Cyber Security

Security in the digital realm encompasses all measures taken to protect data, networks, and computer systems from unauthorized access, use, disclosure, disruption, modification, or destruction. It’s a broad field aimed at ensuring confidentiality, integrity, and availability (the “CIA Triad”).

Topics often covered are:

  • Vulnerability Assessment: Identifying weaknesses in systems.
  • Penetration Testing: Simulating attacks to find exploitable flaws.
  • Secure Coding Practices: Writing code that is resilient to common attacks like SQL Injection and XSS.
  • Network Security: Protecting the underlying infrastructure with firewalls, VPNs, and monitoring.
See All Categories
Cyber Security

August 2026

Complete Anatomy of Tor: From the First Map to the Rendezvous
August 15, 2026

Complete Anatomy of Tor: From the First Map to the Rendezvous

A guided tour of Tor's mechanism: directory, circuits, cells, exit, onion service, and rendezvous.

Read
How Tor Enters a Network That Blocks Tor
August 15, 2026

How Tor Enters a Network That Blocks Tor

Why bridges and pluggable transports are needed, which problem each solves, and why both change only the entry into the Tor network.

Read
Inside a Tor Circuit: Channels, Cells, Streams, DNS, and TLS
August 15, 2026

Inside a Tor Circuit: Channels, Cells, Streams, DNS, and TLS

What Tor actually carries after a circuit is built, from the first relay cell to the exit's connection to the site.

Read
Rendezvous: How a Client and Onion Service Meet Without Knowing Each Other
August 15, 2026

Rendezvous: How a Client and Onion Service Meet Without Knowing Each Other

The complete sequence that joins two Tor circuits through an introduction point, cookie, rendezvous point, handshake, and virtual hop.

Read
Before the Circuit: How Tor Builds a Shared Network Map
August 15, 2026

Before the Circuit: How Tor Builds a Shared Network Map

How the Tor software discovers which relays exist, verifies the network map, and prepares to build a circuit.

Read
Three Relays, but Not Three Random Relays
August 15, 2026

Three Relays, but Not Three Random Relays

How the Tor client chooses a path and then turns it, one hop at a time, into a usable circuit.

Read
How Do You Find a Site That Does Not Publish Its IP Address?
August 15, 2026

How Do You Find a Site That Does Not Publish Its IP Address?

What a .onion address identifies, and how descriptors, blinded keys, and HSDirs let a client discover a service without learning its network location.

Read
Who Knows What: Where Tor's Promise Ends
August 15, 2026

Who Knows What: Where Tor's Promise Ends

A concrete threat model that distinguishes direct knowledge, correlation, application content, fingerprinting, and endpoint compromise.

Read
How Does a Batteryless Contactless Card Prove a Payment Is Real?
August 9, 2026

How Does a Batteryless Contactless Card Prove a Payment Is Real?

How contactless card payments use wireless power and a fresh cryptogram, why copying a tap fails, and why a relay attack can still work.

Read

May 2026

Beyond the Lock: How Messaging Security Actually Works (and Fails)
May 15, 2026

Beyond the Lock: How Messaging Security Actually Works (and Fails)

Encryption is not a magic shield. The real vulnerabilities in your messaging stack are at the endpoint: your phone, your metadata, and the governance of the apps you trust. Here is how to actually evaluate your privacy.

Read
How Browser Fingerprinting Works Without JavaScript
May 12, 2026

How Browser Fingerprinting Works Without JavaScript

CSS alone leaks your installed fonts to any site, no JavaScript needed. Why a 1-in-15,000 fingerprint survives VPN and incognito, and which browser fixes it.

Read

July 2025

The Evolution of Password Security: From Basic Storage to Argon2
July 18, 2025

The Evolution of Password Security: From Basic Storage to Argon2

A level-by-level journey into password security. Discover why a simple hash isn't enough and how to defend your users from hackers and data leaks, from salt and pepper to Argon2.

Read
SHA256 and the Length Extension Attack
July 11, 2025

SHA256 and the Length Extension Attack

SHA-256 is a cornerstone of security, but it's not invincible. Discover how its internal structure opens the door to the feared length extension attack and why HMAC is the fundamental solution.

Read

December 2024

Throttling Explained: A Guide to Managing API Request Limits
December 4, 2024

Throttling Explained: A Guide to Managing API Request Limits

Learn how to implement a simple and effective throttling system in TypeScript to protect your APIs from overload. This guide covers rate-limiting strategies, IP tracking, and periodic cleanup to manage stale records and optimize performance.

Read