Glossary

Every term used on Predaxia, defined the way it matters in practice. Click any term for the full definition.

Resources

  • Proton — Encrypted email, VPN, cloud storage and password manager. Built in Switzerland.
  • 1Password — Password manager. Generates and stores unique passwords for every account.
  • DeleteMe — Removes your personal information from data broker websites.
  • Mullvad — VPN with a verified no-logs policy. No account required. No personal data collected.

A

  • Apple Advanced Data Protection (ADP) — Optional iCloud setting that switches most categories from Apple-held keys to end-to-end encryption.
  • Adversary — The specific actor whose access to your information creates harm. Identified before tools are chosen.
  • Air-Gapped Device — A device physically isolated from the internet and all external networks. The highest level of isolation for sensitive documents — data moves only via physical media.
  • Android — Mobile operating system developed by Google. Security depends entirely on which build you run.
  • Attack Surface — Sum of all places an adversary can target you. Reducing it is cheaper than stacking defenses.
  • Attorney-Client Privilege — Legal protection keeping client-lawyer communications confidential. Lost through careless channels.
  • Apple AirTag (covert tracker) — Coin-sized Bluetooth tracker that piggybacks on the Find My network of a billion iPhones.
  • Account takeover (ATO) — An attacker gains control of a victim’s account, typically via credential stuffing, phishing, SIM swap, or recovery email pivot.
  • Acxiom — Wholesale data broker (LiveRamp parent), supplier to advertisers, political campaigns, and major retailers.
  • Aegis Authenticator — Open-source TOTP authenticator for Android.
  • Authenticator apps (Authy, Google Authenticator) — The two most common consumer TOTP apps.
  • Amesys / Eagle GLINT — French mass-surveillance vendor (Bull subsidiary) behind the Eagle/GLINT internet interception system sold to Gaddafi-era Libya, Sissi-era Egypt and others.

B

  • Backdoor — Deliberate bypass in a software system. Cannot be built so only one actor can use it.
  • BFU vs AFU — Before-First-Unlock and After-First-Unlock device states. AFU leaves keys in memory; BFU does not.
  • Bitwarden — Open-source password manager. Audited, self-hostable, end-to-end encrypted vault.
  • Border Search — Device inspection at a country’s point of entry. Operates under reduced legal protections.
  • Brave Browser — Chromium fork with built-in tracker and ad blocking and a private window with Tor.
  • Briar — Peer-to-peer encrypted messaging over Tor or Bluetooth. Works during internet shutdowns.
  • Browser fingerprinting — Identification technique that combines screen, fonts, canvas, audio, timezone signals to identify a browser without cookies.
  • Browser isolation — Pattern of running risky web sessions in a separate VM, container, or remote browser.
  • BeenVerified — Subscription people-search broker.
  • Burner phone — Phone bought with cash, activated on a prepaid SIM under a non-attributable identity, used for one operation, decommissioned at the end.
  • Border agent (CBP officer) — US Customs and Border Protection officer with broad authority at ports of entry, including warrantless device search.
  • Bark (Family Monitoring) — Family monitoring service that scans messaging, social media, email and search for risk signals and alerts parents.
  • BGAN — Inmarsat’s portable broadband terminal. The legacy benchmark for sat data in the field.
  • Babel Street — US data broker whose Locate X product aggregates phone geolocation from advertising SDKs and resells it to ICE, CBP and SOCOM without a warrant.

