HomeCyber Security
Defensive craft
@DrIbrarCyberSecurity
Defensive cyber education for engineers and SOC teams: AI agents, LLM security, malware paths, and how anonymity systems fail in practice. Educational only. Each article embeds the matching lecture.
Build a three-page website on Ubuntu 24. 04 and publish it as your own Tor onion service. You create the files, serve them on 127. 0. 0. 1 port 8080, point onion port 80 at that listener, restart Tor, and read the hostname Tor writes. Host only pages you have the right to publish. An onion address identifies the service key.
The dark web is not a place. Tor hides relationships. It does not remove consequences. A complete course on how the architecture actually works: directory consensus, circuits and streams, DNS through the exit, the six-hop onion path, version-3 identity, and why Tor is not the whole dark web. Limits stay in frame: observers, fingerprints, metadata, correlation, and investigations that succeed at the edges.
Who is watching you on the dark web? One request. Two routes. On the normal web, the destination sees where you came from. Tor changes who gets to know each part of the path.
Why does Tor use a guard, middle relay, and exit instead of one direct proxy? Each position receives enough information to forward traffic, but not the complete route. The guard sees the client side, the middle sees adjacent relays, and the exit sees the onward destination. That separation is the mechanism: distributed knowledge-not invisibility and not magic.
Tor can protect parts of a network route. It cannot prove that a person, service, payment, or downloaded file is safe. An onion address authenticates a cryptographic onion identity. It is not a character reference or safety certificate. Tor may perform its routing job correctly while an account, payment, file, or human decision still identifies or harms someone.
Who is watching you on the dark web? One request. Two routes. On the normal web, the destination sees where you came from. Tor changes who gets to know each part of the path.
Who is watching you on the dark web? One request. Two routes. On the normal web, the destination sees where you came from. Tor changes who gets to know each part of the path.
Why not infect everyone? Pegasus is mercenary spyware. Expensive. Aimed at selected phones. Expensive exploits. Limited infrastructure. High-value targets. A patch can destroy an exploit's value. Not mass malware. Full episode: Pegasus Spyware: How Your Phone Gets Hacked Without a Click
Does Pegasus break encryption? It does not need to. Encryption protects data in transit. A compromised phone sees the message after decryption. Encryption intact. Endpoint compromised. The phone is the hole. Full episode: Pegasus Spyware: How Your Phone Gets Hacked Without a Click
Pegasus Spyware: How Your Phone Gets Hacked Without a Click How mercenary spyware works | CYBER MECHANICS What if someone wanted everything on your phone - messages, microphone, photos, location, even end-to-end encrypted messages after they reach your phone - and you never clicked a link? For some Pegasus attacks, that was the point.
Did you click a link? Messages. Microphone. Photos. Location. You never needed to click. Zero-click attacks software that processes incoming data automatically. For some Pegasus attacks, the target did nothing. Full episode: Pegasus Spyware: How Your Phone Gets Hacked Without a Click
153 Million IDs Hit the Dark Web. Here’s What We Know What Happens After Identity Data Is Copied | CYBER MECHANICS Reports claim as many as 153 million identity records. IDScan has confirmed a security incident. The FBI is investigating. The count is still a reported claim. A password can be changed. A card can be replaced.
This video is real. The story attached to it isn't. Same video. New caption. New story. Deepfake detection won't catch a false story attached to a real video. Verify the claim, not only the pixels. Full episode: https://youtu. be/2SaUc05Jzes Defensive education only. No creation recipes.
Your CEO is live on video asking you to transfer $240,000. Would you approve it? Don't. A live call is not proof of identity. Video is not authorization. Call back using a number you already know. The $240,000 transfer in this clip is fictional. The method is not. Full episode: https://youtu. be/2SaUc05Jzes Defensive education only.
Which one is fake? If you were checking blinking, skin or teeth, that is the problem. Both are synthetic. Clues are not proof. Six better checks in the full video. Full episode: https://youtu. be/2SaUc05Jzes Defensive education only. No creation recipes.