Threat Modeling
Making assets, actors, trust boundaries and abuse cases visible before implementation.
// Topic hub · Software security
Applied engineering notes spanning Python integrations, service hardening, LLM use and offline-system security.
// Core concepts
Making assets, actors, trust boundaries and abuse cases visible before implementation.
Granting services and users only the permissions they require.
Monitoring security events with meaningful, integrity-protected and privacy-aware logs.
// Guided reading path
Follow the articles in this order to build the concepts progressively.
// All publications
There’s a joke we often hear in computer security: “The most secure computer is the one that isn’t plugged in.” But how true is this saying? In this article, we take an in-depth look at computer security, evaluate physical and software security measures, and explore what it takes for a computer to be truly secure.
No. Supply-chain, removable-media, maintenance-access, physical-security and insider risks remain.
A threat model defining data authority, trust boundaries and fields that must be revalidated server-side.
In this article, we will take an in-depth look at Fail2ban configuration. Fail2ban is a powerful tool used to protect servers against malicious login attempts. We will cover its installation, basic and advanced settings, configuration files, and methods for troubleshooting common issues in detail.
In this article, we’ll take a detailed look at how you can use LLM models on Ollama Cloud. We’ll walk you through the step-by-step process of integrating the Ollama Cloud API with Python, highlight key points to keep in mind, and illustrate the five most common mistakes with examples.
In this article, we take a comprehensive look at what Twilio is and how you can get started sending messages with Twilio using Python. We also explain five common mistakes people make when using Twilio and how to avoid them, complete with sample code.