Stop Hashing Passwords: A Practical Step-by-Step Passkey Tutorial
Code-First Security: A Practical Implementation of a Go Passkey Manager Introduction —...
Sep 11, 2026
9 min
Prompting Is Not Magic. It Is Control.
Most prompt books optimize for better answers. I wanted prompts that fail visibly. Most prompt...
Found 897 Fake Followers on DEV.to Here's How I Proved It
A full technical audit of a coordinated follower inflation network — methodology, findings, and a...
r4b1t_h0l3
Explore r4b1t Open the r4b1t discovery instrument View the source · Launch the original...
Back to Basics: What a Forensic Investigation Can Prove — and What It Can’t
This post is going back to the basics in forensic investigations. Not because the basics are...
Kept Getting Strange GitHub Followers. So I Measured Them
Over the past several weeks, I kept seeing something unusual in my GitHub followers. Not one...
Is It Safe to Give Claude Access to Your Gmail?
Claude's Gmail connector has no send tool, but the OAuth scope you grant it can send. Audit the grant, because that is where your blast radi...
My Pull Request Failed — Because GitHub Actions Was Protecting the Repository
Sometimes the most useful security lessons don't start with a security audit. They start with a failed CI job. Recently, while contributing ...
Netfox — The macOS app that never loses track of your network
I built Netfox because every existing answer to "what's actually on my network?" annoyed me. The...
