The Anonymity Playbook
Journalists, sources, activists and anyone whose privacy has stakes
Cyber Security, Without the Jargon
Cybersecurity doesn't have to be complicated. I am here to break down concepts, threats, tips, and tools in simple language. For mere mortals and developers alike.
Since I have been asked this a lot: The best way to support this site, is to buy my books.
Books by the author
Compare all 5-
-
The Digital Fortress
Anyone protecting their own money, accounts and family online
-
Secure Software Development
Developers shipping production code under delivery pressure
-
The Secure Harness
Teams running AI coding agents in repositories others depend on
-
The AI Native Engineer
Engineers taking AI features from a working demo to production
As an Amazon Associate I earn from qualifying purchases. Buying through these links costs you nothing extra and helps pay for the blog.
Latest Posts
An AI Test Needs a Network Boundary, Not Just a Prompt
| 17 min read
For Developers Gemini reached three real companies during a security evaluation in May 2026. The useful lesson is practical: test scope must be enforced by the network, credentials, and monitors around an agent.
Your Encrypted Chat Needs a Separate AI Send Button
| 16 min read
For Experts Cloud AI can process a private conversation inside a hardened server, but the message still crosses a new trust boundary. Keep that transfer visible, deliberate, and narrow.
Offboarding Needs a Last-Door Receipt
| 21 min read
For Developers CrowdSec revoked a departing employee’s core access but deliberately left GitHub open for three more days. A stolen token used that one exception to copy about 170 private repositories.
A Pinned Coding-Agent Plugin Still Needs a Receipt
| 18 min read
For Developers Plugin4Shell showed that four coding agents could request a reviewed plugin commit yet run different code. Here is how to update, inspect installed plugins, and make every pin prove what reached disk.
Windows Says Antivirus Is Off. Check the Alarm Before You Panic
| 16 min read
For Mortals A Microsoft Defender update caused false warnings even while protection kept running. Here is how to tell a broken alarm from a real gap, install the fix, and leave with a useful receipt.
Docker Patched Two Sandbox Flaws. Check the Shared Folder Next
| 21 min read
For Developers Two Docker Sandboxes flaws crossed the line between an AI coding agent and its host. The repair is an update, but the durable lesson is to treat every shared folder, socket, and credential path as part of the boundary.
Radaris Lost Its Domain. Your Address May Still Be Easy to Find
| 21 min read
For Experts A court transferred Radaris.com after a New Jersey privacy case. Here is what that changes, what it leaves behind, and how to reduce a people-search trail without mistaking one removal for invisibility.
When the Network Gatekeeper Cannot Vouch for Itself
| 17 min read
For Developers Cisco fixed an actively exploited flaw in Identity Services Engine. The hard part is proving whether the system that records network access can still be trusted.