Would you like a drainer served at the very top of DuckDuckGo?

Probably no, right? That would be very dangerous, especially if the phishing website serving it is an exact copy of the thing you was looking for. Well that's what happened to me! TL;DR I found a fake tronscan blockchain explorer duplicate on the #1 position in the

Scam Telegram: Uncovering a network of groups spreading crypto drainers

I accidentally discovered a network of hundreds of fake DeFi support chats spreading various phishing sites with wallet stealers and drainers, including infamous Inferno Drainer. TL;DR While searching for a contact of a member of one DeFi project, I found a fake "Official Support" group with botted

Why you should self-host your (vibecoded) app

Intro Over the last 5 years I had to deploy more than 50 different services, both at the companies I used to work at, my personal projects and at my now-dead startup, Track Pump. I started this journey with almost 0 knowledge about servers, dockers, CI/CDs and so on

Switching to Claude Code + VSCode inside Docker

Last night I finished a transition from my old AI coding setup I've been using for a while to running Claude Code in Docker using VSCode's "Dev Container" feature. In this post I lay out a few of my thoughts on why I wanted

Everyone knows your location, Part 2: try it yourself and share the results

It's been more than 2 months now since my first post on the topic of location data sharing between various 3rd parties came out – in case you haven't seen it, you should definitely start from there: Everyone knows your locationHow I tracked myself down using leaked

Github scam investigation: Thousands of "mods" and "cracks" stealing your data

While looking through the articles on a "social engineering" themed forum I discovered a relatively new scam scheme that shocked me. People create thousands of GitHub repositories with all sorts of things - from Roblox and Fortnite mods to "cracked" FL Studio and Photoshop. As soon

Everyone knows your location: tracking myself down through in-app ads

Recently I read about a massive geolocation data leak from Gravy Analytics, which exposed more than 2000 apps, both in AppStore and Google Play, that secretly collect geolocation data without user consent. Oftentimes, even without developers` knowledge. I looked into the list (link here) and found at least 3 apps

$2m laundered: the YouTube crypto tutorials’ huge scam (investigation)

How 1 youtube video turned out to be a part of a million dollar scam scheme

I made a Chrome extension to help avoid playing cheaters in chess

If you google “chrome extension for cheating in chess”, you’ll find a lot of them. Cheating is so easy, it’s crazy. If you google “chrome…

How I created an Ethereum Proof-of-Stake demo

Hi everybody!

Why I created Ethereum Proof of Stake demo

Hi there!