bug
Mullvad's Exit IPs Are Fingerprinting Its Users
Your WireGuard public key can tie your sessions together across Mullvad servers. That's exactly the sort of subtle linkage that privacy-conscious users assume does not exist.
VPNrevie.ws
zero-day
The Patch Wave: Eleven Breaches, One Week, and the Myth of the AI Collapse
A single week saw Linux, Windows, macOS, Next.js, and the global software supply chain battered by critical exploits and mass advisories. Is this the long-feared AI-driven collapse of digital infrastructure, or just the new normal? A technical, evidence-driven investigation.
supply-chain
JDownloader's Linux Installer Delivered a Root Backdoor
ℹ️This is a developing situation I have relied on JDownloader for years. It is the sort of unglamorous tool you install once and forget about until you need to pull a 40 GB archive at 3 a.m. So when the official site went dark on 7 May and
Linux
Copy Fail: 732 bytes to root on almost every Linux server since 2017
A subtle 2017 optimisation in the Linux kernel's crypto layer has just been turned into a reliable, 732-byte path from any user account to root. Here's what it means for your servers and what to do right now.
supply-chain
Vercel’s supply-chain breach: one Roblox script away from your secrets
A stolen Roblox auto-farm script led to Context.ai credentials, then Vercel Google Workspace takeover via OAuth token abuse in March 2026.
audits
What DuckDuckGo's VPN audit can and cannot tell you
Securitum signed off on DuckDuckGo's no-logs policy last month. The audit is better than most and thinner than some, and understanding why is the difference between useful privacy scepticism and reading marketing copy.
age-verification
The Age Verification Arms Race Just Moved to Your Operating System
Apple volunteered to be the internet's bouncer. The UK didn't even ask. Now the same infrastructure is heading to the US, France, and Australia. And VPNs are next on the list.
longform
Net Neutrality: a state-by-state solution to a nationwide issue?
While a few years ago, Net Neutrality was only a niche subject talked about in the Bay Area, in recent years the debate has been spreading coast-to-coast, well beyond the usual boundaries of social circles. With online streaming and the cable-cutting movement gaining momentum, the Internet is now part of
Apps
5 Encrypted Notes Solutions
You probably have already been in a situation where you needed to jot down notes: from a short post-it scribbled in a jiffy, to a blog post or essay draft, or even a brilliant idea for your next novel. But even though Moleskine notebooks still enjoy some popularity, most of
News
Dropbox drops support for most Linux filesystems in November
Dropbox users on GNU/Linux distributions were first surprised when an eerie notification popped up on their screen. A thread was opened on Dropbox forums [https://www.dropboxforum.com/t5/Syncing-and-uploads/Dropbox-client-warns-me-that-it-ll-stop-syncing-in-Nov-why/td-p/290058] , reporting: > These days, I found my Dropbox Linux desktop client always report the following warning:
News
DtDNS will shut down on August 1, 2018
DtDNS was originally founded to provide services to the users left stranded by the original dyndns service's disappearance, ml.org. But the company announced its coming shut down on August 1, 2018, after over 18 years of service. Among the reasons invoked, the difficulty to maintain a free
hubiC review - the fallen cloud
When OVH announced its own cloud storage product in September 2011, it was positioned as the cheapest cloud ever: more affordable than Dropbox yet out of the US territory as it was hosted in France, a country with one of the most restrictive privacy laws. The promise hubiC was billed