🏷️ Tags

Browse by Topic

AAA

• 🧪 Lab 26 – Reviewing a Payroll Change Through Access-Control Evidence — 2026-09-18
• 📅 Day 230 — Access Control: AAA, IAM, and a Contractor Account Left Active for Four Years — 2026-09-18

AIOS

• 📅 Day 152 — Building an AI Inference Orchestrator With Routing, Retries, and Cost Awareness — 2026-07-02

AISecurity

• Risk Assessment of My AI Agent Workstation Using NIST SP 800-30 — 2026-10-01
• 🧪 Lab 29 – Reviewing an Agent Tool Bundle for Least Privilege — 2026-09-25
• 📅 Day 237 — Reviewing Which Tools a Messaging Agent Can Really Use — 2026-09-25
• 📅 Day 236 — Testing a Messaging Bot's Final Message Instead of the Model's First Output — 2026-09-24

AIagents

• 📅 Day 211 — Building a Relay Between ChatGPT and a Local Coding Agent, Guarded Against Stale and Duplicate Messages — 2026-08-30

AIsecurity

• 🧪 Lab 08 – Auditing What an AI Agent Is Given to Read Before It Acts — 2026-07-15
• 📅 Day 165 — Bounded Context, Better Decisions: Testing AI Agent Memory Without Blind Trust — 2026-07-15

AccessControl

• 🧪 Lab 29 – Reviewing an Agent Tool Bundle for Least Privilege — 2026-09-25
• 📅 Day 237 — Reviewing Which Tools a Messaging Agent Can Really Use — 2026-09-25
• 🧪 Lab 26 – Reviewing a Payroll Change Through Access-Control Evidence — 2026-09-18
• 📅 Day 230 — Access Control: AAA, IAM, and a Contractor Account Left Active for Four Years — 2026-09-18
• 📅 Day 226 — Data Privacy: Lifecycle, Ownership and Handoffs (Google Cybersecurity Certificate) — 2026-09-14
• 📅 Day 220 — Finding That an Empty Tool List Meant 'Inherit Everything', Not 'Deny All' — 2026-09-08
• 📅 Day 216 — Building Remote Power Control for a Mac over Telegram, with Two Sender Checks — 2026-09-04
• 📅 Day 213 — Unifying Agent Memory into One Source-Attributed Retrieval Path — 2026-09-01
• 📅 Day 201 — Locking Down a New WhatsApp Channel: Too Many Tools, Too Much Trust in the Sender — 2026-08-20
• Incident Report: A Chat Message Powered Off My Computer and Nothing Could Say Who Did It — 2026-08-19
• Investigating an Unexplained Remote Shutdown and Locking Down the Power-Off Path — 2026-08-18
• 📅 Day 199 — Investigating an Unexplained Mac Shutdown and Restricting Who Can Power It Off — 2026-08-18
• 📅 Day 193 — Auditing My Phone-Approval Gate: Wrong Identity Key, Silent Policy Hook, Exposed Webhook — 2026-08-12
• 📅 Day 185 — Turning Two Log-Only Guards into Guards That Block — 2026-08-04
• 📅 Day 184 — Fixing a Self-Certification Check That a Unicode Lookalike Could Bypass — 2026-08-03
• 📅 Day 159 — Widening an Agent's Write Scope on Purpose (and Making Its Findings Earn Evidence) — 2026-07-09
• Lab 06 - Linux User and Group Management for Access Control — 2026-07-05
• 📅 Day 155 — Linux User and Group Management as Access Control Practice — 2026-07-05
• 📅 Day 150 — Remote Agent Hub and the Discipline of Honest Feature Labels — 2026-06-30
• 📅 Day 146 — Giving My Local Agent Daemon Real Auth (And Almost Leaking the Token in the 401 Page) — 2026-06-26
• 📅 Day 145 — Productizing a Website Security Mini-Audit, and Finding an Access Gap in My Own Funnel — 2026-06-25
• 📅 Day 136 — Linux Permissions and Authorization: A Google Cybersecurity Certificate Portfolio Activity — 2026-06-16

Accessibility

• WebCheckup Report: External Check-Up of juribuora.com, With Fixes and a Re-Test — 2026-10-01

AdversarialTesting

• 🧪 Lab 17 – Building a Minimal Adversarial Test Harness for a Chat Persona — 2026-08-19
• 📅 Day 200 — Red-Teaming My Own Chatbot: Building an Adversarial Persona Harness — 2026-08-19

AppSec

• 🧪 Lab 21 – Verifying a Local-Only HTTP Service Cannot Be Reached or Misused — 2026-09-05
• Vulnerability Report: DNS-Rebinding SSRF in a Web-Reading Tool for an AI Agent — 2026-08-03
• Building an SSRF Guard for an Agent's Web Fetches, Then Finding Two Bypasses in It — 2026-08-02
• 🧪 Lab 14 – Building and Breaking an SSRF-Safe Fetch Guard — 2026-08-02
• 📅 Day 182 — Building an SSRF-Safe Fetcher for an Agent That Reads the Web — 2026-08-01
• 📅 Day 161 — Hardening the iOS Companion: Untrusted Links, Redacted Errors, and the 'Full Power' Question — 2026-07-11

ApprovalWorkflow

• 📅 Day 193 — Auditing My Phone-Approval Gate: Wrong Identity Key, Silent Policy Hook, Exposed Webhook — 2026-08-12

Approvals

• Supervising an AI Agent: Approvals, Audit Logs and Recovery Before It Acts — 2026-07-17
• 📅 Day 167 — Approval-Gated Automation: Making Privileged Agent Work Accountable — 2026-07-17
• 📅 Day 158 — Gated Autonomy: A Phone Approval Loop Before Any Agent Sends Anything — 2026-07-08

AssetClassification

• 📅 Day 225 — Asset Security: From Inventory to Classification (Google Cybersecurity Certificate) — 2026-09-13

AssetInventory

• 📅 Day 156 — Too Many Projects: Auditing My Own Tool Sprawl Like an Asset Inventory — 2026-07-06

AssetSecurity

• 📅 Day 225 — Asset Security: From Inventory to Classification (Google Cybersecurity Certificate) — 2026-09-13

AttackSurface

• 📅 Day 193 — Auditing My Phone-Approval Gate: Wrong Identity Key, Silent Policy Hook, Exposed Webhook — 2026-08-12

AuditLogging

• Audit Report: Security and Quality Review of My iPhone App for Controlling AI Agents — 2026-07-06

AuditTrail

• 📅 Day 202 — Giving an Agent Write Access to My Calendar Without Giving It Delete — 2026-08-21

Auditability

• Supervising an AI Agent: Approvals, Audit Logs and Recovery Before It Acts — 2026-07-17
• 📅 Day 167 — Approval-Gated Automation: Making Privileged Agent Work Accountable — 2026-07-17

Auditing

• 📅 Day 157 — WebCheckup: Turning the Mini-Audit Into a Real Multilingual Service — 2026-07-07
• 📅 Day 145 — Productizing a Website Security Mini-Audit, and Finding an Access Gap in My Own Funnel — 2026-06-25
• 📅 Day 134 — Building a Website Trust & Security Mini-Audit Service — 2026-06-14

Authentication

• 📅 Day 216 — Building Remote Power Control for a Mac over Telegram, with Two Sender Checks — 2026-09-04
• 📅 Day 209 — Fixing a Watchdog That Mistook a Network Failure for an Expired Credential — 2026-08-28
• Investigating an Unexplained Remote Shutdown and Locking Down the Power-Off Path — 2026-08-18
• 📅 Day 199 — Investigating an Unexplained Mac Shutdown and Restricting Who Can Power It Off — 2026-08-18
• Audit Report: Security and Quality Review of My iPhone App for Controlling AI Agents — 2026-07-06
• Lab 06 - Linux User and Group Management for Access Control — 2026-07-05
• 📅 Day 155 — Linux User and Group Management as Access Control Practice — 2026-07-05
• 📅 Day 147 — 'Build Succeeded' Isn't Proof: Writing a Real UI Test for the Auth Flow — 2026-06-27
• 📅 Day 146 — Giving My Local Agent Daemon Real Auth (And Almost Leaking the Token in the 401 Page) — 2026-06-26

Authorization

• 🧪 Lab 33 – Requiring Confirmation Before a Voice Command Starts an Agent Job — 2026-09-30
• 📅 Day 242 — Testing a Voice Command Path That Starts Coding-Agent Jobs from Telegram — 2026-09-30
• 📅 Day 207 — Gating the One Scheduled Message a Bot May Send Without Being Asked — 2026-08-26
• 🧪 Lab 18 – Allowing Exactly One Reply per Incoming Message — 2026-08-25
• 📅 Day 206 — Requiring a Recent Incoming Message Before a Bot May Reply, Once — 2026-08-25
• Sharing an Agent's Output Files Safely: Expiring Links and Hash Checks — 2026-07-18
• 🧪 Lab 09 – Testing Safe File Delivery: Expiring Links and Hash Checks — 2026-07-18
• 📅 Day 168 — Secure Artifact Delivery: Narrow Links, Verified Bytes, and No Duplicate Sends — 2026-07-18
• Lab 06 - Linux User and Group Management for Access Control — 2026-07-05
• 📅 Day 155 — Linux User and Group Management as Access Control Practice — 2026-07-05

Automation

• 📅 Day 215 — Finding Why a Scheduled Watchdog Never Ran: The Scheduler Rejected a Symlink — 2026-09-03
• 🧪 Lab 19 – Testing an Agent Relay That Refuses Stale or Replayed Messages — 2026-08-30
• 📅 Day 211 — Building a Relay Between ChatGPT and a Local Coding Agent, Guarded Against Stale and Duplicate Messages — 2026-08-30
• 📅 Day 210 — Fixing an Unattended Job That Kept Picking the Same Files and Starved the Rest — 2026-08-29
• 📅 Day 207 — Gating the One Scheduled Message a Bot May Send Without Being Asked — 2026-08-26
• 📅 Day 197 — Adding a Secret Scan Before Every Push to a New Repository — 2026-08-16
• 📅 Day 189 — Retiring Aider Properly, and Making Agents Land Their Own Work — 2026-08-08
• 🧪 Lab 12 – Extracting Text from a Local HTML File Safely — 2026-07-29
• 📅 Day 179 — Extracting Useful Text Without Giving an Agent a Browser — 2026-07-29
• Stopping an AI Agent from Claiming Success It Cannot Prove — 2026-07-21
• 📅 Day 162 — An AI Secretary With a Kill Switch: Calendars, Sender Policy, and Emergency Control — 2026-07-12
• 📅 Day 158 — Gated Autonomy: A Phone Approval Loop Before Any Agent Sends Anything — 2026-07-08
• 📅 Day 132 — Giving a Local LLM Hands: LM Studio, Function Calling, and MCP Servers — 2026-06-12
• 📅 Day 11 — Linux Fundamentals Part 3 (Finale) — 2026-01-31

AutomationSecurity

• 🧪 Lab 34 – Building a Status Importer That Rejects Stale Data and Unproven Completion Claims — 2026-10-01
• 📅 Day 243 — Building a Work Summary Tool That Says 'Not Proven' When Evidence Is Missing — 2026-10-01
• 🧪 Lab 30 – Letting Automation Add a Calendar Event Only When the Message Proves It — 2026-09-27
• 📅 Day 239 — Turning a Message into a Calendar Event Safely: Evidence, Dates, Duplicates — 2026-09-27
• 📅 Day 221 — Handling a Leaked Bot Token: Removing It from Code Is Not Revoking It — 2026-09-09
• Supervising an AI Agent: Approvals, Audit Logs and Recovery Before It Acts — 2026-07-17
• 📅 Day 167 — Approval-Gated Automation: Making Privileged Agent Work Accountable — 2026-07-17

AutonomousAgents

• 📅 Day 153 — Testing Hermes Agent: Strong First Builds, Weak Self-Verification — 2026-07-03

Autonomy

• 📅 Day 176 — Execution Depth Presets, a Broken Build, and Unit Tests for the Small Stuff — 2026-07-26
• 📅 Day 175 — Unattended Delegation: Which Lanes Are Allowed to Work While I Sleep — 2026-07-25
• 📅 Day 142 — Benchmarking an Autonomous Agent: Strong One-Shot Builds, Unreliable Self-Debugging — 2026-06-22

AutonomyControl

• 📅 Day 194 — Stopping the AI Secretary from Writing and Sending Email on Its Own — 2026-08-13

Availability

• 🧪 Lab 31 – Checking a Config Change Actually Reached the Running Service — 2026-09-28
• 📅 Day 240 — Finding a Setting That Was Correct in the File but Wrong in the Running Service — 2026-09-28
• Incident Report: A Service Stopped Answering Because It Never Closed Its Database Connections — 2026-07-23
• 📅 Day 160 — Tailscale Broke My Stack: Node Identity, Hostnames, and Private Services — 2026-07-10

BackupRecovery

• Test Report: Restoring an Encrypted Backup of My AI Agent's Data on a Second Machine — 2026-09-03
• Proving a Backup Restores: Encrypted Off-Host Backup of an Agent's State — 2026-09-02
• 🧪 Lab 20 – Verifying an Encrypted Backup Restore Safely — 2026-09-02
• 📅 Day 214 — Building an Encrypted Off-Host Backup and Proving It Restores on Another Machine — 2026-09-02

Bash

• 🧪 Lab 13 – Finding Linux Commands with Built-in Help — 2026-07-31
• 📅 Day 181 — Using Linux Help Before Making a Change — 2026-07-31
• 🧪 Lab 12 – Extracting Text from a Local HTML File Safely — 2026-07-29
• 📅 Day 179 — Extracting Useful Text Without Giving an Agent a Browser — 2026-07-29
• 🧪 Lab 10 – Isolating Parallel Agents with Git Worktrees — 2026-07-22
• 🧪 Lab 07 – Investigating a False-Positive Alert in a Verification Script — 2026-07-14
• Lab 06 - Linux User and Group Management for Access Control — 2026-07-05
• 📅 Day 39 — Building a Portable Zsh Environment with GitHub Dotfiles — 2026-03-11
• 📅 Day 31 — Regex Behavior and Text Processing Foundations — 2026-02-28
• 📅 Day 30 — Streams, Exit Codes, and Bash Redirection — 2026-02-27
• 🧪 Lab 04 – Endpoint Process Chain Triage with Pipe-Delimited Logs and awk — 2026-02-26
• 📅 Day 29 — SOC Thinking with Linux Pipelines, Pivots, and Process Chains — 2026-02-26
• 📅 Day 28 — Understanding Command Resolution & Filesystem Investigation with find — 2026-02-25
• 📅 Day 27 — Command Resolution, PATH Internals & Shell Environment Investigation — 2026-02-24
• 📅 Day 26 — Effective Shell Part 2: Pipelines, Readline Search, Job Control — 2026-02-22
• 📅 Day 25 — Effective Shell Fundamentals: ls, du, man, Heredocs, Updates, and Docker Permissions — 2026-02-17
• 📅 Day 24 — Tools Lane Setup, Effective Shell, and Shutdown Triage — 2026-02-16
• 📅 Day 23 — Consolidation, Repetition, and Anki-Driven Recall — 2026-02-14
• 📅 Day 22 — stdout, stderr, wget, and Output Validation — 2026-02-13
• 📅 Day 15 — Building a Proper Terminal Logging Pipeline — 2026-02-06
• 📅 Day 14 — Linux Permissions, Identity, Pipes, and Data Processing Fundamentals — 2026-02-05
• 📅 Day 10 — Linux Fundamentals Part 2 (SSH, Filesystem, Permissions) — 2026-01-30
• 📅 Day 9 — Linux Fundamentals Part 1 — 2026-01-27

Benchmarking

• 📅 Day 165 — Bounded Context, Better Decisions: Testing AI Agent Memory Without Blind Trust — 2026-07-15
• 📅 Day 163 — Model Fleet Ops: Migrating the Coding Lane to Gemma and Budgeting Tokens Like a Resource — 2026-07-13
• 📅 Day 151 — Benchmarking My Local LLM Stack Instead of Trusting Vibes — 2026-07-01
• 📅 Day 142 — Benchmarking an Autonomous Agent: Strong One-Shot Builds, Unreliable Self-Debugging — 2026-06-22
• 📅 Day 139 — Benchmarking a Local LLM Coding Stack: Harness, Routing, and Review Findings — 2026-06-19

BlastRadius

• 📅 Day 202 — Giving an Agent Write Access to My Calendar Without Giving It Delete — 2026-08-21

Blogging

• 📅 Day 6 — Polishing Website & Fixing Jekyll Environment — 2026-01-24
• 📅 Day 5 — Blogging with GitHub Pages (Publishing Foundations) — 2026-01-23

Business

• 📅 Day 145 — Productizing a Website Security Mini-Audit, and Finding an Access Gap in My Own Funnel — 2026-06-25
• 📅 Day 134 — Building a Website Trust & Security Mini-Audit Service — 2026-06-14

CICD

• 📅 Day 231 — Vulnerability Management and CI/CD Pipeline Security (Google Cybersecurity Certificate) — 2026-09-19
• 📅 Day 133 — When the Learning Log Breaks: Fixing My Blog's Own Publishing Pipeline — 2026-06-13

