Sealed Sender: Hiding Who Talks to Whom
A technical deep-dive on RVNT's sealed sender: how encrypting the sender certificate to the recipient hides the from-to routing pair, and how forgery, replay, and abuse are handled.
The Dependency Is the Backdoor: Anatomy of the TanStack npm Compromise
On 11 May 2026, attackers published 84 malicious versions across 42 TanStack packages — and exfiltrated stolen secrets over an encrypted messenger. A walkthrough of how a CI misstep becomes a supply-chain backdoor, and why it shapes how RVNT is built and verified.
They Don't Need Your Phone: Tracking Targets Through the Telecom Network Itself
Citizen Lab's April 2026 'Bad Connection' report documents surveillance actors geolocating people through SS7 and Diameter signaling — below the apps, below the encryption. A breakdown of how it works and why no messenger can fix it alone.
RVNT Protocol: A Technical Deep Dive
A detailed walkthrough of the RVNT cryptographic protocol — hybrid X3DH key exchange with ML-KEM-768, the Double Ratchet with AES-256-GCM, sealed sender metadata protection, and Tor-based transport.