Practical security learning, defensive thinking, web security, privacy, and risk management without claiming final answers.
A few years ago, when I started getting serious about building my own web applications, security still felt like a topic to "learn later." The important thing is that it has road features, a neat appearance, and a form that can be submitted. It was only when …
Read article
Modeling Threats for Beginners — Learn to See Risks Before Gaps Become ProblemsWhen I first started studying security, I thought the sequen…
Reading CVEs Correctly — From Vulnerability Numbers to Patch DecisionsEvery time I open security news, I often see sentences that feel urge…
A few months ago, I started to get serious about separating services on a home server using Docker. One container for the web, one for th…
In the past, when I first read the CTF write-up with the word buffer overflow, I felt like I was witnessing magic: someone could change the…
Have you ever logged in to a website, then suddenly something strange happened — either a strange popup appeared, your session was lost, or…
Ever heard the story about a large website being hacked because there was a line of code that they "forgot" to check? In the world of cyber…
There are times when I feel like a website that has been painstakingly built is like a new house: solid foundation, good paint, neat furnit…
Password Hashing for Developers — Why bcrypt, Argon2, and scrypt are Safer than MD5I still remember the days when I first created a login s…
Some time ago I was idly opening the SSH log on my home server - a used laptop that I used as a server in the corner of my room. What I fou…
