Notes on security.

Practical write-ups on application and infrastructure security, from the engineer who has to fix it.

  1. 26 Sept 2026

    Nobody Asks About Debugging in Engineering Interviews

    Software Engineer interviews ask about you, your projects and your stack, but never about debugging, the work that fills most of the actual job.

    careerinterviewsdebugging

  2. 26 Sept 2026

    The OWASP Top 10:2025, and What Actually Moved

    OWASP's newly released 2025 edition reshuffles the ranking and adds two categories that didn't exist in 2021 — supply chain failures and exceptional-condition handling.

    securityowaspweb-security

  3. 26 Sept 2026

    Software Security Glossary: 64 Essential Terms Explained

    A beginner-friendly glossary of 64 software security terms, from MFA and hashing to XSS, zero-days and SBOMs, each explained in a sentence or two.

    securityglossaryfundamentals