CSS

• 📅 Day 8 — Killing Minima Ghosts & Owning the Stack — 2026-01-26

CVE

• 📅 Day 232 — Defense in Depth, CVE, CVSS and the OWASP Top 10 (Google Cybersecurity Certificate) — 2026-09-20

CacheStaleness

• 📅 Day 205 — Fixing a Bot That Said Good Night at 11:24 in the Morning (Stale Cached Time) — 2026-08-24

CapabilityBoundary

• 📅 Day 217 — Connecting Home Assistant to a Mac's Wake and Sleep with Minimal Access — 2026-09-05

ChangeControl

• 📅 Day 189 — Retiring Aider Properly, and Making Agents Land Their Own Work — 2026-08-08
• 🧪 Lab 11 – Assessing a Candidate Tool Before Adoption — 2026-07-27
• 📅 Day 173 — Provenance and Recovery: Knowing Who Changed What, and Undoing It — 2026-07-23
• 🧪 Lab 10 – Isolating Parallel Agents with Git Worktrees — 2026-07-22

ChangeManagement

• 📅 Day 219 — Upgrading a Live Service and Proving Which Commit Is Actually Running — 2026-09-07
• 📅 Day 208 — Adding a Live Trial Because Passing Fixture Tests Did Not Prove a Local Model Was Ready — 2026-08-27
• 📅 Day 204 — Shadow-Testing a New Briefing Feature Before It Reaches Anyone — 2026-08-23
• 📅 Day 203 — A Config Cap That Deadlocked the Gateway, and a Prefix Match That Nearly Revoked the Wrong User — 2026-08-22
• Incident Report: A Chat Message Powered Off My Computer and Nothing Could Say Who Did It — 2026-08-19
• Investigating an Unexplained Remote Shutdown and Locking Down the Power-Off Path — 2026-08-18
• 📅 Day 169 — Why Safe Rollouts Use Feature Flags, Fixtures, and Evidence Gates — 2026-07-19

ChannelSecurity

• 📅 Day 201 — Locking Down a New WhatsApp Channel: Too Many Tools, Too Much Trust in the Sender — 2026-08-20

CodeReview

• 📅 Day 139 — Benchmarking a Local LLM Coding Stack: Harness, Routing, and Review Findings — 2026-06-19

CommandInjection

• Audit Report: Security and Quality Review of My iPhone App for Controlling AI Agents — 2026-07-06

CommandLine

• 🧪 Lab 13 – Finding Linux Commands with Built-in Help — 2026-07-31
• 📅 Day 181 — Using Linux Help Before Making a Change — 2026-07-31
• 🧪 Lab 11 – Assessing a Candidate Tool Before Adoption — 2026-07-27
• 🧪 Lab 10 – Isolating Parallel Agents with Git Worktrees — 2026-07-22
• 🧪 Lab 07 – Investigating a False-Positive Alert in a Verification Script — 2026-07-14
• Lab 06 - Linux User and Group Management for Access Control — 2026-07-05
• 📅 Day 51 — CLI Fundamentals, OS Security, and Understanding How Data is Represented — 2026-03-23
• 📅 Day 45 — Pivot Training for Log Investigation — 2026-03-17
• 📅 Day 42 — SOC Thinking: Turning Logs into Evidence — 2026-03-14
• 📅 Day 41 — Sysmon Telemetry, Lab Automation, and Full Cyber Lab Architecture — 2026-03-13
• 📅 Day 40 — Building a Reproducible Windows SOC VM and Lab Infrastructure — 2026-03-12
• 📅 Day 39 — Building a Portable Zsh Environment with GitHub Dotfiles — 2026-03-11
• 🧪 Lab 05 – SSH Brute-Force Investigation and Automated Defense — 2026-03-10
• 📅 Day 38 — SSH Brute-Force Investigation and Automated Defense — 2026-03-10
• 📅 Day 37 — Ports, Services, and Investigating Listening Processes — 2026-03-09
• 📅 Day 36 — Linux Process Investigation and First Log Exploration — 2026-03-07
• 📅 Day 35 — Linux Process Baselining with ps and top — 2026-03-05
• 📅 Day 31 — Regex Behavior and Text Processing Foundations — 2026-02-28
• 📅 Day 30 — Streams, Exit Codes, and Bash Redirection — 2026-02-27
• 🧪 Lab 04 – Endpoint Process Chain Triage with Pipe-Delimited Logs and awk — 2026-02-26
• 📅 Day 29 — SOC Thinking with Linux Pipelines, Pivots, and Process Chains — 2026-02-26
• 📅 Day 28 — Understanding Command Resolution & Filesystem Investigation with find — 2026-02-25
• 📅 Day 27 — Command Resolution, PATH Internals & Shell Environment Investigation — 2026-02-24
• 📅 Day 26 — Effective Shell Part 2: Pipelines, Readline Search, Job Control — 2026-02-22
• 📅 Day 25 — Effective Shell Fundamentals: ls, du, man, Heredocs, Updates, and Docker Permissions — 2026-02-17
• 📅 Day 24 — Tools Lane Setup, Effective Shell, and Shutdown Triage — 2026-02-16
• 📅 Day 23 — Consolidation, Repetition, and Anki-Driven Recall — 2026-02-14
• 📅 Day 22 — stdout, stderr, wget, and Output Validation — 2026-02-13
• 📅 Day 21 — Building My Detection Engineering Repo + Hardening My Blog Setup — 2026-02-12
• 📅 Day 20 — Auditing a Media Archive and Taking Control of Backups — 2026-02-11
• 🧪 Lab 02 – Real SUID Behavior: Scripts vs Binaries — 2026-02-07
• 📅 Day 15 — Building a Proper Terminal Logging Pipeline — 2026-02-06
• 🧪 Lab 01 – Linux Permissions & Ownership Hands-On Practice — 2026-02-05
• 📅 Day 14 — Linux Permissions, Identity, Pipes, and Data Processing Fundamentals — 2026-02-05
• 📅 Day 13 — SSH and Networking Flow Between VMs — 2026-02-04
• 📅 Day 12 — Linux Files, Permissions, and Safety — 2026-02-02
• 📅 Day 10 — Linux Fundamentals Part 2 (SSH, Filesystem, Permissions) — 2026-01-30
• 📅 Day 9 — Linux Fundamentals Part 1 — 2026-01-27

ConfigurationManagement

• 🧪 Lab 31 – Checking a Config Change Actually Reached the Running Service — 2026-09-28
• 📅 Day 240 — Finding a Setting That Was Correct in the File but Wrong in the Running Service — 2026-09-28

Consistency

• 📅 Day 4 — Recovery Day Logged Honestly — 2026-01-22

ContentExtraction

• 🧪 Lab 12 – Extracting Text from a Local HTML File Safely — 2026-07-29
• 📅 Day 179 — Extracting Useful Text Without Giving an Agent a Browser — 2026-07-29

ContinuousImprovement

• 📅 Day 190 — Closing the Observation Backlog: Two New Skills Born From Real Recurring Bugs — 2026-08-09

ControlPlaneConfusion

• 📅 Day 195 — Fixing a Bug Where Narration Text Was Executed as a Task — 2026-08-14

CostTracking

• 📅 Day 152 — Building an AI Inference Orchestrator With Routing, Retries, and Cost Awareness — 2026-07-02

CredentialHygiene

• 📅 Day 197 — Adding a Secret Scan Before Every Push to a New Repository — 2026-08-16

CredentialRotation

• Incident Report: An Exposed Bot Token, and a Rotation That Reported Success While the Service Was Down — 2026-09-10

Cron

• 📅 Day 11 — Linux Fundamentals Part 3 (Finale) — 2026-01-31

Cryptography

• 🧪 Lab 24 – Decrypting a Caesar Cipher and an AES-256 File in Linux — 2026-09-16
• 📅 Day 228 — How PKI Combines Symmetric and Asymmetric Encryption (Google Cybersecurity Certificate) — 2026-09-16

