The Anonymity Playbook
Journalists, sources, activists and anyone whose privacy has stakes
Cyber Security, Without the Jargon
Cybersecurity doesn't have to be complicated. I am here to break down concepts, threats, tips, and tools in simple language. For mere mortals and developers alike.
Since I have been asked this a lot: The best way to support this site, is to buy my books.
Books by the author
Compare all 5-
-
The Digital Fortress
Anyone protecting their own money, accounts and family online
-
Secure Software Development
Developers shipping production code under delivery pressure
-
The Secure Harness
Teams running AI coding agents in repositories others depend on
-
The AI Native Engineer
Engineers taking AI features from a working demo to production
As an Amazon Associate I earn from qualifying purchases. Buying through these links costs you nothing extra and helps pay for the blog.
Latest Posts
The MetaMask Incident: Check the Right Door Before You Move Anything
| 18 min read
For Mortals MetaMask reported an infrastructure incident in its staking operation while saying it found no indication that wallets or customer funds were affected. Here is how to separate those systems, check your own position, and avoid the scams that follow security news.
A Self-Replicating Prompt Needs a Trust Stop
| 21 min read
For Developers OpenAI showed a prompt injection copying itself into an agent's output in simulated tests. The practical response is to stop treating agent-written messages, files, and code as trusted input for the next agent.
The Pentagon Breach Needs a Longer Identity Plan
| 16 min read
For Mortals The DMDC breach exposed Social Security numbers and military personnel details, while the offered monitoring lasts one year. Build a calm identity plan that protects new credit, tax filings, benefits, and family records for longer.
GitHub's 24 Android Bugs Show What an AI Security Review Needs
| 22 min read
For Developers GitHub Security Lab used targeted AI taskflows to find and report 24 Android vulnerabilities. The useful lesson is how to make an AI security review repeatable, testable, and subject to a human verdict.
Your TeamViewer Update Needs a Door Check
| 17 min read
For Mortals TeamViewer fixed five serious flaws in its remote-support software. Update the computers that still need it, remove it from the ones that do not, and keep a simple receipt showing which remote door remains open.
The AI Botnet Started With an Open Docker Door
| 21 min read
For Developers Carbonato put an AI agent on compromised Docker hosts, but the model did not create the first opening. The practical lesson starts with the remote Docker control plane, then follows the evidence through containment, credential rotation, and recovery.
A Targeted iPhone Attack Still Deserves an Ordinary Update
| 22 min read
For Mortals Apple fixed a file-processing flaw used in a highly targeted attack. Here is the calm response: update every supported iPhone, iPad, and Mac, then reserve Lockdown Mode for people with a real reason to expect personal targeting.
A Cloud Identity Needs a Blast Radius Before It Runs
| 20 min read
For Developers A Storm-3168 attack used stolen Azure application identities to map a tenant and delete cloud resources in minutes. The useful lesson is how to limit machine authority before fast automation turns one credential into a wide outage.