Cloud engineer by day, security researcher by habit. Background in pen testing, bug bounties, and security engineering at scale. Mostly self hosted, and write about what actually works for privacy and security , testing a lot of stuff along the way.
Guides
Email has become an indispensable communication tool for both personal and business use. However, its popularity has also made it a prime target for cyber attacks. Phishing, spoofing, malware - email inboxes are bombarded daily with threats aiming to steal sensitive information or money. Here is what we can do to
Guides
The internet has become an indispensable part of our lives. We rely on it for work, entertainment, communication, and more. However, as our online presence grows, so does the risk of cyber threats like malware, data breaches, and identity theft. No one is immune - from individuals to large organizations, we
Guides
Password managers have become a necessary tool for protecting online accounts as passwords have grown more complex, yet the best solution remains unclear with many options on the market. This post seeks to cut through the clutter by comprehensively analyzing, comparing, and contrasting features of some of the most popular
Guides
Traditional VPNs and overlay networks solve the same problem — secure remote access — with fundamentally different architectures. Understanding the difference matters because they have opposite default security postures, different operational failure modes, and suit different use cases. The short version: a traditional VPN grants access to a network once authenticated. An
Guides
Overlay VPN networks establish encrypted peer-to-peer tunnels between devices using a coordination server that manages authentication and key exchange — but doesn't route traffic. Once devices authenticate, they connect directly. Most implementations use WireGuard for the actual encryption. This article compares the five main options: Tailscale, Netbird,
Privacy
Mass surveillance isn't one system — it's several operating simultaneously at different layers. Your ISP monitors traffic metadata. Platforms track behaviour through first-party data and cross-site identifiers. Devices collect location, sensor, and behavioural data whether or not apps are open. Data brokers aggregate all of
News
Microsoft Outlook is one of the most widely used email clients in the world, both for personal and business use. However, recent changes to the Outlook software have privacy advocates and researchers concerned about how user data is being handled. Outlook Shares Login Credentials One of the most alarming discoveries
News
Originally published December 2023. Updated April 2026 with Roundcube 1.7 release status and current project health. Nextcloud took over Roundcube in November 2023 — and the obvious question for anyone running Roundcube on a self-hosted mail server is whether the project is still maintained, still improving, and still worth
News
Google recently announced plans to incorporate their own IP protection feature into Chrome by default in future releases. This IP protection will work by routing users' traffic through Google-run privacy proxies. On the surface, Google claims this is to protect users' privacy by hiding their IP addresses
Guides
Storing passwords in your web browser seems like a convenient option but it comes with significant security risks. All major browsers including Google Chrome, Mozilla Firefox and Microsoft Edge offer built-in password managers that store login credentials to streamline signing into sites. However, these browser-based systems were not
News
TL;DR * Google Chrome is set to make sweeping changes to how extensions work via its transition to Manifest V3, but privacy advocates warn this could deal a major blow to popular tools like ad blockers. * Over the next year, developers will scramble to update their extensions before Google begins
Guides
As ModSecurity approaches its end of life in July 2024, many organizations are looking for a modern alternative to secure their web applications and APIs. Open-appsec is positioning itself as a leading open-source option for replacing ModSecurity. Open-appsec is an open-source fully automated Web Application &