Field notes on web architecture, security, and the small decisions that make digital products feel dependable.
FIELD NOTE
Field note
A quick rundown of the latest breaches, Android SMS attacks, Reddit login changes, AI‑generated bug bounty noise, a Chainalysis leak and a Linux kernel root flaw – plus practical…
Read the field note
FIELD NOTE
Field note
A quick rundown of the latest security headlines – Android SMS crash, Reddit login changes, AI‑filled bug bounty noise, Chainalysis breach, Linux MPTCP root bug and a Trezor…
Read the field note
FIELD NOTE
Field note
I explain how attackers compromise software packages, what signs to watch for, and practical steps you can take to protect your build pipeline and production systems from supply…
Read the field note
FIELD NOTE
Field note
I walk through practical steps to build defence in depth for a tiny office. From segmenting the LAN to hardening firewalls, patching, and logging, you get a checklist that stops…
Read the field note
FIELD NOTE
Field note
I explain how a small business can build defence in depth with firewalls, segmentation, strong authentication, patching, monitoring and backups, so attackers are spotted early and…
Read the field note
Agencies manage multiple client assets, but without continuous monitoring, vulnerabilities go unnoticed. Here’s why attack surface management must be a core part of your strategy.
Read the field note
DNS was designed in the 1980s, and security wasn't part of the original specification. When your browser asks a DNS resolver "what's the IP for yourbank.com?", there's nothing in…
Read the field note
Every time someone visits your website or sends you an email, the Domain Name System (DNS) is the first thing that springs into action. DNS is often called the phone book of the…
Read the field note
When you receive a letter with a wax seal, you know two things: the letter hasn't been tampered with, and it genuinely came from the person whose seal it bears. DKIM (DomainKeys…
Read the field note
When an email arrives at Gmail or Outlook, the receiving server asks a simple question: "Is the server that sent this email actually allowed to send mail for this domain?" The…
Read the field note