C

  • Canvas fingerprinting — Specific fingerprinting technique that asks the browser to render a hidden image and hashes the result.
  • Carpenter v. United States — 2018 Supreme Court decision that held cell-site location records require a warrant.
  • CBP — US Customs and Border Protection. Has search powers exceeding those of regular law enforcement.
  • CCPA — California Consumer Privacy Act. Legal basis for data broker removal in the US.
  • Cellebrite — Digital forensics tool used by law enforcement to extract data from seized devices.
  • Chain of custody — Documented record of who had access to a piece of evidence, when, and what they did with it.
  • Clean Device — A phone or laptop reset to factory settings with no personal data, accounts, or history. The only preparation that fully addresses border search risk.
  • CLOUD Act — US law forcing US tech companies to produce data regardless of where it is stored.
  • CLOUD Act fast lane — Bilateral agreements under the CLOUD Act that let partner countries request data directly from US providers.
  • Compartmentalisation — The practice of keeping identities, devices, accounts, and activities strictly separated so a breach in one compartment cannot expose others. A core OPSEC discipline.
  • Compartmentation — OPSEC discipline of isolating identities, devices and accounts so a compromise of one does not propagate.
  • COMSEC (Communications Security) — The discipline of protecting communications from interception and analysis. Covers which channels are secure under which conditions — and which ones only appear to be.
  • Consumer Spyware — Commercially available monitoring software (mSpy, FlexiSpy, Hoverwatch) installed in minutes. Logs calls, messages, location, and keystrokes. Legal to buy. Illegal to install without consent.
  • Cellebrite UFED Premium — Top tier of the UFED line, targets the latest iPhones and recent Android devices for full file system extraction.
  • Cell-site simulator (Stingray) — Suitcase-sized device that impersonates a cell tower to force phones in range to register, exposing IMSI and rough location.
  • Credential stuffing — Automated attack that takes username and password pairs from one breach and tries them against hundreds of other services.
  • Citizen Lab — Research lab at the University of Toronto’s Munk School that documents targeted digital threats against journalists, activists, and dissidents.
  • Credit bureaus (Equifax, Experian, TransUnion) — The three US bureaus that hold credit and adjacent data on most US adults.
  • Captive Portal — Login page presented by a public Wi-Fi network. Operates outside the VPN tunnel and frequently weaponized by attackers.
  • CoinJoin — Bitcoin privacy technique that combines inputs from multiple users into one transaction, breaking the linkability of UTXOs.
  • Co-Parenting App — Apps designed for documenting communication between separated parents. Court-admissible by design.
  • Candiru / DevilsTongue — Israeli mercenary spyware vendor (rebranded Saito Tech / Integrity Labs) specialised in Windows and browser zero-days, on the US Entity List since 2021.
  • Clearview AI — US facial-recognition firm that scraped 50+ billion images from social media without consent, fined under GDPR in France, UK, Italy and the Netherlands.
  • Cobwebs Technologies — Israeli OSINT/web-intelligence vendor (now part of Penlink) whose Tangles platform indexes dark-web forums and runs automated fake personas.
  • Cognyte — Israeli surveillance vendor spun off from Verint, exposed by Meta in 2021 for operating fake-persona networks against journalists and activists.

D

  • Data Broker — A company that collects and sells your personal data without your direct consent.
  • Data Minimisation — Collecting and keeping only what is strictly necessary. Legal duty under GDPR, OPSEC discipline for everyone.
  • Digital Footprint — The total body of data that exists about a person online — deliberately shared, passively collected, or inferred. Includes profiles, records, metadata, and location history.
  • DNS — Internet phonebook. Reveals every site you visit. Use encrypted DNS (DoH) through a trustworthy provider.
  • Data breach — Unauthorized access to or disclosure of stored data, whether by attacker, insider, misconfiguration, or compelled production.
  • Doxxing — Public release of an individual’s personal information (home address, employer, family ties, photos) to enable harassment or violence.
  • Diceware — Method for generating passphrases by rolling dice against a published wordlist, eliminating any human bias in word choice.
  • Duress code / duress password — Pre-arranged signal (a wrong password that wipes, a phrase that triggers a help message) designed to be revealed under coercion without telling the coercer.
  • Dahua Technology — Chinese video-surveillance manufacturer (#2 worldwide) on the US Entity List for its role in Xinjiang surveillance, banned by the FCC in 2022.
  • DarkMatter / Project Raven — UAE cyber firm that ran the Project Raven offensive unit with ex-NSA operators; three Americans signed a DOJ deferred-prosecution agreement in 2021.

