I play on a private Aion server. For those unfamiliar, Aion is an MMO from 2009 that NCSoft has largely abandoned in the West, but a community of private servers keeps it alive. The server I play on uses a third-party anticheat called Active Anticheat , a commercial product sold to private server operators by a developer in Warsaw. I got curious about what it actually does to my machine. A few…
I was poking around the GrapheneOS infrastructure repo last week, just curious how they build things. First thing I noticed: every single server runs Arch Linux. DNS nodes, mail servers, the lot. You can verify it directly — every package list includes pacman-contrib and pacutils , which are Arch-specific and don’t exist on any other distro. The deploy-initial-vps script checks for the Arch…
Assume malware has run on your machine and obtained root. After a reboot, is it still there? For most operating systems the answer is yes. The OS itself offers no structural resistance once root is obtained — it can write to system directories, replace binaries, install kernel modules, modify boot configuration. None of this requires exploiting a vulnerability. It’s just what root can do by…
Consoles have a pretty remarkable track record. The PS5 and Xbox Series X have been out for years and neither has a public jailbreak. Meanwhile on PC, kernel-level cheats, rootkits, and firmware-level malware are a constant concern that entire security teams spend careers fighting. That’s not a coincidence. Console manufacturers made a set of deliberate architectural decisions that PC…
Trying to set up my homelab and have it be reachable from the internet I had serious problems getting to where I wanted to be, although I never expected it was going to be that difficult. Being very pro-privacy pro-security my goals where: Access my services from anywhere, including my phone Create trust between server and client that doesn’t involve 3rd parties, ideally trust on first use.…