RSSAmplifier

Blog

cristianrz

Recent content on cristianrz

blog.cristianrz.eu.orgRSS feed ↗6 posts

Latest posts

Reverse Engineering the Anticheat on a Private MMO Server

I play on a private Aion server. For those unfamiliar, Aion is an MMO from 2009 that NCSoft has largely abandoned in the West, but a community of private servers keeps it alive. The server I play on uses a third-party anticheat called Active Anticheat , a commercial product sold to private server operators by a developer in Warsaw. I got curious about what it actually does to my machine. A few…

An Analysis of GrapheneOS's Server Infrastructure

I was poking around the GrapheneOS infrastructure repo last week, just curious how they build things. First thing I noticed: every single server runs Arch Linux. DNS nodes, mail servers, the lot. You can verify it directly — every package list includes pacman-contrib and pacutils , which are Arch-specific and don’t exist on any other distro. The deploy-initial-vps script checks for the Arch…

The Reboot Problem: Why Most Operating Systems Can't Defend Against a Compromised Root

Assume malware has run on your machine and obtained root. After a reboot, is it still there? For most operating systems the answer is yes. The OS itself offers no structural resistance once root is obtained — it can write to system directories, replace binaries, install kernel modules, modify boot configuration. None of this requires exploiting a vulnerability. It’s just what root can do by…

Console security principles and why PC is still catching up

Consoles have a pretty remarkable track record. The PS5 and Xbox Series X have been out for years and neither has a public jailbreak. Meanwhile on PC, kernel-level cheats, rootkits, and firmware-level malware are a constant concern that entire security teams spend careers fighting. That’s not a coincidence. Console manufacturers made a set of deliberate architectural decisions that PC…

Securing Your Homelab: Navigating the Complexities of Remote Access and Trust

Trying to set up my homelab and have it be reachable from the internet I had serious problems getting to where I wanted to be, although I never expected it was going to be that difficult. Being very pro-privacy pro-security my goals where: Access my services from anywhere, including my phone Create trust between server and client that doesn’t involve 3rd parties, ideally trust on first use.…

Cool services

Collection of cool services made by others, usually free. Send — file sharing Hat.sh — file encryption Piped — YouTube frontend CryptPad — Cloud Office Suite PrivateBin — PasteBin alternative FreeDNS — free subdomains GitHub Pages — free static site hosting Telegram Cloud — unlimited free storage lofi atc — Lo-Fi beats with ATC sounds