Cloud engineer by day, security researcher by habit. Background in pen testing, bug bounties, and security engineering at scale. Mostly self hosted, and write about what actually works for privacy and security , testing a lot of stuff along the way.
Takes
Tor Browser is designed to route traffic through Tor's anonymizing relay network and to leave no browsing history on the local device. The network anonymity works as designed. The local privacy is more nuanced — running Tor Browser on a standard Windows installation leaves traces that a forensic examiner
Takes
In September 2024, German law enforcement publicly confirmed they had deanonymized a Tor user in a criminal case using traffic timing analysis — specifically, by watching which Tor guard nodes the suspect's ISP traffic was connecting to. The attack was ISP-level cooperation, not a Tor network compromise. A
Guides
Email has become an indispensable communication tool for both personal and business use. However, its popularity has also made it a prime target for cyber attacks. Phishing, spoofing, malware - email inboxes are bombarded daily with threats aiming to steal sensitive information or money. Here is what we can do to
Guides
The internet has become an indispensable part of our lives. We rely on it for work, entertainment, communication, and more. However, as our online presence grows, so does the risk of cyber threats like malware, data breaches, and identity theft. No one is immune - from individuals to large organizations, we
Guides
Password managers have become a necessary tool for protecting online accounts as passwords have grown more complex, yet the best solution remains unclear with many options on the market. This post seeks to cut through the clutter by comprehensively analyzing, comparing, and contrasting features of some of the most popular
Guides
Traditional VPNs and overlay networks solve the same problem — secure remote access — with fundamentally different architectures. Understanding the difference matters because they have opposite default security postures, different operational failure modes, and suit different use cases. The short version: a traditional VPN grants access to a network once authenticated. An
Guides
Overlay VPN networks establish encrypted peer-to-peer tunnels between devices using a coordination server that manages authentication and key exchange — but doesn't route traffic. Once devices authenticate, they connect directly. Most implementations use WireGuard for the actual encryption. This article compares the five main options: Tailscale, Netbird,
Privacy
Mass surveillance isn't one system — it's several operating simultaneously at different layers. Your ISP monitors traffic metadata. Platforms track behaviour through first-party data and cross-site identifiers. Devices collect location, sensor, and behavioural data whether or not apps are open. Data brokers aggregate all of
News
Microsoft Outlook is one of the most widely used email clients in the world, both for personal and business use. However, recent changes to the Outlook software have privacy advocates and researchers concerned about how user data is being handled. Outlook Shares Login Credentials One of the most alarming discoveries
News
Originally published December 2023. Updated April 2026 with Roundcube 1.7 release status and current project health. Nextcloud took over Roundcube in November 2023 — and the obvious question for anyone running Roundcube on a self-hosted mail server is whether the project is still maintained, still improving, and still worth
News
Google recently announced plans to incorporate their own IP protection feature into Chrome by default in future releases. This IP protection will work by routing users' traffic through Google-run privacy proxies. On the surface, Google claims this is to protect users' privacy by hiding their IP addresses
Guides
Storing passwords in your web browser seems like a convenient option but it comes with significant security risks. All major browsers including Google Chrome, Mozilla Firefox and Microsoft Edge offer built-in password managers that store login credentials to streamline signing into sites. However, these browser-based systems were not