Cybersecurity

Two ways to reuse a privileged CI token (and my rule only caught one)

I shipped a security rule this week, looked at it again the next morning, and realized it only caugh…

I Built a DLP Agent That Learns From Every Click — Here's How

Every morning, a DLP analyst logs in to thousands of security alerts. Most are the same pattern as y…

Facebook Signup Emails Need Origin Checks

If your product lets people sign up with a social identity and then sends a follow-up verification e…

MyZubster: Secure, Private & Decentralized Service Exchange with PGP, Tor, and Geolocation

MyZubster: Secure, Private & Decentralized Service Exchange with PGP, Tor, and Geolocation …

Your SSH Key Isn’t Always the Problem: A Layer-by-Layer Debugging Guide

I once ran: ssh demo-server and immediately suspected my SSH key. The actual error was: …

Who Owns the Fix? Bridging the Gap Between Security and Engineering

security alert ownership InstaSLA DevSecOps Operations DevSecOps accountability vulnerability routin…

CipherFlow System v1.3

🚀 CipherFlow System v1.3: Introducing Secure TCP File Transfer I'm happy to share the latest rele…

Prove Your Mobile Upload Removed EXIF GPS Before the Retry Queue Keeps a Copy

A user selects a photo containing GPS coordinates, capture time, and orientation. The preview looks …

Verify Webhook Signatures Before Your Proxy Rewrites the JSON

A webhook arrives with a valid HMAC over its raw bytes. Middleware parses the JSON, changes whitespa…

AI Agent Data Minimization: Give Tools Less Context Without Breaking Results

Your agent does not need the whole customer record to answer one question. It does not need every Sl…

Still spending hours fixing bugs and security issues?

Meet Code Healing AI — yourAI-powered coding companion. ✅ Detect bugs before they become problems. …

The same blind spot was in my own hook and Claude Code's permission check — one `2>/dev/null` slips past both

I run Claude Code almost around the clock, mostly unattended. It has shell access, so the thing I fe…