Email Is the Root Account: Lock It Down Before Anything ElseNew!!
A household account-security guide explaining why email controls recovery for banking, password managers, cloud storage, domains, and identity.
How to Audit Your Exposed ServicesNew!!
A practical exposure-audit guide for finding public ports, reverse proxies, tunnels, UPnP, IPv6 paths, vendor clouds, and forgotten services.
Trusted Proxies Are an Authentication Boundary: Stop X-Forwarded-For SpoofingNew!!
A practical reverse-proxy security lab for X-Forwarded-For spoofing, exact trusted proxy ranges, direct-origin blocking, and negative tests.
Rebuild A Dead Proxmox Host: What PBS Does Not RestoreNew!!
A documentation-backed, testable runbook for Rebuild A Dead Proxmox Host: What PBS Does Not Restore, with safe defaults, validation evidence, failure modes, rollback, and publication-day checks.
What to Do When a Device Hits CISA KEVNew!!
An incident-style response guide for routers, firewalls, VPNs, NAS devices, and other systems that appear in CISA's KEV catalog.
Edge Device Patch Priority PlaybookNew!!
A patch-priority playbook for routers, firewalls, VPN gateways, NAS appliances, and other internet-facing edge devices.
Evil Twin Wi-Fi on Planes and Hotels: How to Verify the HotspotNew!!
A familiar SSID is not proof of a legitimate airline or hotel hotspot. Use this verification workflow, then learn what PMF, HTTPS, captive portals, and VPNs can and cannot protect.
Why MikroTik PCC Breaks HotSpot On Dual WANNew!!
A documentation-backed, testable runbook for Why MikroTik PCC Breaks HotSpot On Dual WAN, with safe defaults, validation evidence, failure modes, rollback, and publication-day checks.
Your Media API Key Is in access.log: Find It, Redact It, and Rotate ItNew!!
Media API keys often leak through URLs, proxy logs, browser history, and support bundles. This guide shows where to look and how to rotate safely.
Repairable Smart-Home Device Checklist: Parts, Recovery, and Cloud ExitNew!!
Before the return window closes, verify replaceable service parts, local operation, firmware support, documented reset and re-pairing, backup and recovery, and a workable exit from the vendor's hub or cloud.