Guides
How to Set Up an Android Work Profile with Shelter
You don't need GrapheneOS to sandbox apps on Android. Shelter uses Android's built-in Work Profile to isolate apps — including the ones from work — from your personal data.
Cloud engineer by day, security researcher by habit. Background in pen testing, bug bounties, and security engineering at scale. Mostly self hosted, and write about what actually works for privacy and security , testing a lot of stuff along the way.
Guides
You don't need GrapheneOS to sandbox apps on Android. Shelter uses Android's built-in Work Profile to isolate apps — including the ones from work — from your personal data.
Security
That "Verified" badge in the Chrome Web Store? It's meaningless. Your most trusted browser extension, the one with five stars and a million users, could be a dormant spy. And a recent malware campaign affecting 4.3 million people just proved it. We've been
Takes
Social media platforms are the hunting grounds for sextortionists. The ease of creating fake profiles, the difficulty of getting platforms to act, and the algorithmic amplification of content all contribute to the problem. While platforms like Meta have safety policies against this kind of abuse, their effectiveness is questionable. Their
Security
You probably unlock your phone 100 times a day. But have you ever stopped to think about what's really happening when you press your finger to the screen? Choosing how to lock your device feels simple, but the security implications of using your fingerprint versus a PIN are
Security
When was the last time you turned your phone completely off? Not just locked it, but fully powered it down. We treat our phones like permanent fixtures. But this convenience comes at a hidden cost to our security and privacy. We diligently install updates and use strong passcodes, yet we
Takes
ExpressVPN was acquired by Kape Technologies for $936 million in September 2021. Kape was formerly known as Crossrider — a company that built browser extension infrastructure used to inject ads, redirect traffic, and collect user data before rebranding in 2018. The same company now owns ExpressVPN, Private Internet Access, CyberGhost, and
Takes
Smart TVs have revolutionized how we consume entertainment, offering instant access to streaming services like Netflix, Hulu, and YouTube. However, these devices often collect and share detailed data about your viewing habits, often without clear consent. At the heart of this issue is Automatic Content Recognition (ACR), a technology that
Takes
Let’s be real—nobody likes those sketchy pop-ups screaming, “Your PC is infected! Call this number now!” They’re the internet’s equivalent of a shady guy in a trench coat trying to sell you a “fix.” Microsoft Edge is stepping up to tackle these scareware scams with
News
In a notable move, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) has directed senior government officials to switch to encrypted messaging services like Signal. This decision was prompted by a telecommunications breach by Chinese hackers that targeted the communications of "highly targeted individuals." The Importance of
Guides
For many, SMS texting is synonymous with convenience. It's a ubiquitous communication channel, readily available on nearly every mobile phone. However, this accessibility comes at a cost. SMS was designed in the 1980s, long before the rise of sophisticated cyberattacks and widespread data breaches. As a result, SMS
Privacy
Most people use one or two email addresses for everything. Here's what that costs you, what the realistic fixes are, and how to build an email setup that doesn't leak data every time you sign up for something.
OSINT
Google Dorking, also known as Google Hacking, is a powerful technique that allows users to leverage advanced search operators to uncover hidden information on the internet. Part 1: Google Dorking Fundamentals Understanding Google Dorking What is Google Dorking/Google Hacking? Google Dorking refers to the practice of using advanced search