GHOST

Operational privacy for real people.

Public Key

npub18dlusgmprudw46nracaldxe9hz4pdmrws8g6lsusy6qglcv5x48s0lh8x3

NIP-05 Address

Profile Code

nprofile1qqsrkl7gyds37xh2af37uwlknvjm32ska3hgr5d0cwgzdqy0ux2r2ncpzemhxue69uhhyetvv9ujuurjd9kkzmpwdejhgqg5waehxw309aex2mrp0yhxgctdw4eju6t0qyxhwumn8ghj7mn0wvhxcmmvqythwumn8ghj7enfd36x2u3wdehhxarj9emkjmn9qy2hwumn8ghj76rfwd6zumn0wd68ytnvv9hxgqgewaehxw309ahx7um5wf3ksetrdvhx6ef0wfjkcctess4pky

Publishing to

Author Public Key

npub18dlusgmprudw46nracaldxe9hz4pdmrws8g6lsusy6qglcv5x48s0lh8x3

Show more details

Last Notes

2026-03-05 00:55:36 CET

- reply

Sovran fonts?

2026-03-04 22:17:21 CET

- reply

100 sats says the RAM is soldered in.

2026-03-04 19:47:16 CET

- reply

Not that I’m aware of. TBH no one will pay much attention until they realize they have a need for it.
There is rough code on the GitHub. Anyone can use it to rotate their keys but unless the clients are looking for the cryptographic signature they will display you as a different user.
I gave the code and implementation details. Anyone is free to use it as they will.

2026-03-04 17:52:46 CET

https://blossom.primal.net/4bf66ef78559c4e1ba6e472de4233c4103e233dcf2bce95c7201e9981279c6ca.jpg

2026-03-04 15:44:42 CET

Your ISP router is sad and tired.
https://untraceabledigitaldissident.com/replace-isp-router/

2026-03-04 04:53:59 CET

- reply

nope

2026-03-04 03:00:04 CET

- reply

Frost splits up your nsec into a multisig basically. Cold root identity is one nsec that is kept offline and cold and you use disposable keys that you can rotate whenever you want. Different but could be used together if you wanted to.

2026-03-03 21:22:52 CET

- reply

oh that sucks

2026-03-03 17:39:00 CET

My new lab box came with an unexpected extra Broadcom controller. That was not in the description. 🤗🥰

2026-03-03 03:38:00 CET

- reply

https://blossom.primal.net/a8ebae90fd86a51681b5ede8ccfd672435719ca072fcaf256e49dc5e7f4253d8.gif

