privacy
35 posts found
Web Endpoint Reconnaissance: A 10-Point Attack Surface Checklist
A 10-point external reconnaissance audit checklist covering HTTP headers, DNS hygiene, TLS configuration, and perimeter exposure using open-source OSINT tooling…
Age Verification Mandates Are Surveillance Systems in Disguise
Age verification and digital ID mandates don't stop bad actors. They build surveillance infrastructure that only captures compliant users. A technical breakdown…
whoisthat: A Rust TUI VPN Client Backed by a Go/Xray Engine
whoisthat splits a VPN client into two processes: a Rust TUI for the terminal interface and a Go engine driving Xray-core underneath. This guide covers building…
Europol Quantum Warning: Hardening Crypto Wallet Signatures Before Harvest-Now Attacks
Europol flagged crypto wallets as the primary risk for harvest-now-decrypt-later quantum attacks. Here is a technical breakdown of how to evaluate signature exp…
How to Build a Censorship-Resistant Tunnel with Aether and MASQUE
A step-by-step guide to compiling and configuring Aether, a Rust userspace implementation of Cloudflare WARP using MASQUE over HTTP/3.
Paying for AI Without Revealing Who You Are: Zero-Knowledge Inference Tokens Explained
Zero-knowledge proofs decouple payment identity from LLM inference requests. Here is how the cryptographic architecture works and what security risks exist at t…
Oryxis vs WhoisThat: Two Rust Tools for SSH and VPN
Two recent open-source Rust projects solve real security and tunneling problems without vendor lock-in or subscriptions. Oryxis gives you a native SSH client. W…
Signed Installers and the macOS Infostealer Myth
Fake Zoom and Slack installers are delivering the Sonoma stealer to Macs. Code signing blocks tampering, not deception. Verify the artifact before you run it.
The Myth of Universal VPN Security
Common belief that any VPN provides equal protection ignores implementation differences, transparency, and real-world effectiveness. Reality shows VPNs hide IP …
Android 17 Encrypted Client Hello Still Leaves Hostnames on the Wire
Android 17 turns ECH on by default, but RFC 9849 only hides SNI. Outer public names, dedicated origin IPs, and missing HTTPS ech= records still leak the destina…