How to Securing Web Socket
A guide on securing WebSocket to protect real-time applications from common vulnerabilities. This article covers the security vulnerabilities of WebSocket, which enables real-time bidirectional communication,…
Category: Mix
How to Secure Cookies | HAHWUL
Cookies play a crucial role in web applications, but at the same time, they require careful attention to security settings. In this post, we’ll take…
Subresource Integrity (SRI) | HAHWUL
A guide to understanding and implementing Subresource Integrity (SRI) for enhanced web security. Subresource Integrity (SRI) is a security feature that enables browsers to verify…
Understanding Content Security Policy (CSP)
Learn about Content Security Policy (CSP), its importance, how it works, and how it enhances web security. What is Content Security Policy (CSP)? Content Security…
WPA Key, WPA2, WPA3, and WEP Key: Wi-Fi security explained
Setting up new Wi-Fi? Picking the type of password you need can seem like an arbitrary choice. After all, WEP, WPA, WPA2, and WPA3 all…
What is TCP/IP? Layers and protocols explained
A significant part of the process of creation is the ability to imagine things that do not yet exist. This skill was instrumental to the…
Do One Thing: Mastering Prioritization for High-Performing Teams
In the tech teams I lead, “priority” has no plural form. Whether you’re leading a team of people or leading yourself, it’s important to take…
How to Write Good Documentation
If you’ve ever half-written a software project before taking a few days off, this is the article you’ll discover you needed when you reopen that…
How to become a software developer
As a Director of Engineering, I’m a software developer who hires and leads other software developers. It’s not surprising then that I get asked this…
Beyond Gut Feelings: How I Use Issue Metrics to Boost Engineering Velocity
How long does it take for a bug to get squashed, or for a pull request to be merged? What kind of issues take the…
Mastering Git for Small Teams
Here’s a practice I use personally and encourage within my open source projects and any small teams I run for work. I’ve seen major elements…
![[tl;dr sec] #284 - Google Cloud CISO Interview, AWS Threat Technique Catalog, Finding Secrets with AI](https://image.cybernoz.com/wp-content/uploads/2025/06/tldr-sec-284-Google-Cloud-CISO-Interview-AWS-Threat.png)
[tl;dr sec] #284 – Google Cloud CISO Interview, AWS Threat Technique Catalog, Finding Secrets with AI
4 ways Google uses AI for security, catalog of AWS threat actor techniques, training a custom small language model to find secrets I hope you’ve…