the joins framing is the right mental model, most people stack tools and call it a day while their alias and device and timing all point back at them. one gap unknown means the boundary has a hole, not that the tools failed. keeping the identities from ever bridging is the real work
Three privacy tools do not create one anonymity boundary.
I audited 18 fields across Monero, SimpleX, and Cryptomator. The joins were alias, device, network path, counterparty, timing and size, and recovery.
One gap remains unknown, not safe.
https://cypherpunkguide.com/en/privacy/privacy-stack/?ref=x
the joins framing is the right mental model, most people stack tools and call it a day while their alias and device and timing all point back at them. one gap unknown means the boundary has a hole, not that the tools failed. keeping the identities from ever bridging is the real work