The Second Key Problem
A hardware security key is the strongest lock most people will ever own, and a single one is also the easiest way to lock yourself out. Here is how to run two, enroll both everywhere, and survive losing one.
Topic
Authentication
A collection of 18 issues
The Text Message Is the Backdoor
Why your phone number can be stolen without anyone touching your phone, and the exact carrier switches that make it much harder
The Password Manager You'll Actually Keep
Moving your logins out of the browser without leaving a trail of copies, and setting it up so you don't drift back
Move Your Two-Factor Without Locking Yourself Out
Everyone tells you to move off SMS. Nobody tells you the order to do it in, which is how people end up locked out of the account they needed most.
Signal Messenger: 2026
Signal is the closest thing to a trustworthy commercial messaging app that exists. End-to-end encryption is on by default, the protocol is open and audited, and the organization behind it collects almost nothing about you.
GrapheneOS: Post-Install Hardening and Usage Guide
Flashing the OS is the easy part. Without a real password, a Lockdown habit, and some discipline about what you install afterward, you are carrying a stock phone with a different boot logo.
Dormant Accounts: The Attack Surface You Forgot You Created
A forum login from 2013 that shares a password with something you still use is an open door. Nobody watches the accounts they forgot they made, which is exactly where credential stuffing starts.
Why Personal Privacy Matters to Corporations
Nobody finishes annual security training feeling motivated. But people will work to protect themselves — and the habits that do it happen to harden the employer too. An argument for pointing training at the person, not the org chart.
SparkPress - Privacy and Security News
A snapshot of what privacy news looked like in October 2023, back when passkeys were still a novelty and the first White House order on AI had just landed. Short, dated, and left exactly as it was published.
Two-Factor Authentication Devices for 2023
A 2023 snapshot of the hardware key market, when the decision came down to price, durability, and whether you could read the firmware. The specific models have aged; the reasoning for picking one has not.