phillip prado

cybersecurity | pentesting

Have you ever needed to reference a command line tool's capabilities only to find out there is no manual page and that only the -h (—help) option is available?

Normally, this isn't a problem, but -h doesn't let you search for strings the way man does. That means if you are trying to use a tool that is quite extensive, scrolling and sifting through the help option's results manually can be quite cumbersome.

Read more...

Here are just a few things you can try today to make your Tailscale network a bit more robust.

Tailscale touts itself as an affordable, zero-config virtual private network (VPN) that easily connects all of your devices from anywhere in the world. Without going into the nitty-gritty of how it works, Tailscale is built on WireGuard, and it uses a centralized server to make the initial introduction between all of your devices.

I've been using Tailscale for some time now. I first tried it out because I wanted an easy and secure way to access my home media server from anywhere in the world, and I heard Tailscale was a fairly pain-free way to do this.

Not only is that true, but I've actually loved using Tailscale, and I will never go back to using reverse proxies and port forwarding into my local network again. That being said, there are a few things you can do to make your Tailscale experience quite a bit better, and I've compiled a list of three which I believe just might do the trick.

Read more...

It's open source, easy to use, privacy-friendly, and cross-platform.

A while ago, I wrote a post about what I believed was the best open-source two-factor authentication application on the market: Ente Auth. And though I still love and use Auth, what I didn't know was that there was already an older kid on the block. Enter 2FAS, another free software 2FA option you should consider.

Read more...

These deserve to be some of your new go-to free software privacy tools.

If you want the most private and secure operating system for your desktop or laptop, GNU/Linux is likely the route to go. Mainstream proprietary offerings like macOS or ChromeOS may have some security benefits over the many Linux distros available, but Linux's strengths far outweigh these potential shortcomings.

That being said, the applications you put on your machine can make or break your privacy and/or security as well, regardless of what operating system you run. That's why I have three Linux desktop apps that you should give a try today that can help improve your digital privacy in one way or another.

Read more...

If you regularly watch video content on your Android device, you need to give Grayjay a shot.

I, like many of you, watch a fair bit of video content online. Whether it be YouTube, Odysee, or PeerTube, I engage with this form of media on a nigh daily basis.

Typically, that means going to each website or opening different apps to watch videos from various creators on each platform. That was until I stumbled upon a little Android app called Grayjay.

Read more...

This lesser known method is dead simple AND it does not use any extensions.

Personally, Firefox is my favorite web browser for both mobile and desktop. Despite a few shortcomings, Firefox can relatively easily become one of the most secure and private options available. And though the “out-of-the-box” experience leaves much to be desired, here's the best way to change one of the most important defaults relatively pain free: the search engine.

Read more...

Here is how to remove EXIF metadata on Android, iOS, or even your desktop of choice.

Sharing photos online is a critical part of how we connect with one another. Whether it's X (formerly Twitter) or Mastodon, Instagram or Pixelfed, or even just SMS or Signal, sharing pictures is synonymous with sharing our experiences. But this habit comes with a risk some aren't aware of: doxing yourself and/or your family via the photo's EXIF metadata.

Read more...

The bugs were found during a Vancouver-based hacking contest, and Mozilla have already released patches.

Mozilla released an update to their Firefox browser on March 22, patching two recently discovered zero-day vulnerabilities. As reported by SecurityWeek, the critical vulnerabilities were used in tandem to escape Firefox’s sandbox and allowed remote code execution directly on the target system.

Read more...

Accrescent is a highly focused, highly accessible app store with privacy and security in mind. But what's the catch?

Unlike iOS, there is no shortage of third-party app stores on Android. From the Amazon App Store to Aptoide, we have a plethora of options to choose from.

In my opinion, F-Droid is easily the best of them, since it's filled with only free and open-source software and is FOSS in itself. But what if I told you there is a new FOSS android app store available, and this one focuses on privacy and security?

Well that's exactly what Accrescent is, but unfortunately, it comes with a few caveats.

Read more...

It's affordable and easy to use, but is Incogni's data removal service right for you?

In 2023, protecting your digital privacy is more crucial than ever. But protecting that privacy is not easy. In fact, it feels like every day it gets harder and harder to do so. Data brokers and criminals all over the world constantly purchase and redistribute your information in an effort to make money, and they often do so without you knowing.

There are ways to remove a lot of this data manually, but with hundreds of data brokers and thousands of places your data could be, doing so is quite labor-intensive. Plus, this isn't a one and done sort of thing. Removing your private data manually is something you will need to do at least one or two times a year to assure none of your information leaks back out there. That is where a solution like Incogni comes in.

Read more...

Enter your email to subscribe to updates.