ZZyVOP·6d agoNode.js Security Checklist for 2026A practical, copy-paste-friendly checklist covering security headers, rate limiting, password hashing, dependency audits, and supply-chain safety for Node.js apps.21 min read·blog.zyvop.com
GGerwin·Nov 2Your Recovery Email Is a Spare Key. Treat It Like One.Your recovery email can reset your main password. Abandoned addresses, lapsed domains, the circular recovery trap and a fifteen-minute audit to close them.9 min read·fuckit.hashnode.dev
SSina Rezaei·Oct 30Your AI Pentester Found an SSRF. Can It Reproduce the Attack?The first scan found an SSRF. The second one didn't. I wouldn't close the finding just yet. The endpoint accepts a URL, fetches the resource, and returns its response. During the first scan, the agent3 min read·sinarezaei.hashnode.dev
ZZyVOP·Oct 27SSL, TLS, and HTTPS Explained: What the Padlock Actually MeansA plain-English guide to SSL, TLS, and HTTPS: how they differ, how a secure connection is built, and what the padlock does and doesn’t tell you.11 min read·blog.zyvop.com
Vvidit·Oct 21The eMudhra Certificate Compromise: The Internet Trusted a Private Key That Was Literally the Number 4Eight eMudhra CA keys were compromised in Oct 2026. Plain-English explanation, timeline, and an action checklist for IT teams and everyday users.8 min read·viditp.hashnode.dev
DDeep Patel·Oct 19How I Deployed a Laravel + React Application to Production on AWSStep-by-step case study: how I set up AWS, a production LAMP stack, security testing, and AWS WAF to deploy a Laravel and React app safely.4 min read·pdeep1506.hashnode.dev2K
DDoogal Simpson·Oct 10Preventing Timing Attacks with Constant-Time ComparisonsLearn how standard string comparisons leak API keys and how to use constant-time comparison functions to secure your Node.js, Python, and Go applications.5 min read·doogal.dev
DDoogal Simpson·Oct 5How Java HashMap Prevents Hash Collision DoS AttacksLearn how Java's HashMap mitigates Hash Collision DoS attacks using treeification to reduce lookup complexity from O(N) to O(log N).5 min read·doogal.dev
LLewis Gilchrist·Oct 1The bot problem that CAPTCHA can't solve, and proof of human canreCAPTCHA asks if you look human. Proof of human asks if you're unique. Different questions, different attack surfaces. Here's why it matters.7 min read·devabkk.hashnode.dev
JJebitok·Sep 22HTTP Request Smuggling (TryHackMe)Link to the challenge on TryHackMe: HTTP Request Smuggling Introduction Introduction HTTP Request Smuggling is a vulnerability that arises when there are mismatches in different web infrastructure com20 min read·sharonjebitok.com
