Privacy OSBuilt to stay out of your business

bypassOS

An operating system built around one job: keep what's yours — your traffic, your identity, your access to information — yours. Not a feature bolted onto something else. The whole point.

In active development
case file — no. 001
SubjectbypassOS
AccessOpen to all
PurposePrivacy · free access to information
StatusActive development
CostFree, always
ClassificationNone required
// why this exists
Privacy isn't something a government or a platform grants you. It's something you maintain — quietly, by default, in the parts of the system nobody thinks to check. The moment you stop maintaining it is usually the moment it's already gone.
— the working thesis behind bypassOS
Case logA small, honest reference

Control doesn't look the same everywhere

These examples are arranged from the most restrictive environments to more targeted forms of control. This is a qualitative snapshot, not an official ranking: laws, enforcement and access can change quickly.

KP · 01
North Korea
Most people cannot access the global internet. Ordinary users are limited to Kwangmyong, a tightly controlled domestic intranet.
No global access
CN · 02
China
The Great Firewall blocks major international services and filters traffic at scale. Circumvention tools are restricted and heavily monitored.
System-wide firewall
IR · 03
Iran
The state maintains a filtered national network and has repeatedly restricted or cut international access during protests and political unrest.
Shutdowns
TM · 04
Turkmenistan
Independent media and many online services are blocked, while VPN use is restricted and access remains unreliable for ordinary users.
Near-total blocking
RU · 05
Russia
A centralized filtering system blocks platforms, news sources and circumvention services, with restrictions expanding during political crises.
Centralized blocking
BY · 06
Belarus
Independent outlets and messaging platforms face recurring blocks, and internet access has been disrupted around protests and elections.
Targeted blocks
MM · 07
Myanmar
The military authorities have cut mobile data in affected regions and blocked independent news and communications services.
Military restrictions
TR · 08
Turkey
Courts and regulators can order websites and social platforms to be blocked or slowed, especially during periods of unrest.
Platform takedowns
Severe — access is broadly restricted
Active — targeted blocks and shutdowns

For current reporting, compare independent monitoring from Freedom House, OONI and Access Now rather than treating this list as a live index.

MethodThe idea, simplified

Don't break down the wall — go around it

Three ways to reach a blocked destination. In every diagram the direct line is cut by the filter — the working route just refuses to look like something worth blocking. Pick a method to see how.

Fig. 01 — one encrypted tunnel to a server outside the filter
PC Server BLOCKED AT EDGE VPN
Blocked route
Encrypted tunnel
Reaches server
01

VPN

A single encrypted tunnel to a server sitting outside the filtered network. Your provider only sees traffic going to the VPN — not where it ultimately ends up. The VPN forwards you to the blocked destination and relays the answer back. Simple and fast, but everything rides on trusting that one server.

Fig. 02 — three relays, no single hop knows both ends
PC Server BLOCKED AT EDGE GUARD relay 1 MIDDLE relay 2 EXIT relay 3
Blocked route
Layered relay chain
Reaches server
02

Tor

Traffic is wrapped in layers of encryption and bounced through three volunteer relays — guard, middle and exit. Each hop peels one layer, so no single relay knows both who you are and where you're going. The block at your edge never applies because, to your provider, you're only talking to the entry relay.

Fig. 03 — a peer-to-peer mesh with no single line to cut
PC Server BLOCKED AT EDGE I2P PEERS · garlic routing
Blocked route
Peer mesh
Reaches server
03

I2P

A closed, peer-to-peer network where every participant also routes traffic for others. Requests travel through short, one-way chains of peers — "garlic routing" bundles several messages together so patterns are hard to trace. There's no single exposed line for a filter to cut, and most services live inside the network itself.

Standing rulesWhat bypassOS won't do

A short list of promises, kept by design

Not marketing language — these are constraints the system is built around, not settings you have to remember to turn on.

§1

No telemetry, ever

Nothing phones home. No usage stats, no crash reports, no analytics pipeline hiding behind a "help us improve" toggle.

§2

Open to audit

Nothing that matters to your privacy should have to be taken on faith. What the system does on the network should be something you — or anyone — can verify.

§3

No account required

No sign-up, no email, no phone number to start using it. Access to a private, working internet connection shouldn't come with a registration form.

§4

Leaves no trace by default

The system is designed to forget the session the moment it ends, unless you deliberately tell it to remember.

§5

Resists fingerprinting

Your device shouldn't be trivially recognizable to a network, a router, or a browser just by showing up.

§6

Yours to lock, on your terms

Persistent storage, when you want it, is encrypted with a key only you hold — not one held in escrow "for your convenience."

StatusHonestly labeled

What's working today, and what's still being built

No inflated roadmap. Here's what actually runs right now, and what's being actively built on top of it.

Working now

A minimal, readable base system

Built without bundled telemetry or preinstalled black boxes — what's installed is what you asked for, nothing extra riding along.

A hardened, minimal kernel

Configured deliberately: it's clear which modules are active and why each one is there.

No default network fingerprint

The system doesn't announce itself to every network it joins.

In progress

Built-in Tor / I2P routing

Traffic routed through the onion network and I2P without manual setup at the user level.

Amnesic mode

Boots with no trace on disk — the system doesn't remember the session after shutdown unless you say otherwise.

MAC and fingerprint randomization

Reduces how recognizable your device is on a local network and in the browser.

Encrypted persistent storage

An optional volume for anyone who needs data to survive between sessions — locked with a key only you know.

AccessHow to follow the project

This is still a construction site — and that's fine

There's no public repository yet

bypassOS currently exists as a working build on its author's own machine. The public source, build instructions, and a first bootable image will land here once it's actually ready for other people's hands — no promised dates, just an honest status.

Public repository — coming soon