Latest News

Meet TheToolsAura: A 100% Client-Side, Privacy-First Web Workstation

Hey Devs! 👋 We all use quick online tools for our daily tasks whether it's converting a file, compressing an image, merging PDFs, formatting JSON, or …

macOS Tahoe has built-in clipboard history — here's what it's still missing for developers (2026 update)

Updated July 2026, after macOS 26.1 expanded the retention options and WWDC 2026 showed where macOS 27 is headed. Apple shipped a meaningful addition …

Local-first RAG for privileged legal documents: why citations need verification

Lawyers want the same thing everyone else wants from AI: ask a question, get a useful answer, move faster. The difference is that legal documents ofte…

Audit an AI Coding CLI Before It Uploads Your Home Directory

Reports that a coding CLI transmitted unexpectedly broad local data are trending today. A social post is a lead, not a verdict, so the useful response…

LAPD lets contract with surveillance giant Flock expire, citing ‘serious concerns’ over civil liberties and privacy

The LAPD, one of Flock's biggest government customers, is ending its contract with the company citing civil liberties concerns.

Building an Offline AI Note-Taking App with WebGPU

For the last few months, I’ve been obsessed with a specific problem: the friction between privacy and utility in modern AI tools. Most "private" AI so…

A Voice AI Feature Needs a Permission-Loss Test Plan

A voice bot demo usually starts with permission already granted, a quiet room, a stable network, and the app in the foreground. Mobile users get phone…

How I Shipped 91+ Privacy-First Utilities with $0 Server Cost: The Architecture of OmniUtil.pro

Every time you want to format a piece of JSON, debug a JWT token, compress a PDF, or erase a photo's background, you make a compromise. You upload you…

How I Finally Stopped Switching Between Ten Different Apps

I've been keeping a journal for about fifteen years now, and the practice has evolved more than I expected. Early on, I tried the fancy apps with all …

Building KunciMasuk, a Privacy-First SSH Launcher

Hi Everyone. Approximately a month ago, I developed a Bash script to streamline server access for myself and my colleagues. The feedback was construct…

Stop logging PII: a configurable Node.js sanitizer logger

Originally published on my blog: https://blog.bajonczak.com/stop-logging-pii-a-configurable-node-js-sanitizer-logger/ Logging is one of those topics t…

How I made my Astro site secure by default (strict CSP, self-hosted fonts, zero trackers)

Most portfolio and blog templates quietly work against your visitors. They pull fonts from Google's CDN (leaking every visitor's IP to a third party),…

AI Surveillance and Social Progress

314 Lawmakers Voted Against EU Chat Control. It Passed Anyway. Here's What That Means for Your Messages.

On July 9, 2026, the European Parliament reauthorized a law that lets tech companies scan your private messages without a warrant. Here is the part th…

Verifiable Contribution Without Global Deanonymization

AI changes the cost structure of public work. Code, summaries, tests, listings, translations, and operational decisions are becoming easier to produce…

Bitwarden vs 1Password: Which Password Manager Should You Use?

A feature-by-feature comparison of two leading password managers — open source and free versus polished and premium — to help you pick the right one. …

How I built a Chrome extension that reads Terms of Service using AI — and what I found

The problem that made me build this Every time I signed up for a new app or service, I clicked "I Agree" without reading a single line. Nobody reads T…

The Dark Side of Wearable Data: What No One Talks About

Look, everyone is now hopping on the “wearables” train. We have seen millions of smartwatches, rings and patches, collecting huge amounts of data rega…

I built a privacy-first alternative to jwt.io, regex101 and every other dev tool that phones home

The dirty secret of online dev tools Every dev tool lives on a different website. jwt.io for JWT decoding. regex101 for regex testing. Some random sit…

How to Anonymize PII in Text with an API

What Is Data Masking? Data masking is a technique that replaces sensitive information with realistic but fictitious data, preserving the format and st…

Building a local-first network scanner in Go, Wails and Flutter

Most network scanners I tried wanted a cloud account and a subscription just to tell me what was sitting on my own LAN. That bugged me enough to build…

TLS Interception: How Corporate Proxies Read Your Encrypted Traffic

The padlock in your browser tells you the connection is encrypted. It does not tell you who is on the other end of that encryption. On millions of cor…

Why ccRewind never writes to ~/.claude/

ccRewind reads ~/.claude/projects/*.jsonl , parses them, indexes them into a local SQLite database, and renders the result back as a searchable, brows…

JPG vs PNG vs WebP: Which Should You Actually Use?

Most people use whatever image format their phone, camera, or screenshot tool happens to save by default, without ever thinking about it, and most of …

Evident: Proving Digital Ownership Without Revealing Your Content

In the era of AI-generated content, copyright disputes, and data leaks, proving that a specific file existed at a specific time is a significant chall…

Meta wants its AI glasses to seem less creepy. Its AI strategy says otherwise.

Meta is adding a new safeguard to stop people from secretly recording others with its AI glasses. But the update comes as the company continues to exp…

How to check your browser's privacy with 30 lines of JavaScript — and what I learned

What most people don't know about their browser Your browser leaks more than you think — and you don't need a third-party tool to check it. Most of th…

---

title: "Why We Built GhostWire: Infrastructure for Human Dignity" published: false tags: rust, p2p, opensource, privacy description: "A decentralized,…

Deploying Matomo Analytics - An Open-Source Google Analytics Alternative

Matomo is an open-source web analytics platform that keeps full ownership of visitor data on infrastructure you control, a privacy-first alternative t…

Deploying Plausible Analytics - Self-Hosted Web Analytics Platform

Plausible Analytics is an open-source, self-hosted web analytics tool that tracks traffic without cookies or personal data collection, a privacy-first…