2026-02-28 05:04:24 CET

- reply

same

2026-02-26 17:28:55 CET

I finally finished writing Connected Isn’t Protected: Your Router Enforcement and Leak Audit Manual. 🥳 It got a little away from me and ran past 130 pages.
Table of Contents if anyone is interested:
Terminology 12
Introduction 13
The Router Is Upstream Authority 13
“Connected” Means Nothing 14
Enforcement vs Assumption 15
Fail Open vs Fail Closed 16
Scope of This Manual 17
What You Walk Away With 18
Threat Model Alignment & Scope Definition 19
Define Your Adversary 19
Home Network vs Travel Router 20
Map the Exposure Surface 21
Understand Blast Radius 22
Define Your Acceptable Failure State 23
Router as Enforcement Layer 25
The Core Path: Device -> Router -> WAN 25
DNS Resolution Path Variants 27
VPN Tunnel Interface Mechanics 28
Router Generated Traffic Flows 29
Trust Boundaries 30
Conceptual Data Flow Layers 32
Architecture Checklist 33
Baseline Observation (Pre-Hardening) 34
Step 1: Create a Controlled Testing Environment 34
Step 2: Capture DNS Behavior Before Changes 35
Step 3: Capture Exit IP State 36
Step 4: Check IPv6 Exposure 36
Step 5: Observe Routing Behavior 37
Step 6: Snapshot Router Logs 37
Step 7: Document Failure Without Intervention 38
What You Should Have Documented 38
Why Baseline Matters 39
DNS Resolver Path Verification 40
Step 1: Identify the Intended Resolver Path 40
Step 2: Detect Resolver Drift 41
Step 3: VPN On vs VPN Off Comparison 42
Step 4: Enforce or Detect Fallback Behavior 43
Step 5: Verify Port 53 Policy 43
Step 6: Detect Hard Coded Device Bypass 45
Step 7: Encrypted DNS Verification 45
DNS Verification Checklist 46
Exit IP & Routing Enforcement Verification 47
Step 1: Establish the Expected Exit Identity 47
Step 2: Basic Exit IP Validation 48
Step 3: Refresh and Stress Test 48
Step 4: Traceroute Verification 49
Step 5: WireGuard vs OpenVPN Differences 50
Step 6: Detect Intermittent Leak Under Reconnect 50
Step 7: Multi WAN and Failover Awareness 51
Step 8: Policy Based Routing Edge Cases 52
Exit Enforcement Checklist 53
Failure Mode & Kill Switch Testing 54
Define Your Intended Failure State 54
Test 1: Manual Tunnel Termination 55
Test 2: Physical WAN Disconnect 55
Test 3: Network Switching 56
Test 4: Rapid VPN Restart Loop 57
Test 5: DNS Behavior During Failure 57
Test 6: Router Generated Traffic Under Failure 58
Kill Switch Verification 58
Failure Mode Checklist 59
Boot Window Leak Testing 60
Understand the Boot Sequence 60
Test 1: Cold Boot With Active Clients 61
Test 2: Log Analysis During Startup 62
Test 3: Boot With VPN Disabled Then Enabled 62
Safe Boot Configuration Patterns 63
Travel Router Specific Risk 64
Boot Window Checklist 64
IPv6 Enforcement & Bypass Detection 65
Understand the Risk 65
Step 1: Confirm IPv6 Status on LAN 66
Step 2: Inspect Router IPv6 Configuration 66
Step 3: Traceroute Over IPv6 67
Step 4: DNS Over IPv6 67
Mitigation Paths 67
Option 1: Disable IPv6 Entirely 68
Option 2: Tunnel IPv6 Through VPN 68
Option 3: Block Native IPv6 at Firewall 69
Router Advertisements Matter 69
IPv6 Boot Window Risk 70
IPv6 Enforcement Checklist 70
Hard Truth 71
Silent Exceptions & Router Generated Traffic 72
The Router Is a Client 72
Step 1: Identify Router Origin Connections 73
Step 2: NTP Bypass Detection 73
Step 3: Firmware Update Calls 74
Step 4: Connectivity Probes 75
Step 5: DNS Fallback Mechanisms 76
Acceptable vs Unacceptable Exceptions 77
Log Driven Audit Pattern 77
Configuration Patterns for Control 78
Travel Router Captive Portal Isolation 79
Understand the Portal Sequence 79
Principle: Authenticate First, Then Expose LAN 80
Test 1: Simulate Fresh Hotel Network 80
Test 2: Downstream Redirect Detection 81
Test 3: Reconnect Behavior After Sleep 82
Hostile WiFi Considerations 83
Configuration Patterns 83
Travel Isolation Checklist 84
Log-Centric Verification Framework 85
Enable the Right Logs First 85
What You Are Actually Looking For 86
Correlate DNS and Routing Events 87
Detect Reconnect Loops 87
Detect DNS Fallback Attempts 88
When Logs Lie or Are Incomplete 89
Log Review Protocol 90
Case Study Breakdowns 91
Case 1: VPN Connected, DNS Still ISP 91
Case 2: IPv6 Bypass Active Tunnel 93
Case 3: Boot Window Exposure 94
Case 4: Captive Portal Isolation Failure 96
Case 5: Router Fail Open Under WAN Instability 97
What These Cases Have in Common 98
Maintenance & Drift Detection Protocol 99
Drift Is Normal 99
Firmware Update Retesting 100
VPN Provider Configuration Changes 101
Periodic Power Cycle Audits 102
Travel Topology Retesting 102
Lightweight Automated Checks 103
Build a Drift Log 103
Signs You Have Drift 104
Printable Audit Worksheets 105
1. Baseline Capture Sheet 106
2. DNS Resolver Drift Sheet 107
3. Exit IP & Fail Closed Verification Sheet 108
4. Boot Window Test Sheet 109
5. IPv6 Enforcement Sheet 110
6. Log Review Sheet 111
How to Use These Worksheets 112
Troubleshooting Matrix 113
Problem: ISP DNS Appears While VPN Connected 114
Problem: ISP Hop Appears Before VPN in Traceroute 115
Problem: IPv6 Leak While IPv4 Tunnel Active 116
Problem: VPN Reconnect Loops Exposing ISP IP 117
Problem: DNS Resolves During Tunnel Drop 118
Problem: Captive Portal Redirect Seen on Client Devices 119
Problem: Router Origin Traffic Bypasses VPN 120
How to Use This Matrix 121
Upgrade Path to Level 3 Enforcement 122
Step 1: Strict Port 53 Control 122
Step 2: Policy Based Routing as Explicit Architecture 123
Step 3: VLAN Segmentation 124
Step 4: Dedicated Firewall or Router OS 125
Step 5: Enterprise Grade Kill Switch Logic 126
Step 6: IDS and Traffic Visibility 127
Step 7: Automated Testing Scripts 127
When to Upgrade 128
Final Operational Notes 129
Usability vs Enforcement 129
Router Limitations Are Real 130
When to Accept Risk 130
Continuous Validation Mindset 131
What This Manual Does Not Do 132
The Real Win 132

