Technical deep-dives on Information Security, IoT, Cloud, and Maker Projects.
Analyzing a 10-layer deeply nested backdoor script discovered in a free Toolbox model while building a Roblox game with my daughter, Luau VM sandbox security, and the reality of gaming supply-chain attacks.
A deep dive into 3,252 km of real-world driving, 600 kWh of charging, and 750+ hours of parking telemetry collected via self-hosted TeslaMate on a private home NAS. Featuring an exact 158.8 km controlled experiment on cold weather efficiency penalty, AC vs DC charging losses, Sentry Mode phantom drain, and 9,600 km LFP battery health.
Why did Google AdSense fail to read a 200 OK ads.txt file? How querying Cloudflare GraphQL firewall logs exposed Bot Fight Mode blocking Google crawlers, plus 5 technical SEO fixes for Next.js static blogs.
An in-depth technical breakdown of the pre-auth RCE vulnerability chain 'PHP2Shell' that hijacks the PHP core engine before application scripts even run—complete with real-world HTTP packet patterns, Suricata/Snort signatures, ModSecurity WAF rules, and SIEM threat hunting strategies.
How a hobbyist maker built a zero-click shipping label pipeline using a home NAS, FastMCP, driverless IPP printing, and 0.1mm ReportLab coordinates—only to be defeated by legacy Windows agents and unit economics.
Instead of trusting third-party cloud apps with Tesla credentials and live locations, here is how I reclaimed my data sovereignty by self-hosting Elixir-based TeslaMate on my home NAS with 8,700km of real-world telemetry.
From sniffing raw RS485 serial frames to permanently curing the cold-reboot USB port mismatch bug and crafting a modern Bento Grid dashboard with AI pair programming.
In the era of Vibe Coding, how a senior InfoSec specialist and passionate hobbyist maker combines AI coding assistants with Obsidian to capture debugging context and build a continuous knowledge feedback loop.
An engineering retrospective on the biggest breaches of 2025—from distributed credential stuffing and Ivanti VPN zero-days with BPFDoor stealth backdoors to double ransomware infections and edge hardware compromises.
An engineering guide to eliminating SIEM parser maintenance debt with OCSF. Explore its 4-layer taxonomy, comparisons with CEF/ECS, real-world JSON normalization, and SQL threat-hunting queries.