Cybersecurity

• 🧪 Lab 35 – Write an Incident Handler Journal Entry — 2026-10-02
• 📅 Day 244 — Writing an Incident Handler Journal Entry for a Ransomware Scenario With the Five W’s — 2026-10-02
• WebCheckup Report: External Check-Up of juribuora.com, With Fixes and a Re-Test — 2026-10-01
• Risk Assessment of My AI Agent Workstation Using NIST SP 800-30 — 2026-10-01
• 🧪 Lab 34 – Building a Status Importer That Rejects Stale Data and Unproven Completion Claims — 2026-10-01
• 📅 Day 243 — Building a Work Summary Tool That Says 'Not Proven' When Evidence Is Missing — 2026-10-01
• 🧪 Lab 33 – Requiring Confirmation Before a Voice Command Starts an Agent Job — 2026-09-30
• 📅 Day 242 — Testing a Voice Command Path That Starts Coding-Agent Jobs from Telegram — 2026-09-30
• 🧪 Lab 32 – Building a Status Record That Holds No Message Content and Expires — 2026-09-29
• 📅 Day 241 — Keeping a Daily Status Digest from Becoming a Transcript Archive — 2026-09-29
• 🧪 Lab 31 – Checking a Config Change Actually Reached the Running Service — 2026-09-28
• 📅 Day 240 — Finding a Setting That Was Correct in the File but Wrong in the Running Service — 2026-09-28
• 🧪 Lab 30 – Letting Automation Add a Calendar Event Only When the Message Proves It — 2026-09-27
• 📅 Day 239 — Turning a Message into a Calendar Event Safely: Evidence, Dates, Duplicates — 2026-09-27
• 📅 Day 238 — Extending an Outgoing-Message Guard to Check the Message It Replies To — 2026-09-26
• 🧪 Lab 29 – Reviewing an Agent Tool Bundle for Least Privilege — 2026-09-25
• 📅 Day 237 — Reviewing Which Tools a Messaging Agent Can Really Use — 2026-09-25
• 🧪 Lab 28 – Testing an AI Agent's Final Message, Not Its First Draft — 2026-09-24
• 📅 Day 236 — Testing a Messaging Bot's Final Message Instead of the Model's First Output — 2026-09-24
• Vulnerability Assessment of an Internet-Exposed Database (Training Scenario, NIST SP 800-30) — 2026-09-23
• 📅 Day 235 — Writing a Vulnerability Assessment Report for an Internet-Exposed Database (Simulated) — 2026-09-23
• 🧪 Lab 27 – Assessing a Found USB Drive Without Plugging It In — 2026-09-22
• 📅 Day 234 — Assessing a Found USB Drive as a Data-Leak and Malware Risk — 2026-09-22
• 📅 Day 233 — OSINT: Turning Public Information into Security Intelligence (Google Cybersecurity Certificate) — 2026-09-21
• 📅 Day 232 — Defense in Depth, CVE, CVSS and the OWASP Top 10 (Google Cybersecurity Certificate) — 2026-09-20
• 📅 Day 231 — Vulnerability Management and CI/CD Pipeline Security (Google Cybersecurity Certificate) — 2026-09-19
• 🧪 Lab 26 – Reviewing a Payroll Change Through Access-Control Evidence — 2026-09-18
• 📅 Day 230 — Access Control: AAA, IAM, and a Contractor Account Left Active for Four Years — 2026-09-18
• 🧪 Lab 25 – Proving Two Identical-Looking Files Are Not the Same File — 2026-09-17
• 📅 Day 229 — Hash Functions and Why They Are Not Encryption (Google Cybersecurity Certificate) — 2026-09-17
• 🧪 Lab 24 – Decrypting a Caesar Cipher and an AES-256 File in Linux — 2026-09-16
• 📅 Day 228 — How PKI Combines Symmetric and Asymmetric Encryption (Google Cybersecurity Certificate) — 2026-09-16
• 🧪 Lab 23 – Completing a SQL Join for a Security Incident Investigation — 2026-09-15
• 📅 Day 227 — SQL JOINs for Combining Security Logs (Google Cybersecurity Certificate) — 2026-09-15
• 📅 Day 226 — Data Privacy: Lifecycle, Ownership and Handoffs (Google Cybersecurity Certificate) — 2026-09-14
• 📅 Day 225 — Asset Security: From Inventory to Classification (Google Cybersecurity Certificate) — 2026-09-13
• 🧪 Lab 22 – SQL Time-Window Filtering for Authentication Triage — 2026-09-12
• 📅 Day 224 — SQL for Security Triage: Filtering Logins by Date, Time and Number — 2026-09-12
• 📅 Day 223 — Basing Website Security Claims on What a Real Browser Shows — 2026-09-11
• Incident Report: An Exposed Bot Token, and a Rotation That Reported Success While the Service Was Down — 2026-09-10
• 📅 Day 222 — Moving a Message Safety Filter to the Final Delivery Step — 2026-09-10
• 📅 Day 221 — Handling a Leaked Bot Token: Removing It from Code Is Not Revoking It — 2026-09-09
• 📅 Day 220 — Finding That an Empty Tool List Meant 'Inherit Everything', Not 'Deny All' — 2026-09-08
• 📅 Day 219 — Upgrading a Live Service and Proving Which Commit Is Actually Running — 2026-09-07
• 📅 Day 218 — Verifying That an Agent Really Ran a Skill Before Accepting Its PDF Report — 2026-09-06
• Letting Home Assistant Wake and Sleep a Mac Without Handing It Broad Access — 2026-09-05
• 🧪 Lab 21 – Verifying a Local-Only HTTP Service Cannot Be Reached or Misused — 2026-09-05
• 📅 Day 217 — Connecting Home Assistant to a Mac's Wake and Sleep with Minimal Access — 2026-09-05
• 📅 Day 216 — Building Remote Power Control for a Mac over Telegram, with Two Sender Checks — 2026-09-04
• Test Report: Restoring an Encrypted Backup of My AI Agent's Data on a Second Machine — 2026-09-03
• 📅 Day 215 — Finding Why a Scheduled Watchdog Never Ran: The Scheduler Rejected a Symlink — 2026-09-03
• Proving a Backup Restores: Encrypted Off-Host Backup of an Agent's State — 2026-09-02
• 🧪 Lab 20 – Verifying an Encrypted Backup Restore Safely — 2026-09-02
• 📅 Day 214 — Building an Encrypted Off-Host Backup and Proving It Restores on Another Machine — 2026-09-02
• 📅 Day 213 — Unifying Agent Memory into One Source-Attributed Retrieval Path — 2026-09-01
• 📅 Day 212 — Choosing a Local Coding Model by Measuring Repeated Full Rounds — 2026-08-31
• 🧪 Lab 19 – Testing an Agent Relay That Refuses Stale or Replayed Messages — 2026-08-30
• 📅 Day 211 — Building a Relay Between ChatGPT and a Local Coding Agent, Guarded Against Stale and Duplicate Messages — 2026-08-30
• 📅 Day 210 — Fixing an Unattended Job That Kept Picking the Same Files and Starved the Rest — 2026-08-29
• 📅 Day 209 — Fixing a Watchdog That Mistook a Network Failure for an Expired Credential — 2026-08-28
• 📅 Day 208 — Adding a Live Trial Because Passing Fixture Tests Did Not Prove a Local Model Was Ready — 2026-08-27
• 📅 Day 207 — Gating the One Scheduled Message a Bot May Send Without Being Asked — 2026-08-26
• 🧪 Lab 18 – Allowing Exactly One Reply per Incoming Message — 2026-08-25
• 📅 Day 206 — Requiring a Recent Incoming Message Before a Bot May Reply, Once — 2026-08-25
• 📅 Day 205 — Fixing a Bot That Said Good Night at 11:24 in the Morning (Stale Cached Time) — 2026-08-24
• 📅 Day 204 — Shadow-Testing a New Briefing Feature Before It Reaches Anyone — 2026-08-23
• 📅 Day 203 — A Config Cap That Deadlocked the Gateway, and a Prefix Match That Nearly Revoked the Wrong User — 2026-08-22
• 📅 Day 202 — Giving an Agent Write Access to My Calendar Without Giving It Delete — 2026-08-21
• 📅 Day 201 — Locking Down a New WhatsApp Channel: Too Many Tools, Too Much Trust in the Sender — 2026-08-20
• Incident Report: A Chat Message Powered Off My Computer and Nothing Could Say Who Did It — 2026-08-19
• 🧪 Lab 17 – Building a Minimal Adversarial Test Harness for a Chat Persona — 2026-08-19
• 📅 Day 200 — Red-Teaming My Own Chatbot: Building an Adversarial Persona Harness — 2026-08-19
• Investigating an Unexplained Remote Shutdown and Locking Down the Power-Off Path — 2026-08-18
• 📅 Day 199 — Investigating an Unexplained Mac Shutdown and Restricting Who Can Power It Off — 2026-08-18
• 📅 Day 198 — Testing My Personal-Data Policy Gate with Phone Location — 2026-08-17
• 📅 Day 197 — Adding a Secret Scan Before Every Push to a New Repository — 2026-08-16
• 📅 Day 196 — Four Bugs, One Pattern: Code That Claimed Success Without Proof — 2026-08-15
• 📅 Day 195 — Fixing a Bug Where Narration Text Was Executed as a Task — 2026-08-14
• 📅 Day 194 — Stopping the AI Secretary from Writing and Sending Email on Its Own — 2026-08-13
• 📅 Day 193 — Auditing My Phone-Approval Gate: Wrong Identity Key, Silent Policy Hook, Exposed Webhook — 2026-08-12
• 🧪 Lab 16 – SELECT, FROM, and ORDER BY for Login-Activity Review — 2026-08-11
• 🧪 Lab 15 – Filtering SQL Queries with WHERE and LIKE — 2026-08-11
• 📅 Day 192 — SQL Labs: Filtering with WHERE and LIKE, Sorting with ORDER BY — 2026-08-11
• 📅 Day 191 — Building a Watchdog for Expiring Credentials and Proving the Alarm Fires — 2026-08-10
• 📅 Day 190 — Closing the Observation Backlog: Two New Skills Born From Real Recurring Bugs — 2026-08-09
• 📅 Day 189 — Retiring Aider Properly, and Making Agents Land Their Own Work — 2026-08-08
• 📅 Day 188 — Giving Agent Memory Real Sources, and Routing Trivial Turns to a Small Model — 2026-08-07
• 📅 Day 187 — Making Email Verification Prove Delivery, Not Just Sending — 2026-08-06
• 📅 Day 186 — Fixing a Citation Check That Treated a Matching Hash as Trust — 2026-08-05
• 📅 Day 185 — Turning Two Log-Only Guards into Guards That Block — 2026-08-04
• Vulnerability Report: DNS-Rebinding SSRF in a Web-Reading Tool for an AI Agent — 2026-08-03
• 📅 Day 184 — Fixing a Self-Certification Check That a Unicode Lookalike Could Bypass — 2026-08-03
• Audit Report: Dependency Vulnerabilities in My Self-Hosted AI Agent Gateway, From 76 Findings to Zero — 2026-08-02
• Building an SSRF Guard for an Agent's Web Fetches, Then Finding Two Bypasses in It — 2026-08-02
• 🧪 Lab 14 – Building and Breaking an SSRF-Safe Fetch Guard — 2026-08-02
• 📅 Day 183 — The Fix Had Two More Holes: A Live DNS-Rebinding Bypass Hunt — 2026-08-02
• 📅 Day 182 — Building an SSRF-Safe Fetcher for an Agent That Reads the Web — 2026-08-01
• 🧪 Lab 13 – Finding Linux Commands with Built-in Help — 2026-07-31
• 📅 Day 181 — Using Linux Help Before Making a Change — 2026-07-31
• 📅 Day 180 — Reviewing a Skill Catalog and Installing Only a Small Allowlist — 2026-07-30
• 🧪 Lab 12 – Extracting Text from a Local HTML File Safely — 2026-07-29
• 📅 Day 179 — Extracting Useful Text Without Giving an Agent a Browser — 2026-07-29
• 📅 Day 178 — Testing Whether a Codebase Index Actually Helps Find Evidence — 2026-07-28
• Vetting Third-Party Tools Before Installing Them: Source, Permissions, Removal — 2026-07-27
• 🧪 Lab 11 – Assessing a Candidate Tool Before Adoption — 2026-07-27
• 📅 Day 177 — Choosing Tools by Evidence, Not by Novelty — 2026-07-27
• 📅 Day 176 — Execution Depth Presets, a Broken Build, and Unit Tests for the Small Stuff — 2026-07-26
• 📅 Day 175 — Unattended Delegation: Which Lanes Are Allowed to Work While I Sleep — 2026-07-25
• 📅 Day 174 — Shadow Trials: Letting the New Router Watch Before It Acts — 2026-07-24
• Incident Report: A Service Stopped Answering Because It Never Closed Its Database Connections — 2026-07-23
• 📅 Day 173 — Provenance and Recovery: Knowing Who Changed What, and Undoing It — 2026-07-23
• 🧪 Lab 10 – Isolating Parallel Agents with Git Worktrees — 2026-07-22
• 📅 Day 172 — Parallel Agents Without Collisions: Task Graphs and Git Worktrees — 2026-07-22
• Stopping an AI Agent from Claiming Success It Cannot Prove — 2026-07-21
• 📅 Day 171 — Five Ways My Automation Faked Success (and the Fail-Closed Fixes) — 2026-07-21
• 📅 Day 170 — Making Security Work Clear Without Overselling It — 2026-07-20
• 📅 Day 169 — Why Safe Rollouts Use Feature Flags, Fixtures, and Evidence Gates — 2026-07-19
• Sharing an Agent's Output Files Safely: Expiring Links and Hash Checks — 2026-07-18
• 🧪 Lab 09 – Testing Safe File Delivery: Expiring Links and Hash Checks — 2026-07-18
• 📅 Day 168 — Secure Artifact Delivery: Narrow Links, Verified Bytes, and No Duplicate Sends — 2026-07-18
• Supervising an AI Agent: Approvals, Audit Logs and Recovery Before It Acts — 2026-07-17
• 📅 Day 167 — Approval-Gated Automation: Making Privileged Agent Work Accountable — 2026-07-17
• 📅 Day 166 — Resilient Sessions: What a Torn Journal Taught Me About Safe AI State — 2026-07-16
• 🧪 Lab 08 – Auditing What an AI Agent Is Given to Read Before It Acts — 2026-07-15
• 📅 Day 165 — Bounded Context, Better Decisions: Testing AI Agent Memory Without Blind Trust — 2026-07-15
• 🧪 Lab 07 – Investigating a False-Positive Alert in a Verification Script — 2026-07-14
• 📅 Day 164 — Verifying the Verifier: A False-Positive Streak in My Own Checks — 2026-07-14
• 📅 Day 163 — Model Fleet Ops: Migrating the Coding Lane to Gemma and Budgeting Tokens Like a Resource — 2026-07-13
• 📅 Day 162 — An AI Secretary With a Kill Switch: Calendars, Sender Policy, and Emergency Control — 2026-07-12
• 📅 Day 161 — Hardening the iOS Companion: Untrusted Links, Redacted Errors, and the 'Full Power' Question — 2026-07-11
• 📅 Day 160 — Tailscale Broke My Stack: Node Identity, Hostnames, and Private Services — 2026-07-10
• 📅 Day 159 — Widening an Agent's Write Scope on Purpose (and Making Its Findings Earn Evidence) — 2026-07-09
• 📅 Day 158 — Gated Autonomy: A Phone Approval Loop Before Any Agent Sends Anything — 2026-07-08
• 📅 Day 157 — WebCheckup: Turning the Mini-Audit Into a Real Multilingual Service — 2026-07-07
• Audit Report: Security and Quality Review of My iPhone App for Controlling AI Agents — 2026-07-06
• 📅 Day 156 — Too Many Projects: Auditing My Own Tool Sprawl Like an Asset Inventory — 2026-07-06
• Lab 06 - Linux User and Group Management for Access Control — 2026-07-05
• 📅 Day 155 — Linux User and Group Management as Access Control Practice — 2026-07-05
• 📅 Day 154 — Building a Cybersecurity Glossary Without Breaking My Notes — 2026-07-04
• 📅 Day 153 — Testing Hermes Agent: Strong First Builds, Weak Self-Verification — 2026-07-03
• 📅 Day 152 — Building an AI Inference Orchestrator With Routing, Retries, and Cost Awareness — 2026-07-02
• 📅 Day 151 — Benchmarking My Local LLM Stack Instead of Trusting Vibes — 2026-07-01
• 📅 Day 150 — Remote Agent Hub and the Discipline of Honest Feature Labels — 2026-06-30
• 📅 Day 149 — Turning My iPhone Into a Command Center for Local Agents — 2026-06-29
• 📅 Day 148 — Building Least-Privilege Tool Profiles for My AI Agents (and Finding My Own Risk Scorer Was Inverted) — 2026-06-28
• 📅 Day 147 — 'Build Succeeded' Isn't Proof: Writing a Real UI Test for the Auth Flow — 2026-06-27
• 📅 Day 146 — Giving My Local Agent Daemon Real Auth (And Almost Leaking the Token in the 401 Page) — 2026-06-26
• 📅 Day 145 — Productizing a Website Security Mini-Audit, and Finding an Access Gap in My Own Funnel — 2026-06-25
• 📅 Day 144 — A 348-Term Glossary and the False Positives That Came With It — 2026-06-24
• 📅 Day 143 — Building a Local MITRE ATT&CK Technique Library from My Own Notes — 2026-06-23
• 📅 Day 142 — Benchmarking an Autonomous Agent: Strong One-Shot Builds, Unreliable Self-Debugging — 2026-06-22
• 📅 Day 141 — A Human Memory Layer: The RAG Vault My Agents Write and I Read Anywhere — 2026-06-21
• 📅 Day 140 — AI-OS: Governance, Routing, and a Verification Gateway for My Local Agents — 2026-06-20
• 📅 Day 139 — Benchmarking a Local LLM Coding Stack: Harness, Routing, and Review Findings — 2026-06-19
• 📅 Day 138 — An iOS Companion for My Local Agent, Private by Design — 2026-06-18
• 📅 Day 137 — Running DS4: A Serious Local Model on a Laptop With Limits — 2026-06-17
• 📅 Day 136 — Linux Permissions and Authorization: A Google Cybersecurity Certificate Portfolio Activity — 2026-06-16
• 📅 Day 135 — Auditing My Own Website, Then Fixing What the Report Found — 2026-06-15
• 📅 Day 134 — Building a Website Trust & Security Mini-Audit Service — 2026-06-14
• 📅 Day 133 — When the Learning Log Breaks: Fixing My Blog's Own Publishing Pipeline — 2026-06-13
• 📅 Day 132 — Giving a Local LLM Hands: LM Studio, Function Calling, and MCP Servers — 2026-06-12
• 📅 Day 131 — Project Retrospective: Turning a Real Website Build Into Portfolio Evidence — 2026-06-11
• 📅 Day 130 — Public Website Security Review for a Static Business Site — 2026-06-10
• 📅 Day 129 — Testing, Linting, Type Checking, and Build Validation — 2026-06-09
• 📅 Day 128 — Privacy, Analytics, and Consent-Aware Configuration — 2026-06-08
• 📅 Day 127 — Custom Domain, DNS, and Website Availability — 2026-06-07
• 📅 Day 126 — GitHub Pages Deployment and CI/CD Trust Boundaries — 2026-06-06
• 📅 Day 125 — Image Optimization and Performance as Operational Security — 2026-06-05
• 📅 Day 124 — SEO, Metadata, and Structured Data Without Forgetting Security — 2026-06-04
• 📅 Day 123 — Contact Forms, Validation, and Anti-Spam Thinking — 2026-06-03
• 📅 Day 122 — Mobile-First UX and Customer-Facing Reliability — 2026-06-02
• 📅 Day 121 — Routing, Pages, and Public Attack Surface — 2026-06-01
• 📅 Day 120 — Repository Structure and Operational Hygiene — 2026-05-31
• 📅 Day 119 — React, TypeScript, Vite, and Tailwind as a Production Stack — 2026-05-30
• 📅 Day 118 — Real Client Website Scope and Business Requirements — 2026-05-29
• 📅 Day 117 — macOS Persistence, LaunchDaemons, and Endpoint Triage — 2026-05-28
• 📅 Day 116 — Frontend Architecture, Website Optimization, and GitHub Workflows — 2026-05-27
• 📅 Day 115 — Local AI Models, Coding Agents, and Operational Automation — 2026-05-26
• 📅 Day 114 — OS, Network, and Cloud Hardening — 2026-05-25
• 📅 Day 113 — Sniffing, Spoofing, and Interception Tactics — 2026-05-24
• 📅 Day 112 — DoS, DDoS, SYN Floods, Smurf, and Amplification — 2026-05-23
• 📅 Day 111 — Reading tcpdump-Style Logs and DNS/ICMP Failures — 2026-05-22
• 📅 Day 110 — Enterprise Network Flow and Attack Surface Mapping — 2026-05-21
• 📅 Day 109 — Firewalls, VPNs, Proxies, Security Zones, and CIDR — 2026-05-20
• 📅 Day 108 — Network Protocols, Ports, DNS, HTTP, and Remote Access — 2026-05-19
• 📅 Day 107 — Network Architecture, Cloud Networks, and the TCP/IP Model — 2026-05-18
• 📅 Day 106 — From Risk Management to Portfolio Evidence — 2026-05-17
• 📅 Day 105 — Incident Response Playbooks and Escalation Discipline — 2026-05-16
• 📅 Day 104 — SIEM Logs, Dashboards, and Alert Triage — 2026-05-15
• 📅 Day 103 — Security Frameworks, Controls, NIST CSF, OWASP, and Audits — 2026-05-14
• 📅 Day 102 — Threats, Risks, Vulnerabilities, and the NIST RMF — 2026-05-13
• 📅 Day 101 — Frameworks, Controls, Ethics, and Analyst Tooling — 2026-05-12
• 📅 Day 100 — Attack History, Business Impact, and Security Domains — 2026-05-11
• 📅 Day 99 — Cybersecurity Analyst Mindset and Phishing Triage — 2026-05-10
• 📅 Day 98 — Cookie Banners, Technical Cookies, and Website Privacy Checks — 2026-05-09
• 📅 Day 97 — Privacy-First Website Analytics — 2026-05-08
• 📅 Day 96 — IP Spoofing, Sniffing, and Attack Technique Classification — 2026-05-07
• 📅 Day 95 — DoS, DDoS, Smurf Attacks, and Amplification — 2026-05-06
• 📅 Day 94 — DNS and ICMP Traffic Incident Analysis — 2026-05-05
• 📅 Day 93 — Turning Network Concepts into Incident Reports — 2026-05-04
• 📅 Day 92 — Cybersecurity Roles Across the Attack Surface — 2026-05-03
• 📅 Day 91 — Enterprise Attack Surface and Exploitation Points — 2026-05-02
• 📅 Day 90 — Mapping an Enterprise Network End to End — 2026-05-01
• 📅 Day 89 — From Protocol Memorization to SOC Thinking — 2026-04-30
• 📅 Day 88 — Security Design Principles and OAuth — 2026-04-29
• 📅 Day 87 — Network Protocols, Ports, and SOC Visibility — 2026-04-28
• 📅 Day 86 — Investigating Botnets and IoT Malware — 2026-04-27
• 📅 Day 85 — Understanding Cryptomining Malware — 2026-04-26
• 📅 Day 84 — Lateral Movement Techniques in Enterprise Networks — 2026-04-25
• 📅 Day 83 — The Colonial Pipeline Ransomware Incident — 2026-04-24
• 📅 Day 82 — The NotPetya Cyberweapon and Destructive Malware — 2026-04-23
• 📅 Day 81 — The WannaCry Global Ransomware Outbreak — 2026-04-22
• 📅 Day 80 — Understanding Ransomware Attacks — 2026-04-21
• 📅 Day 79 — Squiblydoo and Rundll32 Script Execution — 2026-04-20
• 📅 Day 78 — Metasploit and Exploitation Frameworks — 2026-04-19
• 📅 Day 77 — PowerShell Empire and Fileless Malware Techniques — 2026-04-18
• 📅 Day 76 — Understanding Cobalt Strike and Post-Exploitation Frameworks — 2026-04-17
• 📅 Day 75 — Understanding Fail2Ban and Automated Defense — 2026-04-16
• 📅 Day 74 — Turning Raw Logs into Patterns and Evidence — 2026-04-15
• 📅 Day 73 — Detecting SSH Brute Force Attacks Using auth.log — 2026-04-14
• 📅 Day 72 — From Commands to Systems Thinking in Cybersecurity — 2026-04-13
• 📅 Day 71 — Verifying Services and Understanding Why Connections Fail — 2026-04-12
• 📅 Day 70 — Mapping IP Addresses to Devices Using ARP — 2026-04-11
• 📅 Day 69 — Understanding NAT vs Bridged Networking in a Lab Environment — 2026-04-10
• 📅 Day 68 — Testing Network Connectivity and Verifying Open Ports — 2026-04-09
• 📅 Day 67 — Investigating SSH Connection Failures and Security Warnings — 2026-04-08
• 📅 Day 66 — Debugging DNS Resolution and Understanding Hosting Mismatch — 2026-04-07
• 📅 Day 65 — Understanding GitHub Authentication, Cloning, and Local Repositories — 2026-04-06
• 📅 Day 64 — AI Agents, Model Context Protocol (MCP), and Security Implications — 2026-04-05
• 📅 Day 63 — Understanding Local LLM Infrastructure and Model Quantization — 2026-04-04
• 📅 Day 62 — Understanding Phishing Attacks and Email Security Controls — 2026-04-03
• 📅 Day 61 — Investigating the Dark Web Safely and Understanding Tor — 2026-04-02
• 📅 Day 60 — Understanding Local AI, Model Hosting, and the Cloud vs Local Debate — 2026-04-01
• 📅 Day 59 — Studying Malware Families: TrickBot, WannaMine and Cryptomining Threats — 2026-03-31
• 📅 Day 58 — DLL Files, Code Signing, and Malware Trust Verification — 2026-03-30
• 📅 Day 57 — LOLBins Deep Dive: Squiblydoo (rundll32 and mshtml Abuse) — 2026-03-29
• 📅 Day 56 — Offensive Security Frameworks and LOLBins — 2026-03-28
• 📅 Day 55 — Typosquatting and Malicious Domain Impersonation — 2026-03-27
• 📅 Day 54 — Investigating Phishing Through Email Gateway Logs — 2026-03-26
• 📅 Day 53 — Understanding Phishing Attacks and Email Security Layers — 2026-03-25
• 📅 Day 52 — First Steps with Python and JavaScript for Security — 2026-03-24
• 📅 Day 50 — Understanding Advanced Persistent Threat (APT) Groups — 2026-03-22
• 📅 Day 49 — Investigating Phishing Infrastructure and Email Attacks — 2026-03-21
• 📅 Day 48 — Detecting Authentication Attacks in System Logs — 2026-03-20
• 📅 Day 47 — Encoded PowerShell and Obfuscated Command Execution — 2026-03-19
• 📅 Day 46 — Understanding LOLBins and Living-off-the-Land Attacks — 2026-03-18
• 📅 Day 45 — Pivot Training for Log Investigation — 2026-03-17
• 📅 Day 44 — Detecting Beaconing and Command-and-Control Traffic — 2026-03-16
• 📅 Day 43 — Detecting Suspicious Process Chains — 2026-03-15
• 📅 Day 42 — SOC Thinking: Turning Logs into Evidence — 2026-03-14
• 📅 Day 41 — Sysmon Telemetry, Lab Automation, and Full Cyber Lab Architecture — 2026-03-13
• 📅 Day 40 — Building a Reproducible Windows SOC VM and Lab Infrastructure — 2026-03-12
• 🧪 Lab 05 – SSH Brute-Force Investigation and Automated Defense — 2026-03-10
• 📅 Day 35 — Linux Process Baselining with ps and top — 2026-03-05
• 📅 Day 33 — Expanding the SOC Learning Roadmap (Identity, Triage, and Hiring Readiness) — 2026-03-02
• 📅 Day 32 — OSI Model, Encapsulation, and Core Network Protocols — 2026-03-01
• 🧪 Lab 04 – Endpoint Process Chain Triage with Pipe-Delimited Logs and awk — 2026-02-26
• 📅 Day 29 — SOC Thinking with Linux Pipelines, Pivots, and Process Chains — 2026-02-26
• 📅 Day 25 — Effective Shell Fundamentals: ls, du, man, Heredocs, Updates, and Docker Permissions — 2026-02-17
• 📅 Day 21 — Building My Detection Engineering Repo + Hardening My Blog Setup — 2026-02-12
• 📅 Day 18 — Intel Mac Dual-Boot Experiments, Architecture Friction, and Lab Prep — 2026-02-09
• 🧪 Lab 03 — HTTP in Practice (Pentester POV) — 2026-02-08
• 📅 Day 17 — Cookies, Sessions, and Trust Boundaries — 2026-02-08
• 🧪 Lab 02 – Real SUID Behavior: Scripts vs Binaries — 2026-02-07
• 📅 Day 16 — Linux Privilege Escalation: SUID, SGID, Sticky Bit (Foundations) — 2026-02-07
• 🧪 Lab 01 – Linux Permissions & Ownership Hands-On Practice — 2026-02-05
• 📅 Day 11 — Linux Fundamentals Part 3 (Finale) — 2026-01-31
• 📅 Day 10 — Linux Fundamentals Part 2 (SSH, Filesystem, Permissions) — 2026-01-30
• 📅 Day 3 — How Websites Work (Big Picture) — 2026-01-21
• 📅 Day 2 — Networking & Web Fundamentals (Consolidation Day) — 2026-01-20
• 📅 Day 1 — Environment Setup & Foundations — 2026-01-19

