What's digital sovereignty and how to practice it
Digital sovereignty isn't some abstract concept. It's about deciding who gets access to your data, where it lives, and what happens if a provider vanishes.
Philosophy
Radars right now
ANALYSIS One American order was enough to make autistici.org disappear September 01, 2026
On 26 August, the United States branded the Italian collective Autistici/Inventati a "terrorist". Dollar payment channels cut off (PayPal), and the domain autistici.org pulled from DNS by its registry in late August. The lever: .org depends on an American registry, Public Interest Registry, which can be forced to cut. .com, .net and .org are all in that situation.
What it changes for you
1. An American extension (.com, .net, .org) is seizable without a judge in your country stepping in.
2. A national domain, .ch, .eu, .fr, escapes the direct order, but the domain is only one link.
3. Sovereignty is the full stack: registry, registrar, hosting, payments. Miss one floor, and the sanction pours in.
ALERT A Mac stealer is going after your Claude sessions August 31, 2026
macOS info-stealers are going after Claude sessions. Anthropic confirmed in late August that stealers, AMOS included in a few Mac cases, hijacked Claude sessions by copying the browser session. And a late-July disclosure shows that the Claude Code token, stored in the Keychain, is readable there by any program running under your account. No flaw in Apple or Claude, it gets in through a command someone makes you paste into the Terminal.
What to do now
1. A stolen session token acts on your account with no password, 2FA doesn't protect a token already issued, and it stays valid for several days, a local logout doesn't kill it. Real revocation goes through your account online, revoking all sessions and rotating your API key if you have one.
2. Two false reflexes, `chmod` does nothing against malware running under your own account, and antivirus keeps chasing a stealer that mutates non stop.
3. Set up execution control. An allowlisting tool like Santa in lockdown mode won't block the pasted line itself, but it kills the thief binary the moment it tries to run, the safeguard that acts even when you got fooled. And a command someone pushes you to paste into the Terminal, well... you don't paste it, ever.
Latest
Explainer
Your email provider has ten days to hand you over
Since 18 August 2026, your email data can be handed over within ten days to an authority in any member state, without a judge in your country.
Comparison Getting started
De-Googled browsers, the false choice they sell you
Brave, Firefox, Safari, Librewolf. Most alternatives to Chrome run on Google's engine. Engines, exploited flaws and agentic AI, the essentials.
Tutorial Going further Episode 1/2
An AI agent can wreck your fleet. The Touch ID lock.
An AI agent runs with your rights and your SSH keys. Put them in the Secure Enclave, Touch ID on every connection, and close port 22 with Tailscale.
IA
See more →
Tutorial AI
MCP servers, the backdoor into your AI
MCP servers give your AI real access to your Mac: files, shell. Handy, but it's a backdoor. Here's how to lock it down.
Tutorial AI Episode 2/2
Install your first AI model locally on Mac
"An AI model that runs 100% offline on your Mac Apple Silicon, in 20 minutes, without typing a single command. Install LM Studio, pick a model in MLX, enter your first prompt, then the ultimate test: cut the Wi-Fi."
Tutorial AI Episode 1/2
Your AI can be turned off by the US, build your own
Access to cutting-edge AI models is becoming an American geopolitical lever. Here's what's running locally on your Mac, with 16 to 32GB RAM, and why that's your real foundation.
AI
Apple Intelligence: What's Really Leaving Your Mac
Your Mac switched Apple Intelligence to ON without telling you. Three layers of processing, only one stays with you. And no one mentions the linked OpenAI account trap.
Tutorials
See more →
Tutorial Going further MS Pro Episode 2/7
Wazuh: Your all-in-one, homegrown Splunk for the price of a VPS
Install Wazuh (manager, indexer, dashboard) on a single node, harden passwords and dashboard in Tailnet-only, adjust JVM heap, initial dashboards without agents.
Tutorial Going further MS Pro Episode 0/7
Build your sovereign SIEM for SMEs, compliant with GDPR/NIS2 without CLOUD Act
You're already forced by GDPR to detect a breach within 72 hours. NIS2 just widened the net by 30x. Build your SIEM now, it's security today and compliance amortised before it lands on you.
Tutorial Getting started
Switching from Gmail to ProtonMail on Mac
Switching from Gmail to ProtonMail on Mac without losing any emails. Import, redirect, contacts, native app or Bridge, the whole process step-by-step.
Tutorial Getting started
Why your mail client is a sieve, and how to fix it
Spy Pixels, HTML Exploits, Outlook Zero-Days. Your Email's Attack Surface is Way Bigger Than "Gmail Reads You". Comprehensive Guide to Fix It.
Tutorial Getting started
Proton Bridge + Apple Mail on Mac: Encryption Without Compromise
How to Set Up Proton Bridge with Apple Mail on Mac. Installation, Exact Settings, Troubleshooting. Zero-Knowledge Encryption + Native Interface.
Comparisons
See more →
Comparison Getting started
kSuite vs Google Workspace, the honest comparison
kSuite Infomaniak or Google Workspace for your Mac? Pricing, encryption, jurisdiction, native Apple apps. The honest comparison, no marketing fluff.
Comparison Getting started Mac security
Little Snitch vs LuLu: Which outgoing firewall for your Mac?
Little Snitch paid and closed-source vs LuLu open-source and free. Max sovereignty on one side, max granularity on the other. How to choose without regrets.
Comparison Getting started Mac security
Password Manager for Mac: Apple, Bitwarden, KeePassXC or 1Password
Apple, Bitwarden, KeePassXC, 1Password: Four radically different approaches. Which one fits your profile and budget?
Comparison Getting started
Apple Mail vs Gmail vs Proton Mail, the honest comparison
Apple Mail, Gmail or Proton Mail? Three philosophies, three contracts. The no-bullshit comparison to choose what really suits you.
Explainers
See more →
Explainer Mac security
Your Mac was patched by XProtect without your knowledge, it's for your own good
On May 11, 2026, 170 npm packages in the TanStack ecosystem were compromised in six minutes. The next day, Apple pushed an XProtect signature onto your Mac without telling you. Here's how to check.
Explainer Getting started
Proton Meet: Encrypted Vision, End-to-End Encryption for Maximum Privacy
Proton encrypts your calls end-to-end using MLS. Even Proton can't snoop on your meetings. How it really differs from Zoom, Teams, and Google Meet.
Explainer
Six months and nineteen global texts, the terrifying convergence
HR 8250, CSAR, verdict Meta, World ID, Online Safety Act. Six months, nineteen texts, four continents. One direction.
Explainer
The DNS, your digital Achilles heel.
You encrypt your emails, pay for a VPN, enable Tailscale. Yet your ISP knows you visited Tinder.com last night. DNS, that's why.
Explainer
NIS2 forces companies to encrypt. CSAR prevents them from really doing it.
NIS2 forces encryption on businesses. CSAR wants to crack it. Same institution. Two incompatible texts. What it means for you.
Mack
Privacy isn't a subscription you pay to Big Tech.
@macsouverain
@macsouverain.bsky.social