getmonero.org/get-started/what-is-monero/"},{"label":"USENIX Security 2018: An Empirical Analysis of Anonymity in Zcash","url":"https://www.usenix.org/system/files/conference/usenixsecurity18/sec18-kappos.pdf"},{"label":"Zcash Documentation: Addresses and Value Pools","url":"https://zcash.readthedocs.io/en/latest/rtd_pages/addresses.html"},{"label":"ZIP 316: Unified Addresses and Unified Viewing Keys","url":"https://zips.z.cash/zip-0316"}],"section_headings":["The privacy models are not interchangeable","Monero reduces address-type mistakes","Zcash privacy depends on the whole route","Older Zcash tracing studies need context","Which one should you use?"]},{"slug":"what-is-a-sar","title":"What Is a SAR? Bank Reports to FinCEN","tags":["Explainer","Financial Surveillance"],"desc":"SARs are secret bank filings to FinCEN. You are never told when one is filed. Learn what triggers them, what data is shared, and how to reduce your exposure.","time":"~7 min read","date":"2026-01","lastReviewed":"2026-07-13","contentKind":"brief","editorialStatus":"ok","editorialNote":"Short-form article intentionally classified as brief/news; expand later only if targeting evergreen SEO.","url":"https://cunicula.com/en/articles/what-is-a-sar","answer":"SARs are secret bank filings to FinCEN. You are never told when one is filed. Learn what triggers them, what data is shared, and how to reduce your exposure.","sources":[{"label":"FFIEC SAR quality guidance","url":"https://bsaaml.ffiec.gov/manual/Appendices/13"},{"label":"FFIEC BSA/AML Manual: Suspicious Activity Reporting Overview","url":"https://bsaaml.ffiec.gov/manual/AssessingComplianceWithBSARegulatoryRequirements/04"},{"label":"Electronic Code of Federal Regulations: 31 CFR 1020.320","url":"https://www.ecfr.gov/current/title-31/subtitle-B/chapter-X/part-1020/subpart-C/section-1020.320"},{"label":"FinCEN Advisory FIN-2019-A003: Convertible Virtual Currency","url":"https://www.fincen.gov/sites/default/files/advisory/2019-05-10/FinCEN%20Advisory%20CVC%20FINAL%20508.pdf"},{"label":"FinCEN: Bank Secrecy Act Data, Fiscal Year 2025","url":"https://www.fincen.gov/sites/default/files/shared/FinCEN-Infographic-Public-2025-508.pdf"},{"label":"IRS generally requires the business to give the named person a written statement","url":"https://www.irs.gov/businesses/small-businesses-self-employed/form-8300-and-reporting-cash-payments-of-over-10000"}],"section_headings":["When a bank must file","How banks identify unusual activity","SAR, CTR, and Form 8300 are different reports","What a SAR contains","The report stays confidential","Cryptocurrency does not create an automatic SAR"]},{"slug":"the-no-kyc-stack","title":"Private Web Hosting: Domains, Servers, and Payments","tags":["OPSEC","Guide"],"desc":"Build a private web stack with Njalla, FlokiNET or 1984 Hosting, Monero payments, Caddy TLS, SSH over Tor, and separate account hygiene.","time":"~12 min read","date":"2026-01","lastReviewed":"2026-07-16","url":"https://cunicula.com/en/articles/the-no-kyc-stack","answer":"Build a private web stack with Njalla, FlokiNET or 1984 Hosting, Monero payments, Caddy TLS, SSH over Tor, and separate account hygiene.","sources":[{"label":"1984 Hosting official site","url":"https://1984.hosting/","firstParty":true},{"label":"FlokiNET official site","url":"https://flokinet.is/","firstParty":true},{"label":"FlokiNET privacy policy","url":"https://flokinet.is/privacy-policy"},{"label":"1984 Hosting privacy notes","url":"https://kb.1984.is/privacy"},{"label":"WHOIS","url":"https://lookup.icann.org/en"},{"label":"Njalla","url":"https://njal.la"},{"label":"Njalla official site","url":"https://njal.la/","firstParty":true},{"label":"Njalla terms of service","url":"https://njal.la/tos/"}],"section_headings":["What Each Layer Changes","Step 1 - Domain Registration Through a