CybersecurityFoundations

• 📅 Day 10 — Linux Fundamentals Part 2 (SSH, Filesystem, Permissions) — 2026-01-30
• 📅 Day 9 — Linux Fundamentals Part 1 — 2026-01-27

DNS

• 📅 Day 160 — Tailscale Broke My Stack: Node Identity, Hostnames, and Private Services — 2026-07-10
• 📅 Day 111 — Reading tcpdump-Style Logs and DNS/ICMP Failures — 2026-05-22
• 📅 Day 108 — Network Protocols, Ports, DNS, HTTP, and Remote Access — 2026-05-19
• 📅 Day 94 — DNS and ICMP Traffic Incident Analysis — 2026-05-05
• 📅 Day 87 — Network Protocols, Ports, and SOC Visibility — 2026-04-28
• 📅 Day 34 — Networking Mental Model Reset (DNS, TCP/UDP, HTTPS/TLS, QUIC) — 2026-03-03
• 📅 Day 3 — How Websites Work (Big Picture) — 2026-01-21
• 📅 Day 2 — Networking & Web Fundamentals (Consolidation Day) — 2026-01-20

DNSRebinding

• Vulnerability Report: DNS-Rebinding SSRF in a Web-Reading Tool for an AI Agent — 2026-08-03
• Building an SSRF Guard for an Agent's Web Fetches, Then Finding Two Bypasses in It — 2026-08-02
• 🧪 Lab 14 – Building and Breaking an SSRF-Safe Fetch Guard — 2026-08-02
• 📅 Day 183 — The Fix Had Two More Holes: A Live DNS-Rebinding Bypass Hunt — 2026-08-02

DS4

• 📅 Day 151 — Benchmarking My Local LLM Stack Instead of Trusting Vibes — 2026-07-01
• 📅 Day 137 — Running DS4: A Serious Local Model on a Laptop With Limits — 2026-06-17

DailyLog

• 📅 Day 4 — Recovery Day Logged Honestly — 2026-01-22

DataAnalysis

• 🧪 Lab 15 – Filtering SQL Queries with WHERE and LIKE — 2026-08-11
• 📅 Day 192 — SQL Labs: Filtering with WHERE and LIKE, Sorting with ORDER BY — 2026-08-11

DataEnrichment

• 📅 Day 227 — SQL JOINs for Combining Security Logs (Google Cybersecurity Certificate) — 2026-09-15

DataGovernance

• 🧪 Lab 34 – Building a Status Importer That Rejects Stale Data and Unproven Completion Claims — 2026-10-01
• 📅 Day 243 — Building a Work Summary Tool That Says 'Not Proven' When Evidence Is Missing — 2026-10-01
• 🧪 Lab 32 – Building a Status Record That Holds No Message Content and Expires — 2026-09-29
• 📅 Day 241 — Keeping a Daily Status Digest from Becoming a Transcript Archive — 2026-09-29
• 📅 Day 226 — Data Privacy: Lifecycle, Ownership and Handoffs (Google Cybersecurity Certificate) — 2026-09-14
• 📅 Day 141 — A Human Memory Layer: The RAG Vault My Agents Write and I Read Anywhere — 2026-06-21

DataHandling

• 🧪 Lab 12 – Extracting Text from a Local HTML File Safely — 2026-07-29

DataIntegrity

• 🧪 Lab 30 – Letting Automation Add a Calendar Event Only When the Message Proves It — 2026-09-27
• 📅 Day 239 — Turning a Message into a Calendar Event Safely: Evidence, Dates, Duplicates — 2026-09-27
• 🧪 Lab 25 – Proving Two Identical-Looking Files Are Not the Same File — 2026-09-17
• 📅 Day 229 — Hash Functions and Why They Are Not Encryption (Google Cybersecurity Certificate) — 2026-09-17
• 📅 Day 205 — Fixing a Bot That Said Good Night at 11:24 in the Morning (Stale Cached Time) — 2026-08-24
• 📅 Day 202 — Giving an Agent Write Access to My Calendar Without Giving It Delete — 2026-08-21
• 📅 Day 186 — Fixing a Citation Check That Treated a Matching Hash as Trust — 2026-08-05
• 📅 Day 166 — Resilient Sessions: What a Torn Journal Taught Me About Safe AI State — 2026-07-16
• 🧪 Lab 08 – Auditing What an AI Agent Is Given to Read Before It Acts — 2026-07-15
• 📅 Day 165 — Bounded Context, Better Decisions: Testing AI Agent Memory Without Blind Trust — 2026-07-15

DataLifecycle

• 📅 Day 226 — Data Privacy: Lifecycle, Ownership and Handoffs (Google Cybersecurity Certificate) — 2026-09-14

DataPrivacy

• 📅 Day 226 — Data Privacy: Lifecycle, Ownership and Handoffs (Google Cybersecurity Certificate) — 2026-09-14
• 📅 Day 220 — Finding That an Empty Tool List Meant 'Inherit Everything', Not 'Deny All' — 2026-09-08

DataProtection

• Vulnerability Assessment of an Internet-Exposed Database (Training Scenario, NIST SP 800-30) — 2026-09-23
• 📅 Day 235 — Writing a Vulnerability Assessment Report for an Internet-Exposed Database (Simulated) — 2026-09-23
• 🧪 Lab 27 – Assessing a Found USB Drive Without Plugging It In — 2026-09-22
• 📅 Day 234 — Assessing a Found USB Drive as a Data-Leak and Malware Risk — 2026-09-22

DataProvenance

• 📅 Day 213 — Unifying Agent Memory into One Source-Attributed Retrieval Path — 2026-09-01

DataQuality

• 📅 Day 188 — Giving Agent Memory Real Sources, and Routing Trivial Turns to a Small Model — 2026-08-07

DataScoping

• 📅 Day 218 — Verifying That an Agent Really Ran a Skill Before Accepting Its PDF Report — 2026-09-06

DatabaseSecurity

• Vulnerability Assessment of an Internet-Exposed Database (Training Scenario, NIST SP 800-30) — 2026-09-23

Debugging

• 📅 Day 8 — Killing Minima Ghosts & Owning the Stack — 2026-01-26

Decommissioning

• 📅 Day 189 — Retiring Aider Properly, and Making Agents Land Their Own Work — 2026-08-08
• 📅 Day 156 — Too Many Projects: Auditing My Own Tool Sprawl Like an Asset Inventory — 2026-07-06

DefaultDeny

• Incident Report: A Chat Message Powered Off My Computer and Nothing Could Say Who Did It — 2026-08-19
• Investigating an Unexplained Remote Shutdown and Locking Down the Power-Off Path — 2026-08-18
• 📅 Day 199 — Investigating an Unexplained Mac Shutdown and Restricting Who Can Power It Off — 2026-08-18

Defense

• 📅 Day 75 — Understanding Fail2Ban and Automated Defense — 2026-04-16

DefenseInDepth

• 📅 Day 232 — Defense in Depth, CVE, CVSS and the OWASP Top 10 (Google Cybersecurity Certificate) — 2026-09-20
• 📅 Day 222 — Moving a Message Safety Filter to the Final Delivery Step — 2026-09-10
• Letting Home Assistant Wake and Sleep a Mac Without Handing It Broad Access — 2026-09-05
• 📅 Day 217 — Connecting Home Assistant to a Mac's Wake and Sleep with Minimal Access — 2026-09-05
• 📅 Day 195 — Fixing a Bug Where Narration Text Was Executed as a Task — 2026-08-14
• 📅 Day 186 — Fixing a Citation Check That Treated a Matching Hash as Trust — 2026-08-05
• 🧪 Lab 14 – Building and Breaking an SSRF-Safe Fetch Guard — 2026-08-02
• 📅 Day 183 — The Fix Had Two More Holes: A Live DNS-Rebinding Bypass Hunt — 2026-08-02
• 📅 Day 182 — Building an SSRF-Safe Fetcher for an Agent That Reads the Web — 2026-08-01

DeliveryVerification

• 📅 Day 204 — Shadow-Testing a New Briefing Feature Before It Reaches Anyone — 2026-08-23

DependencyManagement

• Audit Report: Dependency Vulnerabilities in My Self-Hosted AI Agent Gateway, From 76 Findings to Zero — 2026-08-02

Deployment

• 📅 Day 215 — Finding Why a Scheduled Watchdog Never Ran: The Scheduler Rejected a Symlink — 2026-09-03

DeploymentSecurity

• 📅 Day 219 — Upgrading a Live Service and Proving Which Commit Is Actually Running — 2026-09-07

DetectionEngineering

• 📅 Day 238 — Extending an Outgoing-Message Guard to Check the Message It Replies To — 2026-09-26
• 🧪 Lab 28 – Testing an AI Agent's Final Message, Not Its First Draft — 2026-09-24
• 📅 Day 236 — Testing a Messaging Bot's Final Message Instead of the Model's First Output — 2026-09-24
• 📅 Day 227 — SQL JOINs for Combining Security Logs (Google Cybersecurity Certificate) — 2026-09-15
• 🧪 Lab 07 – Investigating a False-Positive Alert in a Verification Script — 2026-07-14
• 📅 Day 164 — Verifying the Verifier: A False-Positive Streak in My Own Checks — 2026-07-14
• 📅 Day 143 — Building a Local MITRE ATT&CK Technique Library from My Own Notes — 2026-06-23

DevSecOps

• 📅 Day 231 — Vulnerability Management and CI/CD Pipeline Security (Google Cybersecurity Certificate) — 2026-09-19

DisasterRecovery

• Test Report: Restoring an Encrypted Backup of My AI Agent's Data on a Second Machine — 2026-09-03

Documentation

• 🧪 Lab 13 – Finding Linux Commands with Built-in Help — 2026-07-31
• 📅 Day 181 — Using Linux Help Before Making a Change — 2026-07-31
• 📅 Day 170 — Making Security Work Clear Without Overselling It — 2026-07-20
• 📅 Day 156 — Too Many Projects: Auditing My Own Tool Sprawl Like an Asset Inventory — 2026-07-06
• 📅 Day 131 — Project Retrospective: Turning a Real Website Build Into Portfolio Evidence — 2026-06-11
• 📅 Day 130 — Public Website Security Review for a Static Business Site — 2026-06-10
• 📅 Day 129 — Testing, Linting, Type Checking, and Build Validation — 2026-06-09
• 📅 Day 128 — Privacy, Analytics, and Consent-Aware Configuration — 2026-06-08
• 📅 Day 127 — Custom Domain, DNS, and Website Availability — 2026-06-07
• 📅 Day 126 — GitHub Pages Deployment and CI/CD Trust Boundaries — 2026-06-06
• 📅 Day 125 — Image Optimization and Performance as Operational Security — 2026-06-05
• 📅 Day 124 — SEO, Metadata, and Structured Data Without Forgetting Security — 2026-06-04
• 📅 Day 123 — Contact Forms, Validation, and Anti-Spam Thinking — 2026-06-03
• 📅 Day 122 — Mobile-First UX and Customer-Facing Reliability — 2026-06-02
• 📅 Day 121 — Routing, Pages, and Public Attack Surface — 2026-06-01
• 📅 Day 120 — Repository Structure and Operational Hygiene — 2026-05-31
• 📅 Day 119 — React, TypeScript, Vite, and Tailwind as a Production Stack — 2026-05-30
• 📅 Day 118 — Real Client Website Scope and Business Requirements — 2026-05-29
• 📅 Day 117 — macOS Persistence, LaunchDaemons, and Endpoint Triage — 2026-05-28
• 📅 Day 116 — Frontend Architecture, Website Optimization, and GitHub Workflows — 2026-05-27
• 📅 Day 115 — Local AI Models, Coding Agents, and Operational Automation — 2026-05-26
• 📅 Day 114 — OS, Network, and Cloud Hardening — 2026-05-25
• 📅 Day 106 — From Risk Management to Portfolio Evidence — 2026-05-17
• 📅 Day 105 — Incident Response Playbooks and Escalation Discipline — 2026-05-16
• 📅 Day 104 — SIEM Logs, Dashboards, and Alert Triage — 2026-05-15
• 📅 Day 103 — Security Frameworks, Controls, NIST CSF, OWASP, and Audits — 2026-05-14
• 📅 Day 102 — Threats, Risks, Vulnerabilities, and the NIST RMF — 2026-05-13
• 📅 Day 101 — Frameworks, Controls, Ethics, and Analyst Tooling — 2026-05-12
• 📅 Day 100 — Attack History, Business Impact, and Security Domains — 2026-05-11
• 📅 Day 99 — Cybersecurity Analyst Mindset and Phishing Triage — 2026-05-10
• 📅 Day 98 — Cookie Banners, Technical Cookies, and Website Privacy Checks — 2026-05-09
• 📅 Day 97 — Privacy-First Website Analytics — 2026-05-08
• 📅 Day 33 — Expanding the SOC Learning Roadmap (Identity, Triage, and Hiring Readiness) — 2026-03-02
• 📅 Day 20 — Auditing a Media Archive and Taking Control of Backups — 2026-02-11
• 📅 Day 7 — Workflow Ergonomics & GitHub Pages Stabilization — 2026-01-25
• 📅 Day 5 — Blogging with GitHub Pages (Publishing Foundations) — 2026-01-23

EmailSecurity

• WebCheckup Report: External Check-Up of juribuora.com, With Fixes and a Re-Test — 2026-10-01
• 📅 Day 194 — Stopping the AI Secretary from Writing and Sending Email on Its Own — 2026-08-13
• 📅 Day 187 — Making Email Verification Prove Delivery, Not Just Sending — 2026-08-06
• 📅 Day 162 — An AI Secretary With a Kill Switch: Calendars, Sender Policy, and Emergency Control — 2026-07-12
• 📅 Day 158 — Gated Autonomy: A Phone Approval Loop Before Any Agent Sends Anything — 2026-07-08

Encryption

• 📅 Day 228 — How PKI Combines Symmetric and Asymmetric Encryption (Google Cybersecurity Certificate) — 2026-09-16
• Test Report: Restoring an Encrypted Backup of My AI Agent's Data on a Second Machine — 2026-09-03
• Proving a Backup Restores: Encrypted Off-Host Backup of an Agent's State — 2026-09-02
• 🧪 Lab 20 – Verifying an Encrypted Backup Restore Safely — 2026-09-02
• 📅 Day 214 — Building an Encrypted Off-Host Backup and Proving It Restores on Another Machine — 2026-09-02

