THE JOURNAL / BENEATH THE SURFACE
The permissions you accept. The links you trust. The signals you miss. Look closer at everyday technology—and learn what to do next.
PRACTICAL SECURITY / START HERE
Small experiments. Readable code. A result you can explain.
Start with your own devices and follow the evidence.
FIELD NOTES / INVESTIGATIONS / EXPLAINERS
Apple’s patch and Google Project Zero’s research explain the difference between clicking a link and automatically parsing content.
22 Oct 2026Read FORCEDENTRY: why a phone can process a threat before you tap.How leftover credentials enabled access, how the intrusion was detected and why segmentation limited the impact.
22 Oct 2026Read Cloudflare’s 2023 incident: the credentials that were not rotated.A customer report, forged tokens and a missing trust-boundary check. Understand authentication beyond “the signature passed.”
22 Oct 2026Read Microsoft Storm-0558: a valid signature was not enough.What NASA’s own audit teaches about unregistered devices, network segmentation and knowing what belongs on your LAN.
22 Oct 2026Read NASA/JPL: a small device exposed a much bigger boundary problem.CURIOSITY IS A DEFENCE
Continue from the journal to a practical exercise on your own devices.
