Building @SwiftTun — a no-KYC VPN built to survive censorship. Writing about privacy, crypto and how the internet gets blocked. Sharing our real numbers.
Joined May 2021
- Tweets437
- Following72
- Followers78
- Likes719
Pinned Tweet
what your internet provider actually sees, depending on how you connect.
no vpn: every domain you visit
wireguard: no domains, but it knows you're on a vpn. the handshake gives it away in milliseconds
vless + reality: looks like normal https to a normal site
none of these hide that you're online. only one hides that you're hiding.
what are you using right now?
4 ways people got hacked this past week without clicking anything sketchy:
1. a game launcher update (nikke)
2. an ide extension auto-update (claude code on cursor's marketplace)
3. a speed-test script on a site they already used (polymarket)
4. a download page one letter off from the real one (grapheneos)
nobody trusted a stranger. they trusted something that got swapped
your vpn hides your ip. sites can still tell you're on one, and sometimes who you are.
i run a vpn and these are the 6 leaks people ask me about most, with a 30 second check for each ↓
6. your login
signed into google or instagram? the vpn moved your ip, your account still knows exactly who you are.
a vpn hides your traffic from your isp. it doesn't hide you from the sites you log into. use a separate browser or profile for the private stuff.
$6.3b, and per binance's ceo it started with one engineer's laptop.
the vault wasn't the weak point. a person was.
if you code with ai agents, the "do you trust this folder?" prompt is now your firewall. open repos you didn't write in restricted mode or a throwaway container, and never let an agent auto-approve commands in someone else's code
4 signs your vpn is about to get blocked, before it actually is:
1. works on wifi, dies on mobile data
2. same slowdown every evening
3. app says connected, nothing loads
4. only the big sites break
two of these at once usually means your protocol got fingerprinted. switch before the full block hits.
which one are you seeing?
all | privacy · crypto · vpn retweeted
A free and open-source LocalSend and WeTransfer alternative for sending large files directly between devices with end-to-end encrypted P2P transfers. Cross-platform, with support for Windows, Mac, Linux, and mobile devices. No accounts, no servers, and no size limits
ALT AlterSend: free, open-source app to send files directly between devices over the internet, with no cloud, servers, or size limits. Tags: Large File Transfer Service, Windows, Mac, Linux, Android, iPhone, Russia. Alternative to LocalSend and WeTransfer. Dark banner reads "Send files. No cloud." beside a dark-mode app window showing a Send/Receive tab and a drag-and-drop file area.
all | privacy · crypto · vpn retweeted
‼️ Anthropic and Google researchers found a flaw that lets one crafted packet hijack a server during network boot, before Secure Boot checks the OS.
Almost all servers on earth are affected.
CVE-2026-97631 sits in TianoCore EDK II, code in the UEFI firmware of most servers.
Readers added context they thought people might want to know
The vulnerability is limited to servers actively PXE network-booting with vulnerable EDK II firmware; most servers boot from local disks and are unaffected in normal use, with Intel noting limited impact on supported products.
github.com/tianocore/edk2…
arstechnica.com/security/2026/…
vless + reality: the client opens what looks like a normal tls 1.3 connection to a real, popular site. if a censor probes the server, it gets that real site back. to block it they'd have to block normal https too, and that breaks banks, shops and government sites
all | privacy · crypto · vpn retweeted
what your internet provider actually sees, depending on how you connect.
no vpn: every domain you visit
wireguard: no domains, but it knows you're on a vpn. the handshake gives it away in milliseconds
vless + reality: looks like normal https to a normal site
none of these hide that you're online. only one hides that you're hiding.
what are you using right now?