What's digital sovereignty and how to practice it
Digital sovereignty isn't some abstract concept. It's about deciding who gets access to your data, where it lives, and what happens if a provider vanishes.
Philosophy
Radars right now
SIGNAL The UN Treaty That Can Launder Spyware Evidence August 17, 2026
Canada signed the UN Cybercrime Convention. A cross-border evidence-sharing channel that, once ratified, can launder data stolen by spyware.
SIGNAL Apple Private Relay protects you from nothing August 13, 2026
A large share of iCloud+ subscribers take Private Relay for a tunnel. Three WebKit leaks say otherwise, and Apple is being sued for fraud.
Latest
Tutorial Going further MS Pro Episode 2/5
Wazuh, write the rule that catches what you're really after
Writing a custom Wazuh rule isn't about covering everything. It's asking one precise question to a real log, testing it with wazuh-logtest, then shipping it.
Tutorial Going further MS Pro Episode 1/5
Your sovereign SIEM, learn to read it properly then make it act
Wazuh is installed and you don't know what to do with it. Three first jobs in the right order, without drowning in alerts.
Tutorial Getting started
Mac and Tailscale, your private WireGuard network in 15 min flat
Build an encrypted private network across all your Macs in 15 minutes, without opening a port or touching your router. Install, MagicDNS, remote file access, reaching your services without exposing them, the real limits.
IA
See more →
Tutorial AI
MCP servers, the backdoor into your AI
MCP servers give your AI real access to your Mac: files, shell. Handy, but it's a backdoor. Here's how to lock it down.
Tutorial AI Episode 2/2
Install your first AI model locally on Mac
"An AI model that runs 100% offline on your Mac Apple Silicon, in 20 minutes, without typing a single command. Install LM Studio, pick a model in MLX, enter your first prompt, then the ultimate test: cut the Wi-Fi."
Tutorial AI Episode 1/2
Your AI can be turned off by the US, build your own
Access to cutting-edge AI models is becoming an American geopolitical lever. Here's what's running locally on your Mac, with 16 to 32GB RAM, and why that's your real foundation.
AI
Apple Intelligence: What's Really Leaving Your Mac
Your Mac switched Apple Intelligence to ON without telling you. Three layers of processing, only one stays with you. And no one mentions the linked OpenAI account trap.
Tutorials
See more →
Tutorial Going further MS Pro Episode 2/7
Wazuh: Your all-in-one, homegrown Splunk for the price of a VPS
Install Wazuh (manager, indexer, dashboard) on a single node, harden passwords and dashboard in Tailnet-only, adjust JVM heap, initial dashboards without agents.
Tutorial Going further MS Pro Episode 0/7
Build your sovereign SIEM for SMEs, compliant with GDPR/NIS2 without CLOUD Act
You're already forced by GDPR to detect a breach within 72 hours. NIS2 just widened the net by 30x. Build your SIEM now, it's security today and compliance amortised before it lands on you.
Tutorial Getting started
Switching from Gmail to ProtonMail on Mac
Switching from Gmail to ProtonMail on Mac without losing any emails. Import, redirect, contacts, native app or Bridge, the whole process step-by-step.
Tutorial Getting started
Why your mail client is a sieve, and how to fix it
Spy Pixels, HTML Exploits, Outlook Zero-Days. Your Email's Attack Surface is Way Bigger Than "Gmail Reads You". Comprehensive Guide to Fix It.
Tutorial Getting started
Proton Bridge + Apple Mail on Mac: Encryption Without Compromise
How to Set Up Proton Bridge with Apple Mail on Mac. Installation, Exact Settings, Troubleshooting. Zero-Knowledge Encryption + Native Interface.
Comparisons
See more →
Comparison Getting started
kSuite vs Google Workspace, the honest comparison
kSuite Infomaniak or Google Workspace for your Mac? Pricing, encryption, jurisdiction, native Apple apps. The honest comparison, no marketing fluff.
Comparison Getting started Mac security
Little Snitch vs LuLu: Which outgoing firewall for your Mac?
Little Snitch paid and closed-source vs LuLu open-source and free. Max sovereignty on one side, max granularity on the other. How to choose without regrets.
Comparison Getting started Mac security
Password Manager for Mac: Apple, Bitwarden, KeePassXC or 1Password
Apple, Bitwarden, KeePassXC, 1Password: Four radically different approaches. Which one fits your profile and budget?
Comparison Getting started
Apple Mail vs Gmail vs Proton Mail, the honest comparison
Apple Mail, Gmail or Proton Mail? Three philosophies, three contracts. The no-bullshit comparison to choose what really suits you.
Explainers
See more →
Explainer Mac security
Your Mac was patched by XProtect without your knowledge, it's for your own good
On May 11, 2026, 170 npm packages in the TanStack ecosystem were compromised in six minutes. The next day, Apple pushed an XProtect signature onto your Mac without telling you. Here's how to check.
Explainer Getting started
Proton Meet: Encrypted Vision, End-to-End Encryption for Maximum Privacy
Proton encrypts your calls end-to-end using MLS. Even Proton can't snoop on your meetings. How it really differs from Zoom, Teams, and Google Meet.
Explainer
Six months and nineteen global texts, the terrifying convergence
HR 8250, CSAR, verdict Meta, World ID, Online Safety Act. Six months, nineteen texts, four continents. One direction.
Explainer
The DNS, your digital Achilles heel.
You encrypt your emails, pay for a VPN, enable Tailscale. Yet your ISP knows you visited Tinder.com last night. DNS, that's why.
Explainer
NIS2 forces companies to encrypt. CSAR prevents them from really doing it.
NIS2 forces encryption on businesses. CSAR wants to crack it. Same institution. Two incompatible texts. What it means for you.
Mack
Privacy isn't a subscription you pay to Big Tech.
@macsouverain
@macsouverain.bsky.social