2026

• Paying off the debt: I finally opened one of those hidden APK payloads, and it wasn't proxyware Jul 28
• Eleven proxy networks and a country code: how a torrent client decides who rents your connection Jul 25
• A browser can fake its WebRTC address — it can't fake the packet Jul 22
• A TLS fingerprint won't tell you it's a bot — what it reaches for will Jul 19
• Wire-to-WiFi correlation, part two Jul 16
• The extra hop: counting a visitor's NAT layers from the outside Jul 15
• Wire-to-WiFi correlation Jul 4
• Chaining SOCKS5 UDP relays: self-loops, SSRF, and the amplification that isn't Jun 13
• Auth on TCP, open on UDP: the SOCKS5 relays scanners can't see Jun 11
• From a proxy pool's torrents to a booby-trapped game May 31
• Coordinated disclosure: CCTV cameras selling their owners' bandwidth Apr 15
• The iOS proxy ghost: why you can't find an iPhone in a residential pool Apr 3
• TCP-fingerprinting 300K residential proxy IPs: 98% are Linux Mar 26
• Detecting credential stuffing through encrypted traffic Mar 24