Cybersecurity

Deep Packet Inspection (DPI)

Peeking Under the Hood: A Deep Dive into Deep Packet Inspection (DPI) Imagine the internet as a bu…

A Word file can carry a signature without proving trust

A Word file can carry a signature without proving trust A signed Word file is not a yes-or-no secu…

Why We Open-Sourced the Encryption Architecture Behind RozVibe

One of the first questions people ask when they hear about an encrypted journaling app is: "How do…

SQLAlchemy Composite Foreign Keys for Multi-Tenant Hierarchical Permissions: Enforcing (tenant_id, role_id) Constraints

I burned this one hard in CitizenApp's early months. A customer's support team member somehow gained…

GA4 Bot Traffic Spike: Stop Bots Without Hurting SEO

Condensed cross-post of the original KeyboardTester.click case study: GA4 Bot Traffic Spike: Stop Bo…

CVE-2026-53606: CVE-2026-53606: Stored Cross-Site Scripting (XSS) via Unsanitized URI-bearing Attributes in sanitize-html

CVE-2026-53606: Stored Cross-Site Scripting (XSS) via Unsanitized URI-bearing Attributes in sanitize…

VeilPDF: Recover, Protect, and Investigate PDFs Locally

Built a small open-source tool called VeilPDF. It solves two PDF problems I've run into way too oft…

A sensitivity label can retain your tenant’s metadata

A sensitivity label can retain your tenant’s metadata Removing a visible header or changing a file…

How I Configure Cloudflare for My Personal Website

Cloudflare has become much more than a CDN. Today it offers performance optimizations, security feat…

[TryHackMe Writeup] Beach Bar

Beach Bar — Boot2Root (YAML Deserialization RCE + Credential Reuse) Field Value Target http…

A Word document can carry a task graph—and an add-in

A Word document can carry a task graph—and an add-in A clean paragraph count and a clean comment c…

CVE-2026-53609: CVE-2026-53609: Server-Side Prototype Pollution in ApostropheCMS

CVE-2026-53609: Server-Side Prototype Pollution in ApostropheCMS Vulnerability ID: CVE-2026-53609…