SYSTEM LOGS

Your browser hums and keeps a list of voices you never hear, and both quietly identify you. How audio and speech-voice fingerprinting work, why they survive a VPN, and how to check your own.

For months your privacy and your trust shared one number. That was a lie. Here is why I split packet.guru into two scores and what the new cards now see.

ECH finally closes the SNI leak in TLS 1.3. A practical guide to RFC 9849, how Encrypted Client Hello works, and how to actually enable it in Firefox, Chrome, and beyond.

Zero trust vs VPN for indie projects and small teams: how Cloudflare Tunnel with Access and Tailscale work, what each protects, and when to pick which.

What JA3 and JA4 TLS fingerprints are, how both are built from the Client Hello, why JA3 stopped working and what JA4+ and Encrypted Client Hello change.

DNS encryption explained: how DoH, DoT, DoQ and DoH3 differ, what Private DNS does on Android, Apple, Windows and in browsers, and what it leaves visible.

Your favorite text editor was weaponized. A deep dive into the WinGUp breach and why supply chain attacks are the new normal.

Binary exploits are so 2024. Discover how PromptLock uses language models to rewrite its own DNA and why your firewall is blind to it.

Getting CAPTCHAs on every site? How reCAPTCHA, Cloudflare and hCaptcha decide you look like a bot, which signals trip them, and how to make them stop.

IP changes aren't enough. Profiling uses timezones & headers to expose you. Learn to pass the ultimate browser privacy check.