A researcher found critical Windows zero-days.
Reported them to Microsoft.
Microsoft denied the bug bounty.
Deleted their account.
Banned them from GitHub.
Then threatened criminal charges.
The researcher dropped six zero-days in six weeks.
Three got used in real attacks within days.
Other researchers are now handing them free vulnerabilities as a gift.
Microsoft’s Digital Crimes Unit is considering legal action.
Against the person whose bugs they refused to pay for.
This is Microsoft’s bug bounty program.
A privacy researcher’s honest take:
What a Proxy Actually Does
A proxy stands between you and the website you want to visit. It sends your request for you and hides your real IP address. It’s simple and fast, and it helps you get around geo-restrictions or access content blocked in your area.
But there’s a catch. Most common proxies are configured per-app (often browsers), but some types (like SOCKS5) can handle broader traffic depending on setup. Your messaging apps, background syncing, and email still use your real connection. Many proxies don’t provide end-to-end encryption by default, unlike VPNs. The website you visit can’t see your IP, but anyone monitoring your connection, like your ISP, a network admin, or someone on public Wi-Fi, still can.
Free proxies are usually the worst. Studies show that many free proxy services log your activity, add ads, or sell your browsing data. You wanted privacy, but they made money off you instead.
What a VPN Actually Does
A VPN creates an encrypted tunnel for all your internet traffic. This covers every app and every connection, not just your browser. Your ISP can only see scrambled data. The coffee shop Wi-Fi router also sees scrambled data.
That’s the main difference. A VPN works across your whole system and encrypts your data. It gives you a much stronger layer of anonymity than a proxy can.
But this is important: a VPN is only as trustworthy as the company behind it. You’re just shifting your trust from your ISP to your VPN provider. If your VPN keeps logs, gets a legal request, or secretly sells your data, you haven’t gained any privacy. You’ve only changed who can see what you do.
So Which Is “Safer”?
If you just want to unblock a streaming service or visit a region-locked page, a good proxy will work fine.
If you want real privacy, a VPN is a better choice, but you need to choose carefully. Look for providers with proven no-log policies, open-source apps, and a clear business model. If it’s free, you’re probably the product. Mullvad and Windscribe are two I can recommend.
You own your private address.
We don’t track you.
We don’t monitor you.
We don’t collect personal data.
There are no hidden controls,
your private address is yours.
Check the open-source code.
Researchers have shown that ordinary Wi-Fi can identify people with extremely high accuracy by analyzing how wireless signals bounce off the human body.
Using AI, the system learns unique patterns from a person’s movement, posture, and body shape, almost like a biometric fingerprint.
Recent tests using standard Wi-Fi hardware reportedly achieved near-perfect accuracy in controlled environments.
The most surprising part is that people do not need to carry a phone or wearable device to be detected. Wi-Fi signals already present in a room can be enough.
👀This @GrapheneOS X @Moto collab is bigger than I thought!
If we didnt get this NOW, who knows what direction privacy on mobile would be headed!
Did you know: @Google Pixel 10 delays and tighter controls threw off GrapheneOS support timelines, making it harder to keep up with fast Pixel releases.
Its almost like they were TRYING to brick @GrapheneOS
Perfect timing for the @Moto partnership: 2027 flagships will let you unlock the startup security, install GrapheneOS, then lock it back so the phone checks everything’s safe.
Samsung stays locked.
Apple gives you no choice.
Real secure Android options are finally coming.
👀
This is the start of something great!
DeGoogled Android user?
Google's next-generation reCAPTCHA, presented to desktop users, prompts you to scan a QR code.
The catch? Google Play Services have to be enabled in order for it to work on these devices.
Let's dig in to what has changed, and possible solutions...
1/7