Jun 12, 2026 in linux, hardening, sysctl — A practical Linux hardening guide built around threat models, not checklists. Covers sysctl, AppArmor, SELinux, kernel parameters, and verified boot — with clear explanations of what each measure actually protects against.
Jun 12, 2026 in luks, encryption, linux — A complete guide to LUKS2 full-disk encryption on Linux — cryptsetup commands, header backup, TPM auto-unlock, performance benchmarks, and what to do when your header is lost.
Jun 12, 2026 in linux, distros, hardening — Choosing the most secure Linux distro depends on your threat model. This guide ranks 7 secure Linux distros by what they actually protect against.
Jun 12, 2026 in qubes, compartmentalization, linux — A technical deep-dive into Qubes OS — the compartmentalization-based desktop OS recommended by Snowden and used by security professionals worldwide.