Following the Ankara water leaks, the focus has shifted to the commercial sector. Over the last few weeks, hackers have been systematically thawing out supermarket freezers across France and the rest of Europe. Here is how they are weaponizing HVAC maintenance panels to destroy the cold chain.
2026
31
Oct
When OSINT Becomes a Crime: The vncsnatch Legal Gray Area
The Turkish water infrastructure leak has entered its next predictable phase: debating whether the researcher broke the law. Let’s talk about the exact moment a passive port scan legally becomes unauthorized access, and why vncsnatch sits right on that fault line
28
Oct
When Your Side Project Makes the Evening News in Ankara
I built vncsnatch to demonstrate how many unprotected desktops are sitting on the open internet. Recently, a researcher used it to scan Turkish IP ranges, and accidentally discovered that their critical water infrastructure was one unauthenticated click away from disaster.
11
Oct
Linux Snippets #15: The Network Quarantine Room (netns)
When you start a commercial VPN client, it brutally hijacks your entire routing table. If you only want to route one specific application through the tunnel while leaving your host untouched, you don’t need a virtual machine – you just need a Linux network namespace.
16
Sep
Linux Snippets #14: Find the Firewall Rule That Ate Your Packet
Somewhere inside the firewall, your packet entered a chain, followed three jumps, and was quietly sentenced to death by a rule written during an emergency in 2022. nft monitor trace lets you follow one carefully selected packet through the bureaucracy and discover exactly where policy became homicide.
13
Sep
Linux Snippets #13: Ask the Machine What Killed It
After a reboot, every Linux server develops temporary amnesia and insists that everything is running perfectly. Fortunately, the journal may remember the OOM killer, dying disk, or panicking service from five minutes earlier. Here is how to question the previous boot before log rotation provides it with legal representation.
11
Sep
Linux Snippets #12: tcpdump Without Capturing the Entire Internet
Capture everything and inspect it later’ sounds reassuringly forensic until the PCAP consumes the disk, records half the office, and still buries the failed handshake beneath six million irrelevant packets. Here is how to make tcpdump answer one question at a time – with limits established before optimism becomes an incident.
08
Sep
Linux Snippets #11: Run It Once, Contain It, Forget It
Some jobs are too important for nohup, yet far too temporary to deserve permanent accommodation in /etc/systemd/system. Here is how to use systemd-run to give a one-off command strict resource limits, logging, and supervision—and then make the evidence disappear.
18
May
How WordPress Attackers Get Their Dirty Fingers into your System
Most WordPress malware does not begin with a shadowy genius manually editing your theme at midnight. It begins with bots, bored plugins, sloppy permissions, and one unlucky functions.php file that became writable. This is the story of how attackers get the pen, why they keep writing, and why deleting one dirty file is rarely enough.
16
May
Linux Snippets #6: The Silent Network Sweep
Stop guessing which IP your new Raspberry Pi or IoT device grabbed from the router. Here is the scommand to instantly map your entire local network without triggering alarms