Security considerations for static generated websites
An exploration of security considerations, risks, and best practices when deploying and serving static generated websites.
Category: infosec
Detecting disinformation: technical approaches and tools
An exploration of technical methods and tools for identifying and analyzing disinformation in digital content.
Deploying and utilising Nightingale Docker for container security testing
A comprehensive guide to setting up, configuring, and effectively using the Nightingale Docker container for testing Docker infrastructure and container security.
From farming karma to farming minds on social media
A deep dive into how easily social media platforms can be manipulated to control narratives, using a viral Reddit post as a case study to explore the mechanics of digital deception.
The thin veil of phone number verification in modern apps
An in-depth analysis of phone number verification requirements in modern apps, examining the limited security benefits versus the extensive data collection advantages for companies.
Setting up bWAPP with Docker: quick local security testing
Learn how to set up bWAPP, a deliberately vulnerable web application, using Docker for quick and easy security testing on your local machine.
Comprehensive information security learning resources
A curated collection of high-quality information security learning resources including websites, podcasts, tutorials, and video content.
Automated CLI proxy intercepts
Learn how to set up mitmproxy using Docker to intercept, inspect, and manipulate HTTP requests from browsers and command-line tools.
Structured SSH key management: beyond basic organisation
Learn how to implement a robust organisation system for your SSH keys with practical directory structures, naming conventions, and automation techniques.
Running OWASP Zed Attack Proxy with Docker
Learn how to set up and run OWASP ZAP using Docker for web application security testing, both in GUI mode and headless for CI/CD integration.