E

  • E2EE — Abbreviation for End-to-End Encryption.
  • Encrypted DNS (DoH and DoT) — DNS over HTTPS or TLS, encrypts the DNS lookup so the network operator cannot see which domains you resolve.
  • End-to-End Encryption — Only sender and recipient can read the message. The provider cannot.
  • EXIF — Metadata embedded in image files including GPS coordinates, timestamp, and device model. Travels with the image unless stripped. A source has been burned by this.
  • ExifTool — Software that reads and removes metadata from files, particularly photos.
  • ExpressVPN — Commercial VPN acquired by Kape Technologies. Technically clean, structurally conflicted.
  • Email alias service — Forwarders that generate per-service email addresses pointing back to a hidden real inbox.
  • eSIM — SIM provisioned digitally rather than as a physical card.
  • ESTA / Visa Waiver Program — Electronic System for Travel Authorization, the pre-screening for Visa Waiver Program countries entering the US.
  • Evil Twin Attack — Rogue Wi-Fi access point named to look legitimate. Captures credentials, intercepts traffic.
  • ElcomSoft — Russian password-recovery and mobile-forensics vendor based in Moscow, on the US Entity List since 2022 for its role in Russian state forensics.

F

  • Facial recognition — Identification of individuals from images or video using a feature template.
  • FIDO2 — Open authentication standard using cryptographic key pairs. The only truly phishing-resistant method.
  • Fifth Amendment — US constitutional protection against compelled self-incrimination.
  • Firefox — Open-source browser with strong privacy defaults. Containers enable identity separation in one browser.
  • FISA and the FISA Court — Foreign Intelligence Surveillance Act and the secret court that authorizes its surveillance orders.
  • Five Eyes — Intelligence-sharing alliance of US, UK, Canada, Australia, New Zealand.
  • Flock Safety — Private operator of a national license plate reader and camera network shared with police.
  • Forensic image (disk image) — Bit-for-bit copy of a storage device used for analysis without altering the original.
  • Nine Eyes / Fourteen Eyes — Extended intelligence-sharing groups that build on Five Eyes with European and other partners.
  • Fourth Amendment — US constitutional protection against unreasonable searches and seizures.
  • Faraday bag — Pouch lined with conductive mesh that blocks cellular, Wi-Fi, Bluetooth, GPS, NFC.
  • Factory reset (limits) — Built-in OS reset that wipes user data and re-encrypts storage.
  • Family Link & Apple Family Sharing — Google’s and Apple’s family management features. Parental controls, screen time, location sharing.
  • Forensic Accountant — Specialist who reconstructs financial history from records, devices and accounts during divorce or fraud investigations.
  • Field Note (Format) — Predaxia’s news-with-analysis format. Reaction to a real-time event, structured to live twice.
  • FinSpy / FinFisher — British-German Gamma Group surveillance suite used against opposition movements in Bahrain, Ethiopia, Egypt and Turkey; Gamma GmbH filed for bankruptcy in 2022.

G

  • Gag order — Court directive prohibiting a service provider from telling its customer that their data has been requested.
  • GCHQ — UK signals intelligence agency, NSA partner under the Five Eyes agreement.
  • GDPR — EU regulation governing personal data collection, storage, and sharing. Applies to any organization handling EU resident data regardless of location. Breach notification required within 72 hours.
  • Geofence warrant — Court order forcing Google or Apple to surrender every device that pinged a defined area at a given time.
  • Google Takeout (forensic vector) — Google\u2019s data export tool, also a forensic vector when an account is compromised or compelled.
  • GPS — Satellite-based location system accurate to a few meters. Embedded in photos, logged by apps. Disabling location permissions for apps that do not need it is the baseline action.
  • GrapheneOS — Privacy-focused Android OS with hardened security. No Google services.
  • GrayKey — iPhone forensic extraction device made by Grayshift. Used by law enforcement. Effectiveness depends on iOS version and passcode strength.

