Cloud engineer by day, security researcher by habit. Background in pen testing, bug bounties, and security engineering at scale. Mostly self hosted, and write about what actually works for privacy and security , testing a lot of stuff along the way.
Guides
In today’s digital age, where our smartphones hold a wealth of personal information, ensuring the security of our devices has become more important than ever. With the multitude of options available to lock and unlock our smartphones, it can be overwhelming to determine the most secure and practical method.
Privacy
Every app on your phone is collecting something. The question is what, and whether you can do anything about it. Since 2022, both Apple and Google have made this easier to check — though with some important caveats about how much you can actually trust what they tell you. Here'
Privacy
As third-party cookies are gradually being phased out, the digital advertising industry is seeking new solutions to maintain targeted advertising and measurement capabilities while respecting user privacy. Google’s proposed Topics API has gained attention as a potential replacement for third-party cookies, but it has also raised concerns
Guides
AdGuard Home is a network-wide software for blocking ads and tracking. After you set it up, it’ll cover ALL your home devices, and you don’t need any client-side software for that. It operates as a DNS server that re-routes tracking domains to a “black hole”
Guides
CapRover is an extremely easy to use app/database deployment & web server manager. It is a FOSS alternative to Cloudron. Similar products include YunoHost and Yatch. It’s blazingly fast and very robust as it uses Docker, nginx, Lets Encrypt and NetData under the hood behind its simple-to-
Cloud Security
A collection of awesome resources to help you get started with AWS penetration testing. Tools Pacu The AWS exploitation framework, designed for testing the security of Amazon Web Services environments. Prowler Prowler is an Open-Source Security tool for AWS, Azure and GCP to perform Cloud Security best practices assessments,
News
If you are using Google Chrome as your web browser, you may be at risk of a serious security threat. A zero-day vulnerability, identified as CVE-2023-2136, has been discovered and exploited by malicious actors in the wild. This vulnerability allows an attacker to execute arbitrary code on
Guides
I am a huge fan of free and open source software, and password managers are no exception. I have been using Bitwarden for a while now but I recently decided to check out Passbolt. Passbolt is an open-source password manager that allows you to keep all your passwords centralized
News
On March 14, 2023, Microsoft released its monthly security updates, which included patches for 76 vulnerabilities across various products. Among them was CVE-2023-23397, a critical elevation of privilege vulnerability in Microsoft Outlook that was actively exploited by threat actors before it was fixed. The vulnerability allows an attacker
Privacy
Cloud storage has revolutionized the way we store and access data, providing us with the convenience of accessing our files from anywhere with an internet connection. However, with convenience comes the potential for risks, particularly when it comes to privacy. It’s crucial to understand the implications of uploading files
Guides
Really Simple Syndication, or RSS for short, is a technology that has been around for quite some time now. It is widely used to keep track of updates from websites and blogs without having to visit them one by one. With an RSS reader, you can get a listing of
Privacy
In recent years, privacy concerns have come to the forefront of many people’s minds. One of the areas that have sparked concern is the data collection practices of popular office suites, specifically Microsoft’s Office Suite. In this blog, we will take a closer look at the privacy concerns