Writing

Long-form essays on technology, business, design and human behaviour.
Shorter, rawer notes live on the Journal.

Latest writing

23 Jun 2026Why Does CORS Keep Blocking Me?CORS errors confused me too. Here's what Same Origin Policy and CORS actually do, why browsers enforce them, and how to configure your way out.Security
5 min 18 Apr 2026Your meeting. Their podcast.WebinarTV has been secretly infiltrating Zoom calls, recording them without consent, and turning them into AI podcasts. Here's the full breakdown.Security
7 min 08 Sep 2023Atlas VPN Linux Zero-Day Vulnerability LeakedA leaked Atlas VPN Linux zero-day could expose a user’s real IP address through a local API, a serious privacy failure for software whose entire purpose is.Security
1 min 04 Apr 2023Why I Won’t Use a YubiKeyWhy carry a separate YubiKey when the devices already in your pocket can provide strong authentication? A reflection on security, convenience and modern.Security
1 min 24 Feb 2021M1-Specific Malware DetectedGoSearch22 became one of the first pieces of adware compiled specifically for Apple Silicon, showing that the M1’s new architecture was never going to remain.Security
1 min 24 Nov 2011Non-Alphanumeric PHP ShellA PHP shell written without ordinary alphanumeric characters demonstrates how strange language behaviour can be abused—and later turned up in real malware.Security
3 min 03 Jun 2011Display PHP Logo on any URLAn obscure PHP query-string feature could once expose the PHP logo on almost any enabled server, one of the language’s stranger pieces of historical cruft.Security
1 min