31 posts
4 min read By NT²
Tech
A proximity session has a budget. Contact invites and share manifests fit. PDF scans usually do not—so attachments leave on a bulk plane after SDP exchange, not stuffed into every control frame.
4 min read By NT²
Tech
If a proximity bootstrap can live in an ordinary https link, the authenticator has already toured browser history, referrers, and OS camera → URL launch paths.
5 min read By NT²
Tech
Connecting beside someone is a short-lived session. Recognizing them as a vault contact—and accepting a share into your vault—are still separate acts.
5 min read By NT²
Tech
Ciphertext and the secret that opens it should not travel as one convenient email. NT² splits carriers—file or link—from OOB passphrase delivery, and treats Strong as machine-handoff.
5 min read By NT²
Tech
Estate and emergency access tempt products to hold a second key “just in case.” NT² refuses that oracle. Legacy is a sealed package on a delay—not a support console unlock.
5 min read By NT²
Tech
After a share leaves your vault, “did they open it?” and “can I kill it?” are sender questions. The answers live in a local outbox—not a cloud mailbox of readable mail.
6 min read By NT²
Tech
Sharing to “someone in Contacts” only works if the row holds encryption material for that vault—not a phone number you hope matches the right person.
2 min read By NT²
Stories
You were asked to upload passport scans and bank PDFs to yet another US-hosted app. You wondered why your tenancy proof needs a California server.
8 min read By NT²
Tech
Blind sync is easier to trust when you can picture the packet. The edge sees shapes, sizes, and progress—not titles, notes, or a searchable attic of your secrets.
8 min read By NT²
Tech
Many apps call themselves offline-capable when they mean a read-only cache and a queue that hopes the tower returns. A local-first vault puts full CRUD on the device first. Sync is an optional second path.
8 min read By NT²
Tech
Zero-knowledge is not a slogan about HTTPS. It is a permission list for the edge: what Workers may store, route, and bill for—and what they are never allowed to learn.
2 min read By NT²
Stories
The link opens in a browser. The content stays encrypted until the recipient enters a share passphrase you chose. That is a different habit from attaching a file.
1 min read By NT²
Stories
Signal can protect a message on the way to someone else. It does not turn the thread into structured storage.
9 min read By NT²
Tech
Self-sovereign identity is useful when you take the parts that fit a zero-knowledge vault—and refuse the parts that turn the product into a general DID wallet.
9 min read By NT²
Tech
A cloud can help deliver sealed packages without becoming the place where pending shares live as readable mail. Relay indexes ciphertext. Inbox stays on the device.
1 min read By NT²
Stories
Apple Notes was perfect for grocery lists, travel ideas, and quick reminders. Then it became the place for passport numbers, seed phrases, and bank details.
8 min read By NT²
Tech
A share that opens with the same secret that unlocks the vault is not a handoff. It is a remote unlock of everything. NT² keeps those boundaries apart.
1 min read By NT²
Stories
Where data lives shapes who can touch it, process it, subpoena it, lose it, or monetize it.
9 min read By NT²
Tech
Cloud services often treat an email inbox as the root of an account. An encrypted vault needs a different proof: control of a signing key, shown by answering a one-time challenge.
1 min read By NT²
Stories
A privacy product should not ask you to accept tracking just to read its privacy promise.
1 min read By NT²
Stories
A vault can work offline and still offer sync. The difference is whether the cloud becomes the owner of the data or just a blind carrier.
1 min read By NT²
Stories
A friend asks to check the account number. You want to help, but you do not want your unlocked vault in someone else's hands.
10 min read By NT²
Tech
An account table can contain no plaintext vault items and still create a dangerous password-testing surface. We removed the columns that could turn a database copy into an offline guessing or recovery system.
1 min read By NT²
Stories
The person on the call needs to confirm one field. Your screen is ready to show an entire document.
9 min read By NT²
Tech
A vault does not need to enter a shared plaintext mailbox to sync. Its public cryptographic identity can name a dedicated edge coordinator that notifies replicas and points them to encrypted frames it cannot open.
9 min read By NT²
Tech
Sync does not have to turn a local vault into a cloud database. The edge can identify an account, store opaque replica frames, and deliver updates without learning what those updates contain.
1 min read By NT²
Stories
If the file is too sensitive for a chat thread, sending it through one more inbox is not automatically better.
2 min read By NT²
Stories
Your accountant needs the statement today. They do not need a permanent copy sitting in three inboxes and a downloads folder.
9 min read By NT²
Tech
One screen can make two security events look like a single login. We keep them separate because opening encrypted data and proving an identity to a server are different jobs with different risks.
1 min read By NT²
Stories
Your laptop holds client API keys, a family insurance policy, and a crypto wallet note. The problem is not storage space. It is boundaries.
6 min read By NT²
Tech
In the era of massive cloud-first applications, we often overlook a powerful alternative: the Progressive Web App (PWA). Why maintain a heavy, expensive, and potentially vulnerable server infrastructure when the modern browser is capable of running a full-featured, secure, and high-performance application entirely on the user's device?