EndpointSecurity

• 🧪 Lab 27 – Assessing a Found USB Drive Without Plugging It In — 2026-09-22

Evaluation

• 📅 Day 174 — Shadow Trials: Letting the New Router Watch Before It Acts — 2026-07-24

Evidence

• 🧪 Lab 34 – Building a Status Importer That Rejects Stale Data and Unproven Completion Claims — 2026-10-01
• 📅 Day 243 — Building a Work Summary Tool That Says 'Not Proven' When Evidence Is Missing — 2026-10-01
• 📅 Day 236 — Testing a Messaging Bot's Final Message Instead of the Model's First Output — 2026-09-24
• 📅 Day 178 — Testing Whether a Codebase Index Actually Helps Find Evidence — 2026-07-28

EvidenceBased

• 📅 Day 187 — Making Email Verification Prove Delivery, Not Just Sending — 2026-08-06
• 📅 Day 174 — Shadow Trials: Letting the New Router Watch Before It Acts — 2026-07-24

EvidenceGating

• 📅 Day 223 — Basing Website Security Claims on What a Real Browser Shows — 2026-09-11
• 📅 Day 218 — Verifying That an Agent Really Ran a Skill Before Accepting Its PDF Report — 2026-09-06
• 📅 Day 204 — Shadow-Testing a New Briefing Feature Before It Reaches Anyone — 2026-08-23

FailClosed

• 📅 Day 218 — Verifying That an Agent Really Ran a Skill Before Accepting Its PDF Report — 2026-09-06
• 📅 Day 203 — A Config Cap That Deadlocked the Gateway, and a Prefix Match That Nearly Revoked the Wrong User — 2026-08-22
• 📅 Day 196 — Four Bugs, One Pattern: Code That Claimed Success Without Proof — 2026-08-15
• 📅 Day 191 — Building a Watchdog for Expiring Credentials and Proving the Alarm Fires — 2026-08-10
• 📅 Day 185 — Turning Two Log-Only Guards into Guards That Block — 2026-08-04
• Stopping an AI Agent from Claiming Success It Cannot Prove — 2026-07-21
• 📅 Day 171 — Five Ways My Automation Faked Success (and the Fail-Closed Fixes) — 2026-07-21

FailSafe

• 📅 Day 193 — Auditing My Phone-Approval Gate: Wrong Identity Key, Silent Policy Hook, Exposed Webhook — 2026-08-12
• 📅 Day 162 — An AI Secretary With a Kill Switch: Calendars, Sender Policy, and Emergency Control — 2026-07-12

FalseAssurance

• 📅 Day 218 — Verifying That an Agent Really Ran a Skill Before Accepting Its PDF Report — 2026-09-06
• 📅 Day 196 — Four Bugs, One Pattern: Code That Claimed Success Without Proof — 2026-08-15

FalsePositives

• 🧪 Lab 07 – Investigating a False-Positive Alert in a Verification Script — 2026-07-14
• 📅 Day 164 — Verifying the Verifier: A False-Positive Streak in My Own Checks — 2026-07-14

FeatureFlags

• 📅 Day 169 — Why Safe Rollouts Use Feature Flags, Fixtures, and Evidence Gates — 2026-07-19

FilePermissions

• 📅 Day 10 — Linux Fundamentals Part 2 (SSH, Filesystem, Permissions) — 2026-01-30

FileSystem

• 📅 Day 28 — Understanding Command Resolution & Filesystem Investigation with find — 2026-02-25
• 📅 Day 27 — Command Resolution, PATH Internals & Shell Environment Investigation — 2026-02-24
• 📅 Day 25 — Effective Shell Fundamentals: ls, du, man, Heredocs, Updates, and Docker Permissions — 2026-02-17
• 📅 Day 24 — Tools Lane Setup, Effective Shell, and Shutdown Triage — 2026-02-16
• 📅 Day 20 — Auditing a Media Archive and Taking Control of Backups — 2026-02-11
• 📅 Day 19 — Bare-Metal Dual Boot on Intel Mac (macOS + Ubuntu Server) — 2026-02-10
• 🧪 Lab 01 – Linux Permissions & Ownership Hands-On Practice — 2026-02-05
• 📅 Day 14 — Linux Permissions, Identity, Pipes, and Data Processing Fundamentals — 2026-02-05
• 📅 Day 12 — Linux Files, Permissions, and Safety — 2026-02-02
• 📅 Day 9 — Linux Fundamentals Part 1 — 2026-01-27

Forensics

• 📅 Day 173 — Provenance and Recovery: Knowing Who Changed What, and Undoing It — 2026-07-23

Foundations

• 📅 Day 32 — OSI Model, Encapsulation, and Core Network Protocols — 2026-03-01
• 🧪 Lab 03 — HTTP in Practice (Pentester POV) — 2026-02-08
• 📅 Day 17 — Cookies, Sessions, and Trust Boundaries — 2026-02-08

Git

• 🧪 Lab 10 – Isolating Parallel Agents with Git Worktrees — 2026-07-22
• 📅 Day 172 — Parallel Agents Without Collisions: Task Graphs and Git Worktrees — 2026-07-22
• 🧪 Lab 07 – Investigating a False-Positive Alert in a Verification Script — 2026-07-14

GitHub

• 📅 Day 5 — Blogging with GitHub Pages (Publishing Foundations) — 2026-01-23

GitHubPages

• 📅 Day 135 — Auditing My Own Website, Then Fixing What the Report Found — 2026-06-15
• 📅 Day 133 — When the Learning Log Breaks: Fixing My Blog's Own Publishing Pipeline — 2026-06-13
• 📅 Day 131 — Project Retrospective: Turning a Real Website Build Into Portfolio Evidence — 2026-06-11
• 📅 Day 130 — Public Website Security Review for a Static Business Site — 2026-06-10
• 📅 Day 129 — Testing, Linting, Type Checking, and Build Validation — 2026-06-09
• 📅 Day 128 — Privacy, Analytics, and Consent-Aware Configuration — 2026-06-08
• 📅 Day 127 — Custom Domain, DNS, and Website Availability — 2026-06-07
• 📅 Day 126 — GitHub Pages Deployment and CI/CD Trust Boundaries — 2026-06-06
• 📅 Day 125 — Image Optimization and Performance as Operational Security — 2026-06-05
• 📅 Day 124 — SEO, Metadata, and Structured Data Without Forgetting Security — 2026-06-04
• 📅 Day 123 — Contact Forms, Validation, and Anti-Spam Thinking — 2026-06-03
• 📅 Day 122 — Mobile-First UX and Customer-Facing Reliability — 2026-06-02
• 📅 Day 121 — Routing, Pages, and Public Attack Surface — 2026-06-01
• 📅 Day 120 — Repository Structure and Operational Hygiene — 2026-05-31
• 📅 Day 119 — React, TypeScript, Vite, and Tailwind as a Production Stack — 2026-05-30
• 📅 Day 118 — Real Client Website Scope and Business Requirements — 2026-05-29
• 📅 Day 116 — Frontend Architecture, Website Optimization, and GitHub Workflows — 2026-05-27
• 📅 Day 66 — Debugging DNS Resolution and Understanding Hosting Mismatch — 2026-04-07
• 📅 Day 65 — Understanding GitHub Authentication, Cloning, and Local Repositories — 2026-04-06
• 📅 Day 39 — Building a Portable Zsh Environment with GitHub Dotfiles — 2026-03-11
• 📅 Day 21 — Building My Detection Engineering Repo + Hardening My Blog Setup — 2026-02-12
• 📅 Day 8 — Killing Minima Ghosts & Owning the Stack — 2026-01-26
• 📅 Day 7 — Workflow Ergonomics & GitHub Pages Stabilization — 2026-01-25
• 📅 Day 6 — Polishing Website & Fixing Jekyll Environment — 2026-01-24
• 📅 Day 5 — Blogging with GitHub Pages (Publishing Foundations) — 2026-01-23

Glossary

• 📅 Day 154 — Building a Cybersecurity Glossary Without Breaking My Notes — 2026-07-04

GoogleCert

• 🧪 Lab 27 – Assessing a Found USB Drive Without Plugging It In — 2026-09-22
• 📅 Day 234 — Assessing a Found USB Drive as a Data-Leak and Malware Risk — 2026-09-22
• 📅 Day 233 — OSINT: Turning Public Information into Security Intelligence (Google Cybersecurity Certificate) — 2026-09-21
• 📅 Day 232 — Defense in Depth, CVE, CVSS and the OWASP Top 10 (Google Cybersecurity Certificate) — 2026-09-20
• 📅 Day 231 — Vulnerability Management and CI/CD Pipeline Security (Google Cybersecurity Certificate) — 2026-09-19
• 🧪 Lab 26 – Reviewing a Payroll Change Through Access-Control Evidence — 2026-09-18
• 📅 Day 230 — Access Control: AAA, IAM, and a Contractor Account Left Active for Four Years — 2026-09-18
• 🧪 Lab 25 – Proving Two Identical-Looking Files Are Not the Same File — 2026-09-17
• 📅 Day 229 — Hash Functions and Why They Are Not Encryption (Google Cybersecurity Certificate) — 2026-09-17
• 🧪 Lab 24 – Decrypting a Caesar Cipher and an AES-256 File in Linux — 2026-09-16
• 📅 Day 228 — How PKI Combines Symmetric and Asymmetric Encryption (Google Cybersecurity Certificate) — 2026-09-16
• 🧪 Lab 23 – Completing a SQL Join for a Security Incident Investigation — 2026-09-15
• 📅 Day 227 — SQL JOINs for Combining Security Logs (Google Cybersecurity Certificate) — 2026-09-15
• 🧪 Lab 16 – SELECT, FROM, and ORDER BY for Login-Activity Review — 2026-08-11
• 🧪 Lab 15 – Filtering SQL Queries with WHERE and LIKE — 2026-08-11
• 📅 Day 192 — SQL Labs: Filtering with WHERE and LIKE, Sorting with ORDER BY — 2026-08-11
• 📅 Day 136 — Linux Permissions and Authorization: A Google Cybersecurity Certificate Portfolio Activity — 2026-06-16

GoogleCybersecurityCertificate

• 🧪 Lab 22 – SQL Time-Window Filtering for Authentication Triage — 2026-09-12
• 📅 Day 224 — SQL for Security Triage: Filtering Logins by Date, Time and Number — 2026-09-12
• 🧪 Lab 13 – Finding Linux Commands with Built-in Help — 2026-07-31
• 📅 Day 181 — Using Linux Help Before Making a Change — 2026-07-31
• 📅 Day 155 — Linux User and Group Management as Access Control Practice — 2026-07-05

Governance

• 📅 Day 190 — Closing the Observation Backlog: Two New Skills Born From Real Recurring Bugs — 2026-08-09
• 📅 Day 189 — Retiring Aider Properly, and Making Agents Land Their Own Work — 2026-08-08
• 📅 Day 156 — Too Many Projects: Auditing My Own Tool Sprawl Like an Asset Inventory — 2026-07-06
• 📅 Day 140 — AI-OS: Governance, Routing, and a Verification Gateway for My Local Agents — 2026-06-20

Grep

• 📅 Day 9 — Linux Fundamentals Part 1 — 2026-01-27

HTTP

• 📅 Day 108 — Network Protocols, Ports, DNS, HTTP, and Remote Access — 2026-05-19
• 📅 Day 98 — Cookie Banners, Technical Cookies, and Website Privacy Checks — 2026-05-09
• 📅 Day 97 — Privacy-First Website Analytics — 2026-05-08
• 📅 Day 34 — Networking Mental Model Reset (DNS, TCP/UDP, HTTPS/TLS, QUIC) — 2026-03-03
• 🧪 Lab 03 — HTTP in Practice (Pentester POV) — 2026-02-08
• 📅 Day 17 — Cookies, Sessions, and Trust Boundaries — 2026-02-08
• 📅 Day 3 — How Websites Work (Big Picture) — 2026-01-21
• 📅 Day 2 — Networking & Web Fundamentals (Consolidation Day) — 2026-01-20

Hardening

• 📅 Day 135 — Auditing My Own Website, Then Fixing What the Report Found — 2026-06-15

Hashing

• 🧪 Lab 25 – Proving Two Identical-Looking Files Are Not the Same File — 2026-09-17
• 📅 Day 229 — Hash Functions and Why They Are Not Encryption (Google Cybersecurity Certificate) — 2026-09-17
• 📅 Day 186 — Fixing a Citation Check That Treated a Matching Hash as Trust — 2026-08-05
• Sharing an Agent's Output Files Safely: Expiring Links and Hash Checks — 2026-07-18
• 🧪 Lab 09 – Testing Safe File Delivery: Expiring Links and Hash Checks — 2026-07-18
• 📅 Day 168 — Secure Artifact Delivery: Narrow Links, Verified Bytes, and No Duplicate Sends — 2026-07-18

Hermes

• 📅 Day 153 — Testing Hermes Agent: Strong First Builds, Weak Self-Verification — 2026-07-03

HomeAutomation

• Letting Home Assistant Wake and Sleep a Mac Without Handing It Broad Access — 2026-09-05
• 📅 Day 217 — Connecting Home Assistant to a Mac's Wake and Sleep with Minimal Access — 2026-09-05

Homebrew

• 📅 Day 6 — Polishing Website & Fixing Jekyll Environment — 2026-01-24

HumanInTheLoop

• 🧪 Lab 33 – Requiring Confirmation Before a Voice Command Starts an Agent Job — 2026-09-30
• 📅 Day 242 — Testing a Voice Command Path That Starts Coding-Agent Jobs from Telegram — 2026-09-30
• 📅 Day 194 — Stopping the AI Secretary from Writing and Sending Email on Its Own — 2026-08-13
• 📅 Day 158 — Gated Autonomy: A Phone Approval Loop Before Any Agent Sends Anything — 2026-07-08

IAM

• 🧪 Lab 26 – Reviewing a Payroll Change Through Access-Control Evidence — 2026-09-18
• 📅 Day 230 — Access Control: AAA, IAM, and a Contractor Account Left Active for Four Years — 2026-09-18

IdentityResolution

• 📅 Day 203 — A Config Cap That Deadlocked the Gateway, and a Prefix Match That Nearly Revoked the Wrong User — 2026-08-22

IdentitySpoofing

• 📅 Day 184 — Fixing a Self-Certification Check That a Unicode Lookalike Could Bypass — 2026-08-03

IdentityVerification

• 📅 Day 201 — Locking Down a New WhatsApp Channel: Too Many Tools, Too Much Trust in the Sender — 2026-08-20

IncidentResponse

• 🧪 Lab 35 – Write an Incident Handler Journal Entry — 2026-10-02
• 📅 Day 244 — Writing an Incident Handler Journal Entry for a Ransomware Scenario With the Five W’s — 2026-10-02
• Incident Report: An Exposed Bot Token, and a Rotation That Reported Success While the Service Was Down — 2026-09-10
• 📅 Day 221 — Handling a Leaked Bot Token: Removing It from Code Is Not Revoking It — 2026-09-09
• Proving a Backup Restores: Encrypted Off-Host Backup of an Agent's State — 2026-09-02
• 🧪 Lab 20 – Verifying an Encrypted Backup Restore Safely — 2026-09-02
• 📅 Day 214 — Building an Encrypted Off-Host Backup and Proving It Restores on Another Machine — 2026-09-02
• 📅 Day 209 — Fixing a Watchdog That Mistook a Network Failure for an Expired Credential — 2026-08-28
• Incident Report: A Chat Message Powered Off My Computer and Nothing Could Say Who Did It — 2026-08-19
• Incident Report: A Service Stopped Answering Because It Never Closed Its Database Connections — 2026-07-23

IndependentReview

• Vulnerability Report: DNS-Rebinding SSRF in a Web-Reading Tool for an AI Agent — 2026-08-03
• 📅 Day 184 — Fixing a Self-Certification Check That a Unicode Lookalike Could Bypass — 2026-08-03
• Building an SSRF Guard for an Agent's Web Fetches, Then Finding Two Bypasses in It — 2026-08-02
• 📅 Day 183 — The Fix Had Two More Holes: A Live DNS-Rebinding Bypass Hunt — 2026-08-02

InformationSecurity

• 📅 Day 178 — Testing Whether a Codebase Index Actually Helps Find Evidence — 2026-07-28

InputValidation

• 📅 Day 195 — Fixing a Bug Where Narration Text Was Executed as a Task — 2026-08-14
• 🧪 Lab 14 – Building and Breaking an SSRF-Safe Fetch Guard — 2026-08-02
• 📅 Day 182 — Building an SSRF-Safe Fetcher for an Agent That Reads the Web — 2026-08-01

Integrity

• 📅 Day 215 — Finding Why a Scheduled Watchdog Never Ran: The Scheduler Rejected a Symlink — 2026-09-03
• 🧪 Lab 19 – Testing an Agent Relay That Refuses Stale or Replayed Messages — 2026-08-30
• Stopping an AI Agent from Claiming Success It Cannot Prove — 2026-07-21
• Sharing an Agent's Output Files Safely: Expiring Links and Hash Checks — 2026-07-18
• 🧪 Lab 09 – Testing Safe File Delivery: Expiring Links and Hash Checks — 2026-07-18
• 📅 Day 168 — Secure Artifact Delivery: Narrow Links, Verified Bytes, and No Duplicate Sends — 2026-07-18

