SMS codes can be intercepted in real time.
SMS two-factor authentication is better than no two-factor authentication. It is not secure against a determined attacker.
-
-
Operational identity separation: the OPSEC principle most people skip.
Operational identity separation means keeping identities, devices, and activities compartmented so that a breach in one does not compromise the others.
-
Digital privacy through divorce and separation. The complete operational guide.
Divorce and separation produce a category of digital exposure that did not exist twenty years ago. Shared Apple IDs, shared cloud, shared smart home, shared location, shared streaming. Every one of these is now standard discovery in family court. The operational baseline for the seventy-two hours before filing, the proceeding itself, and the post-decree untangling.
-
Digital security for military families. The complete operational guide.
Military families face a threat profile that no generic privacy guide addresses. Foreign intelligence, commercial data brokers, romance scammers, doxxers, and custody adversaries all target the same household through different channels. The operational baseline for the spouse, the parent, and the service member.
-
Digital security for lawyers and law firms. The complete operational guide.
Lawyers operate at the intersection of three pressure points no other profession combines: privileged client communications, adversaries trying to acquire those communications, and a duty of competence that now extends to the technology used to handle them. The operational posture for solo practitioners, mid-size firms, and the moment something has gone wrong.
-
Voice cloning costs 30 seconds of audio and $5. The new threat model.
Voice cloning crossed the consumer-grade threshold. The three attack patterns documented through 2025 and 2026, and the procedural defenses that work.
-
Apple Privacy Manifests. The compliance forced the apps to admit what they collect.
Apple Privacy Manifests are mandatory since 2024. The four sections, how to inspect any app yourself, and what the data reveals.
-
Digital security for NGO workers and aid staff in restricted environments. The complete operational guide.
NGO workers, expats, and aid staff face three overlapping threat models: state surveillance, criminal opportunism, and the operational gaps of their own colleagues. The operational baseline we use to onboard field deployments and audit existing ones.
-
Monero, Wasabi, and what mixers actually do in 2026.
Privacy coins and CoinJoin tools work technically. Whether they work operationally depends on what you do at the on-ramp and off-ramp. The 2026 picture.
-
GrapheneOS vs stock Android: what civilians actually gain.
GrapheneOS removes Google’s data collection layer entirely, supports sandboxed Google Play for app compatibility, and gives you hardware-backed security controls that stock Android does not expose.
