The padlock that lied: what CoreWLAN's supportsSecurity really answers
Every open Wi-Fi network came back as Enhanced Open. Why the API said yes, and how to test Wi-Fi security code with no Location permission a...
Oct 4, 2026
5 min
Apple Is Tightening Full Disk Access on macOS, and AI Agents Are the Reason
Apple will add new controls around Full Disk Access on macOS, a permission built for backup apps that reaches files, mail, messages and brow...
Oct 2, 2026
4 min
1,313 Kernel CVEs in One Debian Update: Alarm Bell or Accounting Quirk?
Debian's latest kernel update fixes 1,313 CVEs at once. Why so many? The kernel issues CVEs for nearly every bug fix, Debian batches its upd...
Oct 2, 2026
7 min
Stop Logging Out Innocent Users: Building Production Refresh Token Rotation with Token Family Revocation in Redis
Naive refresh token rotation causes race conditions that randomly log out legitimate users across multiple tabs. Learn how to architect atom...
Oct 2, 2026
12 min
What to do when users use your AI for sex stuff
What happened I have a little Werewolf text game with LLMs. With a caveat - there is a role-play. Each game has a theme, a lore, a topic - a...
Sep 30, 2026
9 min
Hardening the Edge: Defeating SSRF, Redirect Traps, and Compression Bombs in Next.js Dynamic OpenGraph Generators
Passing user-supplied avatar URLs to @vercel/og turns your Next.js Edge runtime into an arbitrary outbound proxy. Learn how to defeat SSRF, ...
Sep 28, 2026
10 min
The swarm that kept coming back
No seriously, it's cooler than any AI sci-fi I've read or watched. I'm not going to do doom and gloom here - I want to reconstruct the chain...
Sep 22, 2026
21 min
Stop Hashing Passwords: A Practical Step-by-Step Passkey Tutorial
Code-First Security: A Practical Implementation of a Go Passkey Manager Introduction —...
Sep 11, 2026
9 min
Prompting Is Not Magic. It Is Control.
Most prompt books optimize for better answers. I wanted prompts that fail visibly. Most prompt...
Sep 6, 2026
8 min