Isolation

• 🧪 Lab 10 – Isolating Parallel Agents with Git Worktrees — 2026-07-22
• 📅 Day 172 — Parallel Agents Without Collisions: Task Graphs and Git Worktrees — 2026-07-22

JavaScript

• 🧪 Lab 18 – Allowing Exactly One Reply per Incoming Message — 2026-08-25

Jekyll

• 📅 Day 133 — When the Learning Log Breaks: Fixing My Blog's Own Publishing Pipeline — 2026-06-13
• 📅 Day 21 — Building My Detection Engineering Repo + Hardening My Blog Setup — 2026-02-12
• 📅 Day 8 — Killing Minima Ghosts & Owning the Stack — 2026-01-26
• 📅 Day 7 — Workflow Ergonomics & GitHub Pages Stabilization — 2026-01-25
• 📅 Day 6 — Polishing Website & Fixing Jekyll Environment — 2026-01-24
• 📅 Day 5 — Blogging with GitHub Pages (Publishing Foundations) — 2026-01-23

Joins

• 🧪 Lab 23 – Completing a SQL Join for a Security Incident Investigation — 2026-09-15

KaliLinux

• 📅 Day 1 — Environment Setup & Foundations — 2026-01-19

KnowledgeManagement

• 📅 Day 190 — Closing the Observation Backlog: Two New Skills Born From Real Recurring Bugs — 2026-08-09
• 📅 Day 154 — Building a Cybersecurity Glossary Without Breaking My Notes — 2026-07-04
• 📅 Day 144 — A 348-Term Glossary and the False Positives That Came With It — 2026-06-24
• 📅 Day 143 — Building a Local MITRE ATT&CK Technique Library from My Own Notes — 2026-06-23
• 📅 Day 141 — A Human Memory Layer: The RAG Vault My Agents Write and I Read Anywhere — 2026-06-21

LLMSecurity

• 🧪 Lab 17 – Building a Minimal Adversarial Test Harness for a Chat Persona — 2026-08-19
• 📅 Day 200 — Red-Teaming My Own Chatbot: Building an Adversarial Persona Harness — 2026-08-19

LMStudio

• 📅 Day 151 — Benchmarking My Local LLM Stack Instead of Trusting Vibes — 2026-07-01

Labs

• 🧪 Lab 35 – Write an Incident Handler Journal Entry — 2026-10-02
• 🧪 Lab 34 – Building a Status Importer That Rejects Stale Data and Unproven Completion Claims — 2026-10-01
• 🧪 Lab 33 – Requiring Confirmation Before a Voice Command Starts an Agent Job — 2026-09-30
• 🧪 Lab 32 – Building a Status Record That Holds No Message Content and Expires — 2026-09-29
• 🧪 Lab 31 – Checking a Config Change Actually Reached the Running Service — 2026-09-28
• 🧪 Lab 30 – Letting Automation Add a Calendar Event Only When the Message Proves It — 2026-09-27
• 🧪 Lab 29 – Reviewing an Agent Tool Bundle for Least Privilege — 2026-09-25
• 🧪 Lab 28 – Testing an AI Agent's Final Message, Not Its First Draft — 2026-09-24
• 🧪 Lab 27 – Assessing a Found USB Drive Without Plugging It In — 2026-09-22
• 🧪 Lab 26 – Reviewing a Payroll Change Through Access-Control Evidence — 2026-09-18
• 🧪 Lab 25 – Proving Two Identical-Looking Files Are Not the Same File — 2026-09-17
• 🧪 Lab 24 – Decrypting a Caesar Cipher and an AES-256 File in Linux — 2026-09-16
• 🧪 Lab 23 – Completing a SQL Join for a Security Incident Investigation — 2026-09-15
• 🧪 Lab 22 – SQL Time-Window Filtering for Authentication Triage — 2026-09-12
• 🧪 Lab 21 – Verifying a Local-Only HTTP Service Cannot Be Reached or Misused — 2026-09-05
• 🧪 Lab 20 – Verifying an Encrypted Backup Restore Safely — 2026-09-02
• 🧪 Lab 19 – Testing an Agent Relay That Refuses Stale or Replayed Messages — 2026-08-30
• 🧪 Lab 18 – Allowing Exactly One Reply per Incoming Message — 2026-08-25
• 🧪 Lab 17 – Building a Minimal Adversarial Test Harness for a Chat Persona — 2026-08-19
• 🧪 Lab 16 – SELECT, FROM, and ORDER BY for Login-Activity Review — 2026-08-11
• 🧪 Lab 15 – Filtering SQL Queries with WHERE and LIKE — 2026-08-11
• 🧪 Lab 14 – Building and Breaking an SSRF-Safe Fetch Guard — 2026-08-02
• 🧪 Lab 13 – Finding Linux Commands with Built-in Help — 2026-07-31
• 🧪 Lab 12 – Extracting Text from a Local HTML File Safely — 2026-07-29
• 🧪 Lab 11 – Assessing a Candidate Tool Before Adoption — 2026-07-27
• 🧪 Lab 10 – Isolating Parallel Agents with Git Worktrees — 2026-07-22
• 🧪 Lab 09 – Testing Safe File Delivery: Expiring Links and Hash Checks — 2026-07-18
• 🧪 Lab 08 – Auditing What an AI Agent Is Given to Read Before It Acts — 2026-07-15
• 🧪 Lab 07 – Investigating a False-Positive Alert in a Verification Script — 2026-07-14
• Lab 06 - Linux User and Group Management for Access Control — 2026-07-05
• 📅 Day 69 — Understanding NAT vs Bridged Networking in a Lab Environment — 2026-04-10
• 🧪 Lab 05 – SSH Brute-Force Investigation and Automated Defense — 2026-03-10
• 📅 Day 37 — Ports, Services, and Investigating Listening Processes — 2026-03-09
• 📅 Day 36 — Linux Process Investigation and First Log Exploration — 2026-03-07
• 📅 Day 35 — Linux Process Baselining with ps and top — 2026-03-05
• 📅 Day 34 — Networking Mental Model Reset (DNS, TCP/UDP, HTTPS/TLS, QUIC) — 2026-03-03
• 🧪 Lab 04 – Endpoint Process Chain Triage with Pipe-Delimited Logs and awk — 2026-02-26
• 📅 Day 29 — SOC Thinking with Linux Pipelines, Pivots, and Process Chains — 2026-02-26
• 📅 Day 26 — Effective Shell Part 2: Pipelines, Readline Search, Job Control — 2026-02-22
• 📅 Day 19 — Bare-Metal Dual Boot on Intel Mac (macOS + Ubuntu Server) — 2026-02-10
• 🧪 Lab 03 — HTTP in Practice (Pentester POV) — 2026-02-08
• 📅 Day 17 — Cookies, Sessions, and Trust Boundaries — 2026-02-08
• 🧪 Lab 02 – Real SUID Behavior: Scripts vs Binaries — 2026-02-07
• 📅 Day 16 — Linux Privilege Escalation: SUID, SGID, Sticky Bit (Foundations) — 2026-02-07
• 📅 Day 15 — Building a Proper Terminal Logging Pipeline — 2026-02-06
• 🧪 Lab 01 – Linux Permissions & Ownership Hands-On Practice — 2026-02-05

LaunchAgent

• 📅 Day 175 — Unattended Delegation: Which Lanes Are Allowed to Work While I Sleep — 2026-07-25

Launchd

• 📅 Day 215 — Finding Why a Scheduled Watchdog Never Ran: The Scheduler Rejected a Symlink — 2026-09-03