2026-02-25 15:39:38 CET

- reply

Last one out, turn off the lights

2026-02-25 14:09:26 CET

- reply

$65 just for shipping? good grief, it's not a crate

2026-02-25 14:07:44 CET

This is your 2026 router privacy checklist. No fantasy setups. No lab coat theory. Just what actually matters.
https://untraceabledigitaldissident.com/router-privacy-checklist/

2026-02-23 19:45:47 CET

https://npub18dlusgmprudw46nracaldxe9hz4pdmrws8g6lsusy6qglcv5x48s0lh8x3.blossom.band/5b74739f80fbfc8db9a27bfee89ca1c0cd41da997fa2c834dfd937c6b9ec408a.jpg

2026-02-23 14:29:56 CET

Captive portal aren’t just annoying login pages. They are forced interception systems and while you are staring at the splash screen, metadata is already moving.
https://untraceabledigitaldissident.com/captive-portals-public-wifi-metadata/

2026-02-20 18:07:16 CET

- reply

Its always those dam Saturn bears

2026-02-20 17:13:51 CET

The US is definitely starting a war with Iran Sunday night right?

2026-02-20 02:48:55 CET

@npub1a2c…w83a I watched Godzilla Minus One. You were right, it was good.

2026-02-19 13:50:45 CET

Local first. Cloud as a backstop. A hybrid setup is where it gets interesting.
https://untraceabledigitaldissident.com/unbound-nextdns-hybrid-setup/

2026-02-19 04:54:34 CET

I watched a little old lady shoplift a pie from the store.

2026-02-18 14:38:39 CET

- reply

Life goals. Have fun you two!

2026-02-18 13:45:25 CET

- reply

I'd watch a Jack Mallers cartoon

2026-02-18 13:38:53 CET

- reply

I read that as carnislut at first

2026-02-18 13:38:29 CET

- reply

I read that as carnislut at first

2026-02-18 13:35:12 CET

- reply

2026-02-18 13:16:56 CET

You can’t patch structural leaks with cosmetic tools.
https://untraceabledigitaldissident.com/why-apps-cant-fix-network-leaks/

2026-02-17 21:07:47 CET

I want to build another bitcoin node but I don’t want to pay these drive prices. Damn AI is going to destroy hobby projects

2026-02-17 02:40:18 CET

- reply

The bots in the back haven’t seen it yet

2026-02-16 13:54:30 CET

- reply

Yes, or self host with something like Immich and Tailscale.

2026-02-16 13:43:38 CET

- reply

So I shouldn’t try to educate people?

2026-02-16 13:32:54 CET

Location. Faces. Time. Patterns. Your life, indexed. Every photo you take is data. The Default Is Exposure. Let’s fix that.
https://untraceabledigitaldissident.com/private-photo-media-workflow

2026-02-13 01:30:18 CET

I’m trying guys…

2026-02-06 02:34:45 CET

- reply

No, just being a smart ass. This is just capitulation by everyone

2026-02-06 01:58:31 CET

They’re selling that Bitcoin from Venezuela aren’t they…

2026-02-05 03:05:15 CET

I bought some bitcoin

2026-01-24 22:47:23 CET

Watching liberals become hardline 2A advocates in real time was not on my bingo card.

2026-01-24 21:07:35 CET

- reply

1. 2A says you can carry guns all you want, which I appreciate.
2. Standing around filming is not impeding.
3. Immigration agents have no authority over citizens and can’t arrest anyone.
4. Shooting someone on the ground seems like excessive force.

2026-01-18 22:25:16 CET

DOJ filed a motion that they aren’t releasing the rest of the Epstein files.
https://apnews.com/article/epstein-congress-neutral-expert-dfff6c2f06162a4a7a637fe22c4e2dc1

2026-01-18 06:03:34 CET

would someone mind zapping me like 1 sat? I want to test new channel

2026-01-18 00:55:36 CET

I tried to make vegetable soup but it just tastes like vegetables in hot water.

