secure-os wrote
Sep 6, 2026 in headers, web security, csp - Six response headers are the ones every hardening guide lists. We measured them on 336 public organisations: 78 of the 301 that answered send none of the six, and Permissions-Policy is missing on eight sites out of ten. The list, in the order worth deploying it.
Read more…secure-os wrote
Sep 6, 2026 in tracking, phone, privacy - An AirTag that is not with its owner will try to alert you, but only once several conditions line up. Here is what the alert actually says, why Android detection works differently, how to make a tracker reveal itself on purpose, and what to do once you have found one.
Read more…secure-os wrote
Sep 5, 2026 in encryption, windows, threat-model - On most consumer Windows PCs the BitLocker recovery key is uploaded to the Microsoft account used at setup. That is why people find it, and it is also the part of the threat model most users never agreed to. Where it lives, how to check, and what changes if you remove it.
Read more…secure-os wrote
Sep 5, 2026 in wifi, privacy, network - A rogue hotspot looks exactly like the real one, because it is allowed to. The name, the signal and the captive portal can all be copied in minutes. Here are the signals that actually distinguish them, and the one habit that makes the question stop mattering.
Read more…secure-os wrote
Sep 5, 2026 in detection, intrusion, monitoring - A canary token is a file, a URL or a credential that has no legitimate use. Nothing should ever touch it, so the day something does, you learn about an intrusion your other tools missed. What they detect, where to place them, and the two ways people ruin them.
Read more…secure-os wrote
Sep 4, 2026 in vpn, anonymity, threat-model - A double VPN sends your traffic through two servers instead of one. What that genuinely protects against, what it costs in speed and latency, and the common cases where it changes nothing at all because the weak link is somewhere else entirely.
Read more…secure-os wrote
Sep 4, 2026 in surveillance, privacy, travel - A hidden camera is found by systematic inspection, not by a gadget. Which objects actually host them, why the lens reflection trick works and when it does not, what a network scan can and cannot tell you, and what to do if you find one.
Read more…secure-os wrote
Sep 4, 2026 in vpn, privacy, isp - Your provider stops seeing which sites you visit the moment a VPN is on. It still sees that you are using one, how much you send and when. And browsing history is a separate thing entirely, because it lives on your device, not at the provider.
Read more…secure-os wrote
Sep 4, 2026 in messaging, anonymity, metadata - Session drops phone numbers and central servers, Signal keeps both and encrypts everything else. What each one hides from whom, what Session gives up to get anonymity, and the single question that decides which of the two you actually need.
Read more…secure-os wrote
Sep 4, 2026 in mobile, 2fa, account-security - A SIM swap moves your number to someone else's card, and every code sent by text follows it. What actually stops the attack at the carrier, why SMS two-factor is the wrong lock, and the ten minutes that decide whether you keep your accounts.
Read more…secure-os wrote
Sep 4, 2026 in vpn, privacy, network - A kill switch cuts your internet the moment the VPN tunnel drops, so nothing leaves in the clear. What it protects, the gap between blocking one application and blocking the whole device, and how to test yours in two minutes instead of trusting the label.
Read more…secure-os wrote
Sep 4, 2026 in vpn, privacy, network - Split tunneling sends some applications through the VPN and lets the rest use your ordinary connection. What it fixes, the three ways it quietly leaks, and the one question that tells you whether to turn it on.
Read more…secure-os wrote
Sep 4, 2026 in vpn, privacy, network - A VPN sends your traffic through an encrypted tunnel to a server that then talks to the internet for you. What that hides, who sees it instead, and the four common expectations it does not meet.
Read more…secure-os wrote
Sep 4, 2026 in tor, anonymity, network - Tor sends your traffic through three volunteer relays, each of which knows only its neighbours. How the layers work, why it is slow on purpose, and the difference between what Tor hides and what a VPN hides.
Read more…secure-os wrote
Sep 4, 2026 in encryption, windows, cloud - Password-protecting a folder, encrypting it into a container, and turning on full disk encryption solve three different problems. Which one matches your actual threat, what each leaves visible, and the mistake that makes cloud folders leak anyway.
Read more…secure-os wrote
Sep 3, 2026 in surveillance, privacy, alpr - Automatic license plate readers photograph every car that passes, not only wanted ones, and keep the plate, the time, the place and often the image. What ALPR collects, how long networks retain it, why a retention period is the real privacy setting, and what you can and cannot do about it.
Read more…secure-os wrote
Jul 16, 2026 in security, uefi, boot - A trusted signature is only as good as the code behind it, which is the whole reason the dbx revocation list exists. What Secure Boot protects in the boot chain, what it was never meant to stop, and the signed-but-vulnerable bootloader class that proved the difference.
Read more…secure-os wrote
Jun 30, 2026 in privacy, location-data, fourth-amendment - On June 29, 2026, the US Supreme Court ruled 6-3 in Chatrie v. United States that a geofence warrant is a 'search' under the Fourth Amendment. What the Court held, what it changes, what it doesn't - and the location-privacy habits that still matter.
Read more…secure-os wrote
Jun 28, 2026 in encryption, data-sanitization, opsec - Why shred and dd do not work on solid-state drives, and the methods that do: ATA Secure Erase, NVMe Format and Sanitize, and crypto-erase by destroying the key.
Read more…secure-os wrote
Jun 26, 2026 in linux, antivirus, malware - Does Linux need antivirus? The honest answer, when it actually matters (servers, mail gateways, mixed Windows networks), the real tools - ClamAV, rkhunter, chkrootkit - and the layered defenses that protect a desktop better than a virus scanner.
