Cloud engineer by day, security researcher by habit. Background in pen testing, bug bounties, and security engineering at scale. Mostly self hosted, and write about what actually works for privacy and security , testing a lot of stuff along the way.
News
TL;DR * Google Chrome is set to make sweeping changes to how extensions work via its transition to Manifest V3, but privacy advocates warn this could deal a major blow to popular tools like ad blockers. * Over the next year, developers will scramble to update their extensions before Google begins
Guides
As ModSecurity approaches its end of life in July 2024, many organizations are looking for a modern alternative to secure their web applications and APIs. Open-appsec is positioning itself as a leading open-source option for replacing ModSecurity. Open-appsec is an open-source fully automated Web Application &
Privacy
In an effort to improve privacy and trust on the platform, X, formerly known as Twitter, recently introduced the ability to encrypt direct messages (DMs) between users through a new "end-to-end encryption" feature. While encrypted messaging is an important step towards privacy, a deeper analysis shows
Guides
Microsoft 365 has transformed how businesses manage work and collaboration, with tools like Microsoft Teams, SharePoint, and OneDrive evolving the way we share files and communicate. However, as the volume of sensitive data grows within these platforms, ensuring privacy and compliance becomes increasingly important. While Microsoft 365 offers strong security
Privacy
Fitness tracking applications and devices have grown tremendously in popularity in recent years as more people seek to improve their health and wellness. By tracking metrics like steps, heart rate, sleep patterns and more, these tools provide insights that can help motivate lifestyle changes. However, along with these benefits come
Security
Linux needs active configuration to be secure — open boxes aren't. Here's what to lock down, in what order, with links to the full guides for each.
Privacy
Imagine you're having a private conversation in your car, only to later find out that details of your discussion were recorded and could be accessed by strangers. This disturbing scenario is more likely than you may think, as modern vehicles have quietly become sophisticated data collection machines. Your
Privacy
Data brokers operate in the shadows, amassing troves of personal information about individuals and families. But who are these unseen entities, and just how much do they know? Understanding Data Brokers Data brokers gather this information from a variety of public and private sources using methods like purchasing datasets, scraping
News
Apple recently issued an emergency security update to patch a zero-click vulnerability in iPhones that was being actively exploited to install sophisticated Pegasus spyware. The Vulnerability Researchers at Citizen Lab discovered that threat actors were exploiting two zero-day vulnerabilities (tracked as CVE-2023-41064 and CVE-2023-41061)
Security
Instant messaging apps, Telegram, and Signal have exploded in popularity in recent years due to their convenience, encryption capabilities, and "privacy focus". However, while the official versions of these apps can be somehow trusted, modified versions found on app stores like Google Play have increasingly been found to
Security
Falling for a phishing scam is remarkably easy to do. Whether it's through an enticing email offer, messaging on social media, or a pop-up ad while browsing the web - phishers have become masters of deception. No matter how security-savvy you might consider yourself, it's
Privacy
Protecting your privacy when communicating digitally is more important than ever. With privacy and security becoming increasingly important, many people are switching to encrypted messaging apps for sensitive communications. However, with so many options on the market, it can be difficult to know which apps are truly private and secure.