peter bassill · operator

Privacy — writing by Peter Bassill

peter@hardened:~$ ls -t writing/privacy/

Privacy · page 2 of 4

Personal, family and boardroom privacy, and keeping children safe online. 47 articles

  • The browser in the browser

    An age check inspects the visitor in front of it. But what if the visitor is a data centre in Frankfurt, streaming the real site back as video to a child in Fife? Part 5: browser-as-a-service, the school-proxy underground, and the bypass I sell as enterprise security.

    • 8 min read
  • The dark routes

    Every enforcement idea so far has needed a server to find and block. Tor and i2p are built specifically so there isn't one. Part 4: what "just block the dark web" actually asks for, why it fails, and — the twist parents don't expect — why this is the route I worry about least.

    • 8 min read
  • The federation problem

    Enforcement law assumes someone to enforce against — an office, a legal team, revenue to fine. Then there's Mastodon: thousands of servers, many run by one volunteer, in someone else's country. Part 3: what happens to the teen internet rules when there is no company to write to.

    • 8 min read
  • What counts as social media?

    The ban list names the platforms parents can already spell. But grooming happens in a chat window inside a children's game. Part 2: why the law regulates brands while the harm follows a function — and how to audit your household by the function instead.

    • 8 min read
  • What would actually work

    Six parts on why the plan fails earns one obligation: say what I'd build instead. The finale — a blanket under-18 rule, enforced at the device, attached to the function, with the exceptions designed in. Not perfect; just honest about where the line can actually be held.

    • 9 min read
  • Children and social media in 2026: the conversation now

    Revisiting the 2023 post on social media. The platforms have changed. The Online Safety Act has taken effect. Australia banned under-16 social media. The Smartphone Free Childhood movement has changed what is socially possible.

    • 8 min read
  • It wasn't a misdirected email: the NHS Forth Valley breach

    The headlines called it an email blunder. It wasn't — a staff member moved a spreadsheet of 150 maternity patients' data to their own personal inbox. Why that distinction matters, where NHS Scotland keeps going wrong, and the controls that actually stop it.

    • 10 min read
  • Everyone in the shop is a suspect

    Sainsbury's is tripling its Facewatch facial recognition, scanning every shopper's face against a private watchlist to catch a few. It's biometric special-category data, the ICO's own guidance calls it the hardest case to justify, and 'it works' is not the same as 'it's lawful.'

    • 11 min read
  • School edtech in 2026: the lay of the land

    Updating the 2023 post on school accounts and edtech, three years and one AI cycle later. What schools collect now, what the regulator has done, and the new category that did not exist in 2023 — AI tutors, AI markers, AI safeguarding tools.

    • 7 min read
  • Least certain exactly where it has to decide: the Home Office age guesser

    A facial age-estimation system whose error margin is widest at the one line it exists to draw is not a decision aid. Setting the immigration politics aside, it fails on accuracy and privacy alone.

    • 6 min read
  • The digital footprint we create for children, three years on

    Revisiting the 2023 post on children's digital footprints, with what has actually changed by 2026 — the Children's Code enforcement, generative AI making the training-set argument operational, and Smartphone Free Childhood moving the position to the mainstream.

    • 7 min read
  • How to Use Tor: A Practical Guide to Anonymous Browsing

    Install, configure and use the Tor Browser on Linux and Windows with bridges, security levels and operational discipline.

    • 12 min read
  • How to Use I2P: A Practical Guide to the Invisible Internet

    Install and configure the I2P router on Ubuntu, access eepsites, and understand how I2P differs from Tor.

    • 11 min read
  • Hardening Firefox for Privacy

    Tor is for when you need anonymity. This is for the everyday browser — configured so it stops volunteering information about you to every site you visit.

    • 13 min read
  • How to Use GPG to Secure Your Email

    Generate a GPG key pair, publish your public key, encrypt and sign email on the command line and in Thunderbird.

    • 14 min read
$ finger peter

Get in touch

Email is fastest. If your message says who you are, what you would like, and a rough sense of when, you will get a useful answer within two working days.
EMAILcomms [at] peterbassill {dot} com
GITHUB@pbassill
CRESTEuropean Council · IR Pan Europe
LOCATIONUnited Kingdom · en_GB
no tracking · no third parties · stored only in my inbox
anti-abuse check: waiting for the form…