hookay
What we learn building a network that knows as little as possible, written down for everyone.
Notes is the public notebook of the teams building Hookay. Two tracks: what we learn from attacking our own systems, and what we learn from building them. Privacy engineering for queer platforms is too important to keep proprietary — so everything here is generalized, and free to reuse.
// Lessons, not blueprints. We publish findings and patterns, never our own topology, configurations, or anything that maps our attack surface.
De-anonymizing the “anonymous”: how location aggregates leak identity, and how to design ones that don't
Aggregated location stats feel safe — “31 people in this area this week” names nobody. Our internal red-teaming shows how cell size, update cadence, and cross-time correlation can still single out individuals, especially in low-density regions. We walk through the attack classes, then derive concrete design rules: minimum cohort thresholds, net-delta updates, and why suppression must fail closed.
Read the full article →Recent publications
One feed per track, or everything at once
No newsletter platform, no open tracking, no click wrapping — just RSS and an email address. Take whichever track you actually read.