Technical Writeups & Research Notes
29 articlesIn-depth engineering notes, vulnerability breakdowns, system hardening guides, and network security architectures.
-
OpenBSD in the Era of AI
Structural resilience analysis against autonomous exploit generation, the historic Claude Mythos finding, and the limits of the defensive model.
-
From Y2K to AI
From two-digit mass hysteria to synthetic apocalyptic mythology: why media panic around AI repeats the exact same biases of the Year 2000 bug.
-
OpenBSD: Every Mind is a World of Its Own
The architecture of KARL and kernel singularity in OpenBSD: breaking binary monoculture and neutralizing ROP exploit chains.
-
The Misplaced Panic: Fearing the Algorithm While Giving Away Our Soul to a Filter
Between collective hysteria over sentient AI and the voluntary surrender of biometric data to viral filters: a technical reflection on where the real risk lies in the digital era.
-
Why OpenBSD is the Most Secure Operating System for Critical Solutions
Anatomy of security in OpenBSD: Proactive design, compile-time and runtime memory mitigations, strict kernel-level control, pledge, unveil, pinsyscall, and privilege separation for mission-critical infrastructure.
-
The Biometric Trap of Playful AI: From Viral Filters to Identity Bypass
Why viral AI avatar apps and novelty face filters represent an irrevocable surrender of high-fidelity biometric telemetry, fueling KYC bypasses, voice fraud, and BYOD enterprise breaches.
-
Why Cheap NVRs Simply Do Not Belong on Our Network
Comprehensive security risk analysis of low-cost NVR video recorders: backdoors, critical firmware flaws, real-world attack scenarios, and mitigation via VLAN isolation and WireGuard.
-
TikTok Under the Technical Lens: What Are We Truly Exposed To?
Dissecting political hysteria to analyze with technical rigor the telemetry architecture, in-app browser injection, psychometric profiling, and real threat vectors in ByteDance.
-
Zero Attack Surface and Technical Sovereignty: Why I Have Never Had Consumer Social Networks
A deliberate architectural choice: technical coherence with the principle of least privilege, defense against OSINT vectors, preservation of deep cognitive focus, and the instrumental role of YouTube as a public oscilloscope.
-
The Domestic and Corporate Trojan Horse: The Silent Exposure to the IoT Ecosystem
How low-cost smart devices and white-label hardware become vectors for lateral movement, botnet recruiting, and telemetry leakage, and how to neutralize them via L2/L3 network isolation.
-
Case Study: Modernizing Critical Infrastructure, Identity, and Appliance Decoupling at The Havorzone
Comprehensive automotive infrastructure modernization: decoupling proprietary appliances and Windows toward an OpenBSD cluster (PF, CARP, WireGuard), Debian Samba AD-DC, and ZorinOS workstations.
-
The Illusion of Secrecy: Why Is Open Source the Security Standard for Critical Services?
Against the fallacy of security through obscurity and proprietary black boxes, open source is the only verifiable, reproducible, and sovereign model for critical infrastructure.
-
Linux: My Private Life. OpenBSD: My Public Exposure
A pragmatic separation of operating systems by threat vector: Linux as a private workbench and development forge; OpenBSD as a secure-by-default perimeter shield facing the Internet.
-
Beyond the Interface: Why Every IT Professional Must Master at Least One Programming Language
Why delegating machine interaction to dashboards and pre-packaged tools stunts technical authority, and how deeply mastering a language builds true computational reasoning.
-
From Navier-Stokes to Zero-Days: The New Era of AI Swarms and the Singularity in Cybersecurity
OpenAI's claimed analytical solution to Navier-Stokes using 10,000 autonomous agents and Lean verification signals the leap from test-time compute to formal vulnerability hunting and asymmetric attacks.
-
Offensive AI and Technical Debt: The Perfect Storm for Unprotected Businesses
How generative models and autonomous offensive agents have erased the margin of error for organizations with weak or outdated cybersecurity postures.
-
Cybersecurity in SMBs: Reputation, Regulatory Compliance, and Legal Liabilities
Why information security is a critical survival pillar for small and medium businesses: brand reputation impact, compliance frameworks, and direct legal liabilities.
-
If You Spend More on Coffee than on Cybersecurity, You Will Be Hacked
Why organizations effortlessly approve budgets for office perks while haggling over immutable backups, multi-factor hardware keys, and perimeter audits.
-
“I'm Not a Bank, I Don't Need That Much Security”
Why the belief that only financial institutions are targeted by cyberattacks is one of the most costly and dangerous fallacies any business can embrace.
-
Metasploit Framework in Lab: From Service Enumeration to Shell Capture and Packet-Level Detection
Practical guide on ethical offensive auditing: controlled exploitation of a legacy daemon, stageless payload delivery, interactive session analysis, and network packet detection via tcpdump and OpenBSD PF.
-
Discrete Mathematics in Compilers: Automata, Syntax Trees, and Graph Coloring
A rigorous breakdown of the discrete mathematical structures behind modern compiler construction: from DFA lexers to graph coloring register allocation.
-
Discrete Mathematics in Cybersecurity: From Modular Arithmetic to Attack Graph Theory
How number theory, discrete probability combinatorics, graph theory, and propositional logic power asymmetric cryptography, hash collision resistance, and lateral movement analysis.
-
Reverse Proxy and Load Balancing with OpenBSD relayd(8): Multi-Tenant Case Study for XYZ Corp
Design and implementation of relayd(8) as a centralized TLS ingress point for 3 distinct enterprise applications (app.xyz.corp, api.xyz.corp, and portal.xyz.corp) with HTTP host routing and active health checks.
-
OpenPGP and GnuPG in Practice: Cryptographic Sovereignty, Signatures, and Secrets Management
Why the OpenPGP standard remains the cornerstone of digital sovereignty and how to master GnuPG for Git commit signing, package verification, and encrypted communications.
-
Anatomy of PHP CMS Vulnerabilities: Why WordPress and Joomla Remain the Weakest Link
Deep dive into dynamic CMS attack vectors: third-party plugin vulnerability chains, insecure object deserialization, arbitrary file uploads, PHP webshell persistence, and how static architectures eliminate these risks by design.
-
Algebra in Computer Science: From Transformation Matrices to Finite Fields in AES
How linear algebra and abstract algebraic structures (Galois Fields GF(2^8)) form the foundational mathematics powering modern cryptography, 3D graphics, and graph algorithms.
-
Deterministic Edge Architecture: Isolation Diagrams and Least Privilege
Architectural breakdown of an immutable static publishing platform: Go build pipeline, kernel isolation with pledge/unveil, and sub-millisecond edge delivery.
-
Network Hardening & Segmentation with OpenBSD PF (Packet Filter)
Deterministic network topology design, strict VLAN segmentation, and advanced Packet Filter (PF) rulesets to mitigate threats in high-assurance environments.
-
Infrastructure Hardening in OpenBSD with Packet Filter (PF) and Pledge/Unveil
Practical guide to deterministic OpenBSD 7.x hardening for edge hosts, strict packet filtering with PF, and attack surface mitigation.