Following the Ankara water leaks, the focus has shifted to the commercial sector. Over the last few weeks, hackers have been systematically thawing out supermarket freezers across France and the rest of Europe. Here is how they are weaponizing HVAC maintenance panels to destroy the cold chain.
2026
31
Oct
When OSINT Becomes a Crime: The vncsnatch Legal Gray Area
The Turkish water infrastructure leak has entered its next predictable phase: debating whether the researcher broke the law. Let’s talk about the exact moment a passive port scan legally becomes unauthorized access, and why vncsnatch sits right on that fault line
28
Oct
When Your Side Project Makes the Evening News in Ankara
I built vncsnatch to demonstrate how many unprotected desktops are sitting on the open internet. Recently, a researcher used it to scan Turkish IP ranges, and accidentally discovered that their critical water infrastructure was one unauthenticated click away from disaster.
11
Oct
Linux Snippets #15: The Network Quarantine Room (netns)
When you start a commercial VPN client, it brutally hijacks your entire routing table. If you only want to route one specific application through the tunnel while leaving your host untouched, you don’t need a virtual machine – you just need a Linux network namespace.
16
Sep
Linux Snippets #14: Find the Firewall Rule That Ate Your Packet
Somewhere inside the firewall, your packet entered a chain, followed three jumps, and was quietly sentenced to death by a rule written during an emergency in 2022. nft monitor trace lets you follow one carefully selected packet through the bureaucracy and discover exactly where policy became homicide.
14
Sep
NginXplorer: Because Spinning Up a 2GB Grafana Stack Just to Watch Nginx Logs is Madness
It usually starts with an innocent thought on a Friday evening. You’re logged into a low-powered VPS or your homelab machine, and you notice your blog is feeling a bit sluggish. Or maybe you noticed a suspicious spike in inbound network bandwidth and you just want to know: Who is hammering my web server right now, […]
13
Sep
Linux Snippets #13: Ask the Machine What Killed It
After a reboot, every Linux server develops temporary amnesia and insists that everything is running perfectly. Fortunately, the journal may remember the OOM killer, dying disk, or panicking service from five minutes earlier. Here is how to question the previous boot before log rotation provides it with legal representation.
11
Sep
Linux Snippets #12: tcpdump Without Capturing the Entire Internet
Capture everything and inspect it later’ sounds reassuringly forensic until the PCAP consumes the disk, records half the office, and still buries the failed handshake beneath six million irrelevant packets. Here is how to make tcpdump answer one question at a time – with limits established before optimism becomes an incident.
08
Sep
Linux Snippets #11: Run It Once, Contain It, Forget It
Some jobs are too important for nohup, yet far too temporary to deserve permanent accommodation in /etc/systemd/system. Here is how to use systemd-run to give a one-off command strict resource limits, logging, and supervision—and then make the evidence disappear.
06
Sep
Linux Snippets #10: Punching Through Firewalls with Reverse SSH
Trapped behind CGNAT, Starlink, or a strict corporate firewall? Here is how to use a reverse SSH tunnel to force a headless machine to ‘phone home’ and grant you remote access without touching a router