Cloud engineer by day, security researcher by habit. Background in pen testing, bug bounties, and security engineering at scale. Mostly self hosted, and write about what actually works for privacy and security , testing a lot of stuff along the way.
Privacy
Both Incogni and Deleteme promise to scrub your personal information from the internet, but which one truly delivers on that promise? Data brokers have made it incredibly easy for anyone to find sensitive information about you with just a few clicks, and that comes with concerns about privacy, identity theft,
Security
Torrenting is a file transfer protocol, not a crime. The BitTorrent protocol itself is used legitimately to distribute Linux distributions, game patches, open-source software, and Creative Commons content. What makes torrenting risky isn't the protocol — it's what most people use it for, and how the
Security
It's a scenario we're all familiar with - your phone rings, displaying an unknown number on the caller ID. Most of us instinctively ignore these calls, letting them go to voicemail. After all, if it's important, the caller will leave a message. However, what if
Privacy
We share more personal information online than ever before. From posting vacation photos on Instagram to checking in at a restaurant on Facebook, our online activities leave a trail of digital breadcrumbs about our lives. While this level of sharing can enhance our connections and allow us to document precious
Security
The convenience of seamless access to online accounts and services comes at a price – the risk of falling victim to a devious form of malware known as "infostealers." These malicious programs are designed to steal sensitive information, bypass complex passwords and two-factor authentication, and ultimately compromise your
Guides
Passkeys are a type of login credential based on public-key cryptography, which eliminates the need for traditional passwords. Instead of memorizing and entering complex passwords, users can authenticate their identities using biometrics (such as fingerprint or facial recognition) or a device PIN. At their core, passkeys consist of two
News
Telegram, the popular messaging app known for its focus on privacy and security, which is highly questionable, has recently introduced a new feature that has left many users and security experts deeply concerned. The "Peer-to-Peer Login" (P2PL) system, as Telegram calls it, promises users a free
Takes
Last month, Apple announced a significant security upgrade to iMessage, likely the biggest since the app's creation. Dubbed PQ3 (post-quantum cryptographic protocol 3), this new encryption protocol will be used in Apple's default messaging application once users update their systems to iOS 17.4, macOS
Security
Have you ever accidentally mistyped the name of a website in your internet browser's address bar and ended up on the wrong site? You try to go to google.com but accidentally type three Os instead of two, or you aim for facebook.com but miss a letter.
News
After years of offering email privacy and security through their web and mobile apps, Proton Mail has finally released official desktop clients for Windows, Mac, and Linux users, three months after debuting in beta. The company aims to provide a "distraction-free" email experience with the new native
Takes
Tor Browser is designed to route traffic through Tor's anonymizing relay network and to leave no browsing history on the local device. The network anonymity works as designed. The local privacy is more nuanced — running Tor Browser on a standard Windows installation leaves traces that a forensic examiner
Takes
In September 2024, German law enforcement publicly confirmed they had deanonymized a Tor user in a criminal case using traffic timing analysis — specifically, by watching which Tor guard nodes the suspect's ISP traffic was connecting to. The attack was ISP-level cooperation, not a Tor network compromise. A