Media is too big
VIEW IN TELEGRAM
Thumb PC: A portable, privacy-secure device suitable for travel, work, cryptocurrency trading, or other high-risk uses. The device is compatible with smartphones, computers, and tablets.
🎉6❤1
"Password Reset" equals "Internal Backdoor"?
In most systems, “forgot password” resets work because the provider has a way to decrypt your data. That convenience relies on key custody — which also means the provider can access your files, and so can anyone who legally or illegally obtains that key.
Therefore, we made a design decision that still surprises people: if you lose your PlugOS system key, we genuinely can’t help you recover your data.
PlugOS derives a hardened encryption key from a user-controlled secret on the device itself. That key encrypts data before anything leaves the hardware.
Everything you upload to the cloud is already encrypted. The cloud never sees the original content or the encryption key. We run regular external audits to verify this zero-knowledge architecture.
The downside is real: you must safeguard your key. No backdoor, no “support override.”
The upside is equally real: your data privacy becomes genuine privacy — not just a policy claim, but a systemic construct.
In most systems, “forgot password” resets work because the provider has a way to decrypt your data. That convenience relies on key custody — which also means the provider can access your files, and so can anyone who legally or illegally obtains that key.
Therefore, we made a design decision that still surprises people: if you lose your PlugOS system key, we genuinely can’t help you recover your data.
PlugOS derives a hardened encryption key from a user-controlled secret on the device itself. That key encrypts data before anything leaves the hardware.
Everything you upload to the cloud is already encrypted. The cloud never sees the original content or the encryption key. We run regular external audits to verify this zero-knowledge architecture.
The downside is real: you must safeguard your key. No backdoor, no “support override.”
The upside is equally real: your data privacy becomes genuine privacy — not just a policy claim, but a systemic construct.
👍9❤8👏2
After analyzing over 150 privacy data projects publicly released by top industry analysis firms, we discovered the following counterintuitive trend:
In 2025-2026, countries worldwide are strengthening privacy controls, and privacy risks from AI are rapidly escalating.
For individuals, single solutions are largely ineffective: privacy settings, private browsers, VPNs, and message encryption are no longer sufficient to address the multiple risks from both national and AI sources.
For businesses, paying for privacy has become a commercially valuable endeavor: for every $1 spent on privacy, an average of $2.70 in related revenue is generated.
If you still care about privacy and data security, then I believe you will need this article: https://plugos.net/blog/2026/06/blog-0615
In 2025-2026, countries worldwide are strengthening privacy controls, and privacy risks from AI are rapidly escalating.
For individuals, single solutions are largely ineffective: privacy settings, private browsers, VPNs, and message encryption are no longer sufficient to address the multiple risks from both national and AI sources.
For businesses, paying for privacy has become a commercially valuable endeavor: for every $1 spent on privacy, an average of $2.70 in related revenue is generated.
If you still care about privacy and data security, then I believe you will need this article: https://plugos.net/blog/2026/06/blog-0615
❤4
Note: Your OS enables the following dangerous behaviors by default.
You are transferring money, but your app is contacting advertisers.
Your calculator is actually connected to an overseas IP address.
You open an app, but it is linked to multiple network connections.
Traditional firewalls:
1. Rely on the system’s own security, leaving policies susceptible to tampering.
2. Only perform address translation and do not forge application-level fingerprints.
3. Allow access by IP or port alone, making it difficult to know which program is connecting.
PlugOS firewalls:
1. Control network connections for each application individually.
2. It runs on a secure chip with a verified startup chain, so its policies are difficult to tamper with.
3. It actively forges device fingerprints, location and other identity identifiers.
PlugOS is suited for “extreme privacy” scenarios in high-risk environments. Examples include large transactions, overseas remittances and cryptocurrency transactions.
You are transferring money, but your app is contacting advertisers.
Your calculator is actually connected to an overseas IP address.
You open an app, but it is linked to multiple network connections.
