Tap a YubiKey against your phone and the login just happens. Rest it on an NFC reader next to your Linux desktop and nothing happens at all: browsers on Linux only talk to security keys over USB, so the reader may as well not be plugged in. One small daemon closes that gap. Here’s how token2-fido-bridge works, the hardware on my desk, and the AUR package I published that makes the whole setup two commands on Arch.

Today I explored ssh-audit, a tool designed to audit SSH configurations. Although it’s an excellent tool, I found the hardening guides somewhat lacking. Hence, I decided to write a detailed walkthrough, ensuring the ssh/sshd configurations are easily readable.

The internet was never designed with privacy in mind. A majority of the protocols we use today were conceived without any security or privacy considerations. This guide is for those who value their privacy and can spare a few minutes to configure their system. It is not intended to be an exhaustive list of recommendations, but a source of simple privacy-enhancing tips for the average user.