H

  • HTTPS — Encrypted web protocol. Protects content in transit but not which sites you visit. Baseline security, not a complete privacy solution.
  • Have I Been Pwned (HIBP) — Free service by Troy Hunt that lets you check whether your email or password has appeared in a known breach.
  • Hardware security key — Physical token (YubiKey, Titan, Nitrokey, Solokey) that performs FIDO2 / U2F or smart-card authentication.
  • Hardware Wallet — Dedicated device that stores private keys offline and signs transactions without exposing them to a network-connected computer.
  • Hawala — Informal value transfer system used across South Asia, the Middle East, the Horn of Africa, Latin America. Settles trust-based, usually without electronic record.
  • Heliconia — Spanish exploitation framework by Variston IT (Barcelona) covering Chrome, Firefox and Windows Defender Application Guard zero-days, documented by Google TAG.
  • Hermit — Italian RCS Lab / Cy4Gate spyware deployed via operator-assisted network cuts, central to the Spyrtacus / Paragon Italian prosecutor inquiry of March 2026.
  • Hikvision — World #1 surveillance-camera maker, CETC-owned, on the US Entity List for Xinjiang surveillance and banned by the FCC since 2022.

I

  • iCloud — Apple cloud storage. Most data accessible to Apple under US legal process. Advanced Data Protection (iOS 16.2+) extends end-to-end encryption to backups — must be enabled manually.
  • iCloud extraction — Forensic acquisition of an Apple account, performed given credentials or a token.
  • Identity separation — Architectural rule that real and operational identities never share devices, accounts or networks.
  • iMessage — Apple encrypted messaging. Real E2EE but iCloud Backup bypasses it unless Advanced Data Protection is on.
  • Investigatory Powers Act (UK) — UK law authorizing bulk interception, equipment interference, and Technical Capability Notices.
  • iOS — Apple mobile operating system. Most hardened consumer OS out of the box, vulnerable to state-level zero-clicks.
  • IP Address — Numerical label assigned to every networked device. Visible to every site you visit. Linked to your identity via your ISP. A VPN substitutes the VPN server’s IP for yours.
  • ISP — Internet Service Provider. Can see every domain you visit and your real IP address.
  • Infostealer — Malware family designed to harvest browser-stored passwords, cookies, crypto wallets, autofill data, and exfiltrate them in seconds.
  • Intelius — People-search broker owned by PeopleConnect, the same parent as Instant Checkmate, TruthFinder, US Search, and Classmates.
  • Incident Response — Structured handling of a security event: detect, contain, eradicate, recover. The corporate version of post-breach response.
  • Iridium — LEO satellite voice and short-data network. Global coverage including poles. Standard sat phone for extreme environments.
  • Idemia — French biometric-identity vendor (Morpho + Oberthur merger) supplying 60% of biometric passports worldwide and India Aadhaar enrolment.

J

  • Jailbreak — Removing Apple’s software restrictions on iOS. Expands attack surface significantly. Law enforcement forensic tools are more effective against jailbroken devices.
  • Juice Jacking — Public USB charging ports used to deliver malware or siphon device data. Defended by USB data blockers.

K

  • Kill Switch (VPN) — Cuts your internet connection if the VPN tunnel drops unexpectedly, preventing silent reversion to an unprotected connection.

