the blog

A documented collection of Meta's lobbying activity and policy influence — the kind of thing that doesn't make headlines but shapes the rules everyone has to live by.

The EU Parliament voted to reject untargeted surveillance of all private messages. A significant win for encrypted communication, though the fight is far from over.

A new California law mandates some form of age verification at account setup for all operating systems. The implications for open-source software and user privacy are significant.

A thoughtful post on identity, online personas, and the gap between who we present ourselves to be and who we actually are — especially relevant in an era of algorithmic self-presentation.

A technical breakdown of what "age verification" really means in practice — and why every proposed implementation either doesn't work or creates a surveillance infrastructure far worse than the problem it claims to solve.

The follow-up to the original bug report: further research uncovering the scale and implications of the Snapchat vulnerability. Methodical, independently verified, and published responsibly.

The EU is building its own payment infrastructure to reduce dependence on Visa, Mastercard, and US-based processors — part of a broader push for digital sovereignty.

A teenager discovers a significant security flaw in a widely-used service through methodical, independent research — a good reminder that age isn't a barrier to serious security work.