# PerezBox

> Personal site of Tony Perez — cybersecurity executive and entrepreneur with over two decades of experience building and scaling technology companies.

PerezBox is the personal brand and writing platform for Tony Perez. It features articles on cybersecurity, business strategy, entrepreneurship, DNS security, and technology. Tony is the founder of CleanBrowsing, NOC.org, Trunc, and DNS Archive, and formerly co-founded Sucuri (acquired by GoDaddy).

## Projects

- [CleanBrowsing](https://cleanbrowsing.org): DNS-based content filtering for families, schools, and organizations.
- [NOC.org](https://noc.org): CDN, WAF, authoritative DNS, and monitoring services.
- [Trunc](https://trunc.org): Log management platform for monitoring and analysis.
- [DNS Archive](https://dnsarchive.net): DNS record investigation and historical lookup tool.
- [Verify Filtering](https://verifyfiltering.com): Free online scanner for network filtering compliance.

## Articles

- [AI Builds the Tooling. AI Doesn't Run the Tooling.](https://perezbox.com/articles/how-i-use-ai-to-automate-operations-without-running-on-ai): How I automate the operational heart of my business with AI without paying a model to run on every heartbeat. An operations server, a daily cache layer, Slack rollups, and a human who stays the brain.
- [ClickFix Campaign: I Searched for Tailscale and Found a Nine-Month Phishing Operation](https://perezbox.com/articles/clickfix-campaign-tailscale-nine-month-phishing-operation): A routine search for Tailscale led to a typosquat in Google search results. Four days of investigation revealed a ClickFix phishing campaign using blockchain smart contracts for victim authorization, running undetected for nine months.

- [Fake Venmo Payment Confirmations: The Phishing Scam Targeting Facebook Marketplace Sellers](https://perezbox.com/articles/facebook-marketplace-venmo-payment-scam): I listed something on Facebook Marketplace and nearly got taken for $500. Here's how the scam works, the fake Venmo email they send, and the red flags to watch for.

- [Building Sites Fast: How I Use a Vanilla PHP Template and AI to Go from Idea to Live](https://perezbox.com/articles/building-sites-fast-with-vanilla-php-template-and-ai): How I built a 41-page military study site using a vanilla PHP template and Claude as my development partner. No CMS, no build tools, no dependencies.

