Cloud engineer by day, security researcher by habit. Background in pen testing, bug bounties, and security engineering at scale. Mostly self hosted, and write about what actually works for privacy and security , testing a lot of stuff along the way.
Passkey adoption has hit real numbers — 800 million Google accounts, Amazon's 175 million users, Microsoft making them the default. Here's what going passwordless actually looks like in practice, and where the friction still is.
Security
Six things to run on any fresh Ubuntu or Debian VPS before you do anything else — in the correct order, with the reasoning behind each step.
Security
CrowdSec is a free, open-source intrusion prevention system that shares threat intelligence across every instance running globally. This guide covers installation, bouncers, configuration, and everything in between.
Security
Google told developers their API keys weren't secrets — and they were right, until Gemini launched on the same key infrastructure. Truffle Security found 2,863 exposed keys in the wild, including on Google's own websites.
Takes
You already know your phone tracks you. That's table stakes at this point. But what about your car? Your smart TV? The robot vacuum quietly circling your living room? These are not hypothetical threats. Real companies have sold real data on real people — sometimes without their knowledge, sometimes
Privacy
Ring ran a Super Bowl ad this year about finding lost dogs. The technology they were advertising scans your neighborhood's cameras in real time using AI, it's on by default, and Ring is already planning to expand it beyond pets. They said the feature was "
Privacy
In 2019, Google published a blog post calling browser fingerprinting "wrong." Their exact words: it "subverts user choice." They positioned themselves as advocates for a more private web — the company fixing tracking, not enabling it. In February 2025, Google announced that advertisers on its network can
Privacy
Something about the Apple settlement that doesn't get discussed enough: the conversations Siri captured weren't edge cases. They were the kind that happen when you forget the device is there — which, with always-on assistants, is most of the time, which is exactly the problem. The
Security
Someone's therapy session ended up in Google's search index last summer. Not because they were hacked. Not because OpenAI had a breach. Because they clicked a Share button — the one ChatGPT had quietly added to conversations — without realizing that "sharing" could mean "publicly
Security
Fortinet has recently confirmed active exploitation of a critical authentication bypass vulnerability in its FortiCloud Single Sign-On (SSO) service. Despite an earlier patch, attackers are successfully compromising FortiGate firewalls, prompting urgent action from affected organizations globally. Understanding the Vulnerability The vulnerability, tracked as CVE-2025-59718 and CVE-2025-
Guides
You don't need GrapheneOS to sandbox apps on Android. Shelter uses Android's built-in Work Profile to isolate apps — including the ones from work — from your personal data.
Security
That "Verified" badge in the Chrome Web Store? It's meaningless. Your most trusted browser extension, the one with five stars and a million users, could be a dormant spy. And a recent malware campaign affecting 4.3 million people just proved it. We've been