Loading Hacking Lives...

Sovereign Digest: August 2026

Curated Insights on Sovereignty, Mobility, Privacy & Plan B

Your monthly claim to sovereignty — a sharp 10-minute read with morning coffee.

Get Sovereign Digest in your inbox: one email a month, no spam.

Missed July?
Sovereign Digest: July 2026 (EN)

Events

First Plan B conference in Czech Republic: flag theory, OPSEC, contingency planning, asset protection, thinking long term. Three keynote halls, 20 speakers. VIP Fireside Chats, VIP rooms and Limited Opsec Apparel for all VIP tickets.
Chaincamp the next day. Use promo 21CZ for 10% off your ticket and 5% to the Czech non-profit bitcoiner community budget.

What to expect from Plan B Conference (CZ language)
Tickets
PLAN B Line-up

Global Mobility & Plan B

Remoteness, food and energy independence, and low strategic value point to New Zealand, Argentina and Paraguay. Islands fail on supply chains. Usable citizenship favors AR/PY; NZ still has the most private bunkers and safe houses. Check blast radius before you treat any city as far enough.

Read more: @stalliondelsur, Blast-radius map

High quality of life at lower cost: Porto, Split, Valencia, Prague, Madrid; Curitiba and Florianópolis from Latam. Most US and EU metros sit in the expensive, weaker-value zone.

cities for value.jpeg

Plus a 20% cushion, estimated for Americans: Singapore about $1.1M, US about $738k, Brazil about $268k. Excludes taxes and healthcare.

cost-to-retire.jpeg

UBS counted about 441k new millionaires in the US. With a big gap the UK, France, Spain, Japan and India followed.
new-millionaires.jpeg

Just a little bit of funny topic: Tropical and subtropical belt, warm year-round. A simple climate filter when you pick a Plan B base :-)
palm trees.jpeg

A second citizenship is also a set of obligations: descent filing deadlines, generation caps, inherited military service, exit taxes, loss through absence. Most of this only becomes visible after the window to act has closed.

Read more:IMI Daily

Order 147/2026 sent the 2025 two-generation restrictions to the EU Court of Justice. The law stays in force; pending cases are suspended.

Read more:CNN

After the Supreme Court blocked a broader order, two 6 August Executive Orders limit automatic citizenship for certain children of non-citizens and go after commercial birth arrangements.

Read more: @WhiteHouse

Five-year visa, spouse and minors included, if you keep $150k in crypto through local providers, or $60k in traditional instruments with top up if the value drops. The tax certificate still wants 90 days a year. Flat tax $60k on foreign income. Visa, not citizenship-by-investment.

Read more: @thealepalombo

The ministry says a network used falsified valuation reports to hit the investment threshold. Saving a few dollars on a "shady" intermediary can cost you the whole CBI investment and end up without citizenship.

Read more: Turkey Today

After conviction under political articles: no property, car or business registration, blocked banking and passports, no consular help abroad. Lawyers have called it a “law on the de facto deprivation of citizenship.”

Read more: @visegrad24

Police raided pool-villa projects. 33 companies suspected of using Thai nominee shareholders to hold land worth about 300 million baht. Part of a nationwide push against illegal foreign land structures.

Read more: @ThaiEnquirer

The Spanish enclave was overwhelmed with illegal migrants from Africa. And socialist Spain is not acting.

Read more: @Inevitablewest

Latam

State Department travel safety guide signals “normal precautions.” Level 1 for Paraguay and Argentina. Chile, Brazil, Uruguay, Bolivia and Costa Rica are Level 2. Venezuela is Level 4.

Read more: @780AM

seguridad-latam.jpeg

1,499 exit blocks, 1,000 inadmissions, 144 expulsions. Clean documents matter more than they did last year, all is being more scrutinized.

Read more: Migraciones

Fake or borrowed papers at the border. Fraudulent IDs are being hunted. Not easy and not smart to move around with a red notice from Interpol on your head.

Read more: Migraciones

Fitch sovereign-credit map: investment grade - speculative - high risk - very high risk - default. Paraguay sits together with Uruguay, Chile and Peru in the investment grade rank.
inversion-latam.jpeg

St. Gallen’s EQx 2026 tracks whether a country’s elites turn political power into economic value. Argentina dropped 34 places. The diagnosis is blunt: elites still hold power, but they convert it badly. They extract rents instead of funding productive investment. That is how a country slides, not overnight, but year after year.

