Tag
#Security
9posts
authentik Explained: IdP, SSO, SAML, OAuth2/OIDC, Okta, and Auth0
A smooth primer on authentik, IdP, SSO, and login protocols that turns identity-management jargon into a usable mental model.
The VSCode extension that robbed GitHub
GitHub confirmed ~3,800 internal repos were stolen after one employee installed a trojanized Nx Console extension - and the attackers want $50K for the data.
Open CTFs Are Now Pay-to-Win, and Frontier AI Did It
A top-10 CTF competitor argues that Claude Opus 4.5 and GPT-5.5 have automated enough of the scoreboard that open CTFs no longer measure human security skill.
Five Days vs. Five Years: Apple's New Kernel Defense, Cracked
Apple spent five years building MIE on M5 to stop kernel exploits. Calif cracked it in five days with AI, then drove to Apple Park to deliver the report.
hackingtool: All-In-One Terminal Arsenal for Pentesters
The Python TUI putting 185+ security tools - BloodHound to Nuclei - one search command away. A catalog, not a weapon.
Android Reverse Engineering Skill: Unpacking APKs Like a Pro
A Claude Code skill that decompiles Android apps and extracts their hidden APIs - no source code required. For security pros, hackers, and the curious.
Verify vs Cert: The Python Requests Handbook
Understanding SSL/TLS in Python Requests: The 'verify' and 'cert' arguments explained with interactive animations.
API Certificates: The Mastery Guide to Debugging & The Chain of Trust
Stop guessing with SSLErrors. A mastery-level guide to the Chain of Trust, openssl debugging, and proving exactly whose fault it is.
Authentication vs. Authorization vs. OAuth: The 'ID Card' Mental Model
Stop mixing up 401 and 403. A mastery guide to AuthN (Who you are), AuthZ (What you can do), and the OAuth Valet Key.