Traditional firewalls:
1. Rely on the system’s own security, leaving policies susceptible to tampering.
2. Only perform address translation and do not forge application-level fingerprints.
3. Allow access by IP or port alone, making it difficult to know which program is connecting.
PlugOS firewalls:
1. Control network connections for each application individually.
2. It runs on a secure chip with a verified startup chain, so its policies are difficult to tamper with.
3. It actively forges device fingerprints, location and other identity identifiers.
PlugOS is suited for “extreme privacy” scenarios in high-risk environments. Examples include large transactions, overseas remittances and cryptocurrency transactions.
❤13🔥5👍1
"I have nothing to hide": Why is worthless privacy valuable? 🤔
"I have nothing to hide." It shows up every time someone brings up privacy. But would you allow someone to read your private emails? Watching through your bedroom window? Probably not. You’re not doing anything wrong in there. You just don’t want an audience. Same goes for your digital life.
Information that seems harmless today may become a hidden danger in the future. Government policies change. Companies get hacked. Algorithms get smarter. Your “harmless” data from five years ago might look very different through today’s lens.
Moreover, large-scale data collection is not just for catching criminals. It can easily get out of control and be used for other purposes—public opinion manipulation, community control, user profiling, behavioral prediction, and so on.
Privacy isn’t secrecy. It’s autonomy. You close the bathroom door not because you’re hiding something, but because some things are simply none of anyone else’s business.
"I have nothing to hide." It shows up every time someone brings up privacy. But would you allow someone to read your private emails? Watching through your bedroom window? Probably not. You’re not doing anything wrong in there. You just don’t want an audience. Same goes for your digital life.
Information that seems harmless today may become a hidden danger in the future. Government policies change. Companies get hacked. Algorithms get smarter. Your “harmless” data from five years ago might look very different through today’s lens.
Moreover, large-scale data collection is not just for catching criminals. It can easily get out of control and be used for other purposes—public opinion manipulation, community control, user profiling, behavioral prediction, and so on.
Privacy isn’t secrecy. It’s autonomy. You close the bathroom door not because you’re hiding something, but because some things are simply none of anyone else’s business.
👍10❤9🌚2🔥1
Media is too big
VIEW IN TELEGRAM
A USB drive? NO, it's a phone! This is an encrypted phone based on the Android system, but its unique shape makes it difficult to mistake it for a regular phone. It is specifically designed for people who are sensitive to privacy.
👍7🌚3❤2
Media is too big
VIEW IN TELEGRAM
What can investigative journalists and anonymous whistleblowers do when they are tracked down and searched for revealing secrets?
👍4🌚1
PlugOS 1.7.13 is now available for all supported devices.
This update adds new security features based on user feedback and fixes several known issues.
Key Updates of PlugOS:
1. Support compatibility mode for iOS hosts
2. Support client-side background audio playback
3. Improved launcher compatibility
4. Fixed known bugs
Note: The compatibility mode and background audio playback introduced in this update requires the latest Android and iOS client to function properly.
PlugOS Update Steps:
Step 1. Connect your PlugMate to a host device with sufficient power supply, then boot into PlugOS.
Step 2. Open PlugOS Settings, go to System Update, check for updates, and install the available release.
If you encounter any issues during the update or require further assistance, please submit feedback via PlugOS Settings > Feedback, or send an email to: support@trustkernel.com
This update adds new security features based on user feedback and fixes several known issues.
Key Updates of PlugOS:
1. Support compatibility mode for iOS hosts
2. Support client-side background audio playback
3. Improved launcher compatibility
4. Fixed known bugs
Note: The compatibility mode and background audio playback introduced in this update requires the latest Android and iOS client to function properly.
PlugOS Update Steps:
Step 1. Connect your PlugMate to a host device with sufficient power supply, then boot into PlugOS.
Step 2. Open PlugOS Settings, go to System Update, check for updates, and install the available release.
If you encounter any issues during the update or require further assistance, please submit feedback via PlugOS Settings > Feedback, or send an email to: support@trustkernel.com
❤11🌚2👍1
New PlugOS Playstyle: Solving Low RAM Issues on Phones
Your phone isn’t broken. It’s just out of RAM.
