Skip to content

2025

The Dangers of End-to-End Encryption

An image showing a burning car

In the digital age, nothing is more important than convenience and easy access to data. Unfortunately, there has been an alarming trend among technologists to implement End-to-End Encryption (E2EE) in their applications, to the detriment of all the important work being done by countless organizations, including the best and brightest intelligence agencies and big tech companies.

Interview with Micah Lee: Cyd, Lockdown Systems, OnionShare, and more

Photo of Micah Lee over a yellow and purple graphic background, and with the name Micah Lee written on the right.

If you don't know who Micah Lee is yet, here's why you should: Micah is an information security engineer, a software engineer, a journalist, and an author who has built an impressive career developing software for the public good, and working with some of the most respected digital rights organizations in the United States.

Privacy Means Safety

Photo of a padlock with "SOS" written on it and a drawn heart instead of an "O" letter. It is locked on a metal fence.

Privacy is a human right that should be granted to everyone, no matter the reason. That being said, it's also important to remember that for millions of people around the world, data privacy is crucial for physical safety. For people in extreme situations, privacy can literally mean life or death.

KeePassXC + YubiKey: How to set up a local-only password manager

Illustration showing a laptop computer with the KeePassXC logo on it. On the right is a green plus sign and a photo of a YubiKey.

If you are looking for a good remote password manager you can use from anywhere, there are plenty of excellent options to choose from. However, if you prefer to only store your passwords locally, KeePassXC is what you need. In this tutorial, we will set up KeePassXC to work with YubiKey as an additional factor to secure your local-only password database.

Privacy is Also Protecting the Data of Others

Illustration from a photo of two children standing in a grass field. The taller child holds a yellow umbrella protecting the smaller child.

In privacy, we talk a lot about how to protect our own data, but what about our responsibility to protect the data of others?

If you care about privacy rights, you must also care for the data of the people around you. To make privacy work, we need to develop a culture that normalizes caring for everyone's data, not just our own. Privacy cannot solely be a personal responsibility, data privacy is team work.

Toward a Passwordless Future

Article cover showing a rusted, broken lock on a door latch

Passwords are annoying, vulnerable to attack, and prone to human error. The multitude of issues with passwords has cost millions of dollars and forced terrible band-aid solutions in how we handle signing up for, logging in to, and securing online accounts. I'd like to break down some of these design paradigms that have entrenched themselves in our lives and how passkeys can lead to more secure and private online accounts.

The UK Government Forced Apple to Remove Advanced Data Protection: What Does This Mean for You?

Photo of a person reading a book. The book is George Orwell's 1984. In the upper left corner is an Apple logo with two bites taken off.

On February 7th this year, Joseph Menn reported from the Washington Post that officials in the United Kingdom had contacted Apple to demand the company allows them to access data from any iCloud user worldwide. This included users who had activated Apple's Advanced Data Protection, effectively requesting Apple break its strong end-to-end encrypted feature.

No, Privacy is Not Dead: Beware the All-or-Nothing Mindset

Photo of a protest with someone holding a sign saying Fight Today For a Better Tomorrow.

In my work as a privacy advocate, I regularly encounter two types of discourse that I find very damaging to privacy as a whole. The first one is the idea that privacy is dead, implying it's not worth putting any effort to protect personal data anymore. This is the abdication mindset. This attitude is the one that scares me the most because without giving it a fight then of course the battle is lost in advance. Like a self-fulfilling prophecy, privacy is dead if you let it die.