https://cunicula.com/en/articles/claritycheck-exposed-face-images https://cunicula.com/article-figures/claritycheck-exposed-face-images/claritycheck-exposure-record--article-desktop.png What the public record establishes The database was restricted after responsible disclosure; its exposure duration, downstream access, and number of unique people remain unknown. https://cunicula.com/en/articles/agent-wallet-threat-model https://cunicula.com/article-figures/agent-wallet-threat-model/agent-wallet-approval--article-desktop.png The agent drafts. It never signs. The safer architecture from the article: intent and signing authority are separated, with limits enforced before payment. https://cunicula.com/en/articles/anonymous-vpn-setup-mullvad https://cunicula.com/article-figures/anonymous-vpn-setup-mullvad/privacy-vpn-comparison--article-desktop.png Four privacy VPNs, seven operating facts Privacy VPN comparison from the article, with the April 2023 Mullvad search-warrant outcome retained as historical evidence rather than a provider claim. https://cunicula.com/en/articles/anonymous-vps-hosting-guide https://cunicula.com/article-figures/anonymous-vps-hosting-guide/no-kyc-vps-trust-path--article-desktop.png Clean the payment trail and the admin path separately Anonymous payment, Tor signup, server hardening, and onion-service SSH remove different records; the provider still knows the order, server, payment event, abuse history, and local legal process. https://cunicula.com/en/articles/axon-police-ai-body-cameras https://cunicula.com/article-figures/axon-police-ai-body-cameras/axon-report-approval-pipeline--article-desktop.png Draft One makes a draft; Vision makes an alert An officer approves a Draft One report, while a trained person decides what happens after a Vision activity alert. https://cunicula.com/en/articles/california-drop-data-broker-removal https://cunicula.com/article-figures/california-drop-data-broker-removal/drop-lifecycle--article-desktop.png One request, five outcomes, one recheck loop The five broker statuses and the recheck loop, with the 45-day processing and 90-day reporting windows. https://cunicula.com/en/articles/coldcard-rng-entropy-incident-2026 https://cunicula.com/article-figures/coldcard-rng-entropy-incident-2026/coldcard-rng-causal-chain--article-desktop.png A zero-valued guard selected a deterministic fallback The stable root cause was a defined-only build guard that silently selected a deterministic fallback; the hardware TRNG code remained present but the seed-generation call did not reach it. https://cunicula.com/en/articles/degoogle-without-breaking-everything https://cunicula.com/article-figures/degoogle-without-breaking-everything/degoogle-migration-rail--article-desktop.png Retire dependencies before deleting the account A Google account is a dependency bundle. Exporting is not deletion; each critical sign-in, library, purchase, and recovery path must be moved or explicitly retained before deletion. https://cunicula.com/en/articles/encrypted-messaging-comparison https://cunicula.com/article-figures/encrypted-messaging-comparison/messaging-envelope--article-desktop.png What each messenger still reveals Registration and delivery-path differences between four end-to-end encrypted messengers. https://cunicula.com/en/articles/frigate-private-camera-network https://cunicula.com/article-figures/frigate-private-camera-network/frigate-data-path--article-desktop.png What leaves the camera network, and what must not The documented Frigate surfaces: port 8971 authenticated, port 5000 internal only, remote access through a private tailnet. https://cunicula.com/en/articles/grapheneos-privacy-phone-guide https://cunicula.com/article-figures/grapheneos-privacy-phone-guide/grapheneos-profile-boundaries--article-desktop.png Profiles separate app state, not the phone identity GrapheneOS profiles separate app data and profile state; they do not create separate devices, SIMs, carrier records, Wi-Fi histories, or public IP addresses. https://cunicula.com/en/articles/license-plate-readers-traffic-enforcement https://cunicula.com/article-figures/license-plate-readers-traffic-enforcement/flock-claim-evidence-ledger--article-desktop.png Public limits did not prevent broader recorded uses A Georgia traffic citation and nationwide search records show why contract controls, system settings, and audit logs matter more than a narrow public description of local plate-reader use. https://cunicula.com/en/articles/no-kyc-phone-stack-2026 https://cunicula.com/article-figures/no-kyc-phone-stack-2026/private-phone-egress-stack--article-desktop.png Six layers narrow identity; residual records still cross out The stack reduces identity exposure layer by layer; it does not remove tower-visible IMEI, ICCID, and IMSI records, provider-side order records, location habits, or endpoint risk. https://cunicula.com/en/articles/pgp-basics https://cunicula.com/article-figures/pgp-basics/pgp-content-metadata-envelope--article-desktop.png PGP protects content, not the envelope OpenPGP protects content and signatures, while normal email routing metadata remains exposed. A full fingerprint check