The Anonymity Playbook
Journalists, sources, activists and anyone whose privacy has stakes
Cybersecurity doesn't have to be complicated. I am here to break down concepts, threats, tips, and tools in simple language. For mere mortals and developers alike.
Since I have been asked this a lot: The best way to support this site, is to buy my books.
As an Amazon Associate I earn from qualifying purchases. Buying through these links costs you nothing extra and helps pay for the blog.
Google’s October Android bulletin fixes 25 flaws, but the useful check is the date shown on your own phone. Here is how to update, restart, and decide what to do when the date stays old.
Attackers began probing a critical Atlassian file-read flaw after public research appeared. Patching closes the route, but operators still need to check the earlier window and replace any secrets that may have been exposed.
ASOS says an attacker accessed customer names, contact details, and search histories after sending a rogue app notification. The useful response is a simple rule: no incoming message gets to approve its own next step.
Apple plans a more explicit grant for macOS Full Disk Access as AI agents become more capable. A clearer prompt helps, but teams still need to limit which files an agent can reach and what it can do with them.
Advantest is notifying people that personal information was taken in its February ransomware incident. Read the personalised data line first, then match each exposed fact to the place where it can be misused.
Wikimedia found unapproved agent activity across its wikis, public tools, and data services. The practical lesson is to give every agent a named identity, narrow routes, hard budgets, and a stop condition before it touches the open web.
Attackers used a genuine Nikkei employee account to send about 9,000 malicious emails. Here is a calm rule for checking an unexpected request when the sender address looks right.
Google paused new product-vulnerability reports to its open-source reward program after automated submissions rose and most proved invalid. The useful response is an evidence gate between an AI finding and another person's queue.