Security: Cybersecurity & InfoSec Articles | ilia.ae
SIEM on an open core: Wazuh and OpenSearch plus a custom correlation layer Security
A SIEM on an Open Core: What Is Ours and What Is Not
When a contractor calls a SIEM “our own product”, it is worth asking what exactly is theirs. In our case the answer is this: ours is the layer on top of an open core, not a rewritten engine.
Hidden OS on UEFI: two independent encrypted Windows perimeters on one disk Security
Hidden OS on UEFI: the Windows Perimeter Nobody Can See
A hidden OS is a second encrypted Windows perimeter on the same disk of an ordinary laptop, whose existence cannot be established from the running system, from the bootloader, or from a sector-by-sector disk image.
Zero Trust in practice: separated provider accounts, hardware keys and rotated secrets Security
Zero Trust in Practice: the Infrastructure We Run Ourselves
A great deal has been written about Zero Trust, and almost all of it is about principles. It is far more useful to see what those principles turn into under real operation: which decisions get made, what
A private phone done right: turning an ordinary iPhone or Samsung into a device you can trust Security
A Private Phone, Done Right: Turning an iPhone or Samsung Into a Device You Can Trust
Your phone isn’t a “dialer.” It’s the key to your email, your banks, your messages, your calendar, your location, your microphone and your camera, and you carry it in your pocket 24 hours a day.
Анонимный номер +888 для Telegram как NFT в сети TON / An anonymous Telegram number in the +888 range as an NFT on the TON network Security
How to Buy an Anonymous +888 Number for Telegram
Telegram lets you sign up with a number that was never issued by a mobile carrier and never lived in a SIM card: a virtual number in the +888 range. People call it “anonymous,”
Личные крипто-инструменты / Personal crypto tools: local-first security Security
Personal Crypto Tools: My Local-First Security CLI
I keep the recovery story of my own crypto security in my own hands. Every tool I’m about to describe runs local-first and offline: it binds to loopback, sends nothing to the cloud, and is built
Klipsch Flexus 2026 firmware – Home Assistant dashboard with all 41 entities (прошивка Klipsch Flexus 2026) Digital
Klipsch’s Security Theatre: Cracking the Flexus 2026 Firmware Signing Key
A few months after I shipped my open-source Home Assistant integration for the Klipsch Flexus, a soundbar over-the-air update killed it. Reads still worked; every write came back 401 Forbidden.
Multisig hardware wallet security – мультисиг аппаратный кошелёк безопасность Security
Multisig Wallets with Mixed Hardware: A Practical Security Guide
A single hardware wallet is a single point of failure. Firmware backdoor, compromised vendor, someone physically grabbing your device and extracting the seed, any one of these and your funds are gone.
Аппаратные крипто-кошельки и ключи безопасности – Trezor, Ledger, YubiKey на столе Security
My Crypto Hardware Stack: 11 Devices, Zero Trust
Complete walkthrough of 11 crypto security devices I actually use: Trezor, Ledger Stax, Nano X, SafePal, CoolWallet, Tangem, Opendime, and three YubiKeys. Real specs, trade-offs, and multisig setup.
code deposit – депонирование кода для защиты авторства Digital
How to Prove Authorship and Keep Your Rights: 6 Ways That Hold Up in Court
You created something. A design, a photograph, a piece of music, an article, a software library, an architectural plan. You know when you made it, how long it took, and what you put into it.
DIY умный замок Aliro на ESP32 + PN532: контроллер доступа для Apple, Google и Samsung Wallet Digital
DIY Aliro Smart Lock: ESP32 + PN532 Access Controller for Apple, Google & Samsung Wallets
Commercial smart locks that support Apple Home Key or Google Wallet cost north of $250 and lock you into a single vendor ecosystem. The Aliro specification, published in February 2026, finally gives us
GPG YubiKey scdaemon macOS: GPG YubiKey scdaemon Security
GPG YubiKey Fix: Auto-Retry scdaemon Failures on macOS
If you’ve ever tried to sign a Git commit with a YubiKey on macOS and hit a cryptic “General error” from GPG, welcome to the scdaemon PC/SC race condition. I hit this problem repeatedly