secure-os wrote
Sep 4, 2026 in vpn, anonymity, threat-model - A double VPN sends your traffic through two servers instead of one. What that genuinely protects against, what it costs in speed and latency, and the common cases where it changes nothing at all because the weak link is somewhere else entirely.
Read more…secure-os wrote
Sep 4, 2026 in encryption, windows, cloud - Password-protecting a folder, encrypting it into a container, and turning on full disk encryption solve three different problems. Which one matches your actual threat, what each leaves visible, and the mistake that makes cloud folders leak anyway.
Read more…secure-os wrote
Sep 4, 2026 in surveillance, privacy, travel - A hidden camera is found by systematic inspection, not by a gadget. Which objects actually host them, why the lens reflection trick works and when it does not, what a network scan can and cannot tell you, and what to do if you find one.
Read more…secure-os wrote
Sep 4, 2026 in messaging, anonymity, metadata - Session drops phone numbers and central servers, Signal keeps both and encrypts everything else. What each one hides from whom, what Session gives up to get anonymity, and the single question that decides which of the two you actually need.
Read more…secure-os wrote
Sep 4, 2026 in mobile, 2fa, account-security - A SIM swap moves your number to someone else's card, and every code sent by text follows it. What actually stops the attack at the carrier, why SMS two-factor is the wrong lock, and the ten minutes that decide whether you keep your accounts.
Read more…secure-os wrote
Sep 4, 2026 in vpn, privacy, network - A kill switch cuts your internet the moment the VPN tunnel drops, so nothing leaves in the clear. What it protects, the gap between blocking one application and blocking the whole device, and how to test yours in two minutes instead of trusting the label.
Read more…secure-os wrote
Sep 4, 2026 in vpn, privacy, network - A VPN sends your traffic through an encrypted tunnel to a server that then talks to the internet for you. What that hides, who sees it instead, and the four common expectations it does not meet.
Read more…secure-os wrote
Sep 4, 2026 in vpn, privacy, network - Split tunneling sends some applications through the VPN and lets the rest use your ordinary connection. What it fixes, the three ways it quietly leaks, and the one question that tells you whether to turn it on.
Read more…secure-os wrote
Sep 4, 2026 in tor, anonymity, network - Tor sends your traffic through three volunteer relays, each of which knows only its neighbours. How the layers work, why it is slow on purpose, and the difference between what Tor hides and what a VPN hides.
Read more…secure-os wrote
Sep 4, 2026 in vpn, protocols, privacy - WireGuard is faster, smaller and reconnects instantly. OpenVPN is older, slower and hides better on hostile networks. What each protocol gives up to get what it is good at, and the one privacy detail your provider has to solve for you.
Read more…secure-os wrote
Sep 3, 2026 in phishing, 2fa, mfa - Adversary in the middle phishing proxies the real login page in real time, so the code from your authenticator app lands in the attacker's hands and the stolen session cookie keeps working after you close the tab. How AiTM works, why one factor type survives it, and what to check.
Read more…secure-os wrote
Sep 3, 2026 in surveillance, privacy, alpr - Automatic license plate readers photograph every car that passes, not only wanted ones, and keep the plate, the time, the place and often the image. What ALPR collects, how long networks retain it, why a retention period is the real privacy setting, and what you can and cannot do about it.
Read more…Operating systems
Which secure OS fits which threat model - compartmentalisation vs amnesic vs Tor-routed.
Read the guides →Encryption
LUKS, BitLocker, FileVault and VeraCrypt - what each protects, and what it does not.
Read the guide →Hardening
Practical hardening built around the adversary you actually face.
Read the guide →