sovereign Shadow (@securitybrahh) header
sovereign Shadow (@securitybrahh) profile picture

Teaching ppl how to stay anon since 1984. Privacy Plumber. Constructing Secure Digital Empires. DM's open. Not Security Advice. Breaker of Chains. Ecopolitica.

Articles 👉
Joined August 2023
Photo by sovereign Shadow (@securitybrahh)Photo by sovereign Shadow (@securitybrahh)Photo by sovereign Shadow (@securitybrahh)Photo by sovereign Shadow (@securitybrahh)Photo by sovereign Shadow (@securitybrahh)Photo by sovereign Shadow (@securitybrahh)Photo by sovereign Shadow (@securitybrahh)Photo by sovereign Shadow (@securitybrahh)Photo by sovereign Shadow (@securitybrahh)Photo by sovereign Shadow (@securitybrahh)
store.empiresec.co (DM to buy with crypto) My Email list is a sanctuary, Real time is my telegram group. jArb guide is my flagship.
2
14
7,630
JUST IN: @omergoldz finds a collision for the 38-step SHA-256 algorithm While not the full SHA256 used in bitcoin, which uses a 64-step hashing algorithm, the collision demonstrates the continued efforts of researchers to break SHA256
hey guys, so this was a little harder but these two messages collide for 38-step SHA-256: m1 = 33ee28ac5f8ef994c787777c079d17e11198d1beb527c8554bfeff014ab531951cf31bd2bbfc637e122da4f948e6e447d5a6b8b6ea9e7af5aac1aeabeeaceb0dbd07668b833fe88e689ffe8da52259da14b9855eee5138ba88355f4806d5cf5d161c50014c6b7d7e0e7eb888747559fc990a7af69dd8e59f57d7f6a3c0fbd03b m2 = 33ee28ac5f8ef994c787777c079d17e11198d1beb527c8554bfeff014ab531951cf31bd2bbfc637e122da4f948e6e447d5a6b8b6ea9e7af5aac1aeabeeaceb0dbd07668b833fe88e689ffe8da52259da14b9855eee5138ba88355f4838b3d19d161c4ffd4c6b7d7e0e813888747559fc990a7af69dd8e59f57d7f6a3c0fbd03f
1
5
40
4,156
sovereign Shadow retweeted
There's an ongoing state sponsored disinformation campaign against GrapheneOS in multiple western European countries. It's being wrongly conflated with insecure forks marketed to criminals. ANOM was one and turned out to be directly managed by the FBI. nitter.gq/GrapheneOS/status/2116…
There's a major state sponsored misinformation and smear campaign towards GrapheneOS in the Netherlands and Germany. The misinformation campaign includes unsubstantiated security claims not holding up to scrutiny to scare people away from it. They're also heavily misrepresenting who uses it overall. These smear campaigns conflate GrapheneOS with forks and modifications of it sold by shady companies. Those usually include a device management app to remotely manage the devices of their customers as if they're employees. These are largely not GrapheneOS devices or have preinstalled malware apps. A common tactic being used in these smear campaigns is to make unsubstantiated and outright false claims about the capabilities of forensic data extraction tools. They misrepresent how they get into devices. They want to scare people into using far less secure devices which are easier to exploit. France, Germany, Spain and the Netherlands are becoming increasingly authoritarian surveillance states with an ongoing crackdown against privacy. It's happening throughout the whole EU and it's likely both secure devices and end-to-end encryption without backdoors are going to end up outlawed. There are a bunch of companies based in the EU selling phones with drastically worse privacy and security than an iPhone including Jolla, Volla, Murena and iodé. These products are effectively backdoored by not providing standard privacy and security patches/protections while misleading users. France and other EU countries are actively cracking down on legitimate privacy and security projects while supporting unsafe products within their control. These products make it far easier to remotely exploit devices and also to bypass encryption to extract data. They're phony privacy products. Each of the companies we've listed have participated in the misinformation and smear campaigns against GrapheneOS. Jolla spent years working closely with Putin's regime. Volla, Murena and iodé are building an EU Play Integrity API. None provides the crucial standard privacy patches/protections. Murena is directly assisting with state anti-privacy campaigns smearing highly private and secure devices as mainly benefiting criminals. They've repeatedly falsely claimed GrapheneOS is mainly used by criminals. Here are 2 of many examples: nitter.gq/GrapheneOS/status/2040… clubic.com/actualite-604786-… GrapheneOS, end-to-end encrypted messaging apps, Monero and other projects are being targeted with state and corporate propaganda and anti-privacy laws. Meanwhile, the same governments heavily fund and support phony privacy projects clearly downgrading privacy and security compared to an iPhone. GrapheneOS is only an initial target for these state actors and their sycophants in corporate news organizations. Apple heavily works on protecting users against exploits too. It would be much harder to convince the public that an iPhone is for criminals so they're starting with open source.
