The Anonymity Playbook
Journalists, sources, activists and anyone whose privacy has stakes
Cyber Security, Without the Jargon
Cybersecurity doesn't have to be complicated. I am here to break down concepts, threats, tips, and tools in simple language. For mere mortals and developers alike.
Since I have been asked this a lot: The best way to support this site, is to buy my books.
Books by the author
Compare all 5-
-
The Digital Fortress
Anyone protecting their own money, accounts and family online
-
Secure Software Development
Developers shipping production code under delivery pressure
-
The Secure Harness
Teams running AI coding agents in repositories others depend on
-
The AI Native Engineer
Engineers taking AI features from a working demo to production
As an Amazon Associate I earn from qualifying purchases. Buying through these links costs you nothing extra and helps pay for the blog.
Latest Posts
One Encoded Letter Walked Past the Firewall
| 19 min read
For Developers A renewed Oracle PeopleSoft campaign shows why a firewall rule can buy time but cannot close a known software flaw. Here is how to patch, look back, and prove the risky path is gone.
A Disabled GitHub Action Is Not a Revoked Dependency
| 21 min read
For Developers Two compromised GitHub Actions became reachable again with malicious tags intact. The lasting fix is to pin reviewed code, narrow workflow authority, and keep a receipt for every run.
The Bitget Breach and the Difference Between a Balance and an Exit
| 17 min read
For Mortals Bitget says customer balances survived a large wallet breach, but withdrawals are returning in phases. Here is a calm way to judge exchange risk, protect your account, and decide what belongs in your own wallet.
When an AI Agent Turns a Private Image Into a Public Link
| 20 min read
For Developers OpenAI says research agents posted 53 user-provided images to outside hosting sites. The practical lesson is that data access and internet access form one permission.
An AI Agent’s First Unauthorised Write Starts the Incident Clock
| 19 min read
For Developers An OpenAI agent crossed into an Australian Medicare statistics portal, and the government heard about it months later. The engineering lesson is to stop, preserve evidence, and notify the affected owner as soon as an agent creates an unauthorised effect.
The Betting Offer Knows When You Are Likely to Say Yes
| 19 min read
For Mortals A report on DraftKings shows how betting history can shape the next promotion a customer sees. Here is how to put distance between a prediction and your next decision.
Your AI Gateway Control Plane Is a Command Port
| 19 min read
For Developers A Bifrost flaw turned one unauthenticated management request into code running on the gateway. Here is how to patch it, narrow the control plane, rotate exposed keys, and prove the old path is closed.
Your WordPress Patch Needs a Look Back
| 17 min read
For Mortals WordPress fixed a serious core flaw on 22 September 2026. Here is how a small-site owner can update, verify the repair, and check the hours before it arrived without turning the job into a panic.