L

  • Legal Hold — Obligation to preserve records in anticipated litigation. Stops routine deletion, including ephemeral messages.
  • License plate reader (LPR) — Camera that captures plates and timestamps and writes them to a searchable database.
  • Life360 — Family location-sharing app. Frequently cited in contested divorces as an access vector that was installed during the relationship and never removed.
  • Location Data — Any information that reveals where a person is, was, or routinely goes. Generated constantly by smartphones, apps, cell towers, and payment systems — most of it without active user input.
  • Lockdown Mode — iOS/macOS feature reducing attack surface against commercial spyware. Opt-in, breaks some features deliberately.
  • LexisNexis Risk Solutions — Commercial data broker arm of LexisNexis, supplier to insurers, employers, banks, and law enforcement.

M

  • Magnet Axiom — Forensic suite competing with Cellebrite, used in courts and corporate investigations.
  • MDM (Mobile Device Management) — Software that gives employers remote control over managed devices. A work MDM device is not private from your employer, regardless of what messaging apps you use on it.
  • Memory dump (volatile memory) — Capture of a device\u2019s RAM at a point in time, contains decryption keys and recent message content.
  • Metadata — Data about data. Who you contacted, when, from where — often more revealing than content.
  • MFA — Multi-Factor Authentication. App-based TOTP and hardware keys are strong, SMS is weak.
  • Man-in-the-Middle Attack — Interception where an adversary sits between two parties who believe they communicate directly.
  • MLAT — Mutual Legal Assistance Treaty. How foreign governments obtain US-held user data through formal channels.
  • Mullvad Browser — Tor Browser without Tor: same anti-fingerprinting hardening, run over your VPN of choice.
  • Multi-hop VPN — VPN configuration that routes traffic through two or more servers in different jurisdictions.
  • Monero (XMR) — Privacy-by-default cryptocurrency. Hides sender, receiver, amount on chain.
  • Maltego — OSINT graph-investigation platform (German-South African) used by both legitimate threat-intel teams and offensive reconnaissance operators.
  • Memento Labs — Successor to Hacking Team (Italy), still selling a Galileo-class spyware suite after the 2015 WikiLeaks 400 GB internal dump.
  • MSAB XRY — Swedish mobile-forensic extraction suite (Nasdaq Stockholm) competing with Cellebrite UFED, dominant in European law enforcement.

N

  • National security letter (NSL) — FBI-issued administrative subpoena that compels a provider to hand over records and prohibits disclosure.
  • Need-to-know — Principle that information is shared only with those whose role requires it.
  • No-Logs Policy — A VPN’s commitment to not retain user activity records. Only meaningful if tested under real legal pressure.
  • NordVPN — Large consumer VPN brand with audited no-logs and aggressive affiliate marketing.
  • Nation-state actor — Government-backed intelligence or military service operating in cyberspace.
  • NEC NeoFace — Japanese facial-recognition algorithm (NIST FRVT top 3) deployed at Singapore Changi, Indian Digi Yatra and UK South Wales Police.

O

  • Onion service (hidden service) — Service reachable only through the Tor network, identified by a .onion address.
  • Open Source — Software with publicly available code that can be independently audited.
  • OpenVPN — Open-source VPN protocol, industry standard since 2001. Slower than WireGuard but configurable to disguise traffic as HTTPS in restrictive countries.
  • Operational discipline — Doing the same thing the same way every time, especially when nothing seems to be happening.
  • Operational identity — Persona purpose-built for one operation, with its own email, phone, payment, device.
  • OPSEC — Operational Security. The discipline of protecting information that could be used against you.
  • OSINT — Open-source intelligence: gathering information from public sources to build a target profile.
  • OFAC SDN List — US Treasury list of Specially Designated Nationals. US persons cannot transact with anyone or anything on it.
  • OurFamilyWizard — The largest co-parenting platform in the US. ToneMeter, expense tracking, GPS-stamped check-ins. Court-recommended in many jurisdictions.
  • Operator Protocol (Format) — Predaxia’s procedural format. Step-by-step playbook for a specific operational scenario.
  • Operation Triangulation — Four-zero-day iOS exploit chain disclosed by Kaspersky in June 2023, targeting its own Moscow employees via invisible iMessage.
  • Oxygen Forensic — US (formerly Russian) mobile and cloud-forensics vendor based in Alexandria, Virginia, known for cloud-token extraction beyond device imaging.

