IT & Systems
Encryption in Transit: TLS, HTTPS, SSH, and VPN
Part of the Encryption in Transit and At Rest series. What Encryption in Transit Actually Does When data travels over a network, it passes through…
tag
#security
IT & Systems
Secure Boot Certificates Start Expiring This Month: Check Your Machine
The certificates that Secure Boot has trusted since 2011 start expiring this month. Most machines will update themselves. The ones that won't are…
IT & Systems
Microsoft Edge Held Your Passwords in Plain Text and Called It a Design Decision
Microsoft Edge loads every saved password into memory in plain text the moment the browser starts. Microsoft called it a deliberate design decision.…
IT & Systems
Why You Should Ditch Gmail (And What to Use Instead)
Google reads your email. Not a person at Google. The system itself. Every message, scanned and indexed. Gmail is free because you are the product.…
IT & Systems
Encryption in Transit and At Rest: What Each One Does and When You Need Both
Someone calls asking about encryption and you want to send them one link. This is that link. Two Different Problems Encryption is often talked about…
IT & Systems
Microsoft Locked Out VeraCrypt, WireGuard, and Windscribe: What Happened and Why It Matters
In April 2026, Microsoft's automated enforcement of a new policy locked out the developers of VeraCrypt, WireGuard, and Windscribe from shipping…
IT & Systems
SSH Keys on Windows 11: Native OpenSSH Without the Extra Tools
Windows 11 ships with OpenSSH built in. You do not need PuTTY, Git Bash, or any third party tool to generate keys and connect to remote servers from…
IT & Systems
Two-Factor Authentication: What It Is and How to Set It Up
A strong password is the lock on your front door. Two factor authentication is the deadbolt. Even with a password manager and unique passwords for…
IT & Systems
The 3-2-1 Backup Rule: How to Never Lose Your Data
If you only have one copy of something, you don't really have it. I have watched people lose years of photos, entire project folders, and business…
IT & Systems
SSH Keys: Stop Typing Passwords and Start Using Keys
If you're typing a password every time you SSH into a box, you're doing it the slow way and the less secure way. I manage 18 Linux hosts. If I had to…
IT & Systems
Why You Need a Password Manager (And How to Use One Right)
If your passwords live in a text file, a Word doc, a sticky note, or a OneNote page, this post is for you. I have worked in IT for over 35 years. In…
Development & Code
QuietLedger: Privacy-First Personal Finance Tracker
Track your complete financial picture from a single desktop app. No cloud accounts, no subscriptions, no data leaving your machine. I built…
Development & Code
Why Shared Accounts Are Killing Your App Security (And What to Do Instead)
Building permissions into your application the right way from day one You've seen it before. Maybe you've even built it. One login. One password.…
IT & Systems
Virtualization-Based Security (VBS) Is Killing Your Gaming Performance
The hidden Windows 11 feature that costs you 5 25% of your frames You built a solid gaming rig. Or maybe you just want your laptop to run games…
IT & Systems
BitLocker and Microsoft Accounts: Why Your Encryption Keys Aren’t Really Yours
The hidden backdoor in Windows disk encryption You enabled BitLocker thinking your data was protected. Full disk encryption. Military grade AES.…
IT & Systems
Why You Should Ditch the Microsoft Account and Stop Using Admin [Standalone Guide]
Two simple changes that make Windows 11 way harder to break Microsoft really wants you to sign in with a Microsoft account when you set up Windows…
IT & Systems
Securing Windows 11 for Privacy - A Minimal Work Station [Part 1 of 2]
Strip down Win11 to a lean, privacy focused machine with one PowerShell script Every time you boot up Windows 11, it's phoning home. Telemetry.…
IT & Systems
How to Properly Redact Sensitive Info from Images [Standalone Guide]
Black boxes aren't enough if you skip the metadata You've got a screenshot with sensitive data. Maybe it's a support ticket, a config file, or…
IT & Systems
How to Install GrapheneOS on Google Pixel 9a (Works on All Pixel 9 Series)
Take back your privacy without sacrificing functionality I recently installed GrapheneOS on my Pixel 9a, and the privacy improvements over stock…
IT & Systems
Lock Down Your Linux Box with UFW, The Starter Guide for New Users
A beginner friendly firewall setup for new Linux users who just want their system to be safe and sane. Disclaimer: This guide is written and tested…