Advertisements
Everything on this site about protecting your privacy and security, in one place. I test these on my own devices and accounts before writing them up — no theory, no fear-mongering, just what actually works. Jump to whatever worries you most.
Your devices are watching
- What your smart speaker actually records — Alexa and Google Home capture more than the commands you give them — here’s what, and how to limit it.
- Which smart TV spies on you the least — Every major TV runs ACR tracking out of the box. A side-by-side on who’s worst and how to switch it off.
- Audit every smart device in your home in 30 minutes — A room-by-room checklist to find what’s phoning home and shut down the worst offenders.
- Why your baby monitor is a security hole — Baby monitors are among the most-hijacked home devices. The exposure — and the fix.
- What your fitness tracker gives away — Heart rate, GPS routes, sleep — where it goes and which brands respect you most.
- Your wearable health data has no legal shield — The data from your watch isn’t protected like a medical record. Why that matters.
Your accounts and logins
- Why your password already failed — and what replaces it — Passkeys explained in plain terms, and why they end the reused-password problem for good.
- The 2FA weakness nobody warns you about — MFA-fatigue attacks bypass two-factor without cracking anything. How they work and how to block them.
- You deleted your account — your data didn’t — What really happens to your data after you hit delete, and how to make it stick.
What you leak online
- What a VPN actually does (and doesn’t) — The honest version of what you’re buying — and what a VPN can’t protect.
- Why incognito mode doesn’t hide you — Private browsing hides almost nothing from the sites you visit. Browser fingerprinting, explained.
- A site is selling your home address right now — Where your personal data is listed for sale, and the opt-out steps that actually remove it.
- The real risk of public WiFi — It’s not what the scare articles say. What’s actually dangerous, and the one setting that matters.
Scams, fraud, and deception
- How to spot an AI-written phishing email — AI made phishing flawless. The tells that still give it away.
- The ‘grandchild in trouble’ call is now AI — Voice-cloning scams need seconds of audio. How the scam runs and how to defuse it.
- How to spot a deepfake — The signs most people miss — and why video ‘proof’ isn’t proof anymore.
- That QR code might be a scam — Quishing turns a harmless-looking sticker into a trap. Where to be careful.
- 7 moves identity thieves hope you never make — The handful of steps that block most identity theft before it starts.
Security at work
- The ‘ingredients label’ your software was missing — What an SBOM is and why Log4j made it non-optional.
- Shadow AI: the risk already inside your team — Staff are pasting company data into chatbots. The exposure and how to get ahead of it.
- Disinformation as an attack surface — A class of attack your firewall can’t see. What it targets and how to defend.
- Why your AI’s vector database is leaking — The privacy hangover from RAG systems — and the architecture that fixes it.