P

  • Passkey — Device-bound cryptographic credential replacing passwords. Resistant to phishing and real-time vishing because the proof is bound to the legitimate origin. Wrong site = no authentication, regardless of what the user does.
  • Pegasus — State-grade spyware that compromises a device without the user clicking anything.
  • Pen register — Surveillance order that captures dialing, routing, addressing and signaling without recording content.
  • PERSEC — Personal Security. Protecting personal information from adversaries who would exploit it.
  • PGP — Public-key email encryption standard. Both parties must manage keys correctly. ProtonMail provides equivalent protection without key management overhead for most users.
  • Phishing — Social engineering attack impersonating a trusted entity to steal credentials or install malware. Spear phishing is targeted and uses personal reconnaissance. A password manager’s autofill will not work on spoofed domains.
  • Physical extraction (vs logical) — Forensic acquisition that pulls a bit-for-bit copy of device storage, including deleted files and slack space.
  • Pseudonym — Identity not linked to your legal name. Not anonymity. Fails silently through reused infrastructure.
  • Phishing kit — Off-the-shelf bundle of templates, infrastructure, and credential-relay code that lets a low-skill operator clone Microsoft 365, Google, Okta, and bank logins.
  • Plaid — Financial data aggregator that connects most US fintech apps to bank accounts.
  • Passphrase — A multi-word secret long enough that brute force becomes impractical regardless of attacker resources.
  • Plausible deniability — Property of an OPSEC posture where the operator can credibly claim not to be doing what they are doing, even if pressured.
  • Privacy Coin — Cryptocurrency where some part of the transaction graph is unobservable: amounts, addresses, or both.
  • Palantir Gotham — US data-aggregation platform by Peter Thiel and Alex Karp, deployed at ICE, CIA, FBI, IDF and the UK NHS Federated Data Platform.
  • Paragon Graphite — Israeli mercenary spyware founded by Ehud Barak and Ehud Schneorson, central to the Italian Spyrtacus scandal of March 2026.
  • PimEyes — Public facial-recognition search engine (29 EUR/month) operated from Tbilisi, indexing 5 billion web images including dating-site archives.
  • Predator — Intellexa/Cytrox mercenary spyware, Pegasus-class, sanctioned by OFAC in March 2024 then partially de-listed in December 2025.

Q

  • Qubes OS — Security-focused OS that runs every workload in an isolated VM on the Xen hypervisor: browser, email, banking, all compartmented.
  • QuaDream / Reign — Israeli NSO offshoot, defunct since April 2023, behind the ENDOFDAYS zero-click iOS Calendar exploit documented by Citizen Lab.

R

  • Right to Erasure — Legal right to have personal data deleted. Enforceable but not permanent against public records.
  • Ring (Amazon doorbell network) — Amazon home camera platform integrated with police via Ring\u2019s portal.
  • Recovery code — Single-use string generated when 2FA is enabled, used to regain access if the second factor is lost.
  • Recovery email — Backup address used to reset a primary account.
  • Red notice (Interpol) — Interpol request for one country to detain a person on another country’s behalf pending extradition.
  • Remote wipe — Remote command that erases device data, usually via MDM, Find My, or Google Find My Device.
  • Rayzone Piranha — Israeli tactical IMSI catcher + Wi-Fi interceptor sold to Gulf and South-East Asian services for short-range targeted surveillance.