LearningInPublic

• 📅 Day 5 — Blogging with GitHub Pages (Publishing Foundations) — 2026-01-23

LearningProcess

• 🧪 Lab 35 – Write an Incident Handler Journal Entry — 2026-10-02
• 📅 Day 244 — Writing an Incident Handler Journal Entry for a Ransomware Scenario With the Five W’s — 2026-10-02
• 🧪 Lab 34 – Building a Status Importer That Rejects Stale Data and Unproven Completion Claims — 2026-10-01
• 📅 Day 243 — Building a Work Summary Tool That Says 'Not Proven' When Evidence Is Missing — 2026-10-01
• 🧪 Lab 33 – Requiring Confirmation Before a Voice Command Starts an Agent Job — 2026-09-30
• 📅 Day 242 — Testing a Voice Command Path That Starts Coding-Agent Jobs from Telegram — 2026-09-30
• 🧪 Lab 32 – Building a Status Record That Holds No Message Content and Expires — 2026-09-29
• 📅 Day 241 — Keeping a Daily Status Digest from Becoming a Transcript Archive — 2026-09-29
• 🧪 Lab 31 – Checking a Config Change Actually Reached the Running Service — 2026-09-28
• 📅 Day 240 — Finding a Setting That Was Correct in the File but Wrong in the Running Service — 2026-09-28
• 🧪 Lab 30 – Letting Automation Add a Calendar Event Only When the Message Proves It — 2026-09-27
• 📅 Day 239 — Turning a Message into a Calendar Event Safely: Evidence, Dates, Duplicates — 2026-09-27
• 📅 Day 238 — Extending an Outgoing-Message Guard to Check the Message It Replies To — 2026-09-26
• 🧪 Lab 29 – Reviewing an Agent Tool Bundle for Least Privilege — 2026-09-25
• 📅 Day 237 — Reviewing Which Tools a Messaging Agent Can Really Use — 2026-09-25
• 🧪 Lab 28 – Testing an AI Agent's Final Message, Not Its First Draft — 2026-09-24
• 📅 Day 236 — Testing a Messaging Bot's Final Message Instead of the Model's First Output — 2026-09-24
• 📅 Day 235 — Writing a Vulnerability Assessment Report for an Internet-Exposed Database (Simulated) — 2026-09-23
• 🧪 Lab 27 – Assessing a Found USB Drive Without Plugging It In — 2026-09-22
• 📅 Day 234 — Assessing a Found USB Drive as a Data-Leak and Malware Risk — 2026-09-22
• 📅 Day 233 — OSINT: Turning Public Information into Security Intelligence (Google Cybersecurity Certificate) — 2026-09-21
• 📅 Day 232 — Defense in Depth, CVE, CVSS and the OWASP Top 10 (Google Cybersecurity Certificate) — 2026-09-20
• 📅 Day 231 — Vulnerability Management and CI/CD Pipeline Security (Google Cybersecurity Certificate) — 2026-09-19
• 🧪 Lab 26 – Reviewing a Payroll Change Through Access-Control Evidence — 2026-09-18
• 📅 Day 230 — Access Control: AAA, IAM, and a Contractor Account Left Active for Four Years — 2026-09-18
• 🧪 Lab 25 – Proving Two Identical-Looking Files Are Not the Same File — 2026-09-17
• 📅 Day 229 — Hash Functions and Why They Are Not Encryption (Google Cybersecurity Certificate) — 2026-09-17
• 🧪 Lab 24 – Decrypting a Caesar Cipher and an AES-256 File in Linux — 2026-09-16
• 📅 Day 228 — How PKI Combines Symmetric and Asymmetric Encryption (Google Cybersecurity Certificate) — 2026-09-16
• 🧪 Lab 23 – Completing a SQL Join for a Security Incident Investigation — 2026-09-15
• 📅 Day 227 — SQL JOINs for Combining Security Logs (Google Cybersecurity Certificate) — 2026-09-15
• 📅 Day 226 — Data Privacy: Lifecycle, Ownership and Handoffs (Google Cybersecurity Certificate) — 2026-09-14
• 📅 Day 225 — Asset Security: From Inventory to Classification (Google Cybersecurity Certificate) — 2026-09-13
• 🧪 Lab 22 – SQL Time-Window Filtering for Authentication Triage — 2026-09-12
• 📅 Day 224 — SQL for Security Triage: Filtering Logins by Date, Time and Number — 2026-09-12
• 📅 Day 223 — Basing Website Security Claims on What a Real Browser Shows — 2026-09-11
• 📅 Day 222 — Moving a Message Safety Filter to the Final Delivery Step — 2026-09-10
• 📅 Day 221 — Handling a Leaked Bot Token: Removing It from Code Is Not Revoking It — 2026-09-09
• 📅 Day 220 — Finding That an Empty Tool List Meant 'Inherit Everything', Not 'Deny All' — 2026-09-08
• 📅 Day 219 — Upgrading a Live Service and Proving Which Commit Is Actually Running — 2026-09-07
• 📅 Day 218 — Verifying That an Agent Really Ran a Skill Before Accepting Its PDF Report — 2026-09-06
• 🧪 Lab 21 – Verifying a Local-Only HTTP Service Cannot Be Reached or Misused — 2026-09-05
• 📅 Day 217 — Connecting Home Assistant to a Mac's Wake and Sleep with Minimal Access — 2026-09-05
• 📅 Day 216 — Building Remote Power Control for a Mac over Telegram, with Two Sender Checks — 2026-09-04
• 📅 Day 215 — Finding Why a Scheduled Watchdog Never Ran: The Scheduler Rejected a Symlink — 2026-09-03
• 🧪 Lab 20 – Verifying an Encrypted Backup Restore Safely — 2026-09-02
• 📅 Day 214 — Building an Encrypted Off-Host Backup and Proving It Restores on Another Machine — 2026-09-02
• 📅 Day 213 — Unifying Agent Memory into One Source-Attributed Retrieval Path — 2026-09-01
• 📅 Day 212 — Choosing a Local Coding Model by Measuring Repeated Full Rounds — 2026-08-31
• 🧪 Lab 19 – Testing an Agent Relay That Refuses Stale or Replayed Messages — 2026-08-30
• 📅 Day 211 — Building a Relay Between ChatGPT and a Local Coding Agent, Guarded Against Stale and Duplicate Messages — 2026-08-30
• 📅 Day 210 — Fixing an Unattended Job That Kept Picking the Same Files and Starved the Rest — 2026-08-29
• 📅 Day 209 — Fixing a Watchdog That Mistook a Network Failure for an Expired Credential — 2026-08-28
• 📅 Day 208 — Adding a Live Trial Because Passing Fixture Tests Did Not Prove a Local Model Was Ready — 2026-08-27
• 📅 Day 207 — Gating the One Scheduled Message a Bot May Send Without Being Asked — 2026-08-26
• 🧪 Lab 18 – Allowing Exactly One Reply per Incoming Message — 2026-08-25
• 📅 Day 206 — Requiring a Recent Incoming Message Before a Bot May Reply, Once — 2026-08-25
• 📅 Day 205 — Fixing a Bot That Said Good Night at 11:24 in the Morning (Stale Cached Time) — 2026-08-24
• 📅 Day 204 — Shadow-Testing a New Briefing Feature Before It Reaches Anyone — 2026-08-23
• 📅 Day 203 — A Config Cap That Deadlocked the Gateway, and a Prefix Match That Nearly Revoked the Wrong User — 2026-08-22
• 📅 Day 202 — Giving an Agent Write Access to My Calendar Without Giving It Delete — 2026-08-21
• 📅 Day 201 — Locking Down a New WhatsApp Channel: Too Many Tools, Too Much Trust in the Sender — 2026-08-20
• 🧪 Lab 17 – Building a Minimal Adversarial Test Harness for a Chat Persona — 2026-08-19
• 📅 Day 200 — Red-Teaming My Own Chatbot: Building an Adversarial Persona Harness — 2026-08-19
• 📅 Day 199 — Investigating an Unexplained Mac Shutdown and Restricting Who Can Power It Off — 2026-08-18
• 📅 Day 198 — Testing My Personal-Data Policy Gate with Phone Location — 2026-08-17
• 📅 Day 197 — Adding a Secret Scan Before Every Push to a New Repository — 2026-08-16
• 📅 Day 196 — Four Bugs, One Pattern: Code That Claimed Success Without Proof — 2026-08-15
• 📅 Day 195 — Fixing a Bug Where Narration Text Was Executed as a Task — 2026-08-14
• 📅 Day 194 — Stopping the AI Secretary from Writing and Sending Email on Its Own — 2026-08-13
• 📅 Day 193 — Auditing My Phone-Approval Gate: Wrong Identity Key, Silent Policy Hook, Exposed Webhook — 2026-08-12
• 🧪 Lab 16 – SELECT, FROM, and ORDER BY for Login-Activity Review — 2026-08-11
• 🧪 Lab 15 – Filtering SQL Queries with WHERE and LIKE — 2026-08-11
• 📅 Day 192 — SQL Labs: Filtering with WHERE and LIKE, Sorting with ORDER BY — 2026-08-11
• 📅 Day 191 — Building a Watchdog for Expiring Credentials and Proving the Alarm Fires — 2026-08-10
• 📅 Day 190 — Closing the Observation Backlog: Two New Skills Born From Real Recurring Bugs — 2026-08-09
• 📅 Day 189 — Retiring Aider Properly, and Making Agents Land Their Own Work — 2026-08-08
• 📅 Day 188 — Giving Agent Memory Real Sources, and Routing Trivial Turns to a Small Model — 2026-08-07
• 📅 Day 187 — Making Email Verification Prove Delivery, Not Just Sending — 2026-08-06
• 📅 Day 186 — Fixing a Citation Check That Treated a Matching Hash as Trust — 2026-08-05
• 📅 Day 185 — Turning Two Log-Only Guards into Guards That Block — 2026-08-04
• 📅 Day 184 — Fixing a Self-Certification Check That a Unicode Lookalike Could Bypass — 2026-08-03
• 🧪 Lab 14 – Building and Breaking an SSRF-Safe Fetch Guard — 2026-08-02
• 📅 Day 183 — The Fix Had Two More Holes: A Live DNS-Rebinding Bypass Hunt — 2026-08-02
• 📅 Day 182 — Building an SSRF-Safe Fetcher for an Agent That Reads the Web — 2026-08-01
• 🧪 Lab 13 – Finding Linux Commands with Built-in Help — 2026-07-31
• 📅 Day 181 — Using Linux Help Before Making a Change — 2026-07-31
• 📅 Day 180 — Reviewing a Skill Catalog and Installing Only a Small Allowlist — 2026-07-30
• 🧪 Lab 12 – Extracting Text from a Local HTML File Safely — 2026-07-29
• 📅 Day 179 — Extracting Useful Text Without Giving an Agent a Browser — 2026-07-29
• 📅 Day 178 — Testing Whether a Codebase Index Actually Helps Find Evidence — 2026-07-28
• 🧪 Lab 11 – Assessing a Candidate Tool Before Adoption — 2026-07-27
• 📅 Day 177 — Choosing Tools by Evidence, Not by Novelty — 2026-07-27
• 📅 Day 176 — Execution Depth Presets, a Broken Build, and Unit Tests for the Small Stuff — 2026-07-26
• 📅 Day 175 — Unattended Delegation: Which Lanes Are Allowed to Work While I Sleep — 2026-07-25
• 📅 Day 174 — Shadow Trials: Letting the New Router Watch Before It Acts — 2026-07-24
• 📅 Day 173 — Provenance and Recovery: Knowing Who Changed What, and Undoing It — 2026-07-23
• 🧪 Lab 10 – Isolating Parallel Agents with Git Worktrees — 2026-07-22
• 📅 Day 172 — Parallel Agents Without Collisions: Task Graphs and Git Worktrees — 2026-07-22
• 📅 Day 171 — Five Ways My Automation Faked Success (and the Fail-Closed Fixes) — 2026-07-21
• 📅 Day 170 — Making Security Work Clear Without Overselling It — 2026-07-20
• 📅 Day 169 — Why Safe Rollouts Use Feature Flags, Fixtures, and Evidence Gates — 2026-07-19
• 📅 Day 168 — Secure Artifact Delivery: Narrow Links, Verified Bytes, and No Duplicate Sends — 2026-07-18
• 📅 Day 167 — Approval-Gated Automation: Making Privileged Agent Work Accountable — 2026-07-17
• 📅 Day 166 — Resilient Sessions: What a Torn Journal Taught Me About Safe AI State — 2026-07-16
• 📅 Day 165 — Bounded Context, Better Decisions: Testing AI Agent Memory Without Blind Trust — 2026-07-15
• 🧪 Lab 07 – Investigating a False-Positive Alert in a Verification Script — 2026-07-14
• 📅 Day 164 — Verifying the Verifier: A False-Positive Streak in My Own Checks — 2026-07-14
• 📅 Day 163 — Model Fleet Ops: Migrating the Coding Lane to Gemma and Budgeting Tokens Like a Resource — 2026-07-13
• 📅 Day 162 — An AI Secretary With a Kill Switch: Calendars, Sender Policy, and Emergency Control — 2026-07-12
• 📅 Day 161 — Hardening the iOS Companion: Untrusted Links, Redacted Errors, and the 'Full Power' Question — 2026-07-11
• 📅 Day 160 — Tailscale Broke My Stack: Node Identity, Hostnames, and Private Services — 2026-07-10
• 📅 Day 159 — Widening an Agent's Write Scope on Purpose (and Making Its Findings Earn Evidence) — 2026-07-09
• 📅 Day 158 — Gated Autonomy: A Phone Approval Loop Before Any Agent Sends Anything — 2026-07-08
• 📅 Day 157 — WebCheckup: Turning the Mini-Audit Into a Real Multilingual Service — 2026-07-07
• 📅 Day 156 — Too Many Projects: Auditing My Own Tool Sprawl Like an Asset Inventory — 2026-07-06
• Lab 06 - Linux User and Group Management for Access Control — 2026-07-05
• 📅 Day 155 — Linux User and Group Management as Access Control Practice — 2026-07-05
• 📅 Day 154 — Building a Cybersecurity Glossary Without Breaking My Notes — 2026-07-04
• 📅 Day 153 — Testing Hermes Agent: Strong First Builds, Weak Self-Verification — 2026-07-03
• 📅 Day 152 — Building an AI Inference Orchestrator With Routing, Retries, and Cost Awareness — 2026-07-02
• 📅 Day 151 — Benchmarking My Local LLM Stack Instead of Trusting Vibes — 2026-07-01
• 📅 Day 150 — Remote Agent Hub and the Discipline of Honest Feature Labels — 2026-06-30
• 📅 Day 149 — Turning My iPhone Into a Command Center for Local Agents — 2026-06-29
• 📅 Day 148 — Building Least-Privilege Tool Profiles for My AI Agents (and Finding My Own Risk Scorer Was Inverted) — 2026-06-28
• 📅 Day 147 — 'Build Succeeded' Isn't Proof: Writing a Real UI Test for the Auth Flow — 2026-06-27
• 📅 Day 146 — Giving My Local Agent Daemon Real Auth (And Almost Leaking the Token in the 401 Page) — 2026-06-26
• 📅 Day 145 — Productizing a Website Security Mini-Audit, and Finding an Access Gap in My Own Funnel — 2026-06-25
• 📅 Day 144 — A 348-Term Glossary and the False Positives That Came With It — 2026-06-24
• 📅 Day 143 — Building a Local MITRE ATT&CK Technique Library from My Own Notes — 2026-06-23
• 📅 Day 142 — Benchmarking an Autonomous Agent: Strong One-Shot Builds, Unreliable Self-Debugging — 2026-06-22
• 📅 Day 141 — A Human Memory Layer: The RAG Vault My Agents Write and I Read Anywhere — 2026-06-21
• 📅 Day 140 — AI-OS: Governance, Routing, and a Verification Gateway for My Local Agents — 2026-06-20
• 📅 Day 139 — Benchmarking a Local LLM Coding Stack: Harness, Routing, and Review Findings — 2026-06-19
• 📅 Day 138 — An iOS Companion for My Local Agent, Private by Design — 2026-06-18
• 📅 Day 137 — Running DS4: A Serious Local Model on a Laptop With Limits — 2026-06-17
• 📅 Day 136 — Linux Permissions and Authorization: A Google Cybersecurity Certificate Portfolio Activity — 2026-06-16
• 📅 Day 135 — Auditing My Own Website, Then Fixing What the Report Found — 2026-06-15
• 📅 Day 134 — Building a Website Trust & Security Mini-Audit Service — 2026-06-14
• 📅 Day 133 — When the Learning Log Breaks: Fixing My Blog's Own Publishing Pipeline — 2026-06-13
• 📅 Day 132 — Giving a Local LLM Hands: LM Studio, Function Calling, and MCP Servers — 2026-06-12
• 📅 Day 131 — Project Retrospective: Turning a Real Website Build Into Portfolio Evidence — 2026-06-11
• 📅 Day 130 — Public Website Security Review for a Static Business Site — 2026-06-10
• 📅 Day 129 — Testing, Linting, Type Checking, and Build Validation — 2026-06-09
• 📅 Day 128 — Privacy, Analytics, and Consent-Aware Configuration — 2026-06-08
• 📅 Day 127 — Custom Domain, DNS, and Website Availability — 2026-06-07
• 📅 Day 126 — GitHub Pages Deployment and CI/CD Trust Boundaries — 2026-06-06
• 📅 Day 125 — Image Optimization and Performance as Operational Security — 2026-06-05
• 📅 Day 124 — SEO, Metadata, and Structured Data Without Forgetting Security — 2026-06-04
• 📅 Day 123 — Contact Forms, Validation, and Anti-Spam Thinking — 2026-06-03
• 📅 Day 122 — Mobile-First UX and Customer-Facing Reliability — 2026-06-02
• 📅 Day 121 — Routing, Pages, and Public Attack Surface — 2026-06-01
• 📅 Day 120 — Repository Structure and Operational Hygiene — 2026-05-31
• 📅 Day 119 — React, TypeScript, Vite, and Tailwind as a Production Stack — 2026-05-30
• 📅 Day 118 — Real Client Website Scope and Business Requirements — 2026-05-29
• 📅 Day 115 — Local AI Models, Coding Agents, and Operational Automation — 2026-05-26
• 📅 Day 114 — OS, Network, and Cloud Hardening — 2026-05-25
• 📅 Day 113 — Sniffing, Spoofing, and Interception Tactics — 2026-05-24
• 📅 Day 112 — DoS, DDoS, SYN Floods, Smurf, and Amplification — 2026-05-23
• 📅 Day 111 — Reading tcpdump-Style Logs and DNS/ICMP Failures — 2026-05-22
• 📅 Day 110 — Enterprise Network Flow and Attack Surface Mapping — 2026-05-21
• 📅 Day 109 — Firewalls, VPNs, Proxies, Security Zones, and CIDR — 2026-05-20
• 📅 Day 108 — Network Protocols, Ports, DNS, HTTP, and Remote Access — 2026-05-19
• 📅 Day 107 — Network Architecture, Cloud Networks, and the TCP/IP Model — 2026-05-18
• 📅 Day 106 — From Risk Management to Portfolio Evidence — 2026-05-17
• 📅 Day 105 — Incident Response Playbooks and Escalation Discipline — 2026-05-16
• 📅 Day 104 — SIEM Logs, Dashboards, and Alert Triage — 2026-05-15
• 📅 Day 103 — Security Frameworks, Controls, NIST CSF, OWASP, and Audits — 2026-05-14
• 📅 Day 102 — Threats, Risks, Vulnerabilities, and the NIST RMF — 2026-05-13
• 📅 Day 101 — Frameworks, Controls, Ethics, and Analyst Tooling — 2026-05-12
• 📅 Day 100 — Attack History, Business Impact, and Security Domains — 2026-05-11
• 📅 Day 99 — Cybersecurity Analyst Mindset and Phishing Triage — 2026-05-10
• 📅 Day 98 — Cookie Banners, Technical Cookies, and Website Privacy Checks — 2026-05-09
• 📅 Day 97 — Privacy-First Website Analytics — 2026-05-08
• 📅 Day 96 — IP Spoofing, Sniffing, and Attack Technique Classification — 2026-05-07
• 📅 Day 95 — DoS, DDoS, Smurf Attacks, and Amplification — 2026-05-06
• 📅 Day 94 — DNS and ICMP Traffic Incident Analysis — 2026-05-05
• 📅 Day 93 — Turning Network Concepts into Incident Reports — 2026-05-04
• 📅 Day 92 — Cybersecurity Roles Across the Attack Surface — 2026-05-03
• 📅 Day 91 — Enterprise Attack Surface and Exploitation Points — 2026-05-02
• 📅 Day 90 — Mapping an Enterprise Network End to End — 2026-05-01
• 📅 Day 89 — From Protocol Memorization to SOC Thinking — 2026-04-30
• 📅 Day 88 — Security Design Principles and OAuth — 2026-04-29
• 📅 Day 87 — Network Protocols, Ports, and SOC Visibility — 2026-04-28
• 📅 Day 86 — Investigating Botnets and IoT Malware — 2026-04-27
• 📅 Day 85 — Understanding Cryptomining Malware — 2026-04-26
• 📅 Day 84 — Lateral Movement Techniques in Enterprise Networks — 2026-04-25
• 📅 Day 83 — The Colonial Pipeline Ransomware Incident — 2026-04-24
• 📅 Day 82 — The NotPetya Cyberweapon and Destructive Malware — 2026-04-23
• 📅 Day 81 — The WannaCry Global Ransomware Outbreak — 2026-04-22
• 📅 Day 80 — Understanding Ransomware Attacks — 2026-04-21
• 📅 Day 79 — Squiblydoo and Rundll32 Script Execution — 2026-04-20
• 📅 Day 78 — Metasploit and Exploitation Frameworks — 2026-04-19
• 📅 Day 77 — PowerShell Empire and Fileless Malware Techniques — 2026-04-18
• 📅 Day 76 — Understanding Cobalt Strike and Post-Exploitation Frameworks — 2026-04-17
• 📅 Day 75 — Understanding Fail2Ban and Automated Defense — 2026-04-16
• 📅 Day 74 — Turning Raw Logs into Patterns and Evidence — 2026-04-15
• 📅 Day 73 — Detecting SSH Brute Force Attacks Using auth.log — 2026-04-14
• 📅 Day 72 — From Commands to Systems Thinking in Cybersecurity — 2026-04-13
• 📅 Day 71 — Verifying Services and Understanding Why Connections Fail — 2026-04-12
• 📅 Day 70 — Mapping IP Addresses to Devices Using ARP — 2026-04-11
• 📅 Day 69 — Understanding NAT vs Bridged Networking in a Lab Environment — 2026-04-10
• 📅 Day 68 — Testing Network Connectivity and Verifying Open Ports — 2026-04-09
• 📅 Day 67 — Investigating SSH Connection Failures and Security Warnings — 2026-04-08
• 📅 Day 66 — Debugging DNS Resolution and Understanding Hosting Mismatch — 2026-04-07
• 📅 Day 65 — Understanding GitHub Authentication, Cloning, and Local Repositories — 2026-04-06
• 📅 Day 64 — AI Agents, Model Context Protocol (MCP), and Security Implications — 2026-04-05
• 📅 Day 63 — Understanding Local LLM Infrastructure and Model Quantization — 2026-04-04
• 📅 Day 62 — Understanding Phishing Attacks and Email Security Controls — 2026-04-03
• 📅 Day 61 — Investigating the Dark Web Safely and Understanding Tor — 2026-04-02
• 📅 Day 60 — Understanding Local AI, Model Hosting, and the Cloud vs Local Debate — 2026-04-01
• 📅 Day 59 — Studying Malware Families: TrickBot, WannaMine and Cryptomining Threats — 2026-03-31
• 📅 Day 58 — DLL Files, Code Signing, and Malware Trust Verification — 2026-03-30
• 📅 Day 57 — LOLBins Deep Dive: Squiblydoo (rundll32 and mshtml Abuse) — 2026-03-29
• 📅 Day 56 — Offensive Security Frameworks and LOLBins — 2026-03-28
• 📅 Day 55 — Typosquatting and Malicious Domain Impersonation — 2026-03-27
• 📅 Day 54 — Investigating Phishing Through Email Gateway Logs — 2026-03-26
• 📅 Day 53 — Understanding Phishing Attacks and Email Security Layers — 2026-03-25
• 📅 Day 52 — First Steps with Python and JavaScript for Security — 2026-03-24
• 📅 Day 51 — CLI Fundamentals, OS Security, and Understanding How Data is Represented — 2026-03-23
• 📅 Day 50 — Understanding Advanced Persistent Threat (APT) Groups — 2026-03-22
• 📅 Day 49 — Investigating Phishing Infrastructure and Email Attacks — 2026-03-21
• 📅 Day 48 — Detecting Authentication Attacks in System Logs — 2026-03-20
• 📅 Day 47 — Encoded PowerShell and Obfuscated Command Execution — 2026-03-19
• 📅 Day 46 — Understanding LOLBins and Living-off-the-Land Attacks — 2026-03-18
• 📅 Day 45 — Pivot Training for Log Investigation — 2026-03-17
• 📅 Day 44 — Detecting Beaconing and Command-and-Control Traffic — 2026-03-16
• 📅 Day 43 — Detecting Suspicious Process Chains — 2026-03-15
• 📅 Day 42 — SOC Thinking: Turning Logs into Evidence — 2026-03-14
• 📅 Day 41 — Sysmon Telemetry, Lab Automation, and Full Cyber Lab Architecture — 2026-03-13
• 📅 Day 40 — Building a Reproducible Windows SOC VM and Lab Infrastructure — 2026-03-12
• 📅 Day 39 — Building a Portable Zsh Environment with GitHub Dotfiles — 2026-03-11
• 📅 Day 37 — Ports, Services, and Investigating Listening Processes — 2026-03-09
• 📅 Day 36 — Linux Process Investigation and First Log Exploration — 2026-03-07
• 📅 Day 35 — Linux Process Baselining with ps and top — 2026-03-05
• 📅 Day 34 — Networking Mental Model Reset (DNS, TCP/UDP, HTTPS/TLS, QUIC) — 2026-03-03
• 📅 Day 33 — Expanding the SOC Learning Roadmap (Identity, Triage, and Hiring Readiness) — 2026-03-02
• 📅 Day 32 — OSI Model, Encapsulation, and Core Network Protocols — 2026-03-01
• 📅 Day 31 — Regex Behavior and Text Processing Foundations — 2026-02-28
• 📅 Day 30 — Streams, Exit Codes, and Bash Redirection — 2026-02-27
• 🧪 Lab 04 – Endpoint Process Chain Triage with Pipe-Delimited Logs and awk — 2026-02-26
• 📅 Day 29 — SOC Thinking with Linux Pipelines, Pivots, and Process Chains — 2026-02-26
• 📅 Day 28 — Understanding Command Resolution & Filesystem Investigation with find — 2026-02-25
• 📅 Day 27 — Command Resolution, PATH Internals & Shell Environment Investigation — 2026-02-24
• 📅 Day 26 — Effective Shell Part 2: Pipelines, Readline Search, Job Control — 2026-02-22
• 📅 Day 25 — Effective Shell Fundamentals: ls, du, man, Heredocs, Updates, and Docker Permissions — 2026-02-17
• 📅 Day 24 — Tools Lane Setup, Effective Shell, and Shutdown Triage — 2026-02-16
• 📅 Day 23 — Consolidation, Repetition, and Anki-Driven Recall — 2026-02-14
• 📅 Day 22 — stdout, stderr, wget, and Output Validation — 2026-02-13
• 📅 Day 21 — Building My Detection Engineering Repo + Hardening My Blog Setup — 2026-02-12
• 📅 Day 20 — Auditing a Media Archive and Taking Control of Backups — 2026-02-11
• 📅 Day 19 — Bare-Metal Dual Boot on Intel Mac (macOS + Ubuntu Server) — 2026-02-10
• 📅 Day 18 — Intel Mac Dual-Boot Experiments, Architecture Friction, and Lab Prep — 2026-02-09
• 🧪 Lab 03 — HTTP in Practice (Pentester POV) — 2026-02-08
• 📅 Day 17 — Cookies, Sessions, and Trust Boundaries — 2026-02-08
• 📅 Day 15 — Building a Proper Terminal Logging Pipeline — 2026-02-06
• 🧪 Lab 01 – Linux Permissions & Ownership Hands-On Practice — 2026-02-05
• 📅 Day 14 — Linux Permissions, Identity, Pipes, and Data Processing Fundamentals — 2026-02-05
• 📅 Day 13 — SSH and Networking Flow Between VMs — 2026-02-04
• 📅 Day 12 — Linux Files, Permissions, and Safety — 2026-02-02
• 📅 Day 4 — Recovery Day Logged Honestly — 2026-01-22

