What Cracking a Password Actually Costs: GPU Benchmarks, Cloud Rental, and What the Numbers Mean for Your Policy
Most advice about passwords is written as if “strong” were a feeling. Add a symbol. Make it longer. Don’t use
Personal Identity Protection in 2026: The Complete Guide
I’ve written about pieces of this before — the OSINT self-audit, the data broker opt-out slog, what actually happens in
Credit Freezes and Fraud Alerts: The Financial Side of Identity Protection
SIM swap attacks use a phone number to unlock accounts through “forgot password, text me a code.” There’s an older,
SIM Swap Attacks: How They Actually Work and How to Actually Prevent One
The data broker opt-out piece mentioned SIM-swap social engineering almost in passing — the aggregated profile a broker builds (your
Data Broker Opt-Outs: Removing Yourself from People-Search Sites
Running an OSINT self-audit on yourself tells you what’s actually exposed — the old forum profile, the data-broker listing, the
Crack Me If You Can 2026: How a Human and an AI Agent Placed 3rd in Street
Six years ago I wrote up my first Crack Me If You Can run as raw, unedited notes — hashcat
Incident Response for Individuals: What to Do in the First Hour
The backup strategy article covers how to make sure your data survives a ransomware event — immutable copies, an offline
Ransomware Defense: The Backup Strategy That Actually Works (3-2-1 and Beyond)
The complete home cybersecurity lab guide covers snapshot discipline for the lab itself — snapshot before every destructive experiment, keep
Encrypted Messaging Apps Compared: Signal vs. Session vs. Matrix
The disposable research identity guide touches on communication tooling in passing, and it’s a question that deserves its own treatment:
Passkeys vs. Hardware Security Keys vs. Authenticator Apps: What I Actually Use and Why
I get a version of this question constantly after publishing the password manager comparison: fine, the password manager is sorted,