[2026|09|05] Wi-Fi Security at Home | More Than the Password [Networking] | 1 min read WPA3, guest networks, and the quiet settings that decide who can watch your traffic.
[2026|09|05] SSH Keys vs Passwords | And Key Management [Linux] | 1 min read Why keys beat passwords, the passphrase question, and how to not lose the key to your own server.
[2026|09|05] Hardening a Linux Box, Part 2 | Audit and Incident Response [Linux] | 1 min read Know what runs, keep logs that survive, and have a plan for the night something actually happens.
[2026|09|05] iptables from Scratch: Part 3 | NAT and Port Forwarding [Linux] | 1 min read Masquerade, DNAT and the one-liner that lets a whole LAN hide behind a single public IP.
[2026|09|05] iptables from Scratch: Part 2 | Writing a Policy [Linux] | 1 min read Default deny, state tracking and the exact commands that turn a bare VPS into a closed box.
[2026|09|05] iptables from Scratch: Part 1 | Tables, Chains, Targets [Linux] | 1 min read The three moving parts behind every iptables rule, and what -A, -I and -j actually do.
[2026|09|05] dnscrypt-proxy: Automating the Firewall with nftables Sets [Linux] | 2 min read Blocking domains by hand is a losing game. Dynamic nftables sets turn a blocklist into a live firewall rule.
[2026|09|05] DNS Traffic: Where It Goes and Who Watches [DNS] | 2 min read Your DNS queries are plaintext metadata about everything you do online. Fixing that takes ten minutes.
[2026|09|05] SSH Brute Force: What the Logs Actually Say [Linux] | 2 min read What those thousands of failed logins really are, how to read the pattern, and why a key is the end of the story.
[2026|09|05] tcpdump Cheatsheet: Capturing the Right Packets [Networking] | 2 min read BPF filters, ring buffers, and the three flags that stop you from drowning: tcpdump for humans.
[2026|09|05] nftables: First Contact [Linux] | 2 min read The modern Linux firewall in three rules: tables, chains and the verdicts that make default deny easy.
[2026|09|05] SSH Tunnels: A Poor Man's VPN [Linux] | 2 min read Local, reverse and jump-host forwarding: one encrypted pipe for every network you cannot reach.
[2026|09|05] Recon 101: Mapping the Attack Surface [Security] | 1 min read Subdomains, certificate logs, Shodan: what a stranger learns about you before sending a single packet.
[2026|09|05] Hardening a Linux Box: Field Notes, Part 1 [Linux] | 2 min read Updates, SSH, firewall: the boring first hour that decides whether your box survives the internet.
[2026|09|05] Security Is a Process, Not a Product [Security] | 2 min read Passkeys, MFA, patches, backups: the boring controls that actually stop attackers in 2026.
