Cloud engineer by day, security researcher by habit. Background in pen testing, bug bounties, and security engineering at scale. Mostly self hosted, and write about what actually works for privacy and security , testing a lot of stuff along the way.
Guides
Running your own WireGuard VPN server means you control what gets logged — nothing, unless you configure it otherwise. The protocol is ~4,000 lines (vs OpenVPN's 70,000+), has been in the Linux kernel since 5.6, and on Ubuntu 22.04 you just install it. This guide
Guides
Fail2ban watches your logs and bans IPs that hammer your server. Here's how to set it up properly — and when to pick it over CrowdSec.
Guides
Email aliases keep your real address out of breach data and spam lists. Here's how to set up SimpleLogin or Addy.io from scratch — first alias, browser extension, catch-all, and which one to actually pick.
Guides
Pi-hole blocks ads and trackers for every device on your network at the DNS level. Here's how to set it up on a Raspberry Pi or in Docker.
Guides
Using a custom domain with Proton Mail means your email address lives at a domain you own — not @proton.me. That distinction matters more than it sounds. If you ever need to move providers, your address moves with you. The contacts and services that have your email don't
Guides
Server tokens, TLS config, security headers, rate limiting, bot blocking — the full Nginx hardening stack with current syntax and the OCSP stapling warning that most guides miss.
Guides
Bitwarden's free tier does more than most paid password managers. Here's the complete setup: vault, browser extension, mobile app, 2FA on the vault itself, and an emergency access sheet you'll actually be glad exists.
Guides
UFW makes iptables manageable — but most tutorials skip the IPv6 caveat that leaves half your firewall off. Here's the full setup.
Privacy
Most people install uBlock Origin and never touch it again. That leaves a lot of privacy protection on the table. Here's how to configure it properly — filter lists, medium mode, dynamic filtering
Guides
Most people have extensions they installed years ago and haven't thought about since. Here's how to go through them systematically and cut what shouldn't be there.
Guides
You got a breach notification email. Or you saw your email address in a news story. Or someone told you the company you use got hit. Here's what to actually do — in order, without panic, focused on what matters. Step 0: Confirm the Breach Is Real Not every
Guides
You flashed GrapheneOS. Now what? This covers the actual setup sequence — verification, lock screen, the Google Play decision, browser choice, and the permission pass that makes the whole thing worthwhile.