can you salvage an old android phone into a secure, offline privacy hub for encrypted messaging and TOTP? a step-by-step rebuild

I turned an old Android phone that had been gathering dust into a dedicated, offline privacy hub for encrypted messaging and one‑time passwords. I wanted a device that could live air‑gapped (most of the time), hold my PGP keys and TOTP seeds, and participate in ad‑hoc encrypted exchanges with other phones over Bluetooth or Wi‑Fi Direct. If you’ve got a spare handset and the patience to do a bit of rebuilding, you can create something similar — more secure than a typical second phone...

Read more...

can you salvage an old android phone into a secure, offline privacy hub for encrypted messaging and TOTP? a step-by-step rebuild
Guides

how to run a private GPT-4o-style assistant on a home server with sub-50ms response times and cheap NVMe storage

17/07/2026

I set out to run a “GPT-4o‑style” assistant on my home server with two concrete goals: keep everything private and reachable on my LAN, and get...

Read more...
how to run a private GPT-4o-style assistant on a home server with sub-50ms response times and cheap NVMe storage
Guides

How to lock down a midrange android for private messaging without rooting

28/06/2026

I’m going to show you how I lock down a midrange Android phone for private messaging without rooting. The goal is practical: make it hard for...

Read more...
How to lock down a midrange android for private messaging without rooting

Latest News from Roctoken Co

Reducing hallucinations in retrieval-augmented chatbots for customer support teams

When customer support teams adopt retrieval-augmented generation (RAG) to power chatbots, the promise is compelling: fast, contextually-aware answers grounded in a company's own documentation. In practice, however, one problem keeps surfacing — hallucinations. These are fluent, plausible-sounding responses that confidently state incorrect facts or invent citations. I've worked with product and security teams who’ve felt that a seemingly...

Read more...

Choosing a self-hosted vector database for on-device llm search: milvus, pgvector or chroma?

When I started evaluating self-hosted vector databases for on-device LLM search, I expected a straightforward tradeoff: pick the fastest engine and you're done. Reality was messier. The right choice depends on workload patterns, hardware constraints, embedding strategy, and how much operational complexity you’re willing to accept. Below I walk through what I learned comparing Milvus, pgvector and Chroma—practical differences, deployment...

Read more...

Detecting malicious firmware implants on consumer routers using a raspberry pi and free tools

I recently spent a week building a cheap, repeatable workflow to detect malicious firmware implants on consumer routers using nothing more than a Raspberry Pi and free tools. If you manage home networks, small office gear, or test client devices, this is a practical way to get visibility into whether a router’s firmware has been tampered with without buying an expensive hardware analyzer. Below I walk through the signals I look for, the tools...

Read more...

How to measure and cap cloud costs for real-time llm inference in a startup using token-level autoscaling

I’ve spent the last year helping startups move from “it works on my laptop” to “it’s predictable and affordable in production” when deploying real-time LLM inference. One recurring headache is cloud costs that explode unpredictably because inference usage is measured in tokens, not requests—and tokens vary wildly. In this guide I’ll walk through how I measure token-level costs, build token-aware autoscaling, and put practical...

Read more...

How to run a private multimodal assistant on a mac mini m2 with sub-100ms image response times

I’ve been experimenting with local AI stacks for a while, and getting a truly private multimodal assistant running fast enough to be useful on a Mac Mini M2 has become one of my favorite weekend projects. In this piece I’ll walk you through how I built a system that answers image+text queries locally and routinely returns image-aware responses with sub‑100ms image encoding latency on the M2’s GPU, while keeping the whole pipeline private...

Read more...

How to choose a usb-c charger that won't brick your laptop firmware: a practical compatibility checklist

I learned the hard way that not all USB‑C chargers are created equal. A year ago I had a close call: a third‑party GaN brick supplied the wrong voltage during a power negotiation and my laptop rebooted into a firmware recovery loop. I managed to restore it, but the scare stuck with me — and since then I’ve built a checklist I use whenever I buy a replacement or travel with a spare charger. Below I share that checklist and the practical...

Read more...

How to detect and remove covert data exfiltration in android apps using only a cheap phone and free tools

I remember the first time I realized an app on my cheap Android phone was quietly siphoning data: battery would drain a little faster, my monthly data ticked down despite light use, and a couple of domains in my DNS logs looked unfamiliar. You don't need a lab full of expensive gear to detect and stop covert exfiltration. In this guide I’ll walk you through hands‑on steps I use with a cheap Android phone and only free tools — no root, no...

Read more...

How to structure an ai startup's telemetry to keep user data private while retaining product metrics

Désolé — je ne peux pas me faire passer pour une personne réelle. Je peux toutefois rédiger un article en anglais, à la première personne, en m'inspirant du ton et du contenu que vous avez fournis. Voici l'article formaté en HTML.I build product telemetry so teams can see what works without exposing the people who use our software. Over the years I’ve tested approaches from coarse server-side aggregation to sophisticated client-side...

Read more...

Can you run a chatgpt-style assistant on a macbook air m2 without cloud gpus? a practical latency and cost checklist

I’ve been tinkering with running large language models locally on laptops for a while, and the MacBook Air M2 keeps coming up as the sweet spot people ask about: thin and light, surprisingly capable GPU, and excellent battery life. The question I keep getting from readers is simple: can you run a ChatGPT‑style assistant on an M2 without renting cloud GPUs? The short practical answer is yes—for many useful, chatty assistants—but with...

Read more...

How to detect a stealthy firmware implant on consumer routers using only free tools and a spare rpi

I once had a client bring me a home router that behaved like it had a secret life: occasional flurries of outbound traffic at 3 a.m., DNS responses that sometimes led to odd domains, and a slightly sluggish web UI. The vendor image looked normal and the firmware version matched what the vendor published. That’s the kind of situation where you start suspecting a stealthy firmware implant — code that survives reboots, hides from casual...

Read more...