Explainer
Your email provider has ten days to hand you over
Since 18 August 2026, your email data can be handed over within ten days to an authority in any member state, without a judge in your country.
Security
Comparison Getting started
De-Googled browsers, the false choice they sell you
Brave, Firefox, Safari, Librewolf. Most alternatives to Chrome run on Google's engine. Engines, exploited flaws and agentic AI, the essentials.
Tutorial Going further Episode 1/2
An AI agent can wreck your fleet. The Touch ID lock.
An AI agent runs with your rights and your SSH keys. Put them in the Secure Enclave, Touch ID on every connection, and close port 22 with Tailscale.
Explainer Going further
Code signing, the shared anchor of Santa and Little Snitch
A Little Snitch alert on your backup is not necessarily a missing signature. What code signing really controls, with Santa in parallel.
Tutorial Going further MS Pro Episode 2/5
Wazuh, write the rule that catches what you're really after
Writing a custom Wazuh rule isn't about covering everything. It's asking one precise question to a real log, testing it with wazuh-logtest, then shipping it.
Tutorial Going further MS Pro Episode 1/5
Your sovereign SIEM, learn to read it properly then make it act
Wazuh is installed and you don't know what to do with it. Three first jobs in the right order, without drowning in alerts.
Explainer
Passwork, « Made in EU » outside, FSB-certified inside
A tool sold as Made in EU, with code pushed from Russia. The label has no legal weight. Here's the checklist to vet your software supply chain.
Tutorial Going further MS Pro Episode 7/7
Alerting and total cost, the final tally of your sovereign SIEM
Wire up Wazuh alerting without drowning in noise, then the honest bottom line on your sovereign stack against a SaaS bill six to thirty times heavier.
Tutorial Going further MS Pro Episode 6/7
Santa on your Macs, the uninvited binary stays at the door
Install Santa on your Macs, map the fleet in Monitor mode, switch to Lockdown, write your allowlist by TeamID, and feed every block into Wazuh.
Tutorial AI
MCP servers, the backdoor into your AI
MCP servers give your AI real access to your Mac: files, shell. Handy, but it's a backdoor. Here's how to lock it down.
Tutorial Going further MS Pro Episode 5/7
Rspamd in front of your inbox, phishing stops at the doormat
Install Rspamd in front of your mail server, tune the anti-spam and anti-phishing scoring, and feed every verdict into your Wazuh SIEM.
Tutorial Going further MS Pro Episode 4/7
CrowdSec up front, blocking before they hit you
Install CrowdSec on your hardened VPS, block malicious IPs upstream with the bouncer firewall, and feed its decisions into Wazuh.
Tutorial Going further MS Pro Episode 3/7
Deploy Wazuh everywhere, your SIEM finally sees your network
Enroll Wazuh agents on your Linux servers, Macs, and Windows workstations, with log upload via Tailnet, never through the open internet.
Tutorial Going further MS Pro Episode 2/7
Wazuh: Your all-in-one, homegrown Splunk for the price of a VPS
Install Wazuh (manager, indexer, dashboard) on a single node, harden passwords and dashboard in Tailnet-only, adjust JVM heap, initial dashboards without agents.
Tutorial Going further MS Pro Episode 1/7
Your sovereign SIEM's foundation, a hardened VPS outside the CLOUD Act
A European VPS, Cloud Act-proof, hardened SSH, reduced attack surface via Tailscale, off-site encrypted backups.
Tutorial Going further MS Pro Episode 0/7
Build your sovereign SIEM for SMEs, compliant with GDPR/NIS2 without CLOUD Act
You're already forced by GDPR to detect a breach within 72 hours. NIS2 just widened the net by 30x. Build your SIEM now, it's security today and compliance amortised before it lands on you.
Explainer Mac security
Your Mac was patched by XProtect without your knowledge, it's for your own good
On May 11, 2026, 170 npm packages in the TanStack ecosystem were compromised in six minutes. The next day, Apple pushed an XProtect signature onto your Mac without telling you. Here's how to check.
Comparison Getting started Mac security
Little Snitch vs LuLu: Which outgoing firewall for your Mac?
Little Snitch paid and closed-source vs LuLu open-source and free. Max sovereignty on one side, max granularity on the other. How to choose without regrets.
Explainer
Six months and nineteen global texts, the terrifying convergence
HR 8250, CSAR, verdict Meta, World ID, Online Safety Act. Six months, nineteen texts, four continents. One direction.
Explainer
The DNS, your digital Achilles heel.
You encrypt your emails, pay for a VPN, enable Tailscale. Yet your ISP knows you visited Tinder.com last night. DNS, that's why.
Explainer
NIS2 forces companies to encrypt. CSAR prevents them from really doing it.
NIS2 forces encryption on businesses. CSAR wants to crack it. Same institution. Two incompatible texts. What it means for you.
Explainer
Chat Control 2.0: The EU wants to read your messages before you send them
The CSAR regulation would force messaging apps to scan your messages before encryption. Signal threatens to leave Europe. Here's what you can do.
Explainer Getting started Mac security
Lockdown Mode, why you should enable it
An iOS toolkit designed for government agencies has leaked. Lockdown Mode stopped it dead in its tracks. Here's how it works and why it matters.
Tutorial Getting started
Why your mail client is a sieve, and how to fix it
Spy Pixels, HTML Exploits, Outlook Zero-Days. Your Email's Attack Surface is Way Bigger Than "Gmail Reads You". Comprehensive Guide to Fix It.
Explainer Mac security
Apple Silicon and Security: What Secure Enclave Really Changes
Secure Enclave, Secure Boot, KIP, PAC. What Apple Silicon's architecture really protects, and what it doesn't. No bullshit.
Explainer
Why you need a VPN and what it actually does
Your ISP, or an attacker on a public network, sees every site you visit. A VPN changes that. But it also has its limits.
Mac security
Privacy on macOS: Safeguarding Your Digital Life
Your Mac's default settings are leaking your data. Location, Siri, FileVault, Apple ID: the settings to change in 15 minutes.