S

  • Schedule 7 — UK law allowing border officers to detain and search anyone for up to 9 hours without suspicion. Refusal to provide device passwords is a criminal offense. Has been used against journalists.
  • Section 702 — FISA provision authorizing mass collection of foreign communications passing through US infrastructure.
  • Secure Enclave — Dedicated Apple chip holding cryptographic keys isolated from the main processor. Enforces passcode rate-limiting.
  • Session — Encrypted messaging app requiring no phone number or email. Decentralized routing. Relevant when phone number linkage to Signal is disqualifying.
  • Shadowsocks — Encrypted proxy protocol designed to evade deep-packet inspection in censored networks.
  • Signal — Open-source encrypted messaging. Minimal metadata. Confirmed secure under legal subpoena.
  • SIM Swapping — Hijacking your phone number to intercept your SMS-based 2FA codes.
  • Social Engineering — Manipulating people to bypass technical security. The attacker calls, posing as IT or a vendor, and pressures the target into providing credentials or approving an MFA push. The system never sees malicious code.
  • Split tunneling — VPN feature that routes some traffic through the tunnel and some outside it, by app or by destination.
  • Spoliation — Destroying, altering, or failing to preserve evidence relevant to a legal proceeding. Triggers adverse inference instructions and sanctions. The duty to preserve attaches before you file.
  • Spyware — Software that monitors your device without consent. Operates above the VPN layer.
  • SS7 — The telecom protocol with fundamental vulnerabilities allowing SMS interception at the network level.
  • SSO — Single Sign-On. One credential opens many systems. Convenient for users, central target for attackers. A compromised SSO session in ShinyHunters intrusions opened ADT and Medtronic infrastructure simultaneously.
  • Stealth Protocol — VPN obfuscation technique that disguises VPN traffic as standard HTTPS. Bypasses deep packet inspection in countries that block standard VPN protocols.
  • Steganography — Hiding information inside ordinary-looking files.
  • Stored Communications Act — US statute governing law enforcement access to stored electronic communications.
  • Subpoena — Legal order compelling production of data. Does not need probable cause. Primary route for law enforcement access.
  • Subpoena vs warrant — A subpoena reaches metadata and account records. A warrant reaches content. The dividing line decides what your provider hands over.
  • Smart speaker recordings — Audio captured by Alexa, Google Home, HomePod when the wake word fires or, sometimes, when it does not.
  • Stalkerware (consumer spyware) — Commercial spyware sold to a user’s relative or partner, marketed as parental control or employee monitoring.
  • Strava heatmap — Aggregated visualization of public Strava activity.
  • Spear phishing — Targeted phishing aimed at a specific person, drafted with information about their role, contacts, and current projects.
  • Sextortion — Extortion based on real or fabricated sexual material.
  • Spokeo — People-search broker that aggregates public records, social media, and licensed data into a name-searchable profile.
  • Sock puppet — Fictitious online persona maintained for research, OSINT, undercover work, or evading bans.
  • Secondary screening — Extended border inspection in a separate area, by a different officer, with more time and fewer constraints.
  • Satellite Phone — Phone that connects via satellite constellation rather than cellular. Works where there is no terrestrial network.
  • Starlink (Field Operations) — SpaceX LEO broadband. Standard tool for NGO and journalism field operations from 2023 on. Banned or restricted in some jurisdictions.
  • Stablecoin (Operational Use) — Cryptocurrency pegged to a fiat currency. Used by NGOs to move value into restricted regions where wire transfers are blocked.
  • Sandvine PacketLogic — Deep packet inspection appliance (Francisco Partners-owned) used by ISPs in Turkey, Egypt and Syria to inject spyware mid-traffic, on the US Entity List since 2024.
  • ShotSpotter / SoundThinking — US gunshot-detection acoustic sensor network deployed in ~170 cities, dropped by Chicago in September 2024 after ProPublica and MacArthur Justice investigations.

