Networking & Infrastructure

Firewalls & Security

OPNsense, VPNs, stateful inspection, encryption

21 episodes

#3883: Inside OPNsense Tunables: Kernel Variables Explained

What OPNsense tunables actually do, how they work under the hood, and when to touch them.

networkingoperating-systemskernel-architecture

#3804: Stateful Firewalls vs. Modern Threats

Is a basic firewall still enough in 2026? We break down what each security layer actually catches—and misses.

network-securitycybersecuritystateful-firewall

#2840: How Long Must a Password Actually Be?

The surprising math behind how long your password needs to be to survive a brute-force attack.

gpu-accelerationpasswordless-securityquantization

#2835: Why Can't I Trust My Own Computer?

Why services keep asking you to sign in—and what it would take to fix it.

zero-trustsecurityusability

#2834: The Deep Ocean Trench of Authentication

PIN + smart card + biometric + behavioral checks. The real security stack behind federal authentication.

hardware-engineeringcybersecurityzero-trust

#2831: What VPNs Still Protect After HTTPS

HTTPS encrypts your content but leaves your metadata exposed. Here's what a VPN still protects.

vpnnetwork-securityprivacy

#2827: Why People Still Pay for SSL Certificates

Free DV certificates are everywhere, yet paid SSL still thrives. Here’s what commercial CAs actually provide that free ones don’t.

cybersecuritydigital-identityenterprise-hardware

#2817: How to Add Marketing Email Without Breaking Gmail

Keep your Gmail working while adding SendGrid or Resend. The subdomain trick saves your inbox.

dnsemail-securityspf

#2815: Free Cloudflare WAF: Is It Enough for Self-Hosting?

Skip Cloudflare Access and lock down Home Assistant with just the free WAF rules. Here's how.

network-securitysmart-homeself-hosting

#2679: Can a VPN Protect You from SS7 Phone Spying?

SS7 is the hidden backbone of global phone networks—and it's wide open to spies. Here's what a VPN does and doesn't fix.

privacytelecommunicationssecurity

#2508: Why CORS Doesn't Protect Your Server

Why browsers block cross-origin requests, how CORS actually works, and the common pitfalls that trip up developers.

securitycybersecuritycors

#2481: How to Ask Cloud Vendors About Security (Without Sounding Clueless)

What to ask cloud vendors about security practices — and the technical red flags that actually matter.

cloud-computingdata-securitycybersecurity

#2319: The Rise of the Dodgy Box: Streaming Piracy’s New Era

How the dodgy box became the go-to device for streaming piracy, and why authorities are cracking down now.

internet-securityonline-privacyintellectual-property

#2292: Inside the Walled Garden: China's Parallel Internet

Explore China’s parallel internet ecosystem—how the Great Firewall works, the apps that dominate it, and the surprising innovations it fosters.

internetnetwork-securitydigital-privacy

#2226: When Quantum Breaks Everything

Quantum computers will shatter RSA and elliptic-curve encryption—but the real danger is data being stolen and stored right now, waiting to be decry...

post-quantum-cryptographycryptographycybersecurity

#2104: The Envelope Problem: Why Your VPN Isn't Enough

A VPN isn't magic. Learn how DNS and SNI leaks expose your browsing, and what encrypted DNS and ECH actually do to fix it.

privacycybersecuritynetwork-security

#2103: AI Firewalls: Spotting Bombs on an Encrypted Conveyor Belt

With 95% of web traffic encrypted, firewalls can't read packets. Here's how AI analyzes metadata to detect threats without decryption.

cybersecurityai-agentsiot-protocols

#2097: The Invisible Cloak: Frequency Hopping and Burst Transmission

Forget just encrypting data—learn why hopping frequencies and bursting signals are the real secrets to staying invisible and alive.

electronic-warfaretelecommunicationsmilitary-strategy

#1908: The Web's New Bouncer: When to Block AI Bots

AI bots are crawling the web like a bank heist. Are Cloudflare's new controls protecting your content, or just helping Google?

cybersecurityai-agentsnetwork-security

#1872: The Pinky Promise That Broke Email

SMTP is broken. DMARC is the fix. Learn why your emails might vanish after April 2026 and how to stop domain spoofing.

cybersecuritynetwork-securitydmarc

#1697: Automated Security for Solo Developers

Stop shipping secrets and PII to GitHub. Here's how pre-commit hooks automate security for solo developers.

securitydata-integritygit-hooks