GHOSTPORT

GHOSTPORT

PRIVACY BLOG & SECURITY GUIDES

NEW • SONAR
5 BSSIDs from one router
A customer unplugged their Cox gateway and five BSSIDs disappeared at once. What the four hidden ones are doing, why CoxWiFi (and Xfinity, and Spectrum) deserve a closer look, and what GhostPort Sonar makes visible.
We Just Cut Ping by 52ms for West-Coast Gamers
A regional WireGuard relay in San Jose drops west-coast gamer ping from 76ms to 24ms. SHA256-verified raw transcripts. The honest story of what we built and the framing error we almost shipped.
Closing the First Bug Bounty
Our first formal external security engagement is closed. 13 findings, three unauthenticated-disclosure fixes shipped, structural changes behind each so they stay fixed.
Your Router Is Announcing Itself
A nine-second capture caught a normal home router announcing its make, model, and firmware version twenty times. The SSDP leak nobody talks about.
Teachable Security
Per-region help on the desktop apps + a sudo hardening pass that shrinks compromise blast radius to a 40-rule allowlist.
632 Packets Dropped in 10 Hours
A quiet home network. 632 unsolicited packets silently dropped at the WAN boundary. On a consumer router, all of them reach your devices.
GhostPort Phantom OS: Privacy Router Meets Private Desktop
One device, two modes. A custom-built OS stripped to the bone — 612 packages removed, self-healing guards, every feature for every user.
30 Vulnerabilities. 4 Rounds. 0 Mercy.
Before our pen testers even showed up, we ran a 4-round automated security audit and patched 30+ vulnerabilities.
Your Router Can See You Breathe
WiFi sensing is shipping in consumer routers. Comcast, Amazon, Linksys already have it. Here's what it does.
Why Your Upload Speed Is So Slow
Cable ISPs deliberately throttle upload speeds. Here's the DOCSIS math and why your ISP likes it that way.
Data Plane Separation — Dual-Tunnel Architecture
We split control and data traffic across independent WireGuard tunnels. 0.023ms jitter.
Our Response to the Claude Code Source Leak
Anthropic's AI tool leaked. We deployed 5 security layers the same day.
How We Secure AI-to-AI Communication
HMAC signing, AES encryption, replay protection. No other router does this.
NIST Compliance on a Raspberry Pi
We mapped 110 federal cybersecurity controls to an $80 privacy router.
Your ISP Sells Your Browsing History
Congress repealed your broadband privacy protections. Most people don't know.
The Invisible Tax Your Router Charges You
Your router generates revenue for its manufacturer long after you bought it.
What Your Smart TV Sends Home
Your TV phones home thousands of times per day. Here's exactly what it reports.
DNS: The Privacy Hole Nobody Talks About
Every website you visit is broadcast unencrypted. Your ISP sees all of it.
Why Your Kids' Privacy Depends on Your Router
Network-level protection on every device. No apps to install, no settings to bypass.
Why App Parental Controls Fail
Kids disable app-based controls in seconds. Network-level blocking can't be touched.
Data Brokers Know More Than Your Doctor
Companies you've never heard of buy and sell your browsing history every day.
What a VPN Actually Does
VPNs don't make you anonymous. Here's what they actually protect and what they don't.
Half of America Requires Your ID to Browse
Age verification laws are creating a national ID system for the internet.
The TikTok Ban Failed
They banned the app. The data collection didn't stop. Technical solutions beat legislation.
Advertisers' Death Warrants
The FCC is finally coming for routers that spy on you. Here's what it means.
Why Open-Source Hardware Matters
Closed firmware can hide anything. Open hardware lets you inspect every line.
RAM-Only Servers
If we can't store it, we can't hand it over. Power off and the data is gone.
AWS Infrastructure Roadmap
Real-time progress on our cloud infrastructure buildout. Updated as we ship.
GhostPort vs Firewalla
Open-source transparency vs proprietary black box. Feature-by-feature breakdown.
GhostPort vs GL.iNet
Travel routers vs dedicated privacy hardware. Different problems, different answers.
GhostPort vs eero
Amazon owns eero. Amazon is the world's largest ad company. Connect the dots.
Bug Bounty Program
Find a vulnerability, collect the bounty. Rewards negotiated per finding. No lawyers, no NDAs.
GhostPort User Guide
Setup, privacy modes, Family Shield, troubleshooting — everything in one place.
Engineering Transparency — Full Development Log
311+ bugs found • 16 audit rounds • Independent pen test passed • Every patch documented
Source Code on GitHub — ELv2 (source-available)
Every line of GhostPort Phantom OS is public. Read it, clone it, audit it. Elastic License v2 — community use + contribution welcome; commercial redistribution restricted.
A+
TEXT SIZE
🎨
ACCENT COLOR