The Anonymity Playbook
Journalists, sources, activists and anyone whose privacy has stakes
Cyber Security, Without the Jargon
Cybersecurity doesn't have to be complicated. I am here to break down concepts, threats, tips, and tools in simple language. For mere mortals and developers alike.
Since I have been asked this a lot: The best way to support this site, is to buy my books.
Books by the author
Compare all 5-
-
The Digital Fortress
Anyone protecting their own money, accounts and family online
-
Secure Software Development
Developers shipping production code under delivery pressure
-
The Secure Harness
Teams running AI coding agents in repositories others depend on
-
The AI Native Engineer
Engineers taking AI features from a working demo to production
As an Amazon Associate I earn from qualifying purchases. Buying through these links costs you nothing extra and helps pay for the blog.
Latest Posts
An AI Agent Wallet Needs a Budget Outside the Prompt
| 18 min read
For Developers Researchers found that an automated x402 client could sign a server-chosen payment without a default spending limit. The repair is bigger than an SDK update: keep the agent’s wallet small, restrict where it can pay, and verify the boundary with a hostile-server test.
The Capcom Breach Needs a Measured Account Check
| 18 min read
For Mortals Capcom says 11.7 million CAPCOM ID records were accessed, but the exposed fields and account effects were not the same for everyone. Here is how to check your account, protect reused passwords, and handle the phishing that may follow.
The 23andMe Settlement Leaves You One Privacy Decision
| 19 min read
For Mortals California reached a proposed $6 million settlement over the 23andMe breach and bankruptcy. The useful question for customers now is whether they still want their genetic data and sample stored, and how to act on that choice.
The AI Agent Attack Changes the Defender’s Clock
| 21 min read
For Developers One operator used AI agents to probe more than 1,200 websites, with reported compromises at over 100 organisations. The practical response is faster friction, smaller application identities, and evidence that survives the first successful request.
The Node.js Patch Needs a Decoder Map
| 18 min read
For Developers A Node.js flaw can turn malformed Brotli data into code running inside the application process. The useful response is to patch the runtime, then map every place compressed data enters from requests and fetched responses.
A Cloud Shutdown Needs a Clean Exit Receipt
| 22 min read
For Developers Zeabur will close its hosting services after a second security incident. Customers now need two plans at once: revoke exposed trust, then prove their applications and data can run somewhere else.
A $25 Billion Penalty Cannot Undo a Privacy Choice
| 18 min read
For Mortals A New Mexico judge imposed a $25 billion penalty on Meta over years of misleading privacy statements. The useful lesson for the rest of us is smaller and more practical: review who can still enter through an old social login, and share less before a promise is tested.
The PHP Patch Needs a Runtime and Lookback Receipt
| 21 min read
For Developers PHP fixed two critical flaws that can be reached before application code runs, while Amazon found an exploitation attempt four days before disclosure. Here is how to patch the runtime you actually serve, verify the change, and search the right window.