Cloud engineer by day, security researcher by habit. Background in pen testing, bug bounties, and security engineering at scale. Mostly self hosted, and write about what actually works for privacy and security , testing a lot of stuff along the way.
Security
It's a scenario we're all familiar with - your phone rings, displaying an unknown number on the caller ID. Most of us instinctively ignore these calls, letting them go to voicemail. After all, if it's important, the caller will leave a message. However, what if
Privacy
We share more personal information online than ever before. From posting vacation photos on Instagram to checking in at a restaurant on Facebook, our online activities leave a trail of digital breadcrumbs about our lives. While this level of sharing can enhance our connections and allow us to document precious
Security
The convenience of seamless access to online accounts and services comes at a price – the risk of falling victim to a devious form of malware known as "infostealers." These malicious programs are designed to steal sensitive information, bypass complex passwords and two-factor authentication, and ultimately compromise your
Guides
Passkeys are a type of login credential based on public-key cryptography, which eliminates the need for traditional passwords. Instead of memorizing and entering complex passwords, users can authenticate their identities using biometrics (such as fingerprint or facial recognition) or a device PIN. At their core, passkeys consist of two
News
In April 2024, Proton acquired Standard Notes — the E2E-encrypted note-taking app that had been running independently since 2017. At the time, the privacy community reaction split roughly in half: some people were relieved a well-built privacy tool was getting more resources, and some were bracing for it
News
Telegram, the popular messaging app known for its focus on privacy and security, which is highly questionable, has recently introduced a new feature that has left many users and security experts deeply concerned. The "Peer-to-Peer Login" (P2PL) system, as Telegram calls it, promises users a free
Takes
Last month, Apple announced a significant security upgrade to iMessage, likely the biggest since the app's creation. Dubbed PQ3 (post-quantum cryptographic protocol 3), this new encryption protocol will be used in Apple's default messaging application once users update their systems to iOS 17.4, macOS
Security
Have you ever accidentally mistyped the name of a website in your internet browser's address bar and ended up on the wrong site? You try to go to google.com but accidentally type three Os instead of two, or you aim for facebook.com but miss a letter.
News
After years of offering email privacy and security through their web and mobile apps, Proton Mail has finally released official desktop clients for Windows, Mac, and Linux users, three months after debuting in beta. The company aims to provide a "distraction-free" email experience with the new native
Takes
Tor Browser is designed to route traffic through Tor's anonymizing relay network and to leave no browsing history on the local device. The network anonymity works as designed. The local privacy is more nuanced — running Tor Browser on a standard Windows installation leaves traces that a forensic examiner
News
Cloudflare, a major content delivery network and web security company, recently announced the open sourcing of Pingora, its in-house developed Rust-based proxy framework. Pingora has been powering Cloudflare's infrastructure and managing a significant portion of Internet traffic worldwide. Why Cloudflare built Pingora In a blog post
Privacy
Privacy-focused email service Skiff announced on Feb. 9, 2024 that it is shutting down after being acquired by work collaboration platform Notion. The news came as a shock to Skiff's user base and the wider privacy community. What is Skiff? Founded in 2020 and launched publicly in