Schmidt

A whole class of Monero chain-analysis targets decoy selection, guessing which ring member is the real spend

FCMP++ removes decoys entirely

Nothing to guess when the anonymity set is the whole chain

Open source doesn’t guarantee privacy

But closed source guarantees you can’t verify

Your ISP sells your browsing data in many countries, legally

A no-log VPN is not optional, it’s baseline

According to my girlfriend, I make two mistakes: first, I never really listen and second... something else.

Three questions for any privacy tool

Who holds the data? Who holds the keys? What happens when they’re compelled?

Tails 7.16 is out

https://tails.net/news/version_7.16/

Binance $6.3B hack

XMR/BTC last 12 months

0.0036 → 0.0075 ₿ (+109%)

$XMR $BTC

Simulations show rucknium's and ofrnxmr's patches block the Nyx eclipse attack. Hashrate-weighted nodes were proposed, but most nodes don't mine.

FCMP code is ready for review, audit quotes are due next week, and devs hope to have all the code done by Q1. A BP++ idea could halve proof size, maybe in a later fork.

Carrot (Monero's new address upgrade) is ready for review! Payment proofs still work, except internal self-sends. Workaround: send to yourself externally.

Why is Monero’s ring only 16? With ring signatures a bigger anonymity set means a proportionally bigger transaction, so the set stays tiny

FCMP++ grows only logarithmically with the set, so the whole chain can be your anonymity set without a matching jump in size

https://www.independent.co.uk/news/world/europe/christine-lagarde-convicted-imf-head-found-guilty-of-negligence-in-fraud-trial-a7484586.html

Now on Obtainium Soon on F-Droid 👇🏻

Every cash advocate should run their own #Monero node

It’s criminal to force CEXs to delist Monero

still

GrapheneOS is coming to the Motorola Signature 27

Great dive into the #Monero ecosystem 👇🏻

https://monero.eco

The network effect works against privacy

But one person switching is how every tipping point starts

“...Monero, where no one sees how much you send to whom.”

Tom-Oliver Regenauer

https://www.regenauer.press/

Password reuse is the most exploited weakness that isn’t technically a vulnerability

One breach exposes every account with the same password

Bitwarden is open source and free

GM

Email is fundamentally not private

Treat it like a postcard

Nothing sensitive. Ever.

5 principles once associated with Swiss numbered bank accounts:

Financial privacy Confidentiality Discretion Financial stability Asset security

Sound familiar?

https://www.getmonero.org/

Monero Alltime Hashrate

https://bitinfocharts.com/comparison/monero-hashrate.html#alltime

🙏🏻 Thanks to all for the Monero tips via

jpk68 recently put forward a proposal to continue to work full-time on Monero development

https://ccs.getmonero.org/proposals/jpk68-full-time-1.html

Most people face ad networks and their ISP

Very few face state-level adversaries

Know which threat you’re dealing with - it changes every tool choice

My Privacy Stack 👇🏻

https://privacystack.rocks/#v1&mobile-os=grapheneos&messenger=simplex,signal,session,threema&browser=tor-browser,brave,vanadium,ungoogled-chromium&search=kagi,brave-search&network=mullvad,ivpn,nymvpn,invizible&passwords=bitwarden,vaultwarden&email=selfhost-mail,neromail,tuta&wallet=monero-com,monerujo,monero-gui,feather&notes=joplin,fromscratch&nostr=amethyst&editor=vscodium&scanner=oss-document-scanner&desktop-os=ubuntu-debloated&2fa=aegis&files=syncthing,nextcloud&sharing=localsend&maps=comaps&appstore=fdroid,aurora,obtainium&keyboard=futo-keyboard&blocking=ublock&media=newpipe,grayjay&mailclient=fairemail

Five Eyes countries share intelligence with each other

A UK warrant can affect US-held data

Jurisdiction is not the protection people think it is

Surveillance is not safety

It’s control with better PR

Every company that doesn’t sell your data still monetizes it

Through targeting, through inference, through partners

Unsubscribe links often confirm your email address is active

Filter and delete instead

Or use an alias you can kill

A guide for self-hosting a (private) Nitter instance

https://codeberg.org/shitter/shitter/wiki/Self-hosting+a+Nitter+instance.-

Browser fingerprinting tracks you even without cookies

Screen size, fonts, GPU, timezone combined they’re unique to you

End-to-end encryption means the platform can’t read your messages

It doesn’t mean the recipient can’t screenshot them

Trust is still required

Monero txs today:

32,264

Your email address is the spine of your digital identity

Every account is linked to it

Protect it accordingly

https://pmnr.xmr.rocks

GrapheneOS improves privacy and security

patches vulnerabilities removes compromised certificates fixes Google Play bugs strengthens app isolation

https://grapheneos.org/releases#2026102100

XMR/BTC over 12 months

0.0036 → 0.0079 ₿ (+120%)

Monero is testing a peer-list upgrade to resist network attacks. Early simulations look promising, with acceptable performance costs, but more testing is needed.

Monero’s SoP mining rules need deeper attack testing before approval. Simulations help, but researchers want advanced AI and mathematical models to uncover hidden weaknesses.

Monero payment channels: a PR proposes a 3-day lock time, giving users until Monday to react if a channel is force-closed on Friday. Review pending.

Monero progress: mx25519 merged, FCMP++ integration reviews open and security audits underway.

Multisig and Carrot proofs continue; self-send receipt design needs PQ-safety review.

Sharing Monero tx keys can reveal the sender and change amount in 2-output transactions. Wallets should use proper proofs instead. Carrot’s impact is limited to legacy wallets.

You don’t need to be perfect

You need to be harder to track than average

That alone moves you out of most mass surveillance nets

Update to PHP 8.2.35/8.3.36/8.4.27/8.5.12

No patch yet? Mitigate + restrict access Only EOL PHP must go offline

#PHP

Faraday bags block all radio signals

No GPS, no cellular, no WiFi, no Bluetooth

Use one when you need true isolation

Your ISP is not your friend

The parasitic elite is preparing a theft off nearly a third of every crypto-to-stablecoin swap in France. A legalized shakedown, dressed up as regulation.