2026-01-17 02:33:19 CET

Be excellent to each other

2026-01-11 04:26:14 CET

- reply

I was going for portability. Weight becomes a factor when lugging gear.

2026-01-10 05:30:27 CET

Polymarket odds we’re all dressed like this by yearend?
https://blossom.primal.net/3c857e753a25ddf0f8de955f918264af2f0146f63630c9888a57a8967801e40e.jpg

2026-01-08 13:47:46 CET

Did they ever finish the audit of Fort Knox?

2026-01-05 15:18:45 CET

Another day another ledger breach

2026-01-04 15:36:32 CET

privacy should fit your life
https://untraceabledigitaldissident.com/good-enough-privacy-control-baseline/

2026-01-03 21:34:59 CET

- reply

People use grok?

2025-12-31 14:23:48 CET

I think bitcoin is stuck. Everyone unplug and plug back in their nodes.

2025-12-29 03:28:05 CET

Idea: icecream but with vitamin gummies in it so people can indulge but feel like they are getting something healthy

2025-12-26 15:31:18 CET

Your ISP hands you a box that does everything. Modem. Router. WiFi. Surveillance.
Get your own router.
https://untraceabledigitaldissident.com/why-you-want-your-own-router/

2025-12-23 15:00:36 CET

- reply

*creators

2025-12-19 02:37:52 CET

- reply

The PC term is Tylenol American

2025-12-10 08:02:50 CET

Cold Root Identity milestone
Python and Go now produce identical deterministic vectors for derivation and lineage. The model is stable.
Canonical test vectors are frozen in:
tests/vectors/cold_root_identity.v1.json
CRI requires no protocol changes. Clients just follow standard kind 30001 lineage events signed by an offline root.
Repo and spec:
https://github.com/GHOST-UntraceableDigitalDissident/cold-root-identity
If you maintain a client or SDK, you can now test against the vectors and confirm compatibility.

2025-12-07 18:48:08 CET

- reply

Perfect. Optional password fits the model without altering the recovery guarantees.

2025-11-19 18:58:36 CET

Should I do this to my rifle? 🤔
https://image.nostr.build/c642b4fd4c1b814af08b55a374b912d495cff336f61f8f489decd51716b45497.jpg

2025-11-16 19:37:19 CET

Ladies if you don’t know what to get your man for Christmas, he doesn’t want a sweater, buy him zip ties, WD-40, hard drives, USB sticks, and ammo. He’ll love it.

2025-11-16 13:17:01 CET

This is a full clean sweep guide for completely deleting your digital footprint.
https://untraceabledigitaldissident.com/delete-digital-footprint-complete-guide/

2025-11-15 14:34:04 CET

Starting tomorrow and repeating every Sunday I will begin The Tactical Series on Untraceable Digital Dissident. The Tactical Series will be grab and go practical guides for people who don't want to hear me yell at clouds and just want a straight forward "How To".
Check the SECURE CHANNEL downloads page for any bonus material related to these.

2025-11-12 17:57:49 CET

https://blossom.primal.net/c1ded037107aaa2d85a7ec34216075c65156c8c82d9e592a82a36c19a4265d14.jpg

2025-11-12 16:42:48 CET

Why is it colder in my house than outside?

2025-11-12 16:32:45 CET

- reply

Where's my dodge check?

2025-11-11 05:41:15 CET

- reply

I am alone: there is no God where I am.

2025-11-10 00:13:10 CET

What the hell happened to Monero?

2025-11-07 12:33:34 CET

You’re Being watched and followed. Now What?
https://untraceabledigitaldissident.com/how-to-stay-calm-when-being-watched/

2025-11-06 23:38:02 CET

For reference CZ got four months after pleading guilty to charges of enabling money laundering
#note15yu…fs9q

2025-10-31 12:25:41 CET

Annual reminder that Satoshi was a giant nerd. He was writing white papers instead of raging at a Halloween party.

2025-10-29 22:03:19 CET

- reply

I tried, but it didn't carry the vote. No tshirt for you

2025-10-29 01:33:54 CET

If the government is shutdown, why are we still paying taxes? 🤔

2025-10-25 00:15:25 CEST

https://blossom.primal.net/6eb9ff7f74765583193f17d86458199fdf0f256176f0856ed0f435b95fa1fa6b.jpg

2025-10-24 12:32:39 CEST

- reply

LOVE IT!

