RAG Architecture Guide for Large-Scale Document Search
Learn how to build a cost-effective, enterprise-grade RAG system. This guide details a 3-stage retrieval pipeline for searching massive document sets.
Thoughts
Articles, ideas, and reflections on information security, software development, and technology.
Chat Control 2.0: A Dangerous Path Toward Mass Surveillance
The European Union stands at a critical crossroads in digital privacy and civil liberties. The proposed Chat Control 2.0 regulation, formally known as the Child Sexual Abuse Regulation (CSAR), is one of the most sweeping surveillance proposals ever considered by a democracy. Framed as a child protection measure, it would actually establish an unprecedented mass surveillance infrastructure that undermines the fundamental right to private communication.
A Practical Guide to Preventing Subdomain Hijacking
Forgetting to delete an old DNS record can leave you vulnerable to subdomain hijacking. Attackers can claim your unused addresses to host malicious content under your brand's name. Learn how to find and fix these dangling pointers with o...
A History of How We Name Hackers
Why is one hacker group called both FANCY BEAR & APT28? Different security companies use different names, which creates confusion. Here's a quick history of how we got into this mess and how the industry is finally starting to fix it.
Making Dangerous Links a Little Less Dangerous: A Quick Word on Defang-ing
Ever received an email, a chat message, or stumbled upon a link online that just made your internal alarm bells go off? You know, that link that looks a bit... off. Maybe there's a typo in the domain name, or it seems to lead to a place ...
My Switch to Proton
Almost done with my big move from Google to Proton. For me, it's about one thing: getting a grip on my own data, especially with AI models hoovering it all up. I'm fine with some extra tinkering if it means real privacy.
When PyPI Becomes the Attack Vector: 39,000+ Downloads of Malicious Python Packages
Three Python packages made it onto PyPI, stole data, validated stolen credit cards, and were downloaded over 39,000 times. Here’s how they worked and what we can learn from it.
Free Document Converters - Now With Bonus Malware
The FBI warns that some free online converters are more than helpful; they hide malware, steal data, and sometimes drop ransomware.
Why LazyGit is My Favorite Git Tool (Even Over the CLI)
I’ve used plenty of Git tools—Sourcetree, GitHub Desktop, Gitbutler—but none of them stuck. Then, I found LazyGit. It’s fast, efficient, and keeps the power of Git at my fingertips without the friction of typing everything manually. Here...
The Benefits and Drawbacks of Serverless Architecture
Serverless architecture offers scalability, cost efficiency, and faster development but comes with challenges like cold starts and vendor lock-in. Explore its pros, cons, and why it could dominate the future of app development.
What response formats are supported in REST APIs?
Before discussing the various formats supported by REST APIs, it's important to note that JSON (JavaScript Object Notation) has become the de facto industry standard for most modern web APIs. JSON is often chosen as the primary data form...
What are TCP Listeners and Streams? (Beginner's Guide)
Discover how popular chat apps like WhatsApp and Discord communicate behind the scenes using TCP. This beginner-friendly guide explains TCP Listeners and Streams using simple analogies and practical Python examples you can try yourself.
Where should I host my portfolio?
In this blog post, I compare Azure, AWS, and Railway, highlighting why Railway is the best choice for developers, especially students building portfolio websites. Inspired by discussions with my classmates about job readiness. Ready to d...
Green Code for Beginners
Discover how to write green code with practical Python techniques that reduce your software's environmental impact.
The AI Wrapper Trend and Its Impact on Genuine Innovation
Explore the trend of companies falsely claiming AI innovation by simply integrating existing models. Learn to distinguish between genuine AI advancements and superficial applications in this critical examination of the AI industry landsc...
Goodbye WordPress, Hello Ghost
Explore my transition from a custom WordPress site to Ghost for easier blogging. Learn how this migration simplified my content creation process, from frustrating HTML struggles to effortless writing and theme changes.
What are Semantics in Web Design?
Discover how semantic HTML enhances web accessibility, improves SEO, and creates a more inclusive online environment. Learn about key semantic elements and their benefits.
The Alarming Growth of Webpage Sizes: Understanding Causes and Optimization Strategies
Discover the causes of webpage size growth and learn effective optimization strategies to improve performance and sustainability.
Exploring Power Dynamics: Robert Greene's "The 48 Laws of Power"
The intrigue of power is undeniable. It captivates us, motivates us, and sometimes, it even frightens us. Robert Greene’s "The 48 Laws of Power" delves into the heart of this fascination, exploring the intricacies of power dy...
The OpenAPI Standard
A comprehensive guide on the OpenAPI Standard, its importance in API documentation, and some companies that use OpenAPI.
The Importance of Good API Documentation for Stakeholders
Learn why good API documentation and following standards are crucial for stakeholders, enhancing development, integration, and business growth.
Merely Emissions - From University Project to Startup
Discover Arvid Berndtsson's journey from a university project to a startup. Learn about Merely Emissions, a sustainability tool, and the challenges faced along the way.