22 articles
There are times when I sit in front of the terminal, thinking about the same thing: how do I learn cyber security practically without having to damage other people's systems? On the one hand, the theory of certification and CVE feels important, but on t…
Read articleA few years ago, when I started getting serious about building my own web applications, security still felt like a topic to "learn later." …
Modeling Threats for Beginners — Learn to See Risks Before Gaps Become ProblemsWhen I first started studying security, I thought the sequen…
Reading CVEs Correctly — From Vulnerability Numbers to Patch DecisionsEvery time I open security news, I often see sentences that feel urge…
A few months ago, I started to get serious about separating services on a home server using Docker. One container for the web, one for th…
In the past, when I first read the CTF write-up with the word buffer overflow, I felt like I was witnessing magic: someone could change the…
Have you ever logged in to a website, then suddenly something strange happened — either a strange popup appeared, your session was lost, or…
Ever heard the story about a large website being hacked because there was a line of code that they "forgot" to check? In the world of cyber…
There are times when I feel like a website that has been painstakingly built is like a new house: solid foundation, good paint, neat furnit…
Password Hashing for Developers — Why bcrypt, Argon2, and scrypt are Safer than MD5I still remember the days when I first created a login s…
