Technical Writeups & Research Notes
16 articlesIn-depth engineering notes, vulnerability breakdowns, system hardening guides, and network security architectures.
-
From Navier-Stokes to Zero-Days: The New Era of AI Swarms and the Singularity in Cybersecurity
OpenAI's claimed analytical solution to Navier-Stokes using 10,000 autonomous agents and Lean verification signals the leap from test-time compute to formal vulnerability hunting and asymmetric attacks.
-
Linux: My Private Life. OpenBSD: My Public Exposure
A pragmatic separation of operating systems by threat vector: Linux as a private workbench and development forge; OpenBSD as a secure-by-default perimeter shield facing the Internet.
-
Offensive AI and Technical Debt: The Perfect Storm for Unprotected Businesses
How generative models and autonomous offensive agents have erased the margin of error for organizations with weak or outdated cybersecurity postures.
-
Cybersecurity in SMBs: Reputation, Regulatory Compliance, and Legal Liabilities
Why information security is a critical survival pillar for small and medium businesses: brand reputation impact, compliance frameworks, and direct legal liabilities.
-
“I'm Not a Bank, I Don't Need That Much Security”
Why the belief that only financial institutions are targeted by cyberattacks is one of the most costly and dangerous fallacies any business can embrace.
-
If You Spend More on Coffee than on Cybersecurity, You Will Be Hacked
Why organizations effortlessly approve budgets for office perks while haggling over immutable backups, multi-factor hardware keys, and perimeter audits.
-
Discrete Mathematics in Cybersecurity: From Modular Arithmetic to Attack Graph Theory
How number theory, discrete probability combinatorics, graph theory, and propositional logic power asymmetric cryptography, hash collision resistance, and lateral movement analysis.
-
Discrete Mathematics in Compilers: Automata, Syntax Trees, and Graph Coloring
A rigorous breakdown of the discrete mathematical structures behind modern compiler construction: from DFA lexers to graph coloring register allocation.
-
Metasploit Framework in Lab: From Service Enumeration to Shell Capture and Packet-Level Detection
Practical guide on ethical offensive auditing: controlled exploitation of a legacy daemon, stageless payload delivery, interactive session analysis, and network packet detection via tcpdump and OpenBSD PF.
-
Algebra in Computer Science: From Transformation Matrices to Finite Fields in AES
How linear algebra and abstract algebraic structures (Galois Fields GF(2^8)) form the foundational mathematics powering modern cryptography, 3D graphics, and graph algorithms.
-
Reverse Proxy and Load Balancing with OpenBSD relayd(8): Multi-Tenant Case Study for XYZ Corp
Design and implementation of relayd(8) as a centralized TLS ingress point for 3 distinct enterprise applications (app.xyz.corp, api.xyz.corp, and portal.xyz.corp) with HTTP host routing and active health checks.
-
OpenPGP and GnuPG in Practice: Cryptographic Sovereignty, Signatures, and Secrets Management
Why the OpenPGP standard remains the cornerstone of digital sovereignty and how to master GnuPG for Git commit signing, package verification, and encrypted communications.
-
Anatomy of PHP CMS Vulnerabilities: Why WordPress and Joomla Remain the Weakest Link
Deep dive into dynamic CMS attack vectors: third-party plugin vulnerability chains, insecure object deserialization, arbitrary file uploads, PHP webshell persistence, and how static architectures eliminate these risks by design.
-
Deterministic Edge Architecture: Isolation Diagrams and Least Privilege
Architectural breakdown of an immutable static publishing platform: Go build pipeline, kernel isolation with pledge/unveil, and sub-millisecond edge delivery.
-
Network Hardening & Segmentation with OpenBSD PF (Packet Filter)
Deterministic network topology design, strict VLAN segmentation, and advanced Packet Filter (PF) rulesets to mitigate threats in high-assurance environments.
-
Infrastructure Hardening in OpenBSD with Packet Filter (PF) and Pledge/Unveil
Practical guide to deterministic OpenBSD 7.x hardening for edge hosts, strict packet filtering with PF, and attack surface mitigation.