PRAGUE TO TBILISI, SPRING TO EARLY SUMMER
For three weeks, Cipher studied the people who had been caught.
Ross Ulbricht's name sat at the top of the research notes, followed by hackers, fraudsters, intelligence operatives and people whose names had appeared in court documents after years of anonymity. Cipher wasn't interested in their exploits. The important question was how investigators had found them.
Sometimes the answer was a technical error. More often it was something ordinary: an old account tied to a personal email address, a message posted years before anyone thought to look, a friendship that had survived longer than it should have. The evidence rarely looked important when it was created. Its significance became clear only after someone began assembling the pieces.
Ulbricht had left connections between his public identity and the early history of Silk Road. Hector Monsegur, the hacker known as Sabu, had cooperated with the FBI after his arrest. In other cases, suspects had reused infrastructure or drawn attention to themselves by boasting. Cipher filled page after page with examples.
The cases disagreed on almost everything except one point. People could not account for every trace they had ever left behind, especially when no one yet knew those traces mattered.
That was the problem Cipher had to solve before writing SPECTRE.
The research also made the personal cost of the plan harder to ignore. Investigators did not have to rely on code or network records. They could speak to friends, question partners, follow payments and look for people who might be persuaded to help. Almost everyone had someone they wanted to protect.
Cipher still had a mother in the United States. Their calls were infrequent, but the relationship was real. A determined investigator might eventually find her. The thought was unpleasant, and Cipher refused to pretend that distance alone made it harmless. There would be no easy way to protect a person who had never agreed to be part of this.
Other attachments were easier to avoid. Cipher had spent much of adult life moving between cities, usually leaving before friendships became lasting obligations. There had been relationships, but none survived the departures. Contract work offered a convincing explanation for the travel, and clients rarely cared where a report was written as long as it arrived on time.
The arrangement had seemed convenient until now. To make it permanent would mean choosing solitude for reasons other than preference. Cipher understood the difference. There were evenings in Prague when an empty apartment felt peaceful, and others when even the sound of a neighbor coming home was a reminder of something missing. Years of deliberate distance would make that worse.
For the moment, Cipher pushed the thought aside. There were practical problems to solve.
The ordinary work history provided a useful foundation. A year in Berlin at a firm testing corporate security. Eight months in Tel Aviv with a startup whose authentication product never quite became what its founders promised. Contract work for banks in Singapore. Another spell in Berlin, then London, Warsaw and, most recently, Prague. To a client or landlord, another move would look like a continuation of the same restless career.
Languages helped too. English was native. German came from Berlin, Polish from Warsaw and Russian from online communities and a brief relationship years earlier. Cipher had learned enough Mandarin through technical forums and work in Shanghai to discuss equipment without relying on a translator. Spanish was improving slowly. A few Irish phrases had come from childhood, and more had been learned later, partly out of affection for the mother who still slipped into them during phone calls.
The Irish passport was genuine. Cipher had obtained it through the mother's citizenship years before SPECTRE was conceived. It allowed travel and work across much of Europe with fewer administrative obstacles, although it did not remove every border check or local rule. For someone planning to move frequently, it was an advantage.
It was also a reason to keep the legitimate side of life looking ordinary.
Tomasz Kowalski was not the name Cipher had been given at birth, but it was now the name on the legal documents used for contracts, flights and rent. Clients would see a cybersecurity consultant who traveled often and preferred working remotely. They would have no reason to imagine that another life was being assembled behind that one.
The first requirement was a computer for the project. A normal retail laptop would be convenient, but convenience carried records: orders, registrations, receipts and identifiable components. Cipher wanted hardware acquired through unrelated purchases and assembled somewhere that could not easily be tied to a long-standing address.
After comparing several options, Cipher settled on China. Shenzhen's electronics markets drew foreign buyers by the thousands. Components could be bought from vendors who dealt with so many customers that another person asking for parts would hardly stand out. Guangzhou, Beijing and Chengdu offered additional places to source what was needed.
The plan was to use Thailand as a base, make separate trips to the four cities and then continue to Georgia for assembly. Tbilisi had affordable rooms, a growing community of remote workers and workshop spaces that might be suitable. It was a city where an independent contractor could arrive with a suitcase and stay for months without attracting particular attention.
