Practical security learning, defensive thinking, web security, privacy, and risk management without claiming final answers.
In the past, when I first read the CTF write-up with the word buffer overflow, I felt like I was witnessing magic: someone could change the program so that it executes commands at will. In fact, if you learn it slowly, the concept is as simple as writing your…
Read articleHave you ever logged in to a website, then suddenly something strange happened — either a strange popup appeared, your session was lost, or…
Ever heard the story about a large website being hacked because there was a line of code that they "forgot" to check? In the world of cyber…
There are times when I feel like a website that has been painstakingly built is like a new house: solid foundation, good paint, neat furnit…
Password Hashing for Developers — Why bcrypt, Argon2, and scrypt are Safer than MD5I still remember the days when I first created a login s…
Some time ago I was idly opening the SSH log on my home server - a used laptop that I used as a server in the corner of my room. What I fou…
Some time ago I told you about DNS router going the wrong way — an incident where VPS1 domain suddenly displays VPS2 content because t…