- [Migrating PerezBox From WordPress to Flat PHP in 90 Minutes](https://perezbox.com/articles/migrating-perezbox-from-wordpress-to-flat-php): A detailed look at migrating perezbox.com from WordPress to a flat PHP site with zero dependencies: no database, no frameworks, no plugins.
- [Why I Am Ditching WordPress for Static Sites + AI (And What Happened Next)](https://perezbox.com/articles/why-i-am-ditching-wordpress-for-static-sites-ai-and-what-happened-next): For close to 15 years, WordPress was my default. It powered my brands: Sucuri, CleanBrowsing, NOC.org, DNSArchive, Trunc
- [How to Configure a Starlink Mini Without Wi-Fi: Create a Wired-Only Local Network](https://perezbox.com/articles/how-to-configure-a-starlink-mini-without-wi-fi-create-a-wired-only-local-network): If you need Starlink connectivity in an austere or RF-controlled environment, you may want to disable all wireless signa
- [Meta / Facebook Performs MiTM Attacks via SSL Bumping (Interception) with Onavo VPN](https://perezbox.com/articles/meta-facebook-performs-mitm-attacks-via-ssl-bumping-interception-with-onavo-vpn): In 2019, Facebook shuttered its VPN app Onavo after investigations found that it was abusing user trust by spying on the
- [What is HTTPS?](https://perezbox.com/articles/what-is-https-what-does-it-do-for-websites): Hypertext Transfer Protocol Secure (HTTPS) is a derivative of the Hypertext Transfer Protocol (HTTP). This "protocol" is
- [How to Improve Consumer Security with Online Applications](https://perezbox.com/articles/how-to-improve-consumer-security-with-online-applications): Improving our security should not be difficult, but it does have to be top of mind if you have an online presence. This 
- [California EDD Prepaid Debit Card SMISHING Scam](https://perezbox.com/articles/california-edd-prepaid-debit-card-smishing-scam): This morning I received a text message informing me that my California EDD Prepaid Debit Card was being suspended with a
- [\"You Must Contact Us Immediately So That Our Engineers can Guide You Through the Removal Process by Phone. Your Computer is Disabled\"](https://perezbox.com/articles/you-must-contact-us-immediately-so-that-our-engineers-can-guide-you-through-the-removal-process-by-phone-your-computer-is-disabled): This past weekend, I watched The Beekeeper. I knew nothing of it, but that it had Jason Stratham in it, which meant ther
- [A Practical Guide to Good Password Hygiene](https://perezbox.com/articles/a-practical-guide-to-good-password-hygiene): On December 2nd, 2023, the Cybersecurity and Infrastructure Security Agency (CISA) reported that an Iran-linke
- [Automating Image Optimization for Website Performance, Improved User Experience and Website Core Vitals](https://perezbox.com/articles/automating-image-optimization-for-website-performance-improved-user-experience-and-website-core-vitals): Last week we explored the importance of updating images to next-gen formats. The net-net of the article was that it is i
- [Is it Worth Updating Images from PNG to WebP for Website Performance?](https://perezbox.com/articles/is-it-worth-updating-images-from-png-to-webp-for-website-performance): Spend any time building online brands and you will undoubtedly stumble on the need to optimize the performance of your w
- [Integrity Monitoring with Website Security](https://perezbox.com/articles/integrity-monitoring-with-website-security): We spend a lot of time talking about the tools at our disposal to prevent hacks. Tools like security plugins, or cloud-b
- [Troubleshooting A Broken Website after upgrading from Ubuntu 18.04 to 22.04](https://perezbox.com/articles/troubleshooting-a-broken-website-after-upgrading-from-ubuntu-18-04-to-22-04): Channeling administrators everywhere, last Friday I decided it would be best if I upgraded one of my servers from 18.04 
- [LastPass Error: We couldn't contact the server. Check Your internet connection and try again.](https://perezbox.com/articles/lastpass-error-we-couldnt-contact-the-server-check-your-internet-connection-and-try-again): Have no idea why this started, but it began a couple of weeks ago (August 2022). Today I finally had enough and had to g
- [Introducing A Simpler, More Affordable, Way to Collect and Store Logs with Trunc](https://perezbox.com/articles/introducing-a-simpler-more-affordable-way-to-collect-and-store-logs-with-trunc): In my last article I spoke to the challenges large organizations have with innovation, in the same breathe you could arg
- [Instagram Being Hacked via Password Reset Option](https://perezbox.com/articles/instagram-being-hacked-via-password-reset-option): This is a public service announcement for all users to be aware of an active scam happening right now that is targe
- [prefix “00~” and suffix “01~” added when pasting into MacOS terminal](https://perezbox.com/articles/prefix-00-and-suffix-01-added-when-pasting-into-macos-terminal): Been dealing with this issue as of late with my MacOS terminal (running MacOS Monterey version 12.4). Have no idea when 
- [The Effects of the Inverted Triangle on Product Innovation in Large Corporations vs Startups](https://perezbox.com/articles/the-effects-of-the-inverted-triangle-on-product-innovation-in-large-corporations-vs-startups): For context, I'm a bootstrap startup guy, so it doesn't take much to considered larger. But to help build some guard rai
- [People = More People](https://perezbox.com/articles/people-more-people): This quarter we grew our team by 25%, and we have on the docket to grow by another 25% next quarter adding another 50 pe
- [The Invaluable Resource of Time](https://perezbox.com/articles/the-invaluable-resource-of-time): There is nothing more valuable than your time. If you're a startup founder that becomes even more important, especially 
- [Buyer and Seller Power Dynamics in Acquisitions](https://perezbox.com/articles/the-buyer-and-seller-power-dynamics): You can find a lot of discussions about the selling process, but you don't find a lot of conversation of power dynamics.
- [With Enough Brute Force You Can Accomplish Anything](https://perezbox.com/articles/with-enough-brute-force-you-can-accomplish-anything): A colleague used to say: Tony, you are exactly what they mean when they say "with enough brute force you can accomplish 
- [Screaming Into the Void](https://perezbox.com/articles/screaming-into-the-void): When I look across different online mediums I find myself disconnected from the world, unable to find genuine connection