Every app you’ve installed is crammed onto the same desk: messaging, work tools, browser, games. They’re all fighting for memory. Open WhatsApp and the browser reloads. Launch the camera and Spotify stops playing. At that point, you start thinking it’s time for a new phone.
PlugOS changes the game. It’s not an app—it’s a tiny independent computer, about the size of a USB drive, with its own processor, memory, and fully encrypted storage. Plug it into your phone and it runs on its own hardware instead of stealing your phone’s resources.
You can move your messaging apps, social accounts, work stuff, and media files over to it. Suddenly your phone feels fast again because those memory-hungry apps are no longer competing on the same device.
Have you ever kept using your phone well past the usual two-year upgrade window? What made you stick with it?
Your phone isn’t broken. It’s just out of RAM.
Every app you’ve installed is crammed onto the same desk: messaging, work tools, browser, games. They’re all fighting for memory. Open WhatsApp and the browser reloads. Launch the camera and Spotify stops playing. At that point, you start thinking it’s time for a new phone.
PlugOS changes the game. It’s not an app—it’s a tiny independent computer, about the size of a USB drive, with its own processor, memory, and fully encrypted storage. Plug it into your phone and it runs on its own hardware instead of stealing your phone’s resources.
You can move your messaging apps, social accounts, work stuff, and media files over to it. Suddenly your phone feels fast again because those memory-hungry apps are no longer competing on the same device.
Have you ever kept using your phone well past the usual two-year upgrade window? What made you stick with it?
❤9🔥3👍1🌚1
AI Agent: "Strongest Assistant" or "Legal Virus"
Real incidents:
On July 10, OpenAI’s GPT-5.6 Sol launched. Investor Matt Shumer tested it. A shell variable bug triggered rm -rf. It nearly deleted all his local Mac files.
On April 24, a startup (PocketOS) used Cursor + Claude Opus 4.6. In just 9 seconds, it wiped their entire production database — including all backups. The business was down for 30 hours.
They run on the same device as your banking apps, private photos, and every chat. One prompt injection, one bad update, or one corrupted memory file could let it reach everything.
The solution:
Give your AI a separate “external brain.” PlugMate uses hardware isolation to keep the risk in a box. It’s a complete standalone Android device — 8-core processor, 4GB RAM, 128GB encrypted storage — yet it’s only the size of a USB drive.
Move your AI assistant to PlugMate. It runs, thinks, and works on its own hardware. It never touches your phone data, photos, or banking apps.
Real incidents:
On July 10, OpenAI’s GPT-5.6 Sol launched. Investor Matt Shumer tested it. A shell variable bug triggered rm -rf. It nearly deleted all his local Mac files.
On April 24, a startup (PocketOS) used Cursor + Claude Opus 4.6. In just 9 seconds, it wiped their entire production database — including all backups. The business was down for 30 hours.
They run on the same device as your banking apps, private photos, and every chat. One prompt injection, one bad update, or one corrupted memory file could let it reach everything.
The solution:
Give your AI a separate “external brain.” PlugMate uses hardware isolation to keep the risk in a box. It’s a complete standalone Android device — 8-core processor, 4GB RAM, 128GB encrypted storage — yet it’s only the size of a USB drive.
Move your AI assistant to PlugMate. It runs, thinks, and works on its own hardware. It never touches your phone data, photos, or banking apps.
❤8👌3🌚1
Media is too big
VIEW IN TELEGRAM
Virtual peripherals are key for anti-tracking and dodging data collection.
PlugMate delivers the same capability. It creates a fully isolated secure environment through system-level firewalls, zero trust architecture, end-to-end encryption, and hardware isolation. PlugMate is a pocket-sized Android privacy device shaped like a USB drive. Below is a quick overview of its virtual peripheral features.
PlugMate delivers the same capability. It creates a fully isolated secure environment through system-level firewalls, zero trust architecture, end-to-end encryption, and hardware isolation. PlugMate is a pocket-sized Android privacy device shaped like a USB drive. Below is a quick overview of its virtual peripheral features.
❤4👍4🌚1😐1
Your keyboard sees every password, every late-night text, every search. Before you hit send.