Proxy","Step 2 - Server Outside US/UK Jurisdiction","Step 3 - Payment Without a Public Trail","Step 4 - Connect It All","Operational Hygiene","Provider Comparison","Funding and incentives"]},{"slug":"best-no-kyc-crypto-exchanges-2026","title":"No-KYC Crypto Exchange Options in 2026","tags":["Swap","Guide"],"desc":"No-KYC exchange-style venues compared by type: aggregators, instant exchangers, and P2P markets, with KYC postures and fees from their records.","time":"~6 min read","date":"2026-01","lastReviewed":"2026-07-16","url":"https://cunicula.com/en/articles/best-no-kyc-crypto-exchanges-2026","answer":"No-KYC exchange-style venues compared by type: aggregators, instant exchangers, and P2P markets, with KYC postures and fees from their records.","sources":[{"label":"Bisq official site","url":"https://bisq.network/","firstParty":true},{"label":"Godex.io official site","url":"https://godex.io/","firstParty":true},{"label":"Haveno official site","url":"https://haveno.exchange/","firstParty":true},{"label":"RoboSats official site","url":"https://robosats.org/","firstParty":true},{"label":"SideShift.ai official site","url":"https://sideshift.ai/","firstParty":true},{"label":"Trocador official site","url":"https://trocador.app/","firstParty":true},{"label":"FATF guidance for virtual asset service providers","url":"https://www.fatf-gafi.org/en/publications/Fatfgeneral/Guidance-RBA-VA-VASPs.html"}],"section_headings":["Quick Comparison","What \"No-KYC\" Actually Means","Usage Notes","Tor Access","Fees and Rate Types","P2P vs. Instant Swap","Funding and incentives"]},{"slug":"anonymous-vpn-setup-mullvad","title":"Mullvad VPN Setup Guide","tags":["VPN","Guide"],"desc":"Set up Mullvad VPN with no account, paid with XMR or cash. Multi-hop, DNS leak testing, kill switch config.","time":"~6 min read","date":"2026-01","lastReviewed":"2026-08-15","url":"https://cunicula.com/en/articles/anonymous-vpn-setup-mullvad","answer":"Set up Mullvad VPN with no account, paid with XMR or cash. Multi-hop, DNS leak testing, kill switch config.","sources":[{"label":"mullvad.net","url":"https://mullvad.net"},{"label":"Mullvad VPN official site","url":"https://mullvad.net/","firstParty":true},{"label":"April 2023, Swedish police raided Mullvad's office","url":"https://mullvad.net/en/blog/2023/4/20/mullvad-vpn-was-subject-to-a-search-warrant-customer-data-not-compromised"},{"label":"independent audits (Cure53, Assured)","url":"https://mullvad.net/en/blog/fourth-infrastructure-audit-completed-by-cure53"},{"label":"Monero (XMR):","url":"https://mullvad.net/en/blog/we-now-accept-monero"},{"label":"Their pricing page","url":"https://mullvad.net/en/pricing"},{"label":"LNVPN official site","url":"https://nadanada.me/","firstParty":true},{"label":"Proton VPN official site","url":"https://protonvpn.com/","firstParty":true}],"section_headings":["Mullvad knows less","Step 1: Generate the number","Step 2: Pay without a paper trail","Step 3: Install the app","Step 4: Connect and tighten settings","Router mode trades simplicity for coverage","Alternatives worth a look"]},{"slug":"anonymous-domain-registration","title":"Domain Registration Privacy: Njalla, WHOIS Privacy, and .onion","tags":["Hosting","OPSEC"],"desc":"Register a domain without exposing your name. Njalla, WHOIS privacy, .onion services, Monero payment, registrar risk, and operational setup.","time":"~6 min read","date":"2025-12","lastReviewed":"2026-04-26","url":"https://cunicula.com/en/articles/anonymous-domain-registration","answer":"Register a domain without exposing your name. Njalla, WHOIS privacy, .onion services, Monero payment, registrar risk, and operational setup.","sources":[{"label":"mkp224o","url":"https://github.com/cathugger/mkp224o"},{"label":"Njalla official site","url":"https://njal.la/","firstParty":true},{"label":"GDPR also cut public