Practical security learning, defensive thinking, web security, privacy, and risk management without claiming final answers.
I still remember the first time I read the NIST Cybersecurity Framework document several years ago. The number of pages was enough to make my eyes water, especially at that time I was just starting to dive into the world of information security. It was like o…
Read article
There are times when I sit in front of the terminal, thinking about the same thing: how do I learn cyber security practically without…
A few years ago, when I started getting serious about building my own web applications, security still felt like a topic to "learn later." …
Modeling Threats for Beginners — Learn to See Risks Before Gaps Become ProblemsWhen I first started studying security, I thought the sequen…
Reading CVEs Correctly — From Vulnerability Numbers to Patch DecisionsEvery time I open security news, I often see sentences that feel urge…
A few months ago, I started to get serious about separating services on a home server using Docker. One container for the web, one for th…
In the past, when I first read the CTF write-up with the word buffer overflow, I felt like I was witnessing magic: someone could change the…
Have you ever logged in to a website, then suddenly something strange happened — either a strange popup appeared, your session was lost, or…
Ever heard the story about a large website being hacked because there was a line of code that they "forgot" to check? In the world of cyber…
There are times when I feel like a website that has been painstakingly built is like a new house: solid foundation, good paint, neat furnit…
