THE BLOG

Field notes & case studies.

One stream. Field Notes are short and raw; Case Studies are long and structured. Filter below.

AllField NotesCase Studies2 posts
Field Notesecurity 1 min · Jun 2026

Just exploited a bug :D

Got a bug searching source file

Case Studysecurity 6 min · Jun 2026

Hardening a JWT auth flow I shipped too fast

I rolled my own session handling, then attacked it. Three holes I found, and the boring fixes that closed them.