Cipher spent another week arranging the trip around ordinary work obligations. There were client calls to reschedule, reports to finish and three months left on the Prague lease. Flights and accommodation were booked under the legitimate name, paid for through normal channels. Nothing about the journey needed to look secret. The purchases that followed would be kept separate from the life that paid for them.
On a Tuesday in April, Cipher flew from Prague through Istanbul to Bangkok.
The backpack held clothes, toiletries and a used MacBook, the machine reserved for invoices, video calls and client reports. It had a normal purchase history and contained nothing connected to SPECTRE. During the flight, Cipher tried to read, slept badly and spent more time than intended thinking about what might go wrong with the plan.
By the time the plane landed, the air outside was heavy with heat and moisture. Bangkok smelled of traffic fumes, frying food and rain on warm pavement. Cipher took a taxi to a hostel in Sukhumvit, checked into a small room and slept through the afternoon.
The first days passed without anything remarkable happening. Cipher worked from cafés, answered messages and appeared on video calls from the hostel. A client asked when the next assessment would be ready. Another wanted a revised invoice. Ordinary questions required ordinary answers, and Cipher was relieved by the familiarity of them.
Then came Shenzhen.
The flight arrived on a Friday. Cipher left a bag at a hostel near Huaqiangbei and walked into the electronics district with the shopping list memorized. The first impression was of movement: buyers squeezing through narrow aisles, vendors talking over one another, delivery carts threading between people who were already carrying more than they could comfortably manage.
Inside the markets, whole sections of a floor were devoted to a single category of parts. Cables hung in loops behind counters. Displays glowed beneath fluorescent lights. Components sat in plastic bins marked with handwritten labels. The air smelled faintly of warm plastic and solder.
Cipher spent the first hour learning the layout. There was no need to hurry. Most people in the market were there to buy something, and the quickest way to attract attention was to behave as though a routine purchase were an emergency.
At a stall in SEG Plaza, a woman in her forties showed Cipher several compatible boards. They discussed specifications in Mandarin. Cipher asked about availability and price, then chose what was needed for the two planned machines. The woman named a price, Cipher offered less, and they settled somewhere between. She wrapped the boards and turned to the next customer before Cipher had reached the end of the aisle.
A separate vendor supplied the processors. After that, Cipher stopped shopping. The rest of the day was spent walking the city, eating from a street stall and taking a few photographs like any other visitor. The following morning, Cipher returned to Bangkok.
Guangzhou came the next week. At Gangding Computer City, Cipher found compatible displays and storage drives. The purchases were made at different stalls, with enough time between them for the visits to feel like what they were supposed to be: an enthusiast looking for parts. There was nothing memorable about either conversation.
In Beijing, the markets around Zhongguancun were more dispersed. Cipher bought memory and visited a repair shop that sold salvaged laptop assemblies. The owner looked at the components on the counter.
"Building something?" he asked.
"A portable workstation," Cipher replied in Mandarin.
"You'd save yourself trouble buying one ready-made."
"Probably."
The owner laughed, found two suitable keyboard assemblies and returned to a radio playing behind the counter. He never asked for a name.
Chengdu was the final stop. The market on Taisheng Road felt more local than the ones in Shenzhen. Cipher bought batteries, touchpads and the remaining cables and connectors, checking each item against the compatibility notes before leaving. By then there were enough parts for two laptops, as planned, though the pieces still looked like little more than an awkward collection of electronics.
Across those weeks, the components passed through Bangkok between trips. Cipher inspected them in the hostel room, then packed them for the next journey. Some parts were secondhand. Others were new. The point was not that they had no history, but that their histories did not point neatly to the same buyer. Cipher knew there were limits to that protection. A determined investigation could find things no buyer had thought to hide.
The next flight went through Istanbul. Cipher stayed three days, visited a museum, walked along the waterfront and finished a client report before boarding a plane to Tbilisi.
Georgia was cooler than Thailand. From the car, Cipher watched old apartment buildings give way to streets of newer cafés, shops and construction sites. Hills rose beyond the city. The driver asked how long the visit would last, and Cipher answered, "A few months, probably. Work."
That was true enough.
The rented apartment was in Vera. It had two small rooms, a kitchen and a bathroom with an unreliable shower. The furniture looked tired, and one of the chairs rocked slightly whenever anyone sat in it. The landlord accepted rent in advance and wanted to know only whether there would be loud parties. Cipher assured him there would not.
