<![CDATA[Some old news, but always relevant, so we don't forget our OpSec:]]>Some old news, but always relevant, so we don't forget our OpSec:

I hope y'all have seen the Urban VPN "scandal" by now.

If you haven't caught up, it wasn't just a VPN, it was effectively a wiretap.

Their browser extension was found intercepting AI chats (ChatGPT, Claude, etc.) by overriding the fetch() function.

They weren't just logging IPs, they were stealing the actual content of your prompts to sell to data brokers. But the real lesson here isn't just "don't use Urban VPN."

It’s about OpSec 101: Never trust a centralized entity.
If you care about security, the rule is simple: Don't trust, verify.

The moment you hand your traffic to a centralized company, especially a "free" one, you’ve created a single point of failure.

A VPN is just someone else's computer. If you don't own the infrastructure, you don't own your privacy.

Stop looking for "trustworthy" companies and start building a "zero trust" mindset.

The only way to ensure you aren't the product is to use a system where no one has the power to sell you out. Don't trust. Verify. Decentralize.

]]>https://board.circlewithadot.net/topic/20b75794-9afc-4d22-8975-fdc3c1ed20b4/some-old-news-but-always-relevant-so-we-don-t-forget-our-opsecRSS for NodeMon, 25 May 2026 01:48:06 GMTSat, 16 May 2026 19:00:13 GMT60