privacy
35 posts found
How CLI Package Managers Bypass macOS Gatekeeper Execution Rules
CLI downloaders and package managers bypass macOS Gatekeeper by omitting quarantine extended attributes on fetched binaries.
Browser Extension Stores Are Not Security Boundaries
Official add-on marketplaces do not guarantee safety. Malicious Firefox and Chrome extensions slip past linters to harvest credentials and session tokens.
Adversary-in-the-Middle Phishing Proxies: How Modern Frameworks Hijack MFA Sessions
Deep technical breakdown of AiTM phishing proxies like Mirage2FA, how they intercept MFA sessions, and the architectural changes needed to neutralize session th…
Securing Inbound Webhooks: HMAC Verification and Replay Attack Defense
Inbound webhooks without cryptographic verification expose backend services to forgery, replay attacks, and resource exhaustion. Here is how to implement HMAC-S…
Secret Leakage Risks When LLMs Execute Shell Commands
A practical 10-step hardening checklist for securing LLM-driven shell execution: runtime container isolation, credential purging, network exfiltration preventio…
Entra CVSS 10.0: Audit Your Tenant After CVE-2026-69836
Microsoft patched a CVSS 10.0 deserialization RCE in Entra. No customer package to install. Your tenant still needs an audit of grants, secrets, and admin roles…
Why Your OpenWrt Transparent Proxy Leaks Packets
A routing policy collision caused my OpenWrt proxy to leak traffic. The fix required explicit IP rule priorities and unreachable fallback rules to prevent unmar…
OpenLogi: Local-First Rust Alternative to Logitech Options+
A native, local-first alternative to Logitech Options+ written in Rust. No account, no telemetry, direct HID++ communication with your mouse.
Self-Hosted DNS-over-HTTPS: A Practical Setup Guide
Set up DNS-over-HTTPS on your own server to encrypt DNS queries and prevent ISP snooping. A five-step guide covering configuration, testing, and hardening.
Why AI Agents Will Shrink Their Context Windows
AI agents are drowning in their own context. The future belongs to compression, not expansion — and it changes how we build self-hosted AI infrastructure.