The parts went into a suitcase beneath the table. For the first night, Cipher left them there.
Over the following days, Cipher visited a workshop at Fabrika, a former sewing factory now occupied by cafés, studios and coworking spaces. The workshop had the tools needed for electronics work and benches that could be hired. Students worked on small projects. A few regulars seemed to know every drawer and cupboard. No one paid much attention to the new arrival once it became clear that Cipher knew what to do with a multimeter.
Cipher began visiting in the late morning, when the room was usually quiet. The first few sessions were spent checking the workspace and sorting the components. A few things had to be adjusted before the pieces would fit together. Other parts had to be replaced. That was the risk of buying from different sellers in different cities: matching specifications on paper did not guarantee that everything would work together on a bench.
Assembly occupied much of the next three weeks. Cipher had built computers before, but these machines were being prepared for a life unlike anything a normal owner would ask of them. There were wireless functions to disable, recording components to remove and firmware choices to examine. Work that would have taken hours on an ordinary build stretched across days because every change had to be tested.
The motherboard was the first concern. Cipher inspected its connections and removed the Bluetooth hardware that was not needed. The built-in camera was disconnected and taken out. The microphones were physically disabled. These were straightforward decisions. If a device could not capture an image or sound, Cipher would not have to trust software to keep it quiet.
The wireless card required more thought. Cipher replaced the original with a model supported by the planned operating system and capable of presenting changing network identifiers. It did not make the laptop anonymous, but it removed one persistent identifier from routine connections.
Firmware took longer. Cipher had selected compatible hardware with Libreboot in mind, then spent several sessions studying the documentation and making the change. The manufacturer's firmware had been one more closed system whose behavior could not be easily examined. The replacement reduced that uncertainty, though it could not eliminate every risk hidden deeper in the hardware.
When the machine started properly afterward, Cipher let out a breath that had been held through most of the test. It was a small victory, but a necessary one.
The drives were encrypted before they became working storage. Cipher used LUKS and protected the data with an unusually long passphrase generated from dice rolls. The sequence contained eighty words. It was excessive by most standards, and Cipher knew it. A shorter, well-generated passphrase would already have been strong. The extra length mattered less for mathematics than for the feeling of having made a deliberate choice about every part of the machine.
Memorizing it was miserable.
Cipher practiced for days, getting halfway through and losing the order, then starting over. The words gradually became familiar in sequence. At first they had to be recalled consciously; later the rhythm came more easily. There were still mistakes when tired, and Cipher made a point of testing the memory before destroying the written copy.
Once confident, Cipher burned the paper. There was no recovery copy left in a drawer or a cloud account. Forgetting the sequence would mean losing access to whatever had been saved. Cipher had accepted the possibility, though acceptance did not make the risk comfortable.
The second laptop was assembled alongside the first, using the remaining components. It received the same broad modifications and was tested separately. If one machine failed, the project would not immediately stop. That mattered in a life where ordering a replacement to a permanent address was not part of the plan.
Neither laptop resembled a polished commercial product. Small marks remained on the cases, and a couple of fittings had needed patient adjustment. Cipher preferred them that way. They looked like the private projects of a technically minded traveler, which was exactly what they were until SPECTRE entered the picture.
Testing continued into June. Cipher checked the machines under normal use, watched their network behavior and repeated shutdowns to see whether anything unexpected was being retained. The operating system was Tails, started from a USB drive. Working sessions were temporary by design, while files that had to survive a shutdown were deliberately saved in encrypted storage.
Tails provided useful privacy protections, but it was not magic. An unsafe account login, a compromised machine or an ordinary mistake could undo hours of careful preparation. Cipher had spent enough years assessing security systems to distrust claims that any single tool solved everything.
What mattered was whether the complete arrangement could be used consistently, on tired days as well as good ones.
That part took practice.
While the laptops were being built and tested, Cipher started experimenting with a less predictable working routine. One morning meant a café near Rustaveli Avenue. Another meant a library in Vake. On other days Cipher worked from Fabrika, surrounded by people who were too busy with their own screens to be interested in anyone else's.
The visits varied in time and length. Ninety minutes became an upper limit for working in one place, although ordinary client meetings sometimes required different arrangements. Cipher paid for coffee, kept interactions brief and tried not to become a regular whose preferences the staff could predict.
