* online syscfg.research utc
syscfg :// research
track SYSCFG-PRIVACYSELclass observedreports 8 on file syscfg.sh
Privacy & self-sovereignty // from whom // syscfg.sh

Privacyfrom whom

Every privacy tool protects something from someone. The useful question is never "is this private" but "what does it hide, and from whom?"

Field reports that answer that one question per tool, each with a working demo. The connection to the right is synthetic; the watchers are real roles.

// one connection, three watchersegressobserved

The track log

what's on file
8field reports in this track
38minutes end to end
2025–2026span of events covered
8/8reports with checked sources

What can they see?

pick a layer // watch the watchers

No TLS at all. Everything is in the clear on the wire. This is the baseline every other layer is measured against. read the report →

Your ISPsees you

Destination IPDomain / SNIPage contentWho you are

Reads everything you send and receive.

DNS resolversees you

Destination IPDomain / SNIPage contentWho you are

Sees which name you looked up.

The websitesees you

Destination IPDomain / SNIPage contentWho you are

Sees your IP and, with trackers, who you are.

A fingerprintersees you

Destination IPDomain / SNIPage contentWho you are

Recognises your browser across sites.

Companion transmission

logged.syscfg.sh

Field reports

8 in this track // newest first
Mar 20265 min

How Fast Does an Exposed Service Get Found?

Obscurity buys no time. A freshly exposed service takes automated probes within seconds and a weakly secured one is…

Open report →
Feb 20264 min

Obscurity Is Not Privacy: Certificate Transparency Exposes Your Subdomains

Every publicly-trusted certificate is logged to public, append-only CT logs - mandatory in practice because browsers…

Open report →
Jan 20264 min

Who Can Read Your Traffic? TLS Termination and the Tunnel You Trust

Whoever terminates TLS reads your plaintext - and for a Cloudflare Tunnel that is Cloudflare, not you. A VPS reverse…

Open report →
Nov 20255 min

Your Container Is Not a Security Boundary

A default container is isolation, not a sandbox - it shares the host kernel. Two lines in a huge number of compose…

Open report →
Sep 20255 min

Tor, VPNs, and What Traffic Correlation Actually Defeats

Tor resists an observer who sees part of your path and openly does not resist one who sees both ends: timing and…

Open report →
Aug 20255 min

What Your ISP Still Sees After You Encrypt Your DNS

Encrypted DNS hides one of three ways your ISP learns which sites you visit; the cleartext TLS SNI and the…

Open report →
May 20255 min

Build Your Own Browser Fingerprint: Why Clearing Cookies and Spoofing Do Not Help

Clearing cookies, incognito and a VPN do not change your fingerprint, and spoofing your user-agent makes it worse.…

Open report →
Feb 20255 min

What a VPN Actually Hides, and From Whom

A commercial VPN laid out as an adversary-by-adversary matrix. It hides your destinations from your ISP and your IP…

Open report →

Track console

shell // guest session
guest@SYSCFG-PRIVACYSEL--:--:--
track online // 8 reports indexed
type help, or random.

Try help, random, latest, grep <term>, or count.

syscfg.sh // Privacy & Self-Sovereignty. Independent security research. Sources are listed on each report once checked.← all research