secure-os wrote
Sep 4, 2026 in vpn, anonymity, threat-model - A double VPN sends your traffic through two servers instead of one. What that genuinely protects against, what it costs in speed and latency, and the common cases where it changes nothing at all because the weak link is somewhere else entirely.
Read more…secure-os wrote
Sep 4, 2026 in surveillance, privacy, travel - A hidden camera is found by systematic inspection, not by a gadget. Which objects actually host them, why the lens reflection trick works and when it does not, what a network scan can and cannot tell you, and what to do if you find one.
Read more…secure-os wrote
Sep 3, 2026 in phishing, 2fa, mfa - Adversary in the middle phishing proxies the real login page in real time, so the code from your authenticator app lands in the attacker's hands and the stolen session cookie keeps working after you close the tab. How AiTM works, why one factor type survives it, and what to check.
Read more…secure-os wrote
Sep 3, 2026 in surveillance, privacy, alpr - Automatic license plate readers photograph every car that passes, not only wanted ones, and keep the plate, the time, the place and often the image. What ALPR collects, how long networks retain it, why a retention period is the real privacy setting, and what you can and cannot do about it.
Read more…secure-os wrote
Sep 2, 2026 in encryption, cryptography, standards - A working list of the encryption algorithms in real use today - AES, ChaCha20, RSA, Ed25519, SHA-2, Argon2id - what each one is for, which are officially retired, and what the post-quantum standards change.
Read more…secure-os wrote
Sep 2, 2026 in linux, distros, hardening - Kicksecure is a security-hardened Debian derivative from the Whonix developers. What it hardens, how it differs from Whonix and Tails, who it is for, and its honest limits.
Read more…secure-os wrote
Aug 1, 2026 in ssh, fail2ban, hardening - Fail2ban bans IP addresses after repeated failed logins, which lowers the noise in your logs. The project itself states it cannot eliminate the risk of weak authentication, and names what to use instead.
Read more…secure-os wrote
Jul 31, 2026 in linux, hardening, systemd - systemd-analyze security scores services from 0 to 10, but the manual is explicit that a high score does not mean a service is vulnerable. What the tool measures, what it cannot see, and why settings must be combined.
Read more…secure-os wrote
Jul 18, 2026 in email, encryption, pgp - How to encrypt your email in 2026, step by step: the easy way with an end-to-end provider like Proton Mail, PGP/GPG for full control, and S/MIME. Honest limits on metadata, subject lines and what encryption really covers.
Read more…secure-os wrote
Jul 16, 2026 in security, uefi, boot - Secure Boot is a UEFI feature that only lets cryptographically signed software run at startup, blocking bootkits and rootkits that load before your OS. How it works, how it fits Linux, and its honest limits.
Read more…secure-os wrote
Jul 14, 2026 in linux, distros, hardening - Immutable Linux distros keep the system read-only and update it as atomic image swaps you can roll back. What that means, the real security benefits, the honest trade-offs, and which distros to look at in 2026.
Read more…secure-os wrote
Jul 9, 2026 in linux, wayland, x11 - X11 lets any running app read your keystrokes and capture other windows. Wayland was designed to close that gap. What each does, the honest caveats (XWayland, portals), and why a security desktop should prefer Wayland.
Read more…Operating systems
Which secure OS fits which threat model - compartmentalisation vs amnesic vs Tor-routed.
Read the guides →Encryption
LUKS, BitLocker, FileVault and VeraCrypt - what each protects, and what it does not.
Read the guide →Hardening
Practical hardening built around the adversary you actually face.
Read the guide →