2025-10-23 14:39:04 CEST

Coolest Ad I've seen in awhile
https://blossom.primal.net/19f41413861d2e690ccb087db011c9c861115e6f6ba9b4c44c10fb0f90a7def6.jpg

2025-10-23 01:06:04 CEST

- reply

Dam

2025-10-22 14:18:56 CEST

- reply

@nprofile…79qn

2025-10-22 14:12:23 CEST

- reply

I can't get it to work
https://blossom.primal.net/5dec4a508c0cb05f3593576d550190575192eb684992f534da17be37cedb0b8e.jpg

2025-10-21 14:44:04 CEST

It's so bizarre to me that we can spend over a $1,000 on a phone but we are allowed so little control over it's operating system. And people just accept that as normal.

2025-10-16 20:12:49 CEST

I want to download the news, add Sora Watermarks, and then upload them all over the place.

2025-10-12 21:55:45 CEST

ICE has spent $1.6M the last two years on mobile stingrays. If your phone randomly drops to 2G, that’s your first red flag.
Turn off cellular when not in use or use faraday. Don't walk around broadcasting to everything.
https://blossom.primal.net/5bc2954260c0a702d358b7242c76ecaaa8919a7c4ed8d10af6a489dbe7caf39a.jpg

2025-10-12 19:50:19 CEST

- reply

2025-10-12 14:08:51 CEST

A #privacy firewall that replaces your ISP’s data harvesting with encrypted, rule based control. This #guide walks you through the complete setup.
https://untraceabledigitaldissident.com/set-up-nextdns-dns-privacy-guide

2025-10-08 17:15:17 CEST

- reply

Don't misunderstand me. I have no affiliation with a group or individuals who may call themselves "antifa" (which isn't even a organization as a lot of people seem to believe) but I am against fascism. By definition fascists attempt to control others through violence or threat of violence. I don't agree with any of that and promote maximum personal and individual freedom from society, corporations, and governments.

2025-10-08 10:59:20 CEST

- reply

I don't advocate for violence against anyone. This particular note was a shit post. My personal politics is atheist anarchy max personal freedom.

2025-10-08 03:51:02 CEST

https://blossom.primal.net/cb1313ca00eab089c819c10727a4df7a7908e5e05eb71a000e5dab33640f4354.jpg

2025-10-03 16:22:15 CEST

- reply

Unsurprising but when surveillance goes the other direction, they are quick to shut it down
https://www.cnn.com/2025/10/03/tech/iceblock-apple-removed-trump

2025-09-30 22:55:31 CEST

Wow. It didn't take long for the UK's internet policy to look like NK's.
#nevent1q…0ca6

2025-09-29 06:21:18 CEST

https://blossom.primal.net/118c50a7e551cfb7c88e8be05a3601babb081849d896edbe3f5c2b90c81184fd.png

2025-09-23 11:57:08 CEST

- reply

More of a personal kind of madness.

2025-09-20 06:51:49 CEST

Cloud is subpoena bait. Local is risk of loss. Pick your poison, then fix it.
https://untraceabledigitaldissident.com/what-if-your-backup-strategy-is-the-leak/

2025-09-19 05:47:32 CEST

- reply

It's for your safety... 🙄

2025-09-13 03:32:12 CEST

You just need a weekend and the will to disappear.
https://untraceabledigitaldissident.com/erase-yourself-how-to-wipe-your-digital-trail-in-one-weekend/

2025-09-01 15:00:38 CEST

- reply

@nprofile…pg7w is going to be so mad

2025-09-01 04:28:19 CEST

Your default settings are a confession.
https://untraceabledigitaldissident.com/the-death-of-anonymity-and-how-to-fight-back/

2025-09-01 04:23:36 CEST

- reply

nRFconnector and Wifi analyzer are good. I have a full guide coming out later this week

2025-08-30 13:00:03 CEST

- reply

If you travel get a USB condom or power only cord

2025-08-30 05:40:50 CEST

The device itself can be clean, but if they catch you with it and it links to you? Game over.
https://untraceabledigitaldissident.com/how-to-use-a-burner-phone/

2025-08-30 04:54:42 CEST

Bitcoin is $108k
We're all now poor

2025-08-30 03:30:17 CEST

- reply

I have a strong opinion about you
https://image.nostr.build/497149330ebc9fce22f985961f2ba7350b66f6cb20bdd4b09b920a45d2842042.gif

2025-08-30 02:48:52 CEST

Is it too early to put up the Christmas tree?🎄

2025-08-29 13:20:02 CEST

They don’t just want your clicks. They want your cognition, your routines, your words, your front door code.
https://untraceabledigitaldissident.com/from-your-brain-to-your-gate-code-the-end-to-end-surveillance-of-the-individual/