Your smart TV takes a screenshot of your entire screen every 500 milliseconds. that's twice per second while you watch. The technology is called ACR. Automatic Content Recognition. It doesn't just track Netflix. it tracks your cable box. your gaming console. your laptop plugged in via HDMI. everything that appears on that screen. and it infers things from what you watch: your race. your religion. your politics. Those aren't my words, that's from the Texas Attorney General's lawsuit against Samsung, LG, Sony, Hisense, and TCL filed last year. Who buys this data: advertisers. data brokers. content networks. and political campaigns that use your viewing habits to target voters. Your TV is not just showing you content. It is building a profile on you and selling it. Texas sued five manufacturers. Samsung settled in February. The other four are still collecting. If you're not in Texas, you're on your own. Vizio got fined $2.2 million by the FTC in 2017 for doing this without consent. They paid the fine. They kept doing it, they just ask now. The opt-out is buried in your settings under names like "Viewing Information Services", "Live Plus", or "Interactivity Services."

Commercial VPNs route your traffic through shared IP addresses. thousands of users on the same IP. those IPs are public, known, and listed. The government can block them the same way Netflix blocks them, one IP list. done. A self-hosted VPN is different. Your server. your IP. nobody else's traffic on it. there is no list to add it to. the government would have to identify and block your specific home address or VPS individually. that is not scalable. that is not what mass VPN bans do. here's how to build one in under 10 minutes. you need: — a $5/month VPS (DigitalOcean, Hetzner, Vultr — any will work) — Docker installed — 10 minutes step 1: get a VPS. pick any provider. Ubuntu 22.04. the cheapest plan works. step 2: install Docker on it. curl -fsSL https://get[.]docker[.]com | sh step 3: run WG-Easy. one command: docker run -d \ --name wg-easy \ -e WG_HOST=YOUR_SERVER_IP \ -e PASSWORD=your_password \ -p 51820:51820/udp \ -p 51821:51821/tcp \ --cap-add=NET_ADMIN \ --cap-add=SYS_MODULE \ --sysctl="net.ipv4.ip_forward=1" \ --restart unless-stopped \ ghcr[.]io/wg-easy/wg-easy step 4: open your browser. go to YOUR_SERVER_IP:51821. log in. click "new client." download the config. import it into the WireGuard app on your phone or laptop. that's it. you now have a private VPN that: — nobody else uses — isn't on any blocklist — costs $5 a month — logs nothing unless you tell it to — uses modern cryptography the NSA currently cannot break WireGuard is built into the Linux kernel. 4,000 lines of code. fully audited. faster than OpenVPN. no configuration mistakes that accidentally weaken your encryption. They cannot ban your server.