Session Is Getting A Major Privacy & Security Boost!|This Week in Privacy #30 (Dec 5, 2025)

Join us Invalid date for This Week in Privacy #30, to catch up on the latest Privacy Guides updates and to discuss trending news in the privacy space.

During the livesteam we’ll answer viewer questions. If you have a question for us, please leave a comment in this forum thread or the YouTube chat.

Members please leave your questions for us and we will try to get them answered first during the livestream :smiley:

Please be aware that by posting here your post will be displayed on the YouTube stream.

2 Likes

Honestly it was about time they listened finally, we shall see moving to 2026 and stuff like that…

2 Likes

Threema and Session over time seem to have buckled to pressure from privacy communities to improve the security of their content end-to-end encryption (because those are the audiences they target and are held accountable by). Is there any kind of sustained pressure the privacy community can put on the messaging apps that are more widely used? Thinking Telegram, Line, WeChat, Viber, FB Messenger, Snapchat, Discord etc.

Or does PrivacyGuides intend to write articles some time about how to enhance privacy on these platforms?

Do we know the historical reasons behind Line and Viber implementing end-to-end encryption in the first place? Is there anything we can lean on there?

2 Likes

Hi! I hope the PG team is doing well. :slight_smile:

I typically don’t really ask questions, but I do have a couple today.

  1. Since NixOS isn’t FHS compliant, normal binaries aren’t able to run without some workarounds. This means applications like the Tor Browser and Mullvad Browser aren’t official. Could this possibly mean that there are some fingerprinting concerns with using this unofficial binaries? Should NixOS really be recommended then?
    Also, the security for Nix is severely lacking behind other distros because there is little to none support for AppArmor and Selinux.

  2. If someone wants to start a blog, how can it be done in a private manner? E.g. blogs like The Privacy Dad (@ThePrivacyDad love your blog btw!)

4 Likes

Quick comment, loving the intro & outro animation and music. Adds a nice flair to the podcast.

And Kevin sounds a lot better with the nicer audio set up. Good job.

1 Like

Thanks for your nice comment. I’ve written a couple of articles about blogging over the years: [edit: here is one: https://theprivacydad.com/starting-your-own-blog-privately/\].

I still need to listen to the show to see if they’ve answered your question, but I would say try to create a separate persona for your blog as much as possible, with dedicated email and social media just for the blog. And of course I’d recommend taking a look at: https://bearblog.dev/

1 Like

Oh I missed that question

As a [admittedly very slow] blog writer myself, I and @ThePrivacyDad both use bearblog which is what he linked basically

I’ve written a few with 6 drafts left piled but with the state of chat control and all that good stuff my motivation is going up slowly to write again.

(I have to wonder if I can count as media with writing logo too but I guess the one I have normally for
Wiki can count as both)

This is for humans only, sorry

So much for a privacy blog, tragic.

Actually I got it too so It might be a bug
Manually going to his posts then choosing the blogging tag fixes it

Yeah, that seems likely. I get it on multiple browsers. Still unfortunate.

I recently watched Jonah’s video on Tor + VPN. If I were to use Tails, should I be somehow using a VPN along with it?

I assume this just comes down to threat model.

1 Like

Kevin is currently reading my mind on the stream. I’d agree with him that using a VPN on your router likely makes the most sense if you want to use a VPN with Tails. Their discussion has good points I won’t repeat here, but I’ll add:

The main use-case of Tails is to have a fully amnesic operating system. Consider whether you actually need that, because if you are willing to install things on your operating system like a VPN and save credentials, I feel like you may want to consider using Whonix in Qubes instead of Tails instead.

Whonix in Qubes will always be the superior way to use Tor, unless your primary goal is to not leave any trace of your OS usage on your local machine, which is fairly niche to be honest.

3 Likes

If you’re looking for more reasons to be sold on Bear Blog, it’s what we use for our local tech club. It’s very flexible for having dedicated pages and works more as a general website than just a blog. And everything is managed in markdown, so if you know that then it feels like the platform really opens up to you without much fuss.

But you totally keep it super simple as well. It’s very out of your way.

Weird, not sure why that is happening. I’ll amend my text above. Thanks for pointing it out.

Your aforementioned website now opens this morning but didn’t last night. FYI.

1 Like

I wonder if Bear thought clicks from PG were AI scraping.

I was thinking it was blocking VPN connections. But I can only speculate.

Is bearblog using some sort of AI protection that works withou JavaScript?
Very curious indeed (better than my last provider who was forcing javascript though ngl)

Because Nothing stops from manually filtering by blogging tag

I’m leaving my own to see if we can replicate it again:
https://blog.gorujokun.cy/posts/?q=privacy

And here’s Dad’s to have a reference:
https://theprivacydad.com/blog/?q=privacy

Getting the same message about only for humans on both.

I have Proton VPN enabled.