Latest from the blog
All posts ->The Best Duress Code Is the One You Never Need
A GrapheneOS duress PIN can make your data effectively unrecoverable in seconds—but at a border crossing, that may create a much bigger problem than the one you were trying to solve. From forensic realities to potential legal consequences, this is why wiping a device under pressure is very different from simply refusing to unlock it.
Catching Process Hollowing in Memory with Volatility 3
A walkthrough of confirming process hollowing from a memory image: VAD anomalies, hollowed PE headers, and the IOCs that tied it together.
The Cloud Is Not Insecure, But It Is Unforgiving
Most cloud breaches are not clever exploits. They are open buckets, default passwords, and excessive permissions. Here is why misconfiguration is so common and how to stop it.