SYSTEM LOGS
Technical analysis, security research, and network utility documentation.
Access Level: Public
What Is CGNAT: How to Tell If You Are Behind It and How to Get Around It
What CGNAT (carrier-grade NAT) is, how to check if you are behind it, what it breaks for gaming, port forwarding and Plex, and how to bypass it.
Is UPnP Safe: Should You Turn It On or Off for Gaming?
What UPnP does, when it is a security risk, whether to keep it on or off for Xbox, PS5, Switch and PC, if it affects lag, and how to fix UPnP Not Successful.
NAT Type Explained: Strict, Moderate and Open on Xbox, PS5 and Switch 2
What every NAT type means on Xbox, PS5, Switch 2 and PC, which one is best for gaming, whether it affects ping, and how to fix strict NAT, double NAT and CGNAT.
Riot Vanguard and Kernel-Level Anti-Cheat: What It Sees, Is It Safe, and How DMA Cheats Work
Riot Vanguard is kernel-level anti-cheat. What it sees on your PC, whether it is safe, why games require Secure Boot and TPM 2.0, and how DMA cheats work.
Certificate Transparency: Anyone Can List Your Subdomains
Public TLS certificates land in Certificate Transparency logs that crt.sh can search. Why your subdomains are public and what a wildcard certificate hides.
Replay Attacks: Why a Valid Signature Is Not a Fresh Request
A valid signature proves who signed a request, not that it is new. How replay attacks work, how a nonce and expiry stop them, and what a site must check.
AI Crawler Verification: Is That Really ChatGPT in Your Logs?
A User-Agent proves nothing. How to tell real GPTBot, ChatGPT-User, ClaudeBot and PerplexityBot from fake AI bots: IP lists, reverse DNS and signatures.
Agent Verifier: See Your Signed Request the Way a Server Sees It
A signature either verifies or it does not, and nobody says which part broke. The Agent Verifier names the exact fault in a Web Bot Auth setup and the fix.
Web Bot Auth: How the Web Started Checking an Agent's ID
For thirty years a bot was whoever it claimed to be. Web Bot Auth replaces that promise with an Ed25519 signature. How the protocol works and what it proves.
The Fake Browser: How Sites Catch Bots and Anti-Detect Tools
A real person, a robot, or a mask? How sites catch bots, headless browsers, and anti-detect tools, and how to check your own browser.
One scan shows what your connection and browser give away.
Privacy & Trust Index →