Tutorials, guides, comparisons and analysis on security, Linux, networking, development, cloud and the tooling that powers modern technology — written by practitioners, for practitioners.
Every VPS host oversubscribes; the question is by how much. Steal time, run-queue depth and fsync latency expose it in minutes, and knowing the numbers turns a vague "feels slow" into something you can act on.
Putting smart devices on their own VLAN is straightforward until the television stops appearing on your phone. The reason is mDNS, which does not cross subnets by design — and the fix is a reflector with rules tight enough to be worth having.
A GPU with twice the compute can generate tokens no faster than one with half of it. Generation reads the entire model from memory for every token produced, so bandwidth sets the ceiling — and you can calculate yours before you buy anything.
Quantisation makes models fit, and the format you choose decides which hardware can run them, how much quality survives, and whether the file you downloaded will load at all. A practical comparison of the formats you will actually meet.
Most small web tools upload whatever you paste to a server you know nothing about, and most of that paste is a production token. The browser can do all of it locally now — and a CSP lets you prove it rather than claim it.
Lists of fifty questions with model answers optimise for the wrong thing. Interviewers are working out how you think, where your knowledge stops, and whether you will say so when it does.
Python-generated reports look generated because they were built from nothing. Open a workbook someone designed and fill it instead — and learn the one flag that silently turns every formula in a file into a static number.
Almost everyone studies for this wrong — a course start to finish, port numbers memorised, then an exam that asks for judgement on scenarios. Here is where the marks are and the one tactic that decides whether you finish in time.
A scanner finds vulnerabilities better than any script you will write. What no vendor knows is what your estate is supposed to look like — so automate change detection, and let git be the diffing engine.
Two S3 endpoints, two behaviours, and most guides pick one without saying which. One gives you working directory URLs and a public bucket; the other gives you a private bucket and a 403 on every folder path.
·6 min
Newsletter
Get smarter about security
Practical guides, tooling notes and the developments actually worth your attention — delivered when there is something worth saying.