Part 7 of our Snowden documents deep-dive: The largest redaction failure in any Snowden publication: 14 NSA personnel names, targeting data, and a previously unseen NSA wiki page, all extractable from a 2014 Der Spiegel PDF

Part 6 of our Snowden documents deep-dive: NSA router configurations from UN field mission infrastructure in Iraq and Kuwait, sitting in an exploitation database, published and unexamined for over a decade.

A 2010 GCHQ submission to a 3GPP standards committee, arguing against a strong encryption standard on mass-surveillance scaling grounds while promoting a surveillance-friendly alternative, is worth keeping in mind during the current debate around non-hybrid PQ-only in TLS.

Part 5 of our Snowden documents deep-dive: PDF forensics, metadata leaks, redaction failures.

Part 4 of our Snowden documents deep-dive: Revealing hidden information in Snowden documents about domestic U.S. intelligence facilities under secret cover names.

Part 3 of our Snowden documents deep-dive: Systematic analysis reveals compromised networks that were unreported for over a decade: TeliaSonera, SingTel, Telecom Italia Sparkle, and 15+ others.

Part 2 of our Snowden documents deep-dive: A censored NSA slide pieced together from b-roll and a State Department letter's full, aggressive text, all from a single TV show.

Part 1 of our Snowden documents deep-dive: An NSA hack on Chinese defense firm Norinco, unreported surveillance codenames, and more from a single forgotten file.

The official Monero website, getmonero.org, will soon offer WebSeed-enabled torrents for releases, improving download resilience.

Our Firefox extension which blocks websites using Cloudflare based on HTTP headers.

Cloudflare's centralized architecture fundamentally compromises end-to-end encryption by acting as a MITM, creating a single, irresistible vulnerability that makes it a highly attractive target for mass dragnet surveillance by intelligence agencies.

Trusted Execution Environments (TEEs) are marketed as secure solutions for data protection, but in reality, they are opaque, vulnerable systems that centralize trust in unaccountable entities and should not be relied upon for real security.

Ultra-minimalist PoW CAPTCHA for the web. The client is a CLI tool that lets you solve CAPTCHAs in your terminal, so you can browse with anything, from Lynx to Tor Browser, and still complete challenges.