How to Verify APK Authenticity: Complete Guide for GrapheneOS and Google Android Users

GrapheneOS users can verify APKs entirely on-device through Accrescent and AppVerifier; Google Android users need a computer running apksigner before the APK ever touches the phone. Both paths arrive at the same cryptographic guarantee: the app came from the real developer and has not been altered. For anyone sideloading from decentralized sources like Zap Store, this verification step is the difference between trusting the software you run and hoping for the best.

Read More

Nostr Attack Vectors Every User Should Know About & How to Mitigate Them

Many Nostr users assume that because it’s decentralized and uses cryptographic keys instead of passwords, it’s inherently secure and private. That assumption is incorrect in several important ways, but that doesn’t mean we cannot engage with Nostr in a secure and private manner. This article covers attack vectors and how to mitigate them. I cover each point in plain language for regular users who aren’t reading the GitHub threads where developers are discussing these questions.

Read More

Value For Value

The New Economy

I’ve never had sponsors and I don’t run ads. My content is fully self-funded and supported by readers like you.

This is value for value in practice; the peer-to-peer, no-middleman principle I write about in my book.

If you find value in the Bitcoin education I share, consider helping me scale my work by zapping me some sats ⚡️

⚡ Support this work via Lightning: daniella@coinos.io