Latest

My Yantop dashcam (sold as the Car DVR/Dash Camera Yantop) only lets you view the live feed through its own app. I used nmap, PCAPdroid and Wireshark to figure out what that app was actually doing on the network, and turned it into a script that opens the same feed straight in VLC - no app, no flashing, no root.

Discover the new HTTP QUERY method that finally lets you send request bodies on read-only, cacheable operations without abusing POST.

A comprehensive deep-dive into TLS/SSL security - from TCP handshakes to certificate verification, covering everything you need to know about secure network connections, encryption, and how HTTPS really works.

A step-by-step mathematical deep-dive into how Diffie-Hellman key exchange works - from simple paint mixing analogies to the discrete logarithm problem that makes it unbreakable.

A detailed breakdown of CVE-2026-31431 - understanding how a kernel page cache vulnerability allows privilege escalation from regular user to root access through cryptographic socket exploitation.

How I built a lightweight, fast clipboard manager for Linux using PyQt6 and automated PyPI publishing with GitHub Actions - showcasing the power of AI-assisted development in creating polished desktop applications.

Technical showcase of a production-ready authentication API featuring JWT with refresh token rotation, RBAC, Redis rate limiting, comprehensive security headers, audit logging, and automated CI/CD deployment.

A real-world issue I faced where a Node.js authentication API worked locally but failed inside Docker with "Empty reply from server", how I debugged it, what I missed, and how I fixed it.