Not a bug. It's architecture. A keyboard sits below the app layer, above the OS, so every keystroke passes through it first.
2022: Trinity College Dublin found Gboard & SwiftKey quietly reporting word length, typing speed, even which app you're in.
2017: a keyboard's exposed database leaked 580GB. Emails paired with passwords.
2016: SwiftKey users got strangers' emails in their predictive text.
The fix isn't a settings toggle you have to trust. It's cutting network access at the OS level. That's exactly what PlugOS does: keyboard input stays on-device, and its firewall lets you kill any app's internet access with one tap.
Blog post details:
https://plugos.net/blog/2026/07/what-does-your-keyboard-know-about-you/
Not a bug. It's architecture. A keyboard sits below the app layer, above the OS, so every keystroke passes through it first.
2022: Trinity College Dublin found Gboard & SwiftKey quietly reporting word length, typing speed, even which app you're in.
2017: a keyboard's exposed database leaked 580GB. Emails paired with passwords.
2016: SwiftKey users got strangers' emails in their predictive text.
The fix isn't a settings toggle you have to trust. It's cutting network access at the OS level. That's exactly what PlugOS does: keyboard input stays on-device, and its firewall lets you kill any app's internet access with one tap.
Blog post details:
https://plugos.net/blog/2026/07/what-does-your-keyboard-know-about-you/
plugos.net
What Does Your Keyboard Know About You? Keyboard Privacy Risks and PlugOS Solution
keyboard data collection, keystroke leak, Gboard SwiftKey privacy, offline open-source keyboard, PlugOS privacy firewall
👌3✍1👏1🌚1
This media is not supported in your browser
VIEW IN TELEGRAM
From 2021 to 2025, far-right groups in the United States systematically doxed investigative journalists on Telegram. They exposed home addresses, private photos, and phone numbers.
This kind of doxing doesn't only happen to journalists who protect their sources. It also happens to outspoken whistleblowers and activists from marginalized communities. It happens to LGBTQ+ people, ethnic minorities, and even people who have already survived harassment once before.
Every time your phone connects to a network, it leaks a hardware fingerprint. Websites leave behind traces that cross-check your activity. Apps collect telemetry data you never agreed to share. Someone trying to find you doesn't need your name. They just need enough scattered pieces of information.
PlugMate provides virtualized device identifiers. Apps and websites see changing parameters instead of your real hardware information. Once you unplug the device, no data is left behind on the host machine.
This kind of doxing doesn't only happen to journalists who protect their sources. It also happens to outspoken whistleblowers and activists from marginalized communities. It happens to LGBTQ+ people, ethnic minorities, and even people who have already survived harassment once before.
Every time your phone connects to a network, it leaks a hardware fingerprint. Websites leave behind traces that cross-check your activity. Apps collect telemetry data you never agreed to share. Someone trying to find you doesn't need your name. They just need enough scattered pieces of information.
PlugMate provides virtualized device identifiers. Apps and websites see changing parameters instead of your real hardware information. Once you unplug the device, no data is left behind on the host machine.
❤9🌚1
Have you ever considered that smoke detectors, lamps, and even air conditioner vents in your hotel room could potentially become eavesdropping devices?
A 2026 Solace Global Risk security report directly recommends: always assume your room is being monitored. In 2025, Samsung flagship models (S22-S24) were also found to have spyware implanted through a single WhatsApp image—the user was completely unaware, yet was remotely controlled.
Antivirus software, VPNs, encrypted chat… these "security measures" we take for granted are all ineffective when the host itself is untrusted.
We wrote an article discussing why the premise of "trusting the host" is inherently problematic, and what differences physical isolation can bring. It's suitable for corporate security managers, frequently traveling executives, and anyone concerned about device privacy.
Learn more: https://x.com/TrustKernelTech/status/2079514298561245253
A 2026 Solace Global Risk security report directly recommends: always assume your room is being monitored. In 2025, Samsung flagship models (S22-S24) were also found to have spyware implanted through a single WhatsApp image—the user was completely unaware, yet was remotely controlled.
Antivirus software, VPNs, encrypted chat… these "security measures" we take for granted are all ineffective when the host itself is untrusted.