- [Git: Message ‘src refspec master does not match any’ when pushing commits in Git](https://perezbox.com/articles/git-message-src-refspec-master-does-not-match-any-when-pushing-commits-in-git): On a recent project, I created a new Git repo and wanted to push my content to the repo from the staging server. You can
- [SQL: Delete all Rows with “foo” in the String](https://perezbox.com/articles/sql-delete-all-rows-with-foo-in-the-string): Let’s say you’re building something cool and you try to share this amazing thing with a friend. Then that friend decides
- [Creating a Keystore for Android Apps on Windows](https://perezbox.com/articles/creating-a-keystore-for-android-apps-on-windows): If you’re building Android apps for the Android or Amazon Playstore you will need to sign your apps with a certificate. 
- [Working with Merge Conflicts in Git](https://perezbox.com/articles/working-with-merge-conflicts-in-git): There are instances while working with a shared repo that your Pull Request will hit a conflict with the master repo and
- [Three Things that DNS Outages Teach Administrator](https://perezbox.com/articles/three-things-that-dns-outages-teach-administrator): Rarely do you wake up thinking to yourself, "wonder how my DNS is doing today?" but I can guarantee it's been the root c
- [Signing an App using a CodeSign certificate with SignTool & Windows 10](https://perezbox.com/articles/signing-an-app-using-a-codesign-certificate-with-signtool-windows-10): I was recently working with a new Windows app we built at CleanBrowsing and our users were getting hit with security war
- [NOC Introduces a CDN. Yes, a CDN.](https://perezbox.com/articles/noc-introduces-a-cdn-yes-a-cdn): NOC.org was built to be a networking platform that aggregates the various tools Daniel and I personally need, and use, t
- [Thoughts on The BaseCamp Mass Exodus](https://perezbox.com/articles/thoughts-on-the-basecamp-mass-exodus): Like many, I have found myself enthralled with what happened at BaseCamp this past week. Mainly because it affects me pe
- [It's Ok to Focus On What You Do](https://perezbox.com/articles/its-ok-to-focus-on-what-you-do): Starting a company is excruciatingly difficult. I am convinced you have to have a predisposition for risk and punishment
- [Can’t Scroll in Windows Subsystem for Linux](https://perezbox.com/articles/cant-scroll-in-windows-subsystem-for-linux): I don’t know when it started, but at some point in 2021 I was not able to scroll inside my linux terminal on Windows. I 
- [11 Things to Consider Before Making the First Hire](https://perezbox.com/articles/11-things-to-consider-before-making-the-first-hire): I once sat in a meeting where a leader was making a case to hire another 50 people on their team in the coming year. It'
- [Migrating to a New User on Mastodon](https://perezbox.com/articles/migrating-to-a-new-user-on-mastodon): Over the past year I have become a bigger proponent for platform like Mastodon. With such adoption, some things are not 
- [Feelings Have No Place in the World of Security](https://perezbox.com/articles/feelings-have-no-place-in-the-world-of-security): The quickest, and arguably most effective way, to compromise an organization is via social engineering. Social engineeri
- [Stop Thinking, Start Doing](https://perezbox.com/articles/stop-thinking-start-doing): The biggest lie we tell ourselves is that we can't do something because we lack the knowledge in something or we don't h
- [Google Authenticator App fails to load after iOS 14.2 Update](https://perezbox.com/articles/google-authenticator-app-fails-to-load-after-ios-14-2-update): The recent iOS 14.2 update is a critical security update. If you haven’t done so already, you should really update.
- [What Are the Trade-Offs that Make Trump Ok?](https://perezbox.com/articles/what-are-the-trade-offs-that-make-trump-ok): A question was recently posed looking to understand the actual trade-offs people were making that allowed them to vote T
- [Thanks FaceBook, Bye](https://perezbox.com/articles/thanks-facebook-bye): In 2007 I joined FaceBook, in 2020 I am leaving Facebook. It's been a fun run, but the time has come to say goodbye. Why
- [Unleashing the Power of Authoritative DNS](https://perezbox.com/articles/unleashing-the-power-of-authoritative-dns): It was an exceptionally long week, and you managed to get to bed around midnight. You're a system admin, and at the core
- [Content Filtering with CleanBrowsing](https://perezbox.com/articles/content-filtering-with-cleanbrowsing): Content filtering is one of the most under utilized tools in creating safe browsing experiences. A few years back, while
- [The Selling Process](https://perezbox.com/articles/the-selling-process): What does the selling process consist of? This seems to be one of the most common questions I get when I talk to other F
- [Negotiations are a Game of Chess, Not Checkers](https://perezbox.com/articles/negotiations-are-a-game-of-chess-not-checkers): Negotiating a deal for your company is one of the most nerve wrecking processes you will go through in your entrepreneur
- [You Don't Need a VPN](https://perezbox.com/articles/you-dont-need-a-vpn): A Virtual Private Network (VPN) allows a component from a trusted zone to be accessed from an untrusted zone. This techn
- [Yes, You will Have to Hustle](https://perezbox.com/articles/yes-you-will-have-to-hustle): I continue to see the rise in the "anti-hustle" movement in tech startup. While it is one perspective, I don't think it'
- [Decentralizing Social Platforms](https://perezbox.com/articles/decentralizing-social-platforms): The past few years I have grown more disenfranchised with closed-platforms, specifically social platforms. This idea tha
- [A World of Absolutes](https://perezbox.com/articles/a-world-of-absolutes): We live in a world of absolutes. This extremism exists across the entire spectrum, from social engagements, businesses, 
- [Social Platforms Should Not Be Arbiters of Truth](https://perezbox.com/articles/social-platforms-should-not-be-arbiters-of-truth): President Trump, the current US president, recently shared a post on Twitter sharing his beliefs on the new move for mor
- [Preparing For An Exit](https://perezbox.com/articles/preparing-for-an-exit): In my last article I shared the journey we embarked on when selling Sucuri. In this article I will share insights I have
- [Selling a Startup](https://perezbox.com/articles/selling-a-startup-to-godaddy): Experience would suggest there is no blueprint to how, or when, to sell. In the end, it falls on your intuition as the f