There were limits here too. People noticed more than Cipher could measure. A barista might recognize a face without knowing a name. A camera might record an arrival long after the person working that shift had forgotten it. Cipher practiced the routine because it reduced obvious patterns, not because it could guarantee invisibility.
One afternoon, after several weeks away from a café used early in the stay, Cipher returned and ordered tea. The barista glanced up, took the money and asked whether anything else was needed. There was no sign of recognition. Cipher took the cup to a table, relieved by a reaction that could never be taken as proof.
Through all of this, ViktorTallinn continued to acquire a history online.
The false identity created in Prague now had months of forum posts behind it. Viktor asked questions about security tools, answered others when he knew enough and occasionally got drawn into arguments about the merits of one operating system over another. He sounded like a competent consultant with strong opinions and a tendency to travel. His English sometimes carried the small errors of someone who had learned it later in life.
The posts appeared during the Prague, Thailand and Georgia periods. Their locations fitted a contractor who moved between assignments. Cipher avoided making Viktor either brilliantly insightful or conspicuously foolish. A believable person could not exist only to leave perfect clues for a future investigator.
That was why the false trail troubled Cipher more than expected. It was simple to build a profile. It was harder to make its history feel like the product of real days, real work and an ordinary desire to talk to people. The longer Viktor existed, the more chances there were for a detail to contradict another detail. Even a lie had to be maintained with care.
Cipher reread some of the posts on an evening when the apartment was unusually quiet. There was a thread about an authentication flaw and another about travel-friendly hardware. A third contained a joke that Viktor had made weeks earlier. Two users had replied. One had asked whether he was still in Tallinn.
Cipher closed the page without answering. Viktor could reply another day. That, too, was something a real person might do.
By late June, the essential preparations were complete. The two laptops worked. Cipher knew how they behaved and how easily bad habits could weaken the precautions. The legitimate contracting life continued under Tomasz Kowalski, while ViktorTallinn existed only in the history of online conversations. The workshop would soon be unnecessary.
There were roughly six months until the planned January deployment. Cipher had allowed that time for building SPECTRE, testing it and deciding whether the finished system could be released. On paper it was an ambitious schedule. Cipher had been ambitious before and had learned how often a schedule survived only until the work began.
That Monday evening, the two laptops sat on the apartment table. Outside, Tbilisi was settling into the long light of early summer. A motorcycle passed beneath the window. From somewhere down the street came the sound of plates being stacked and a chair scraping across pavement.
Cipher opened the primary machine and brought up a text editor. For several minutes, nothing was typed.
The hardware had demanded patience and money, but it had also provided an easy distraction. Parts could be checked. Connections could be tested. When a machine failed to start, there was a fault to find and repair. SPECTRE would be different. Its success could mean the exposure of crimes that had gone unpunished. It could also mean the release of information that put people in danger. No amount of care in assembling a laptop could settle that question.
Cipher thought again of the school in Aleppo. The girl beside the ruined classroom had survived because she was sick that morning. Seventeen other children had gone to school and never come home. That photograph had brought the decision into focus, but it could not answer what should happen next. A child who had suffered one injustice could not consent to another committed in her name.
There would be casualties if SPECTRE made the wrong choices. There might be casualties even if it made the choices Cipher believed were right. The number, the names and the consequences were beyond prediction. Cipher had understood that in Prague and had chosen to continue. Here in Tbilisi, the choice felt less like an argument and more like a responsibility that had begun to take shape.
The editor waited on the screen. Cipher created a new file and typed its name.
spectre_core.py
Python was familiar, flexible and suited to the early work. The actual program would soon become more complicated than a single file. Cipher rested both hands on the keyboard, ready to write, and found there was one more night of waiting to get through.
Instead of typing the first line, Cipher saved the empty file and shut down the laptop. The screen went dark. The apartment had grown warm, so Cipher opened the window and stood there for a while, listening to the traffic and the conversations rising from the street.
People were heading home, meeting friends and making plans for tomorrow. For them it was another Monday evening. Cipher wondered how many ordinary evenings would pass before anyone noticed what was being built in this room.
Cipher checked the window latch, turned off the light and went to bed. The empty file would still be there in the morning, waiting to become something that could no longer be called an idea.