Network Security
Defensive network security guides for segmentation, VPNs, firewall policy, identity protection, secure remote access, logging, and recovery.
Local Water Meter Monitoring: Privacy, Radio Data, and Safe SetupNew!!
Build a receive-only water-monitoring workflow without opening or modifying utility equipment. Check authorization, radio and cloud dependencies, data retention, leak alerts, and what detailed usage can reveal about a household.
How to Audit Your Exposed ServicesNew!!
A practical exposure-audit guide for finding public ports, reverse proxies, tunnels, UPnP, IPv6 paths, vendor clouds, and forgotten services.
Trusted Proxies Are an Authentication Boundary: Stop X-Forwarded-For SpoofingNew!!
A practical reverse-proxy security lab for X-Forwarded-For spoofing, exact trusted proxy ranges, direct-origin blocking, and negative tests.
What to Do When a Device Hits CISA KEVNew!!
An incident-style response guide for routers, firewalls, VPNs, NAS devices, and other systems that appear in CISA's KEV catalog.
Edge Device Patch Priority PlaybookNew!!
A patch-priority playbook for routers, firewalls, VPN gateways, NAS appliances, and other internet-facing edge devices.
Evil Twin Wi-Fi on Planes and Hotels: How to Verify the HotspotNew!!
A familiar SSID is not proof of a legitimate airline or hotel hotspot. Use this verification workflow, then learn what PMF, HTTPS, captive portals, and VPNs can and cannot protect.
Your Media API Key Is in access.log: Find It, Redact It, and Rotate ItNew!!
Media API keys often leak through URLs, proxy logs, browser history, and support bundles. This guide shows where to look and how to rotate safely.
Restore From a Compromised Backup Without Reinfecting ProductionNew!!
A clean-room restore workflow for compromised backups: isolate, separate data from executable state, rotate secrets, validate provenance, and reconnect safely.
Tailscale vs Headscale: What Self-Hosting the Control Plane ChangesNew!!
Headscale moves Tailscale-compatible coordination, identity integration, policy distribution, upgrades, and recovery into your infrastructure. It does not automatically move peer traffic, remove DERP, or eliminate endpoint and application security work.
UniFi VLANs Without Breaking AirPlay, Printers, and Smart Home GearNew!!
A UniFi VLAN guide for keeping AirPlay, AirPrint, printers, casting, HomeKit, and smart-home devices usable without flattening the network.