Gaming
Steam for Linux is more secure than on MacOS and Win32
Secure app-sandboxing makes Steam distributed via Flatpak for Linux a more secure gaming environment than MacOS and Windows 10.
Security
Hypertext
Safari’s default media controls get blocked when CSP is applied
Any HTTP Content-Security-Policy blocks the default <audio>/<video> controls in Safari unless you deliberately make it less secure.
CDN
Turkey blocks BunnyCDN; Ctrl blog and 14 000 websites inaccessible
Ctrl blog was inaccessible in Turkey for five days as the country inadvertently blocked the BunnyCDN content delivery network.
Image Files
WebP images won’t load in Microsoft Edge with Application Guard
A Windows 10 security-enhancement feature blocks WebP image files from loading in the Microsoft Edge browser and other modern Windows apps.
DNS
How I blocked myself from obtaining a Let’s Encrypt TLS certificates
A misapplied DNS CAA record blocked Certbot from obtaining a Let’s Encrypt certificate for my domain name. Ouch. Have a fallback strategy!
Authentication and Passwords
Firefox, Security Keys, U2F, and Google Advanced Protection
How to use U2F security keys (USB A or C, Bluetooth, others) with Firefox and Google’s Advanced Account Protection program.
DNS
Actually secure DNS over TLS in Unbound
Resolve a common DNS over TLS configuration mistake in the Unbound DNS server that makes you vulnerable to attacker-in-the-middle resolver interceptions.
Lenovo
What is Lenovo Wi-Fi Security and should you enable or ignore it?
Lenovo Wi-Fi Security collects information about your device and networks. It can warn you about insecure networks, but it doesn’t proactively protect you.
Security
PCMag’s VPN review-ratings compared to sales commissions
Do the poorly disclosed affiliate links and link commissions make a difference in how PCMag rank VPN providers? (It would seem so.)
Networking
VPN root certificates leaves you more vulnerable to snooping
Many VPNs require you to install their root certificates to use their service. This also enables them to intercept your encrypted web traffic.
Networking
How to work around the IKEv2 EAP authentication issue in Windows 10
Bugs in the Windows Settings app cause problem when setting up VPN connections with IKEv2 EAP authentication profiles. Here’s how to set it up despite the bugs.
Privacy
Vilfo review: Not designed for security or privacy – Part 3:4
I found several privacy and security issues with the Vilfo VPN router during my week-long review.