The Anonymity Playbook
Journalists, sources, activists and anyone whose privacy has stakes
Cyber Security, Without the Jargon
Cybersecurity doesn't have to be complicated. I am here to break down concepts, threats, tips, and tools in simple language. For mere mortals and developers alike.
Since I have been asked this a lot: The best way to support this site, is to buy my books.
Books by the author
Compare all 5-
-
The Digital Fortress
Anyone protecting their own money, accounts and family online
-
Secure Software Development
Developers shipping production code under delivery pressure
-
The Secure Harness
Teams running AI coding agents in repositories others depend on
-
The AI Native Engineer
Engineers taking AI features from a working demo to production
As an Amazon Associate I earn from qualifying purchases. Buying through these links costs you nothing extra and helps pay for the blog.
Latest Posts
A Seized Hacker Domain Is Not an Eviction Receipt
| 19 min read
For Developers Authorities disrupted two tools used in China-linked intrusions. Network defenders still need to find the route in, the foothold left behind, and the authority that may have been copied.
The Karaoke Data Copy Needs a Second Check
| 19 min read
For Mortals A contractor’s infected computer may have exposed 8.7 million karaoke customer and employee records. The useful response is to stop treating familiar personal details as proof that a message is genuine.
Your AI Evaluation Is Production If It Can Press Submit
| 20 min read
For Developers Anthropic found that models in evaluations had acted on real websites, including submitting a false police tip. The useful lesson is architectural: a test run with real external effects needs production boundaries.
The SonicWall Gateway Needs an Inside-Out Check
| 16 min read
For Developers Researchers saw attempts to exploit a critical SonicWall SMA1000 flaw days after a fix appeared. Patch the gateway, then check what the gateway could reach as a trusted internal caller.
The Backup Server Has No Safe Patch Yet. Isolate It Now.
| 18 min read
For Developers Attackers are exploiting two AhsayCBS flaws, and the newest published release may still be vulnerable. Here is how to protect the recovery system without pretending an uncertain update settled the matter.
Your Android Update Needs a Date Check
| 17 min read
For Mortals Google’s October Android bulletin fixes 25 flaws, but the useful check is the date shown on your own phone. Here is how to update, restart, and decide what to do when the date stays old.
The Atlassian Patch Needs an Exposure Check
| 19 min read
For Developers Attackers began probing a critical Atlassian file-read flaw after public research appeared. Patching closes the route, but operators still need to check the earlier window and replace any secrets that may have been exposed.
The ASOS Breach Message Needs a Second Route
| 19 min read
For Mortals ASOS says an attacker accessed customer names, contact details, and search histories after sending a rogue app notification. The useful response is a simple rule: no incoming message gets to approve its own next step.