Practical security learning, defensive thinking, web security, privacy, and risk management without claiming final answers.
A few months ago, I started to get serious about separating services on a home server using Docker. One container for the web, one for the database, another for small tooling. It feels neat, like an apartment with many rooms, each of which has its own funct…
Read article
In the past, when I first read the CTF write-up with the word buffer overflow, I felt like I was witnessing magic: someone could change the…
Have you ever logged in to a website, then suddenly something strange happened — either a strange popup appeared, your session was lost, or…
Ever heard the story about a large website being hacked because there was a line of code that they "forgot" to check? In the world of cyber…
There are times when I feel like a website that has been painstakingly built is like a new house: solid foundation, good paint, neat furnit…
Password Hashing for Developers — Why bcrypt, Argon2, and scrypt are Safer than MD5I still remember the days when I first created a login s…
Some time ago I was idly opening the SSH log on my home server - a used laptop that I used as a server in the corner of my room. What I fou…
Some time ago I told you about DNS router going the wrong way — an incident where VPS1 domain suddenly displays VPS2 content because t…