Read more: Infobae

Peaceful nuclear use, uranium and rare-earth mapping, possible small modular reactors next to hydro. It is presented as part of broader strengthened U.S.-Paraguay ties under the current administrations (including security cooperation)

Read more: Latin Times

Brazil about 12 million, Argentina 3.5 million, Chile 500k, Bolivia 375k, Paraguay 300k.

Read more: @statsglobe

Táva Comedor, 1688 Restó and Toro Restaurante join the list. Contemporary local cooking, Italian-Paraguayan heritage and the parrilla. Paraguay now has six spots on a platform you cannot apply to.

Read more:Asunción Times , Top 50 restaurants:

el-tejano.jpg

Digital Privacy & Sovereignty

Stolen staff and contractor logins, not a clever exploit. Income, tax IDs and part of the land registry went up for sale. The agency cut access in June and still missed the theft until the dump appeared. State tax files are a honeypot.

Read more: French Breaches

A malicious email can escape the sandbox and hit the UI. Tokens, IPs, fake login overlays, even prompt injection into inbox AI. No JavaScript needed. Webmail is still a weak OPSEC link.

Read more: The Hacker News

DNS prefetch, WebAuthn and WebTransport sit outside the relay path. A site can see your real IP even with Private Relay on. A system VPN is stronger.

Read more: Malwarebytes

Model-level marks survive copy-paste. Files get signed C2PA provenance metadata. Driven by EU AI Act transparency rules and applied worldwide. AI output is increasingly fingerprintable. For more freedom, go to the Github and install the patch which is solving that or use Chinese open-weight models. Yes, EU is happy and at the same time it makes no sense.

Read more: @ns123abc

Marketed as EU/GDPR. Same updates via a UAE shed, a day apart. Hidden site text told AI chatbots there were “no Russia affiliations.” Jurisdiction theater on a password vault is a hard fail.

Read more: OCCRP

TSE-mandated ranking hide for about 665 official campaign accounts on For You unless you already follow them.

Read more: X Censorship Monitor

A faulty November 2023 software update opened a four-day window of unauthorized online-banking withdrawals. Funds went mainly to Brazil. One vendor patch can empty accounts.

Read more: BKA

Conversation Stenography lets two people have a completely private conversation through any messaging app (WhatsApp, Telegram, Signal, iMessage, email, or even Instagram DMs). Your secret messages are encrypted and then disguised as innocent, natural-sounding text generated by a local AI model. No one reading the chat can tell there's a hidden message.

Read more: GitHub

The app scans Bluetooth IDs. Default range is about 10 meters. It cannot tell glasses from a Quest headset, and paired devices often go quiet. Imperfect, but a practical counter.

Read more: TechCrunch

Abliteration finds the “I won’t say that” direction in the weights and projects it out. No retraining. The model keeps most capability and loses the vendor’s no. Relevant if you run local models and care who decides what they may not say. It changes the weights.

Read more: Hackers Arise

Timeline, multi-track, local processing. Footage stays on your machine. Classic editor is live at opencut.app. A rewrite is underway: Rust core, plugins, MCP, headless render. MIT license.

Read more: OpenCut on GitHub

Once a special-forces tool, thermal imagers are now widely available to non-state actors. Anti-thermal covers and ponchos exist and spread fast. A short clip shows the difference between a normal umbrella and an anti-thermal one under a thermal camera. Get your anti-thermal garments, worth it. You don't have to trust me, you can verify.

Read more: @turkhafiza2

Kate Rose’s adversarial garments print repeating fake license-plate patterns. ALPR systems (Flock and similar) scan for rectangles + characters, log the junk as real plates, and pollute their location databases. First shown at DEF CON 2019; still a clean idea against mass plate tracking.

Read more: @Rainmaker1973

A Mexican passport bearing Tristan Tate’s photo and date of birth but the name “Vladimir Scorpius” (a James Bond novel villain) is now cited by UK and US prosecutors. Mexico says no such passport was ever issued. The document is being used to argue he is a flight risk. James Bond idea executed poorly.

Read more: @Gadget440

Taxes, Asset Protection & Flag Theory

Final rule effective 14 August 2026. Domestic entities are exempt; previously reported US-person data is to be deleted. Foreign companies registered in the US still report foreign beneficial owners. The Wyoming / US LLC stack just got simpler.

Read more: FinCEN

1 January 2025 through 31 December 2029. Only sales via SEC-licensed Thai exchanges, brokers or dealers. Unlicensed or foreign trades, staking and mining stay taxable. Individuals only. Keep records.

