Cloud engineer by day, security researcher by habit. Background in pen testing, bug bounties, and security engineering at scale. Mostly self hosted, and write about what actually works for privacy and security , testing a lot of stuff along the way.
Takes
In September 2024, German law enforcement publicly confirmed they had deanonymized a Tor user in a criminal case using traffic timing analysis — specifically, by watching which Tor guard nodes the suspect's ISP traffic was connecting to. The attack was ISP-level cooperation, not a Tor network compromise. A
Takes
The Digital Markets Act (DMA) passed by the European Union aims to increase competition and provide more choices for consumers when it comes to digital platforms and devices. This has major implications for tech giants like Apple, which have enjoyed a dominant position in their respective markets. In response to
Guides
Email has become an indispensable communication tool for both personal and business use. However, its popularity has also made it a prime target for cyber attacks. Phishing, spoofing, malware - email inboxes are bombarded daily with threats aiming to steal sensitive information or money. Here is what we can do to
Guides
The internet has become an indispensable part of our lives. We rely on it for work, entertainment, communication, and more. However, as our online presence grows, so does the risk of cyber threats like malware, data breaches, and identity theft. No one is immune - from individuals to large organizations, we
Guides
Password managers have become a necessary tool for protecting online accounts as passwords have grown more complex, yet the best solution remains unclear with many options on the market. This post seeks to cut through the clutter by comprehensively analyzing, comparing, and contrasting features of some of the most popular
Guides
Traditional VPNs and overlay networks solve the same problem — secure remote access — with fundamentally different architectures. Understanding the difference matters because they have opposite default security postures, different operational failure modes, and suit different use cases. The short version: a traditional VPN grants access to a network once authenticated. An
Guides
Overlay VPN networks establish encrypted peer-to-peer tunnels between devices using a coordination server that manages authentication and key exchange — but doesn't route traffic. Once devices authenticate, they connect directly. Most implementations use WireGuard for the actual encryption. This article compares the five main options: Tailscale, Netbird,
News
The release of Fedora Asahi Remix 39 marks a major milestone in bringing a fully-featured and polished Linux experience to Apple's M-series chips. Developed through close collaboration between the Fedora and Asahi Linux projects, Fedora Asahi Remix provides an integrated Linux distribution tailored for Apple Silicon
Privacy
Mass surveillance isn't one system — it's several operating simultaneously at different layers. Your ISP monitors traffic metadata. Platforms track behaviour through first-party data and cross-site identifiers. Devices collect location, sensor, and behavioural data whether or not apps are open. Data brokers aggregate all of
Guides
The ongoing Broadcom acquisition of VMware is creating uncertainty around the future of vSphere and other VMware products, with the recent change being the end of perpetual licences. With such a major shift underway in the virtualization space, many businesses are exploring alternative solutions to VMware. Two popular open-source
Guides
Zorin OS has developed a reputation over the years as one of the best Linux distributions for beginners making the transition from Windows or macOS. The recently launched Zorin OS 17 brings some significant updates to improve the user experience. But with its delayed release schedule and aging base, does
News
Microsoft Outlook is one of the most widely used email clients in the world, both for personal and business use. However, recent changes to the Outlook software have privacy advocates and researchers concerned about how user data is being handled. Outlook Shares Login Credentials One of the most alarming discoveries