Posts
Practical guides and field notes on NetScaler, WAF, cloud security, and infrastructure hardening.
JWT Explained Simply
A practical guide to JWTs covering structure, trust model, common pitfalls, and a simple hardening checklist.
My Security and Privacy Stack – 2025
An in-depth look at my 2025 security and privacy stack, focusing on a balanced approach to protection and simplicity through Authentik, Tailscale, and Cloudflare.
My Productivity and Automation Stack – 2025
A simple 2025 productivity stack centered on Obsidian, Reminders, Miniflux, Linkwarden, and n8n automations designed for clarity and low mental overhead.
My Infrastructure Stack – 2025
A look at the cloud and self-hosted infrastructure behind my personal stack in 2025, including containers, networking, monitoring, and access control.
My Personal Stack – 2025
A personal look at the stack I use in 2025. From Apple-first client tools to self-hosted services in the cloud, this post sets the context for a short series on how I run my personal setup.
Open Source Library Scanning Tools You Can Use Today for Free
This note introduces useful tools that scan the libraries your developers use and alert you if a vulnerability is found in a library or one of its dependent libraries.
OpenSSL Cheat Sheet
OpenSSL Cheat Sheet
NetScaler ADC Hardening Best Practices Guide
This document consolidates recommendations and best practices for securing and hardening a NetScaler ADC environment. The recommendations are based on official Citrix documentation, leading community best practices, and real-world experience.
Cron Jobs in Linux: The Ultimate Automation Tool — or a Hidden Backdoor?
A practical guide to cron jobs in Linux, including secure configuration patterns and common offensive abuse techniques.
Improving Security with Secure DNS Solutions
A practical overview of DNS security risks and how to improve privacy and integrity using DNSSEC, DoT, DoH, and self-hosted resolver patterns.