About Security & Privacy
Data breaches, credential stuffing attacks, and supply-chain compromises threaten every organization on the internet. Protecting your digital accounts and web applications requires defense-in-depth: from generating mathematically high-entropy passphrases to enforcing strict HTTP security headers that neutralize cross-site scripting (XSS) and clickjacking.
In this category, I break down modern cybersecurity concepts into clear, actionable engineering guides. Discover how modern GPU clusters crack legacy password hashes, evaluate the security differences between SMS 2FA, TOTP authenticator apps, and FIDO2 passkeys, and learn how to inspect QR codes before scanning to guard against malicious phishing redirects.
Core Topics Covered in this Category:
- NIST SP 800-63B Password Entropy & Generation
- Two-Factor Authentication: SMS vs. TOTP vs. Passkeys
- HTTP Security Headers: CSP, HSTS, and X-Frame-Options
- Guarding Against QR Phishing ("Quishing") Scams
