How to Self-Host SearXNG: A Private Metasearch Engine with HTTPS
A step-by-step SearXNG setup using CapRover, with complete configuration files, password protection, HTTPS, search checks, and troubleshooting.
What Breaks on GrapheneOS (and What Doesn't): The Honest Compatibility Guide
Banking apps, Google Wallet, Android Auto, games, battery — a scannable works/breaks reference for GrapheneOS in 2026, the named apps that block it, why, and the workarounds that actually help.
Notable Security News & Advisories
A maintained reference of critical vulnerabilities, security incidents, and industry shifts covered on this site. Organized by year. Each entry has the essential facts, current status, and what to do about it. 2026 CVE-2026-24061 — GNU InetUtils telnetd Authentication Bypass (February 2026) Severity: 9.8 Critical · Status: Patched in
DarkSword iOS Exploit: Is Your iPhone Still Vulnerable?
Six iOS flaws chained in JavaScript gave attackers root on an iPhone from one page load. The code is public. Here is how to check your exposure.
VPN Industry 2026: Who Owns What, Who Can You Trust
One company now owns four of the most-advertised VPN brands and just went fully private — no more public filings. Here's what the VPN industry actually looks like in 2026, and the questions worth asking before you hand a provider your traffic.
How to Sync Ghost Members to Kit Using n8n (No Zapier Needed)
Ghost removed its native Kit integration. Zapier's Ghost trigger is broken on self-hosted v5+. Here's how to wire Ghost members directly into Kit using n8n — free, self-hostable, ten minutes.
How to Self-Host n8n on a VPS
A production-ready n8n install on a Linux VPS — Docker Compose with PostgreSQL, nginx reverse proxy, SSL, firewall rules, and correct persistence so nothing breaks on restart.
How to Audit Your Password Manager (And Actually Fix What You Find)
Most people set up a password manager and never open the health reports. Here is the audit that finds the weak, reused and dead credentials still sitting in your vault.
iPhone Privacy Setup Guide (iOS 18 / 2026)
The gap between Apple's privacy marketing and what iOS actually does — and the settings that close it. Covers ADP, Siri data transmission, ATT limits, and the UK ADP removal story.
How to Use Shodan to Find What Your Server Is Leaking
Shodan indexes every open port and service banner on the public internet. Here's how to use it to see what your own servers are exposing — before someone else does.
How to Use theHarvester for OSINT: See What Attackers See Before They Do
theHarvester pulls emails, subdomains, and IPs from public sources in seconds. Run it on your own domain and you might not like what you find.
How to Self-Host Vaultwarden: Your Own Bitwarden Server on a VPS
Vaultwarden is an unofficial Bitwarden-compatible server written in Rust. Run it on a $5 VPS and your passwords never touch someone else's infrastructure.