Cybersecurity

Finding Security Bugs Before They Ship: Applying Bandit (SAST) to a Python Web App

TL;DR: I took a small Flask application with 7 classic security flaws, ran Bandit (a SAST tool from …

A write is not just a write

The point became clear to me while working on the GitHub adapter (a more or less simple GitHub gatew…

🔐 FortiGate UTM Security Analyzer — v4.0 Released

I just pushed a major version of my open-source FortiGate auditing tool. This one took significant e…

Identity Is the New Perimeter: Why AI Agents Break Zero Trust

For years, Zero Trust architectures were designed around one assumption: Humans make the decisions. …

AI Session Leakage, YouTube Data Breach, and Linux htop/top Security Monitoring

AI Session Leakage, YouTube Data Breach, and Linux htop/top Security Monitoring Today's H…

The Structural Identity of the Top 100 PyPI Packages

What we did: We ran TopHash, our open-source structural identity primitive, against the top 100 PyPI…

🧩 How to Pass a Request Body in a GET Request? Meet the New HTTP QUERY Method (RFC 10008)

⚡ A New HTTP Verb for Developers The QUERY method (RFC 10008, June 2026) solves a long‑standing pa…

Adding Homemade TLS to a Homemade Web Server

Original series: Building Your Own Web Server + Rebuilding TLS from Scratch This article connects t…

How I built an encrypted digital ecosystem (messenger, social, search, maps) as a solo developer

I'm a solo developer concerned about privacy. I built SkyCitadel, an all-in-one encrypted platform (…

Seven Unpatched FatFs Flaws Put Millions of Embedded Devices One USB Away From a Jailbreak

TL;DR what: runZero disclosed seven vulnerabilities in FatFs, a tiny FAT/exFAT filesystem librar…

We open-sourced our security audit. Here's what we found (and fixed).

We launched MarketNow 2 weeks ago. Then we got pentested. This is the honest report of what we found…

We open-sourced our security audit

We launched MarketNow 2 weeks ago. Then we got pentested. This is the honest report of what we found…