THE JOURNAL / BENEATH THE SURFACE
The permissions you accept. The links you trust. The signals you miss. Look closer at everyday technology—and learn what to do next.
PRACTICAL SECURITY / START HERE
Small experiments. Readable code. A result you can explain.
Start with your own devices and follow the evidence.
FIELD NOTES / INVESTIGATIONS / EXPLAINERS
Run a tiny Python web server on loopback and inspect its response headers. A complete beginner project with a visible before-and-after result.
22 Oct 2026Read Build your first security project: a local-only header inspector.A small read-only starting point for your own Windows or Ubuntu computer, with interpretation instead of a misleading “secure” badge.
22 Oct 2026Read Windows and Linux: check the firewall before changing anything.Hash two dummy files, change the copy and compare again. Learn what a SHA-256 digest can establish—and what it cannot.
22 Oct 2026Read Digital forensics: prove that your evidence copy changed.Count failures in fictional logs and build a small detection rule. Learn why an alert is evidence to investigate, not proof of an attacker.
22 Oct 2026Read Network threat detection: turn three failed logins into a question.Build a tiny scope checker, then review one Android permission on your own phone. A practical first lesson in authorised testing.
22 Oct 2026Read Ethical testing starts with one question: what am I allowed to test?Prompt injection becomes more serious when an assistant can act. Look at the boundary between content and authority.
21 Oct 2026Read When an AI assistant follows the wrong instructions.Shared Wi-Fi does not automatically reveal every message. Separate visible metadata from encrypted content.
21 Oct 2026Read What can someone on your Wi-Fi actually see?A permission prompt is a decision. Here’s how to ask the right questions before tapping Allow.
21 Oct 2026Read Your flashlight app doesn’t need your microphone.CURIOSITY IS A DEFENCE
Continue from the journal to a practical exercise on your own devices.
