SYSTEM LOGS

A User-Agent proves nothing. How to tell real GPTBot, ChatGPT-User, ClaudeBot and PerplexityBot from fake AI bots: IP lists, reverse DNS and signatures.

A signature either verifies or it does not, and nobody says which part broke. The Agent Verifier names the exact fault in a Web Bot Auth setup and the fix.

For thirty years a bot was whoever it claimed to be. Web Bot Auth replaces that promise with an Ed25519 signature. How the protocol works and what it proves.

A real person, a robot, or a mask? How sites catch bots, headless browsers, and anti-detect tools, and how to check your own browser.

Your browser hums and keeps a list of voices you never hear, and both quietly identify you. How audio and speech-voice fingerprinting work, why they survive a VPN, and how to check your own.

Passive OS fingerprinting reads your operating system from the first TCP packet. How p0f and JA4T work, why proxies and VPNs show up, and how to check yours.

For months your privacy and your trust shared one number. That was a lie. Here is why I split packet.guru into two scores and what the new cards now see.

ECH finally closes the SNI leak in TLS 1.3. A practical guide to RFC 9849, how Encrypted Client Hello works, and how to actually enable it in Firefox, Chrome, and beyond.

Zero trust vs VPN for indie projects and small teams: how Cloudflare Tunnel with Access and Tailscale work, what each protects, and when to pick which.

What JA3 and JA4 TLS fingerprints are, how both are built from the Client Hello, why JA3 stopped working and what JA4+ and Encrypted Client Hello change.