SYSTEM LOGS
Technical analysis, security research, and network utility documentation.
Access Level: Public
The Fake Browser: How Sites Catch Bots and Anti-Detect Tools
A real person, a robot, or a mask? How sites catch bots, headless browsers, and anti-detect tools, and how to check your own browser.
The Sound of You: How Audio and Voice Fingerprinting Track a Browser With No Cookies
Your browser hums and keeps a list of voices you never hear, and both quietly identify you. How audio and speech-voice fingerprinting work, why they survive a VPN, and how to check your own.
Passive OS Fingerprinting: Your Operating System Talks Before Your Browser Does
Passive OS fingerprinting reads your operating system from the first TCP packet. How p0f and JA4T work, why proxies and VPNs show up, and how to check yours.
BIG UPDATE: One Index Became Two, Because One Was Lying to You
For months your privacy and your trust shared one number. That was a lie. Here is why I split packet.guru into two scores and what the new cards now see.
Encrypted Client Hello: The Last Plaintext Crack in TLS 1.3 Privacy
ECH finally closes the SNI leak in TLS 1.3. A practical guide to RFC 9849, how Encrypted Client Hello works, and how to actually enable it in Firefox, Chrome, and beyond.
TLS Fingerprinting in 2026: JA3, JA4+, and the Death of Privacy?
A deep engineering dive into network identity. Why JA3 is dead, how JA4+ solved the entropy problem, and what Encrypted Client Hello (ECH) means for the future of traffic analysis.
DNS Encryption in 2026: Practical Guide to DoH, DoT, DoQ and Private DNS
DNS encryption explained: how DoH, DoT, DoQ and DoH3 differ, what Private DNS does on Android, Apple, Windows and in browsers, and what it leaves visible.
Change Browser Location: Bypass Geo-Blocking & Fix Timezone Leaks
IP changes aren't enough. Profiling uses timezones & headers to expose you. Learn to pass the ultimate browser privacy check.
User-Agent Spoofing: Why Switchers Fail and How Sites Catch Them
User agent spoofing is easy to detect. A switcher rewrites one string, while Sec-CH-UA Client Hints, navigator.platform and touch support still tell the truth.
Instagram API Breach 2026: 17M Accounts Leaked
17.5 million profiles leaked from Instagram. No passwords taken, just pure identity theft. A forensic autopsy of the API failure that shattered Meta’s digital trust.