Concepts
What is an attack surface? Your website edition
Your attack surface is simply every way the outside world can reach your site. Understanding it is the first step to shrinking it — here is what counts.
Tag
#appsec
Secrets
How AWS access keys leak — and what attackers do in the first 5 minutes
An AWS access key has a recognizable shape, which makes it easy for bots to spot. Here is where they leak from and what typically happens right after.
Vibe Coding
AI wrote my backend — so who owns the security?
When an AI assistant writes most of your backend, the responsibility question gets blurry. The answer is simpler than it feels — and it is on you, in a good way.
Secrets
The most common way API keys leak from production sites
API keys do not usually leak through clever hacks. They leak because a key meant for the server ends up in code the browser downloads. Here is the pattern, and the fix.