What Our Own Security Audit Found
Nine parallel red-team reviews of our own admin panel produced twelve security findings. Eleven are closed, including al...
Guides & How-tos · Worked examples · Real numbers
Do it right, with real numbers
Step-by-step how-tos, head-to-head comparisons and honest roundups — every guide worked through with current figures, then backed by a RECATOOLS calculator or AI-directory entry so you can act on it.
299 guides published
17 topic areas
Latest guide Sep 2026
Tagged Cybersecurity · 29 guides
Health & Wellness
12
Statistics
12
ASEAN Tech
11
Privacy & Data
10
Personality
7
Cloud & Infra
7
Home & Living
7
Consumer Tech
6
Cyber Threat Intel
6
Business
5
Sustainability
4
Advertisement
How to Check Who Owns the Lookalikes of Your Domain
Five edit rules per character generate the confusable space around a domain name, and DNS says which of those names alre...
The Post-Quantum Migration Already Started, and Nobody Told You
Quantum computing and encryption is usually framed as a countdown. For the connections you actually use, the migration h...
What "Known Exploited" Actually Means
There is a free, public list of the software flaws attackers are genuinely using, and its shape is not what the phrase s...
How Many Domains Does Your Bank Send Email From?
Every scam-email guide ends with "check the sender", which assumes a bank is a domain. We read the published records for...
Public Wi-Fi: The Warning Is Out of Date, the Exposure Is Not
All eight sites we checked end on HTTPS and all eight set HSTS, so nobody on the café network can read what you send — i...
What Does a QR Code Actually Store? You Cannot Tell by Looking
Two codes pointing at two different sites differ in 35.6 per cent of their squares — and no human can tell, because nobo...
Is This Email Really From Them? The Check You Cannot See
The sender name is free text and the address can be forged. The real check happens in DNS before the message reaches you...
What Does the Padlock Actually Prove? We Read Six Real Certificates
It certifies that the connection is encrypted and that the name in the address bar matches the certificate. It says noth...
Account Security You Can Finish in an Afternoon
Four jobs, ordered by how much loss each one prevents, with the arguments settled by the standard rather than by folklor...
Cybersecurity for a Small ASEAN Business
Until this week our own password checker rated Summer2026 as Fair. It is not fair — it is one of the first few hundred g...
Which Hash for What: MD5, SHA-256, and the Password Mistake
"MD5 is broken, so hash your passwords with SHA-256 instead" gets both halves wrong, in opposite directions. What broke...
Advertisement