📰 Medium · Programming

Security is no longer something businesses can afford to address after software development is complete. Vulnerabilities introduced during… Continue reading on

Hi everyone, welcome back. Today, I will be going over passkeys and WebAuthn — what they are, how the cryptographic flow actually works… Continue reading on Med

Device Code Phishing is a phishing technique where an attacker tricks a victim into using a legitimate device authentication process to… Continue reading on Med

Paid content in a WordPress paywall lives in post_content as plain text, and WordPress hands it out through six different exits — here are… Continue reading on

A simple cybersecurity concept, made less abstract Continue reading on Medium »

A simple cybersecurity concept, made less abstract Continue reading on Medium »

Separating storage topology from cryptographic audience. Continue reading on Artificial Intelligence in Plain English »

What I learned about building secure financial software that protects transactions, data, and user trust. Continue reading on The Code Frontier »

These were good security practices 10 years ago. Attackers evolved. Our code did not. Continue reading on Medium »

GitHub’s September 9 update adds a useful merge gate. A beginner’s recovery plan still needs two separate finish lines: a safe credential… Continue reading on M

A VPN can help protect you from hackers, especially when you’re using unsecured public Wi-Fi networks. Continue reading on Medium »

When it comes to storing credentials, tokens, or API secrets, the Keychain is your best friend — and one of the few Apple-approved ways to… Continue reading on

I was debugging an auth issue at 11pm when I caught myself doing something I’d done a hundred times without thinking. Continue reading on Medium »

Understanding cyber threats, common attacks, digital protection, and why cybersecurity matters to everyone. Continue reading on Medium »

Twelve algorithms on the same 256 MB buffer — and the CPU feature that inverted the ranking everyone learned. Continue reading on Medium »

There is something deeply strange about cybersecurity. Continue reading on Medium »

A practical guide to passive subdomain enumeration, and the details most tutorials quietly leave out Continue reading on System Weakness »

The attack wasn’t aimed at my app. It was aimed at my CI runner — the one machine I’d never once thought to defend. Continue reading on Medium »

Traffic patterns, transmission timing, frequencies, bandwidth, and device behavior can sometimes fingerprint a transmitter even when its… Continue reading on Ra

Typosquatting is a cybersecurity technique where attackers register domains that look very similar to legitimate websites Continue reading on Medium »

Ever wonder how a call reaches your phone no matter where you are? Or how your carrier magically finds you the second you step off a plane? Continue reading on

Apple ranked deterministic controls above probabilistic ones at WWDC26. I wanted the stronger version, so I built it: a 12-tool… Continue reading on Medium »

The Keychain accessibility attribute decides whether your token leaves the device. Most Flutter apps never set it, and the default changed… Continue reading on

arrayref 0.3.10 did not need a build script. A yanked-version warning did the rest. Continue reading on Medium »