Cybersecurity Interviews: What the Question Is Actually For
Lists of fifty questions with model answers optimise for the wrong thing. Interviewers are working out how you think, where your knowledge stops, and whether you will say so when it does.
Practical technology knowledge
The practical tech
knowledge platform
Tutorials, guides, comparisons and analysis on security, Linux, networking, development, cloud and the tooling that powers modern technology — written by practitioners, for practitioners.
237
Articles
10
Topics
2019
Publishing since
Free tools
Practical tools, no sign-up
Most run entirely in your browser, so nothing you paste — a token, a password, production data — is ever sent to us.
Featured
Development
Build a Developer Toolkit Where the Data Never Leaves the Tab
Most small web tools upload whatever you paste to a server you know nothing about, and most of that paste is a production token. The browser can do all of it locally now — and a CSP lets you prove it rather than claim it.
Most read
All articles →01Nginx rate limiting that works: leaky buckets, burst, and getting the client IP rightLinux & Systems · 6 min02CloudFront vs Cloudflare: The Hop Everybody Forgets to PriceDevOps & Cloud · 7 min03Wi-Fi 7 vs Wi-Fi 6 and 6E: what actually changed, and whether to wait for Wi-Fi 8Networking · 7 min04Write Your First Linux Kernel Module (And Get It to Load)Linux & Systems · 7 min05Mutation Testing with mutmut: Which Bugs Your Tests IgnoreDevelopment · 5 min
Explore by topic
All topics →Latest articles
Search archive →
Automate Excel Reports: Start From a Template, Not an Empty Workbook
Python-generated reports look generated because they were built from nothing. Open a workbook someone designed and fill it instead — and learn the one flag that silently turns every formula in a file into a static number.
Security+ SY0-701: Study by Weighting, Not by Chapter
Almost everyone studies for this wrong — a course start to finish, port numbers memorised, then an exam that asks for judgement on scenarios. Here is where the marks are and the one tactic that decides whether you finish in time.
Automate the Noticing, Not the Finding
A scanner finds vulnerabilities better than any script you will write. What no vendor knows is what your estate is supposed to look like — so automate change detection, and let git be the diffing engine.
S3 and CloudFront: The Fork That Decides Whether /about/ Works
Two S3 endpoints, two behaviours, and most guides pick one without saying which. One gives you working directory URLs and a public bucket; the other gives you a private bucket and a 403 on every folder path.
Python Scraping for OSINT: Choose the Access Method First
The parsing is the short part. What decides whether your collection is usable is which rung of the access ladder you took, what you did with personal data afterwards, and whether you can still say where each fact came from.
Your AI Wrote Forty Tests. Do Any of Them Fail?
Passing tests, rising coverage and a green badge all measure the same thing — that the code ran. None of them tell you anything was checked. Here is how to find the tests that defend nothing.
Write Your First Linux Kernel Module (And Get It to Load)
The C is twenty lines. Getting it to load on a machine bought in the last few years is the hard part, and Secure Boot is the reason — an error that says nothing about signing.
Mutation Testing with mutmut: Which Bugs Your Tests Ignore
Coverage says a line ran. Mutation testing says whether anything would notice if that line were wrong. The idea takes a sentence; making it finish before you lose interest takes a plan.