T

  • Tails OS — Live Linux distribution that boots from USB, routes everything over Tor, and forgets state at shutdown.
  • Technical Capability Notice — UK government order under the IPA compelling a service provider to acquire a specific surveillance capability.
  • Telegram — Messaging app. Default chats are NOT end-to-end encrypted. Secret Chats are opt-in and do not support groups.
  • Threat Actor — Specific documented profile describing how a category of adversary operates. Sharpens threat modelling.
  • Threat Model — The process of identifying what you protect, from whom, and what you are willing to do about it.
  • Tor — Anonymity network routing traffic through multiple relays. Stronger than a VPN, slower.
  • Tor Browser — Hardened Firefox-based browser routed through the Tor network by default.
  • TOTP — Time-based One-Time Password. The 6-digit codes generated by authenticator apps. Stops automated attacks. Does not stop real-time vishing where the user is walked through authentication on a call.
  • Tower dump — Production order against a cell carrier for every phone connected to a specific tower in a specific window.
  • Traffic Analysis — Examining communication patterns — not content, but metadata: who communicates with whom, when, how often, from where. Effective even against encrypted communications.
  • Transparency report — Periodic disclosure by a provider listing law enforcement requests received, broken down by type and country.
  • Two-Factor Authentication (2FA) — A second proof of identity beyond your password.
  • Tradecraft — The set of practical techniques an operator uses to do their job under surveillance: dead drops, surveillance detection routes, cover stories, alias maintenance, signal practice.
  • Tornado Cash — Smart-contract mixing service for Ethereum. Sanctioned by OFAC in 2022, partially un-sanctioned in 2025.
  • TalkingParents — Co-parenting platform competitor to OFW. Records calls, archives messages, certifies records for court.
  • Tool Verdict (Format) — Predaxia’s review format. One tool, one conclusion, no equivocation. Tested under operational conditions.
  • Toka — Israeli IoT-exploitation platform co-founded by Ehud Barak, targeting connected cameras, cars and smart-home devices around a target.

U

  • uBlock Origin — Open-source content blocker. Single most effective privacy tool for an average user.
  • UFED — Universal Forensic Extraction Device by Cellebrite. Used in border searches. Most effective against powered-on unlocked devices. A strong alphanumeric passphrase and powered-off device significantly limits its access.

V

  • Vishing — Voice phishing. Real-time social engineering by phone, often impersonating IT or a vendor. Used in ShinyHunters intrusions to defeat MFA push and SMS codes. FIDO2 keys and device-bound passkeys remain resistant.
  • Voiceprint — Biometric identifier built from voice samples, captured by smart speakers, call centers, IVR systems.
  • VPN — Virtual Private Network. Encrypts your traffic, hides your IP. Does not make you anonymous.
  • Voyager Labs — Israeli social-media surveillance vendor exposed in 2023 for supplying the LAPD with fake-persona and predictive-policing tools.

W

  • Warrant canary — Periodic public statement by a provider declaring it has not received any classified data demands.
  • WebRTC leak — Browser API that can expose your real local and public IP even with a VPN active.
  • WhatsApp — Meta-owned messaging app. Encrypted in transit but extensive metadata collected. Not appropriate for source communication or sensitive legal contexts.
  • WHOIS — Public database of domain registrations. Reveals registrant identity unless privacy protection is active.
  • Whonix — Two-VM Linux setup that forces all traffic through Tor by routing one workstation VM through a separate gateway VM.
  • Wire — Encrypted messaging app. Unlike Signal, requires no phone number — email or username only. Swiss-based. Credible alternative when phone number linkage is unacceptable.
  • WireGuard — Modern VPN protocol. Faster and simpler than OpenVPN. Used by Mullvad and ProtonVPN. The protocol is one factor — the provider’s no-logs policy and jurisdiction are equally important.
  • Whitepages — One of the oldest people-search services, owns whitepages.

Y

  • YubiKey — Hardware security key using FIDO2/WebAuthn. Cannot be phished: response is domain-bound, so spoofed login pages get nothing. Strongest available 2FA for most users.

Z

  • Zero-Day — A software vulnerability unknown to the vendor, with no patch available.
  • Zero-click exploit — Vulnerability that compromises a device with no user interaction, no link clicked, no attachment opened.