Read more: HLB Thailand

Dual-earner couple with two kids. At €2,000 gross they keep about €2,350. At €5,000 gross they keep about €2,650. Three thousand euros more work yields only ~€300 net after benefit phase-outs (Wohngeld, Kinderzuschlag) plus rising tax and social contributions. High transfer withdrawal rates kill the incentive. People do the math.

Read more: @kryptoedgeyt

germany income.jpeg

Whoever ships packaged goods into an EU country is the “producer” there. Separate EPR registration, fees and reporting per Member State. Non-established sellers often need a local authorised representative in each one. No real volume exemption. One small seller estimates ~€10k/year just to keep shipping across Europe. One market in theory only.

Read more:@illyism

Bitcoin & Digital Assets

Tether is supposedly audited for financial year 2025 but no one has seen it :-) It stays "private".

Read more: Big4News

Real estate still dwarfs everything. Next are coal, oil and government bonds in the $100T+ range. Gold sits around $30T. Bitcoin at ~$1.27T ranks just behind Samsung and ahead of Berkshire. Scale check: most “big” names are still tiny next to land and energy.

Read more: Globalstats

Victims beaten, burned and forced to hand over ~$30k in crypto while captors demanded $150k. Ordeal ended after a police chase; six people convicted. CertiK recorded 50+ wrench attacks in H1 2026, France the clear hotspot. KYC and tax data leaks turn visible wealth into physical risk.

Read more: Coin Bureau

Fulfillment partner Shipmonk breach exposed names, phone numbers, email and shipping addresses of ~11.7k customers (plus partial data on another ~2k). Orders from May–Aug 2026 to US, UK, Sweden, Colombia, Brazil, Italy, Portugal. Trezor systems and the devices themselves were not compromised. Data now circulating. Phishing and physical targeting risk rises for those identified as hardware-wallet owners.

Read more: @DarkWebInformer

Third-party analytics vendor breach. Names, national ID numbers, phones, emails, IPs, bank details and public wallet addresses exposed. Funds, private keys and passwords said safe. Company’s own systems not compromised. Another reminder that regulated KYC data is a high-value target even when the exchange itself holds.

Read more: @efenigson

Months of automated, AI-assisted probing and several contained exploits outpaced a small bootstrapped team’s ability to patch. Services disabled indefinitely. Non-custodial by design means that no user funds are at risk; cooperative and unilateral refunds still work. Lightning and Liquid swap rails just got paused.

Read more: @Boltzhq

Since firmware 4.0 (March 2021), seed generation used MicroPython’s software Yasmarang PRNG instead of the STM32 hardware TRNG. Mk2/Mk3 entropy collapsed to ~40 bits; Mk4/Mk5/Q to ~72. Hundreds of BTC already swept. Updating firmware does not fix an old seed generated on the affected devices. Generate a new seed on another device and move funds. Do not generate the new seed on an unpatched Coldcard.

Read more: Bitcoin Optech Insider

BIP39’s 2048-word list is only ~11 bits per word. A real dictionary of ~250k English words is ~18 bits. Seven truly random words already deliver ~126 bits which is effectively unbrute-forceable. Write the passphrase down and store it separately from the seed. Memory fails; losing it means permanent loss of funds.

Read more: @stalliondelsur

Mandatory signaling opened at block 961,632. Enforcing nodes rejected a non-signaling AntPool block and followed a minority branch. That chain mined two blocks (OCEAN), then stalled with ~2.5% miner support. fork.observer shows mainnet forks and invalid branches in real time. This is how BIP-110 both started and ended.

Read more: fork.observer

Load crypto straight from your wallet, get a virtual Visa card, spend anywhere Visa works. Claimed support for Apple Pay and Google Pay, rotating cards, no ID. Privacy-first model with the usual caveats of no-KYC card services. I am wondering how it'll work when going publi from beta program. Will it work or end up like a Aqua Dophin wallet?

Read more: @offgridcash

Podcasts

Plan B #19 — Filip Molčan and his thoughts on Plan B, safe houses and real estate in foreign countries

Latest Plan B episode (Czech only).

Read more: Watch here

Biohacking

Chocolate glucose: cacao % is the thing

100% cacao barely moves glucose. 75% creates a small rise. 50% a bigger one. White chocolate spikes the hardest, lots of sugar, almost no real cacao. Lower cacao percentage simply means more added sugar and less of the actual bean.

Read more: @glucosegoddesss

Stay sharp, stay mobile, stay private. See you next month.

Jan