Blog
Notes on privacy, rights and the build
How scams and data leaks actually work, what the law lets you demand, and what you can do about it. Written plainly, without the security-vendor fog.
- Phishing5 min read
How to Spot a Phishing Email: Typosquats and Fake Sender Signs
How to tell whether an email is fake using typosquat domains, spoofed display names and technical signals such as SPF, DKIM and DMARC.
- Passwords4 min read
Why "Pwned Passwords" Checks Your Password Without Seeing It
The k-anonymity trick behind breached-password checks - how a check can be useful without your password, or even its full hash, ever leaving your device.
- Social Media5 min read
The Social Media Privacy Settings Most People Miss
The default-on settings across Instagram, Facebook, LinkedIn and YouTube that quietly expose more than most people realize - and where to turn them off.
- Dark Web4 min read
What Dark Web Monitoring Actually Catches (and Doesn't)
A grounded explanation of what breach monitoring can realistically detect, where its blind spots are, and how to check your own exposure for free today.
- KVKK5 min read
KVKK Article 11: Your Right to Have Your Personal Data Erased
What rights does Article 11 of KVKK give you, how do you send an erasure request to a company, and how long do they have to answer?
- Data Brokers5 min read
How Data Brokers Build a Profile on You
A plain look at where data brokers actually get your information, what they do with it, and the concrete steps that make you harder to profile.