Read more…secure-os wrote
Jun 23, 2026 in keylogger, malware, passwords - A keylogger records every key you press to steal passwords and private data. What a keylogger is, the software and hardware types, how to detect one, and how to protect yourself.
Read more…secure-os wrote
Jun 23, 2026 in botnet, malware, ddos - A botnet is a network of devices secretly controlled by an attacker. What a botnet is, how it works, what it is used for (DDoS, spam, fraud), and how to keep your devices out of one.
Read more…secure-os wrote
Jun 23, 2026 in social-engineering, phishing, security - Social engineering tricks people into giving up access or information instead of breaking the tech. What it is, the main tactics (phishing, pretexting, baiting), real examples, and how to defend against it.
Read more…secure-os wrote
Jun 22, 2026 in threat-model, opsec, privacy - A threat model is a simple plan that answers four questions: what you protect, who you protect it from, how likely the risk is, and what it costs to defend. Build one in minutes, without paranoia, so your security effort matches your real risks.
Read more…secure-os wrote
Jun 22, 2026 in linux, sandboxing, security - Linux sandboxing confines an application so that, if it is compromised, the damage stays contained. What sandboxing is, how Flatpak, Firejail, bubblewrap and containers do it, and how it fits a real defense-in-depth setup.
Read more…secure-os wrote
Jun 22, 2026 in malware, rootkit, security - A rootkit is malware that hides deep in your system to keep control while staying invisible. What a rootkit is, the types, the warning signs, how to detect one, and why a clean reinstall is often the only sure fix.
Read more…secure-os wrote
Jun 21, 2026 in phishing, ai, security - AI-generated phishing surged roughly 14× in 2026, and the FBI logged more phishing complaints than any other crime category in 2025. Here's how to spot a modern phishing attempt and the practical steps that actually prevent it.
Read more…secure-os wrote
Jun 20, 2026 in phishing, security, email - Two of the ten messages in our test are legitimate, and one of those two carries every trait of a scam, so answering fraudulent to everything caps you at 8 out of 10 by design. The seven signs first, then the test that shows whether you can run them under pressure.
Read more…secure-os wrote
Jun 20, 2026 in linux, arch, aur - In June 2026 hundreds of Arch User Repository packages were hijacked to deploy an infostealer and an eBPF rootkit. What actually happened, why the AUR is structurally riskier than Arch's official repos, and a practical routine to vet AUR packages before you install them.
Read more…secure-os wrote
Jun 19, 2026 in firewall, security, network - A firewall decides which network traffic is allowed in or out of your device or network. What a firewall is, how it works, the main types (hardware, software, stateful), what it can and can't protect against, and how it fits into real security.
Read more…secure-os wrote
Jun 19, 2026 in phishing, security, email - Phishing tricks you into handing over passwords or money by impersonating someone you trust. What phishing is, the main types (email, spear, smishing, vishing), the red flags, and the defenses that actually work - 2FA and a password manager.
Read more…secure-os wrote
Jun 19, 2026 in 2fa, authentication, security - SMS falls to a SIM swap, push prompts fall to your own reflex to approve, and recovery codes bypass 2FA by design because that is what they are for. The five methods ranked weakest to strongest, the attack that beats each one, and the backup that stops you locking yourself out.
Read more…secure-os wrote
Jun 18, 2026 in opsec, privacy, operational-security - OPSEC (operational security) is the practice of protecting the small pieces of information that, combined, expose you. What OPSEC means, where it came from, the 5-step process, and how to apply it to your everyday digital life - without paranoia.
Read more…secure-os wrote
Jun 17, 2026 in linux, windows, security - Is Linux more secure than Windows in 2026? Linux has real structural advantages - permissions, smaller desktop attack surface, open-source auditability - but Windows has closed much of the gap. What actually makes the difference, honestly.
Read more…secure-os wrote
Jun 14, 2026 in encryption, privacy, security - Encryption scrambles data so only someone with the key can read it. What encryption is, symmetric vs asymmetric, at-rest vs in-transit, end-to-end encryption, and the honest limits - explained by threat model.
Read more…secure-os wrote
Jun 14, 2026 in malware, security, privacy - Malware is any software built to harm or exploit a device - viruses, worms, trojans, ransomware, spyware, keyloggers. What malware is, the main types, how it gets in, and the layered defences that actually work.
Read more…secure-os wrote
Jun 14, 2026 in ransomware, malware, security - Ransomware is malware that encrypts your files and demands payment for the key. What ransomware is, how an attack unfolds, why paying is a bad bet, and the one defence that actually works: backups it can't reach.
Read more…secure-os wrote
Jun 14, 2026 in spyware, malware, privacy - Spyware is malware that secretly monitors and collects your data - keystrokes, browsing, location, even your screen. What spyware is, the types, how it gets in, the warning signs, and how to remove and prevent it.
Read more…secure-os wrote
Jun 12, 2026 in encryption, luks, opsec - A practical guide to full disk encryption across Linux, Windows, macOS and cross-platform tools - what it protects, what it does not, and how to get it right.
Read more…secure-os wrote
Jun 12, 2026 in qubes, tails, whonix - A decision framework for choosing between Qubes OS, Tails, and Whonix in 2026 - using a threat model matrix that covers targeted malware, physical seizure, mass surveillance, and identity linkage.
Read more…