secure-os wrote
Jul 18, 2026 in email, encryption, pgp - How to encrypt your email in 2026, step by step: the easy way with an end-to-end provider like Proton Mail, PGP/GPG for full control, and S/MIME. Honest limits on metadata, subject lines and what encryption really covers.
Read more…secure-os wrote
Jul 16, 2026 in security, uefi, boot - Secure Boot is a UEFI feature that only lets cryptographically signed software run at startup, blocking bootkits and rootkits that load before your OS. How it works, how it fits Linux, and its honest limits.
Read more…secure-os wrote
Jul 14, 2026 in linux, distros, hardening - Immutable Linux distros keep the system read-only and update it as atomic image swaps you can roll back. What that means, the real security benefits, the honest trade-offs, and which distros to look at in 2026.
Read more…secure-os wrote
Jul 9, 2026 in linux, wayland, x11 - X11 lets any running app read your keystrokes and capture other windows. Wayland was designed to close that gap. What each does, the honest caveats (XWayland, portals), and why a security desktop should prefer Wayland.
Read more…secure-os wrote
Jul 9, 2026 in privacy, browser, duckduckgo - DuckDuckGo's browser now blocks most YouTube video ads by default, using open-source uBlock Origin filter lists. What it does, the honest limits, and how content blocking fits a private-browser setup.
Read more…secure-os wrote
Jul 3, 2026 in messaging, encryption, hardware key - Darkup is a new French encrypted messenger that ties your identity to a physical security key and uses Signal's Double Ratchet. Here is what it claims, how it is priced, and why it is not yet proven.
Read more…secure-os wrote
Jul 2, 2026 in whatsapp, username, privacy - WhatsApp is rolling out optional usernames so you can share an @handle instead of your phone number. Here is what the privacy feature actually protects, its rollout timeline, and the limit it does not solve.
Read more…secure-os wrote
Jun 30, 2026 in privacy, location-data, fourth-amendment - On June 29, 2026, the US Supreme Court ruled 6–3 in Chatrie v. United States that a geofence warrant is a 'search' under the Fourth Amendment. What the Court held, what it changes, what it doesn't - and the location-privacy habits that still matter.
Read more…secure-os wrote
Jun 29, 2026 in tails, encryption, persistence - Tails is amnesic by default. The Persistent Storage is an optional LUKS-encrypted volume on the same USB stick. How to create it, what to keep, and why it won't unlock.
Read more…secure-os wrote
Jun 28, 2026 in grapheneos, calyxos, android - GrapheneOS vs CalyxOS compared honestly: security hardening vs microG compatibility, supported Pixel devices, the Google-services model, ease of use, and which de-Googled Android fits your threat model.
Read more…secure-os wrote
Jun 28, 2026 in encryption, data-sanitization, opsec - Why shred and dd do not work on solid-state drives, and the methods that do: ATA Secure Erase, NVMe Format and Sanitize, and crypto-erase by destroying the key.
Read more…secure-os wrote
Jun 26, 2026 in linux, antivirus, malware - Does Linux need antivirus? The honest answer, when it actually matters (servers, mail gateways, mixed Windows networks), the real tools - ClamAV, rkhunter, chkrootkit - and the layered defenses that protect a desktop better than a virus scanner.
Read more…Operating systems
Which secure OS fits which threat model - compartmentalisation vs amnesic vs Tor-routed.
Read the guides →Encryption
LUKS, BitLocker, FileVault and VeraCrypt - what each protects, and what it does not.
Read the guide →Hardening
Practical hardening built around the adversary you actually face.
Read the guide →