#security
Here are my latest articles filed under security. Showing page 1 of 2 (12 total articles).
Threat modeling autonomous AI agents: a practical guide for developers
A hands‑on walkthrough of threat modeling for apps that embed autonomous AI agents, with concrete steps you can apply today.
What actually runs when you load a model on Hugging Face
A look at the hidden execution path when pulling a model from Hugging Face and how to keep your environment safe.
How to Serve Large Private Files Efficiently with Laravel
A practical guide to streaming protected files in Laravel, handling memory, timeouts and security.
How an Unescaped Semicolon Leads to Telegram Account Hijack
A single missing escape let a Telegram bot leak credentials and hand over accounts. I break down the flaw, show the exploit, and give you a checklist to stop it.
Why AI audit logs are unreliable and how to improve their trustworthiness
AI audit logs look solid on paper but hide many traps. I explain the real problems and give actionable ways to make them reliable.
Why XML signature wrapping still breaks SAML and how to stop it
A quick guide to SAML basics, the XML signature wrapping flaw, and concrete fixes you can apply today.
Why innerHTML XSS Still Happens and How to Stop It Safely
innerHTML is convenient but dangerous; discover the hidden XSS traps and a solid way to sanitize content before inserting it into the DOM.
Why Regex Misses the Mark in API Secret Scanning and What Works Better
Regex catches many secrets but also creates noise. I explain the pitfalls and show a safer, more accurate scanning approach.
How Passkeys Work and Why They Stop Phishing
A practical look at passkeys, the WebAuthn flow, and why they make phishing practically impossible.
Need help building a website?
Send me a message and let's talk.