censors don't block "vpns". they block things that look like vpns. how it actually works: - wireguard and openvpn have fingerprints. dpi spots the handshake in milliseconds - a server that suddenly gets thousands of users from one country gets its ip flagged - china's firewall actively probes suspicious servers, pretending to be a client, to see what answers - even the shape of your traffic can give you away: one long encrypted stream to one ip, nothing else around it the game was never hiding your data. it's hiding that you're hiding. that's why the setups that still work look exactly like a normal https visit to a real website

bonus: if your vpn works fine on home wifi but dies on mobile data, it's usually not the server. mobile carriers often run stricter filtering than home isps. same vpn, different wall

the 5 minute opsec checklist after this week: - log out of every session you don't recognize - turn on 2fa that isn't sms - update your os and browser (the CA thing is real) - kill the password you made in 2014 - pay for privacy tools with something that doesn't have your name on it that's it. go

today in internet security: - a certificate authority's private key was 4 - php dropped two 9.2 CVEs - x says you're logged in 437 times - linux stopped asking if AI wrote your code and it's only wednesday

most people have no idea how their vpn actually gets blocked. quick version: - wireguard and openvpn have a recognizable handshake. DPI spots it in milliseconds - the server ip gets flagged once enough people connect to it - some setups get caught on traffic patterns alone, even fully encrypted what survives: traffic that looks exactly like normal https to a real website. that's the whole idea behind vless + reality (and why we built @SwiftTun on it) if your vpn dies the one day you actually need it, this is why

millions of europeans learned what "not your keys, not your coins" means today without ever buying a coin xitter.cf/Revolut/status/2112452…

one google building in london loses power and half of uk banking goes down meanwhile a raspberry pi in some guy's closet has been running a bitcoin node since 2019

checking a btc address before sending: 1st time: looks right 2nd time: looks right 3rd time: are these even letters 4th time: ok sending $10 test first after today's $73m story i'm adding a 5th

revolut down lloyds down hsbc down bitcoin: 🗿

Added Monero today. If you're building a privacy product and only take cards, you're collecting the one thing your users came to you to avoid. xitter.cf/SwiftTun/status/211244…

Underrated crypto opsec: your biggest leak isn't your seed phrase. It's the 15 KYC'd apps that know your name, your address, and that you hold crypto. One breach turns that into a target list.

Most VPNs work great right up until the day you actually need one. Protests, elections, "network maintenance" — that's when WireGuard and OpenVPN get fingerprinted and cut. So I built @SwiftTun on VLESS + Reality. To a censor it looks like a normal HTTPS visit. Crypto only. No card, no name. 5 GB/month free.

The fact that calls on @Telegram — blocked in Russia — work better over VPN than regular cellular service is genuinely insane. Personal recommendation: @swifttun VPN and @Telegram