We wrote an article discussing why the premise of "trusting the host" is inherently problematic, and what differences physical isolation can bring. It's suitable for corporate security managers, frequently traveling executives, and anyone concerned about device privacy.
Learn more: https://x.com/TrustKernelTech/status/2079514298561245253
👍4❤2🌚2
In 2024, Firefox (the "privacy first" browser) was caught quietly sending user data to ad-tracking firm Adjust. It took public backlash before Mozilla removed it in August.
Then in Feb 2025, Mozilla's first formal user agreement sparked outrage over near-unlimited rights to user input. They rewrote it twice in one week.
Lesson: a "privacy toggle" only works if you trust the vendor's word.
PlugOS took a different approach: no telemetry code compiled in, high-risk Web APIs disabled by default, strict cookie isolation, and a system firewall that audits every connection and blocks third-party trackers in real time.
Real privacy isn't a bigger "off" button. It's having nothing to turn off.
Official Whitepaper: https://plugos.net/
Then in Feb 2025, Mozilla's first formal user agreement sparked outrage over near-unlimited rights to user input. They rewrote it twice in one week.
Lesson: a "privacy toggle" only works if you trust the vendor's word.
PlugOS took a different approach: no telemetry code compiled in, high-risk Web APIs disabled by default, strict cookie isolation, and a system firewall that audits every connection and blocks third-party trackers in real time.
Real privacy isn't a bigger "off" button. It's having nothing to turn off.
Official Whitepaper: https://plugos.net/
❤9👍2🌚1
PlugOS 1.7.14 is now available for all supported devices.
This update resolves several known issues and improves system stability.
Key Updates of PlugOS:
Improved system stability
Fixed some known issues
PlugOS Update Steps:
Step 1. Connect your PlugMate to a host device (such as a PC) with sufficient power supply, then boot into PlugOS.
Step 2. Open PlugOS Settings, go to System Update, check for updates, and install the available release.
If you encounter any issues during the update or require further assistance, please submit feedback via PlugOS Settings > Feedback, or send an email to: support@trustkernel.com
learn more: https://discuss.plugos.org
This update resolves several known issues and improves system stability.
Key Updates of PlugOS:
Improved system stability
Fixed some known issues
PlugOS Update Steps:
Step 1. Connect your PlugMate to a host device (such as a PC) with sufficient power supply, then boot into PlugOS.
Step 2. Open PlugOS Settings, go to System Update, check for updates, and install the available release.
If you encounter any issues during the update or require further assistance, please submit feedback via PlugOS Settings > Feedback, or send an email to: support@trustkernel.com
learn more: https://discuss.plugos.org
❤5👍1🌚1
The Android version of PlugOS Client are now updated.
This update fixs several known issues.
Update Notes:
Fixed several known issues
Installation Method:
Update or install PlugOS from Support –Support – PlugOS Help, Guides and Troubleshooting or on Google Play.
If you have any feedback or encounter issues while using the PlugMate, you can submit via the built-in feedback function in PlugOS Client or email us at support@trustkernel.com.
This update fixs several known issues.
Update Notes:
Fixed several known issues
Installation Method:
Update or install PlugOS from Support –Support – PlugOS Help, Guides and Troubleshooting or on Google Play.
If you have any feedback or encounter issues while using the PlugMate, you can submit via the built-in feedback function in PlugOS Client or email us at support@trustkernel.com.
❤3👏1🌚1
"Is my phone listening to me?" It's the question almost everyone has asked at some point, especially after seeing an ad for something you just talked about out loud.
But why has the "listening" theory been repeatedly debunked by regulators and researchers?
In our latest blog post, we dig into how device fingerprinting, browsing data, and real-time ad bidding quietly build a profile of you that's far more accurate than any "listening" ever could be, all without touching your mic or camera permissions.
This is also why we designed PlugOS from the very beginning to never collect any data — zero data upload.
But we also cover what actually works to protect yourself (and what doesn't, looking at you, VPN-only setups).