WHOIS disclosure","url":"https://www.icann.org/en/system/files/files/gdpr-whois-may18-en.pdf"},{"label":"UDRP complaint","url":"https://www.icann.org/resources/pages/udrp-2012-02-25-en"},{"label":"ICANN rules let registrars terminate the domain for WHOIS inaccuracy","url":"https://www.icann.org/resources/pages/whois-data-accuracy-program-2013-09-10-en"}],"section_headings":["Default WHOIS exposes you","Njalla works for clearnet","WHOIS privacy from a normal registrar",".onion drops the registrar entirely","What fails","Operational notes","Follow the money in domain control"]},{"slug":"what-is-kyc","title":"What Is KYC?","tags":["Explainer"],"desc":"KYC identity checks: the data exchanges collect, the legal basis, and available alternatives.","time":"~7 min read","date":"2025-11","lastReviewed":"2026-07-13","url":"https://cunicula.com/en/articles/what-is-kyc","answer":"KYC identity checks: the data exchanges collect, the legal basis, and available alternatives.","sources":[{"label":"EUR-Lex: Regulation (EU) 2023/1113 on information accompanying transfers","url":"https://eur-lex.europa.eu/eli/reg/2023/1113/oj/eng"},{"label":"Coinbase Global Privacy Policy","url":"https://www.coinbase.com/legal/privacy"},{"label":"FATF: Updated Guidance for a Risk-Based Approach to Virtual Assets and VASPs","url":"https://www.fatf-gafi.org/content/dam/fatf-gafi/guidance/Updated-Guidance-VA-VASP.pdf"},{"label":"FCA: Requirements for cryptoasset registration applications","url":"https://www.fca.org.uk/firms/cryptoassets/application-registration"},{"label":"FinCEN: Application of FinCEN's Regulations to Certain Business Models Involving Convertible Virtual Currencies","url":"https://www.fincen.gov/resources/statutes-regulations/guidance/application-fincens-regulations-certain-business-models"}],"section_headings":["What a KYC check can collect","Why regulated crypto firms require it","The Travel Rule is not a universal $1,000 switch","Direct transfers and no-KYC services","What KYC changes for privacy","Before sending documents"]},{"slug":"telegram-hardening","title":"Hardening Telegram","tags":["Guides","OPSEC"],"desc":"Telegram cloud chats are not end-to-end encrypted. Reduce account, phone-number, metadata and session exposure with settings that have clear limits.","time":"~3 min read","date":"2025-11","lastReviewed":"2026-07-13","url":"https://cunicula.com/en/articles/telegram-hardening","answer":"Telegram cloud chats are not end-to-end encrypted. Reduce account, phone-number, metadata and session exposure with settings that have clear limits.","sources":[{"label":"Fragment: collectible numbers","url":"https://fragment.com/about#collectible-numbers"},{"label":"Telegram: no-SIM signup and auto-delete","url":"https://telegram.org/blog/ultimate-privacy-topics-2-0"},{"label":"Telegram FAQ: security and Secret Chats","url":"https://telegram.org/faq#q-how-secure-is-telegram"},{"label":"Telegram Privacy Policy","url":"https://telegram.org/privacy"}],"section_headings":["1. Use Secret Chats for sensitive messages","2. Lock down phone-number discovery","3. Add a second login factor","4. Reduce stored data","5. Treat bots and optional processing as third parties","6. Understand metadata and legal requests","SIM-free registration has trade-offs"]}],"meta":{"total":96,"api_version":"1.2","powered_by":"cunicula.com","documentation_url":"https://cunicula.com/en/api-docs","machine_index_url":"https://cunicula.com/llms.txt","license":"LicenseRef-Cunicula-Attribution-1.0","license_url":"https://cunicula.com/en/cite","attribution":"Cunicula, \"{name}\", cunicula.com, reviewed {reviewed}, retrieved {retrieved}, {url}","cite_guide_url":"https://cunicula.com/en/cite","dataset_url":"https://cunicula.com/api/v1/dataset","schema_version":"1.1.0","limit":96,"offset":0,"sort":"date","order":"desc","filters":{}}}