2
22
152
4,497
Hey @grok, what is the most unsettling thing proton ACTUALLY knows about the average person?
1
573
Vote with your money.
monero:native
1
146
Don't put it in a bank. Be your own bank. Own keys.
1/ If you plan on putting "big" amounts of money in the banks outside the USA & outside your country, I advise you to avoid the privacy coins like @monero @Zcash etc. because they will not pass the KYC & Source of Funds (SOF) when u convert it to fiat & try to put it in the bank.
1
229
Will secure blue save us all?
ubuntu is not a serious distro, still no patch for this
1
156
Host your own @mailcow_email Or make a PR on @fwdemail for subject, sender, timestamps encryption (I tried) Only advantage of using tuta is subject encryption.
1
242
Cloudflare can't save us.
POV you booted up any website in 2026
1
160
sovereign Shadow retweeted
Governments are starting to come after your GrapheneOS phones. This is a sign the software works well. Be aware. nitter.gq/GrapheneOS/status/2116…
Replying to @GrapheneOS
See ad.nl/binnenland/paniek-in-o… for an example of what's ongoing in the Netherlands to scare people away from using open source privacy projects. It's also ongoing in Germany at the same time with similar talking points. This largely started in Spain and has been worst in France.
23
412
5
2,060
50,304
jArb saves us all.
You want your tax residency to be a country where you hold no assets. That way the tax authorities have nothing to seize.
164
Can maths save us all @gork @grok
In case you missed it, BIP139 can be encrypted following BIP138, so you'll soon be able to backup your entire wallet metadata, encrypted, and in a standard way across wallets.
1
1
235
sovereign Shadow retweeted
GrapheneOS has an LTE-only toggle, and it is a security setting, not a battery one. It switches off the 2G and 3G legacy stacks and the newer 5G code, which is a large amount of attack surface in the part of the phone you cannot otherwise audit.
7
30
3
587
15,459
sovereign Shadow retweeted
160
1,636
96
5,514
101,210
sovereign Shadow retweeted
New in macOS Golden Gate 27.3 Beta 1 MacBook Pro PROLED XDR Display System Settings touch gesture previews video.
1
2
77
4,615
Only @JMP_chat saves us all
We teamed up with @nym to answer one question: What does your phone leak when you travel? 1. At the SIM shop: your passport, photographed, stored, sometimes sold. that's the KYC layer.
160
sovereign Shadow retweeted
Bitcoin Core Sybil Attack Confirmed
16
72
5
266
10,591
sovereign Shadow retweeted
Lockdown Mode helps, until it doesn't.
255
821
238
9,520
1,504,336
Heroes of the first cycle are villains of the next.
Realized NVK has yet again inexplicably blocked me, despite being the first to provide a detailed report of his product’s failure to secure my family’s Bitcoin. Coinkite is not a serious business.
127
sovereign Shadow retweeted
Full disclosure: A vulnerability in nutshell 0.21.0 allows attackers to steal funds from cashu mints using the spark backend
4
7
58
2,619