Cyber Security, Without the Jargon

Cybersecurity doesn't have to be complicated. I am here to break down concepts, threats, tips, and tools in simple language. For mere mortals and developers alike.

Since I have been asked this a lot: The best way to support this site, is to buy my books.

Paperclip's Agent Import Bug Shows Why Configuration Needs a Boundary

Aug 10, 2026 | 21 min read

For Developers

Paperclip's Agent Import Bug Shows Why Configuration Needs a Boundary

New reporting on three Paperclip flaws shows how an agent import can cross from configuration into command execution. The lasting fix is to review agent configuration as code and enforce authorization at the action boundary.

Role-Based Access Control (RBAC) vs. Attribute-Based Access Control (ABAC)

Sep 6, 2024 | 34 min read

For Developers

RBAC vs. ABAC: Which Access Control Model to Choose?

Learn the differences between RBAC and ABAC, and how to select the right access control model for your application's needs.