Rule by list

On 3 March 2001, around ten people in a Milan hacklab assembled a server from hardware a bank was getting rid of and scavenged parts. The least experienced person present was put at the keyboard so that everyone would understand what was being built. The machine was named Paranoia. On its second day, an inverted firewa…

August 28, 2026 · 15 min

When the browser looks back

LinkedIn loads JavaScript that probes for installed browser extensions — thousands of them, including competitors’ sales tools, grammar checkers, and religious or political plugins. LinkedIn acknowledges this, but frames it as anti-scraping and abuse prevention. The question is not whether extension detection happens. …

April 17, 2026 · 3 min
Granny Weatherwax, clad in a long, woven black dress and pointy hat, grasping the Sceptre of Omnicide

Governmental backdoors: skeleton keys and fairy tales

The trouble with governments and cryptography is that they keep mistaking mathematics for magic. In Ankh-Morpork, this was the sort of thinking that once led the Wizards of Unseen University to try and regulate gravity, on the grounds that it was “inconvenient.” It ended, inevitably, in bruises. In our world, the same …

September 9, 2025 · 5 min

Weaponised data, ten years on: better, worse, and more dangerous than we imagined

Ten years ago, Nonprofit AF , in Weaponized data: How the obsession with data has been hurting marginalized communities, warned that nonprofits’ data obsession could dehumanise and harm marginalised communities, reducing lived experiences to reductive metrics, ignoring power dynamics, and prioritising funder dashboards…

July 29, 2025 · 9 min

Zero-knowledge proofs and the pub test

Zero-knowledge proofs are a rare and beautiful thing: deeply technical, yet profoundly human. They offer a way to engage with digital systems without handing over your soul. Like a well-trained butler, they keep your secrets while getting things done. In an age where over-sharing has become the default, they offer some…

July 15, 2025 · 4 min

GDPR, ICCPR, and the great consent charade

You’d think something called the General Data Protection Regulation might actually protect data. You’d be wrong. Along with its elder cousin, the ICCPR, GDPR was hailed as the Great Hope™, a beacon of digital dignity in a world run by surveillance capitalists. But instead of taming the beast, it handed it a clipboard a…

April 20, 2021 · 3 min

GDPR: The EU’s bureaucratic letter to privacy (that nobody reads)

The GDPR, Europe’s flagship privacy reform, drafted by people who appear to believe consent forms are the pinnacle of human interaction. Born from the 1995 Data Protection Directive (which was about as fit for the digital age as a fax machine), it was billed as a way to “strengthen privacy rights” and “boost Europe’s d…

April 14, 2018 · 3 min