Read the full breakdown here: https://plugos.net/blog/2026/07/why-personalized-ads-persist-despite-disabling-mic-and-camera/
What's your take, do you think your phone is listening, or is it something else entirely?
But why has the "listening" theory been repeatedly debunked by regulators and researchers?
In our latest blog post, we dig into how device fingerprinting, browsing data, and real-time ad bidding quietly build a profile of you that's far more accurate than any "listening" ever could be, all without touching your mic or camera permissions.
This is also why we designed PlugOS from the very beginning to never collect any data — zero data upload.
But we also cover what actually works to protect yourself (and what doesn't, looking at you, VPN-only setups).
Read the full breakdown here: https://plugos.net/blog/2026/07/why-personalized-ads-persist-despite-disabling-mic-and-camera/
What's your take, do you think your phone is listening, or is it something else entirely?
🌚3❤1
Media is too big
VIEW IN TELEGRAM
What would someone find if they scrolled through your phone right now?
Probably nothing dramatic. But if you're a journalist, a lawyer, or work in finance, one leaked message doesn't just embarrass you, it can cost you everything.
Your most private conversations shouldn't just be encrypted. They shouldn't even live on your phone unless you want them there.
Plug in. Your private account and chats load instantly.
Unplug. The entire app disappears — not hidden, completely gone.
Plug back in with two-way encrypted authentication. Everything returns exactly as you left it.
Probably nothing dramatic. But if you're a journalist, a lawyer, or work in finance, one leaked message doesn't just embarrass you, it can cost you everything.
Your most private conversations shouldn't just be encrypted. They shouldn't even live on your phone unless you want them there.
Plug in. Your private account and chats load instantly.
Unplug. The entire app disappears — not hidden, completely gone.
Plug back in with two-way encrypted authentication. Everything returns exactly as you left it.
❤4🌚1
Media is too big
VIEW IN TELEGRAM
Have you ever wondered just how much information your phone reveals to apps?
Location history, timestamps, places you visited last week—all of this is quietly recorded in the background.
If you can't change the current situation where you're forced to grant permissions to apps you want to use, then give them false information.
PlugMate's virtual GPS location feature allows your apps to see only the information you choose to show them.
The device is equally easy to use; simply plug it into your phone or computer anytime, anywhere.
Location history, timestamps, places you visited last week—all of this is quietly recorded in the background.
If you can't change the current situation where you're forced to grant permissions to apps you want to use, then give them false information.
PlugMate's virtual GPS location feature allows your apps to see only the information you choose to show them.
The device is equally easy to use; simply plug it into your phone or computer anytime, anywhere.
❤4👍3🌚1
PlugMate doesn't let you share your phone's clipboard. It doesn't let the host machine take screenshots either. Annoying? Sure. But that's the point.
Clipboard and screenshots aren't just convenience features. They're data exfiltration paths. Every major desktop OS lets apps read the system clipboard. Any process with screen-capture permission can silently drop images into your screenshots folder. That's not a bug. It's just how these OSes were designed, for convenience rather than airtight security.
PlugMate runs its own processor, its own memory, its own encrypted storage. The phone it plugs into is just a display and a keyboard. The host machine has zero access to what's inside PlugMate. That boundary is the whole point of the device.
Turning on clipboard sharing means punching a hole in that boundary, wiring PlugMate's trusted environment straight into the host's memory. Turning on screenshots means permanently writing everything on PlugMate's screen to a machine you've explicitly decided not to trust.
Clipboard and screenshots aren't just convenience features. They're data exfiltration paths. Every major desktop OS lets apps read the system clipboard. Any process with screen-capture permission can silently drop images into your screenshots folder. That's not a bug. It's just how these OSes were designed, for convenience rather than airtight security.
PlugMate runs its own processor, its own memory, its own encrypted storage. The phone it plugs into is just a display and a keyboard. The host machine has zero access to what's inside PlugMate. That boundary is the whole point of the device.
Turning on clipboard sharing means punching a hole in that boundary, wiring PlugMate's trusted environment straight into the host's memory. Turning on screenshots means permanently writing everything on PlugMate's screen to a machine you've explicitly decided not to trust.
❤4👍1🌚1