secure-os wrote
Jun 12, 2026 in encryption, luks, opsec - A practical guide to full disk encryption across Linux, Windows, macOS and cross-platform tools - what it protects, what it does not, and how to get it right.
Read more…secure-os wrote
Jun 12, 2026 in linux, hardening, sysctl - A practical Linux hardening guide built around threat models, not checklists. Covers sysctl, AppArmor, SELinux, kernel parameters, and verified boot - with clear explanations of what each measure actually protects against.
Read more…secure-os wrote
Jun 12, 2026 in luks, encryption, linux - A complete guide to LUKS2 full-disk encryption on Linux - cryptsetup commands, header backup, TPM auto-unlock, performance benchmarks, and what to do when your header is lost.
Read more…secure-os wrote
Jun 12, 2026 in linux, distros, hardening - Choosing the most secure Linux distro depends on your threat model. This guide ranks 7 secure Linux distros by what they actually protect against.
Read more…secure-os wrote
Jun 12, 2026 in qubes, compartmentalization, linux - A technical deep-dive into Qubes OS - the compartmentalization-based desktop OS recommended by Snowden and used by security professionals worldwide.
Read more…secure-os wrote
Jun 12, 2026 in qubes, tails, whonix - A decision framework for choosing between Qubes OS, Tails, and Whonix in 2026 - using a threat model matrix that covers targeted malware, physical seizure, mass surveillance, and identity linkage.
Read more…secure-os wrote
Jun 12, 2026 in tails, tor, live-os - Tails OS is a live USB operating system that routes all traffic through Tor and leaves no trace. Learn how it works, who needs it, and its real limits.
Read more…secure-os wrote
Jun 12, 2026 in tails, usb, install - A complete how-to guide for installing Tails 7.8.1 on a USB drive - including OpenPGP signature verification, writing the image, and first-boot setup of Persistent Storage.
Read more…secure-os wrote
Jun 12, 2026 in veracrypt, encryption, disk-encryption - A thorough, honest review of VeraCrypt 1.26 - how to create encrypted containers, hidden volumes, and whole-disk encryption on Linux, Windows and macOS. Includes real limits vs LUKS and BitLocker.
Read more…secure-os wrote
Jun 12, 2026 in whonix, tor, virtualization - Whonix uses two isolated virtual machines to route all traffic through Tor by design. No configuration errors, no IP leaks. Here's how the architecture works.
Read more…Operating systems
Which secure OS fits which threat model - compartmentalisation vs amnesic vs Tor-routed.
Read the guides →Encryption
LUKS, BitLocker, FileVault and VeraCrypt - what each protects, and what it does not.
Read the guide →Hardening
Practical hardening built around the adversary you actually face.
Read the guide →