Cloud engineer by day, security researcher by habit. Background in pen testing, bug bounties, and security engineering at scale. Mostly self hosted, and write about what actually works for privacy and security , testing a lot of stuff along the way.
Takes
Social media platforms are the hunting grounds for sextortionists. The ease of creating fake profiles, the difficulty of getting platforms to act, and the algorithmic amplification of content all contribute to the problem. While platforms like Meta have safety policies against this kind of abuse, their effectiveness is questionable. Their
Security
You probably unlock your phone 100 times a day. But have you ever stopped to think about what's really happening when you press your finger to the screen? Choosing how to lock your device feels simple, but the security implications of using your fingerprint versus a PIN are
Security
When was the last time you turned your phone completely off? Not just locked it, but fully powered it down. We treat our phones like permanent fixtures. But this convenience comes at a hidden cost to our security and privacy. We diligently install updates and use strong passcodes, yet we
Takes
ExpressVPN was acquired by Kape Technologies for $936 million in September 2021. Kape was formerly known as Crossrider — a company that built browser extension infrastructure used to inject ads, redirect traffic, and collect user data before rebranding in 2018. The same company now owns ExpressVPN, Private Internet Access, CyberGhost, and
Takes
Smart TVs have revolutionized how we consume entertainment, offering instant access to streaming services like Netflix, Hulu, and YouTube. However, these devices often collect and share detailed data about your viewing habits, often without clear consent. At the heart of this issue is Automatic Content Recognition (ACR), a technology that
Takes
Let’s be real—nobody likes those sketchy pop-ups screaming, “Your PC is infected! Call this number now!” They’re the internet’s equivalent of a shady guy in a trench coat trying to sell you a “fix.” Microsoft Edge is stepping up to tackle these scareware scams with
News
In a notable move, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) has directed senior government officials to switch to encrypted messaging services like Signal. This decision was prompted by a telecommunications breach by Chinese hackers that targeted the communications of "highly targeted individuals." The Importance of
Guides
For many, SMS texting is synonymous with convenience. It's a ubiquitous communication channel, readily available on nearly every mobile phone. However, this accessibility comes at a cost. SMS was designed in the 1980s, long before the rise of sophisticated cyberattacks and widespread data breaches. As a result, SMS
Privacy
Most people use one or two email addresses for everything. Here's what that costs you, what the realistic fixes are, and how to build an email setup that doesn't leak data every time you sign up for something.
OSINT
Google Dorking, also known as Google Hacking, is a powerful technique that allows users to leverage advanced search operators to uncover hidden information on the internet. Part 1: Google Dorking Fundamentals Understanding Google Dorking What is Google Dorking/Google Hacking? Google Dorking refers to the practice of using advanced search
Privacy
If you're looking for an efficient way to track usernames across social media platforms, the Sherlock Python script is the perfect tool for the job. Whether you're an ethical hacker conducting OSINT (Open Source Intelligence), a brand manager monitoring your online presence, or just someone curious
News
On July 24, 2024, millions of Google Chrome users on Windows suddenly found themselves locked out of their accounts as their saved passwords mysteriously vanished. This incident, while resolved relatively quickly, serves as a stark reminder of the vulnerabilities inherent in our current approach to password management. What Happened? On