Latest Posts
HTB on Qubes: an OpenVPN Gateway and the Reverse Shell Problem
Five minutes on Kali, five hours on Qubes. The default route that kills your internet, where the DNAT rule belongs, and the mistakes I made getting there.
A Week with Qubes OS on the NitroPad T480
Measured, not guessed: qube start times, memory use across two sessions, and what CPU load actually costs on 2018 hardware running Qubes 4.3.1.
NitroPad T480 Review: Coreboot, Heads, and a Nitrokey as Trust Anchor
A first look at the NitroPad T480: Coreboot, Heads measured boot, a disabled Intel ME, and what a review unit without a tamper seal can and can’t demonstrate.
YubiKey 5C Nano and 5C NFC: A Week In
First impressions of the YubiKey 5C Nano and 5C NFC after a week: a fixed key that never leaves the desk, a mobile one that goes everywhere, and why the pair covers each other.
Registering a YubiKey with Self-hosted Vaultwarden Behind Cloudflare Tunnel
Why WebAuthn fails on a self-hosted Vaultwarden instance, and how to tell a server-side domain problem apart from a browser-side one.