over a second channel establishes key trust. https://cunicula.com/en/articles/private-ai-local-llm https://cunicula.com/article-figures/private-ai-local-llm/local-ai-egress--article-desktop.png Local inference is one hop, not the whole boundary The article's reproducible check: run the complete task offline and inventory every configured endpoint. https://cunicula.com/en/articles/private-dns-setup-guide https://cunicula.com/article-figures/private-dns-setup-guide/mullvad-dns-tunnel-path--article-desktop.png One tunnel, one resolver path, no browser exception The leak-resistant Mullvad baseline uses in-tunnel DNS, blocks browser resolver exceptions, and treats encrypted DNS without VPN as a separate IP-exposed mode. https://cunicula.com/en/articles/private-email-providers https://cunicula.com/article-figures/private-email-providers/email-alias-routing--article-desktop.png The alias hides the mailbox, not the routing relationship SimpleLogin keeps the Proton address from the sender and supports replies through a reverse alias, but it must process the routing relationship and normal email metadata remains visible. https://cunicula.com/en/articles/private-home-network-setup https://cunicula.com/article-figures/private-home-network-setup/home-network-zones--article-desktop.png Five networks, one blocked-by-default boundary The firewall plan from the article: default block between networks, narrow allow rules for actual services. https://cunicula.com/en/articles/proton-pass-vs-bitwarden-simplelogin https://cunicula.com/article-figures/proton-pass-vs-bitwarden-simplelogin/password-alias-boundaries--article-desktop.png One recovery zone or two systems joined by an API key The main architectural choice is one joined recovery boundary versus two separately recoverable services connected by a revocable API key; a custom domain is the portable address option. https://cunicula.com/en/articles/self-host-unbroker-data-broker-removal https://cunicula.com/article-figures/self-host-unbroker-data-broker-removal/unbroker-consent-custody-pipeline--article-desktop.png Consent gates the run; custody grows with the host surface The workflow records consent before scanning, keeps deterministic run state and verification in a ledger, and treats a shared hosted app as the highest personal-data custody option. https://cunicula.com/en/articles/self-osint-personal-exposure-audit https://cunicula.com/article-figures/self-osint-personal-exposure-audit/self-osint-audit-gates--article-desktop.png Confirm twice, choose one response, verify before closure Discovery does not authorize removal: the workflow requires two independent matching fields, one chosen response per finding, and separate verification of the source page and search result. https://cunicula.com/en/articles/surveillance-resistant-phone-numbers https://cunicula.com/article-figures/surveillance-resistant-phone-numbers/jmp-phone-retention-path--article-desktop.png A separate number still crosses the public telephone boundary JMP separates a public number from a primary mobile contract, but calls and messages still cross the PSTN; JMP documents up to seven days of SMS content retention and billing-related call metadata. https://cunicula.com/en/articles/tails-os-financial-privacy-guide https://cunicula.com/article-figures/tails-os-financial-privacy-guide/tails-session-lifecycle--article-desktop.png The session is amnesic; Persistent Storage is an explicit exception Ordinary Tails session state is wiped at shutdown; Persistent Storage is the explicit encrypted exception, while ISP-visible Tor use, hardware compromise, and personal-account login remain outside the amnesic guarantee. https://cunicula.com/en/articles/tor-browser-hardening-setup https://cunicula.com/article-figures/tor-browser-hardening-setup/tor-browser-session-rail--article-desktop.png Accept the route, then reset between compartments The acceptance sequence for Tor Browser 15.0.19: verify the build and route, avoid unique customization, then clear session state with New Identity between compartments. https://cunicula.com/en/articles/what-is-a-sar https://cunicula.com/article-figures/what-is-a-sar/sar-reporting-rule-ledger--article-desktop.png Amount alone triggers a CTR; a SAR requires suspicious facts The reporting paths differ: CTR and Form 8300 are cash-threshold reports, while a mandatory bank SAR generally requires at least $5,000 plus one of the specified suspicious-fact conditions. https://cunicula.com/en/articles/qwen38-obliterated-local-model https://cunicula.com/article-figures/qwen38-obliterated-local-model/qwen38-obliterated-provenance-contract--article-desktop.png The same download gave two answers The downloaded files, typed request, and answer settings stayed the same; only the extra directions added by the app changed. https://cunicula.com/en/articles/btcpay-server-lnd-macaroon-incident https://cunicula.com/article-figures/btcpay-server-lnd-macaroon-incident/btcpay-lnd-macaroon-blast-radius--article-desktop.png The exposed path reached LND control BTCPay Server versions before 2.4.2 exposed LND macaroons; 2.4.2 fixes the path and regenerates BTCPay-managed credentials.