LeastPrivilege

• 🧪 Lab 33 – Requiring Confirmation Before a Voice Command Starts an Agent Job — 2026-09-30
• 📅 Day 242 — Testing a Voice Command Path That Starts Coding-Agent Jobs from Telegram — 2026-09-30
• 🧪 Lab 29 – Reviewing an Agent Tool Bundle for Least Privilege — 2026-09-25
• 📅 Day 237 — Reviewing Which Tools a Messaging Agent Can Really Use — 2026-09-25
• 🧪 Lab 26 – Reviewing a Payroll Change Through Access-Control Evidence — 2026-09-18
• 📅 Day 230 — Access Control: AAA, IAM, and a Contractor Account Left Active for Four Years — 2026-09-18
• Letting Home Assistant Wake and Sleep a Mac Without Handing It Broad Access — 2026-09-05
• 📅 Day 217 — Connecting Home Assistant to a Mac's Wake and Sleep with Minimal Access — 2026-09-05
• 📅 Day 216 — Building Remote Power Control for a Mac over Telegram, with Two Sender Checks — 2026-09-04
• 📅 Day 207 — Gating the One Scheduled Message a Bot May Send Without Being Asked — 2026-08-26
• 🧪 Lab 18 – Allowing Exactly One Reply per Incoming Message — 2026-08-25
• 📅 Day 206 — Requiring a Recent Incoming Message Before a Bot May Reply, Once — 2026-08-25
• 📅 Day 202 — Giving an Agent Write Access to My Calendar Without Giving It Delete — 2026-08-21
• 📅 Day 201 — Locking Down a New WhatsApp Channel: Too Many Tools, Too Much Trust in the Sender — 2026-08-20
• 📅 Day 198 — Testing My Personal-Data Policy Gate with Phone Location — 2026-08-17
• 📅 Day 185 — Turning Two Log-Only Guards into Guards That Block — 2026-08-04
• 📅 Day 180 — Reviewing a Skill Catalog and Installing Only a Small Allowlist — 2026-07-30
• 🧪 Lab 12 – Extracting Text from a Local HTML File Safely — 2026-07-29
• 📅 Day 179 — Extracting Useful Text Without Giving an Agent a Browser — 2026-07-29
• Vetting Third-Party Tools Before Installing Them: Source, Permissions, Removal — 2026-07-27
• 🧪 Lab 11 – Assessing a Candidate Tool Before Adoption — 2026-07-27
• 📅 Day 177 — Choosing Tools by Evidence, Not by Novelty — 2026-07-27
• Supervising an AI Agent: Approvals, Audit Logs and Recovery Before It Acts — 2026-07-17
• 📅 Day 167 — Approval-Gated Automation: Making Privileged Agent Work Accountable — 2026-07-17
• 📅 Day 159 — Widening an Agent's Write Scope on Purpose (and Making Its Findings Earn Evidence) — 2026-07-09
• 📅 Day 148 — Building Least-Privilege Tool Profiles for My AI Agents (and Finding My Own Risk Scorer Was Inverted) — 2026-06-28

Lifecycle

• 📅 Day 163 — Model Fleet Ops: Migrating the Coding Lane to Gemma and Budgeting Tokens Like a Resource — 2026-07-13

Linux

• 🧪 Lab 31 – Checking a Config Change Actually Reached the Running Service — 2026-09-28
• 🧪 Lab 25 – Proving Two Identical-Looking Files Are Not the Same File — 2026-09-17
• 🧪 Lab 24 – Decrypting a Caesar Cipher and an AES-256 File in Linux — 2026-09-16
• 🧪 Lab 13 – Finding Linux Commands with Built-in Help — 2026-07-31
• 📅 Day 181 — Using Linux Help Before Making a Change — 2026-07-31
• Lab 06 - Linux User and Group Management for Access Control — 2026-07-05
• 📅 Day 155 — Linux User and Group Management as Access Control Practice — 2026-07-05
• 📅 Day 144 — A 348-Term Glossary and the False Positives That Came With It — 2026-06-24
• 📅 Day 136 — Linux Permissions and Authorization: A Google Cybersecurity Certificate Portfolio Activity — 2026-06-16
• 📅 Day 75 — Understanding Fail2Ban and Automated Defense — 2026-04-16
• 📅 Day 74 — Turning Raw Logs into Patterns and Evidence — 2026-04-15
• 📅 Day 73 — Detecting SSH Brute Force Attacks Using auth.log — 2026-04-14
• 📅 Day 71 — Verifying Services and Understanding Why Connections Fail — 2026-04-12
• 📅 Day 68 — Testing Network Connectivity and Verifying Open Ports — 2026-04-09
• 📅 Day 67 — Investigating SSH Connection Failures and Security Warnings — 2026-04-08
• 📅 Day 64 — AI Agents, Model Context Protocol (MCP), and Security Implications — 2026-04-05
• 📅 Day 63 — Understanding Local LLM Infrastructure and Model Quantization — 2026-04-04
• 📅 Day 60 — Understanding Local AI, Model Hosting, and the Cloud vs Local Debate — 2026-04-01
• 📅 Day 51 — CLI Fundamentals, OS Security, and Understanding How Data is Represented — 2026-03-23
• 📅 Day 39 — Building a Portable Zsh Environment with GitHub Dotfiles — 2026-03-11
• 🧪 Lab 05 – SSH Brute-Force Investigation and Automated Defense — 2026-03-10
• 📅 Day 38 — SSH Brute-Force Investigation and Automated Defense — 2026-03-10
• 📅 Day 21 — Building My Detection Engineering Repo + Hardening My Blog Setup — 2026-02-12
• 📅 Day 19 — Bare-Metal Dual Boot on Intel Mac (macOS + Ubuntu Server) — 2026-02-10
• 📅 Day 18 — Intel Mac Dual-Boot Experiments, Architecture Friction, and Lab Prep — 2026-02-09
• 🧪 Lab 02 – Real SUID Behavior: Scripts vs Binaries — 2026-02-07
• 📅 Day 16 — Linux Privilege Escalation: SUID, SGID, Sticky Bit (Foundations) — 2026-02-07
• 📅 Day 15 — Building a Proper Terminal Logging Pipeline — 2026-02-06
• 🧪 Lab 01 – Linux Permissions & Ownership Hands-On Practice — 2026-02-05
• 📅 Day 14 — Linux Permissions, Identity, Pipes, and Data Processing Fundamentals — 2026-02-05
• 📅 Day 13 — SSH and Networking Flow Between VMs — 2026-02-04
• 📅 Day 12 — Linux Files, Permissions, and Safety — 2026-02-02
• 📅 Day 11 — Linux Fundamentals Part 3 (Finale) — 2026-01-31
• 📅 Day 10 — Linux Fundamentals Part 2 (SSH, Filesystem, Permissions) — 2026-01-30
• 📅 Day 9 — Linux Fundamentals Part 1 — 2026-01-27

LinuxFundamentals

• Lab 06 - Linux User and Group Management for Access Control — 2026-07-05
• 📅 Day 117 — macOS Persistence, LaunchDaemons, and Endpoint Triage — 2026-05-28
• 📅 Day 114 — OS, Network, and Cloud Hardening — 2026-05-25
• 📅 Day 37 — Ports, Services, and Investigating Listening Processes — 2026-03-09
• 📅 Day 36 — Linux Process Investigation and First Log Exploration — 2026-03-07
• 📅 Day 35 — Linux Process Baselining with ps and top — 2026-03-05
• 📅 Day 31 — Regex Behavior and Text Processing Foundations — 2026-02-28
• 📅 Day 30 — Streams, Exit Codes, and Bash Redirection — 2026-02-27
• 🧪 Lab 04 – Endpoint Process Chain Triage with Pipe-Delimited Logs and awk — 2026-02-26
• 📅 Day 29 — SOC Thinking with Linux Pipelines, Pivots, and Process Chains — 2026-02-26
• 📅 Day 28 — Understanding Command Resolution & Filesystem Investigation with find — 2026-02-25
• 📅 Day 27 — Command Resolution, PATH Internals & Shell Environment Investigation — 2026-02-24
• 📅 Day 26 — Effective Shell Part 2: Pipelines, Readline Search, Job Control — 2026-02-22
• 📅 Day 25 — Effective Shell Fundamentals: ls, du, man, Heredocs, Updates, and Docker Permissions — 2026-02-17
• 📅 Day 24 — Tools Lane Setup, Effective Shell, and Shutdown Triage — 2026-02-16
• 📅 Day 23 — Consolidation, Repetition, and Anki-Driven Recall — 2026-02-14
• 📅 Day 22 — stdout, stderr, wget, and Output Validation — 2026-02-13
• 📅 Day 19 — Bare-Metal Dual Boot on Intel Mac (macOS + Ubuntu Server) — 2026-02-10
• 📅 Day 18 — Intel Mac Dual-Boot Experiments, Architecture Friction, and Lab Prep — 2026-02-09
• 🧪 Lab 02 – Real SUID Behavior: Scripts vs Binaries — 2026-02-07
• 📅 Day 16 — Linux Privilege Escalation: SUID, SGID, Sticky Bit (Foundations) — 2026-02-07
• 🧪 Lab 01 – Linux Permissions & Ownership Hands-On Practice — 2026-02-05
• 📅 Day 14 — Linux Permissions, Identity, Pipes, and Data Processing Fundamentals — 2026-02-05
• 📅 Day 11 — Linux Fundamentals Part 3 (Finale) — 2026-01-31
• 📅 Day 10 — Linux Fundamentals Part 2 (SSH, Filesystem, Permissions) — 2026-01-30
• 📅 Day 9 — Linux Fundamentals Part 1 — 2026-01-27

LinuxUX

• 📅 Day 7 — Workflow Ergonomics & GitHub Pages Stabilization — 2026-01-25

LocalAI

• 📅 Day 219 — Upgrading a Live Service and Proving Which Commit Is Actually Running — 2026-09-07
• 📅 Day 213 — Unifying Agent Memory into One Source-Attributed Retrieval Path — 2026-09-01
• 📅 Day 212 — Choosing a Local Coding Model by Measuring Repeated Full Rounds — 2026-08-31
• 📅 Day 208 — Adding a Live Trial Because Passing Fixture Tests Did Not Prove a Local Model Was Ready — 2026-08-27
• 📅 Day 188 — Giving Agent Memory Real Sources, and Routing Trivial Turns to a Small Model — 2026-08-07
• 📅 Day 159 — Widening an Agent's Write Scope on Purpose (and Making Its Findings Earn Evidence) — 2026-07-09
• 📅 Day 146 — Giving My Local Agent Daemon Real Auth (And Almost Leaking the Token in the 401 Page) — 2026-06-26
• 📅 Day 142 — Benchmarking an Autonomous Agent: Strong One-Shot Builds, Unreliable Self-Debugging — 2026-06-22
• 📅 Day 141 — A Human Memory Layer: The RAG Vault My Agents Write and I Read Anywhere — 2026-06-21
• 📅 Day 140 — AI-OS: Governance, Routing, and a Verification Gateway for My Local Agents — 2026-06-20
• 📅 Day 139 — Benchmarking a Local LLM Coding Stack: Harness, Routing, and Review Findings — 2026-06-19
• 📅 Day 137 — Running DS4: A Serious Local Model on a Laptop With Limits — 2026-06-17
• 📅 Day 132 — Giving a Local LLM Hands: LM Studio, Function Calling, and MCP Servers — 2026-06-12

LocalAgents

• 📅 Day 149 — Turning My iPhone Into a Command Center for Local Agents — 2026-06-29

LocalFirst

• 📅 Day 150 — Remote Agent Hub and the Discipline of Honest Feature Labels — 2026-06-30

LocalLLM

• 📅 Day 163 — Model Fleet Ops: Migrating the Coding Lane to Gemma and Budgeting Tokens Like a Resource — 2026-07-13
• 📅 Day 151 — Benchmarking My Local LLM Stack Instead of Trusting Vibes — 2026-07-01

Localization

• 📅 Day 157 — WebCheckup: Turning the Mini-Audit Into a Real Multilingual Service — 2026-07-07

LocationData

• 📅 Day 198 — Testing My Personal-Data Policy Gate with Phone Location — 2026-08-17

LogAnalysis

• 🧪 Lab 22 – SQL Time-Window Filtering for Authentication Triage — 2026-09-12
• 📅 Day 224 — SQL for Security Triage: Filtering Logins by Date, Time and Number — 2026-09-12

Logging

• 📅 Day 166 — Resilient Sessions: What a Torn Journal Taught Me About Safe AI State — 2026-07-16

LoginAnomalies

• 🧪 Lab 16 – SELECT, FROM, and ORDER BY for Login-Activity Review — 2026-08-11

Logs

• 📅 Day 117 — macOS Persistence, LaunchDaemons, and Endpoint Triage — 2026-05-28
• 📅 Day 112 — DoS, DDoS, SYN Floods, Smurf, and Amplification — 2026-05-23
• 📅 Day 111 — Reading tcpdump-Style Logs and DNS/ICMP Failures — 2026-05-22
• 📅 Day 105 — Incident Response Playbooks and Escalation Discipline — 2026-05-16
• 📅 Day 104 — SIEM Logs, Dashboards, and Alert Triage — 2026-05-15
• 📅 Day 98 — Cookie Banners, Technical Cookies, and Website Privacy Checks — 2026-05-09
• 📅 Day 74 — Turning Raw Logs into Patterns and Evidence — 2026-04-15
• 📅 Day 73 — Detecting SSH Brute Force Attacks Using auth.log — 2026-04-14
• 📅 Day 48 — Detecting Authentication Attacks in System Logs — 2026-03-20
• 📅 Day 45 — Pivot Training for Log Investigation — 2026-03-17
• 📅 Day 44 — Detecting Beaconing and Command-and-Control Traffic — 2026-03-16
• 📅 Day 43 — Detecting Suspicious Process Chains — 2026-03-15
• 📅 Day 42 — SOC Thinking: Turning Logs into Evidence — 2026-03-14
• 📅 Day 41 — Sysmon Telemetry, Lab Automation, and Full Cyber Lab Architecture — 2026-03-13
• 📅 Day 40 — Building a Reproducible Windows SOC VM and Lab Infrastructure — 2026-03-12
• 🧪 Lab 05 – SSH Brute-Force Investigation and Automated Defense — 2026-03-10
• 📅 Day 38 — SSH Brute-Force Investigation and Automated Defense — 2026-03-10
• 📅 Day 36 — Linux Process Investigation and First Log Exploration — 2026-03-07
• 🧪 Lab 04 – Endpoint Process Chain Triage with Pipe-Delimited Logs and awk — 2026-02-26
• 📅 Day 29 — SOC Thinking with Linux Pipelines, Pivots, and Process Chains — 2026-02-26
• 📅 Day 25 — Effective Shell Fundamentals: ls, du, man, Heredocs, Updates, and Docker Permissions — 2026-02-17
• 📅 Day 24 — Tools Lane Setup, Effective Shell, and Shutdown Triage — 2026-02-16
• 📅 Day 21 — Building My Detection Engineering Repo + Hardening My Blog Setup — 2026-02-12
• 📅 Day 20 — Auditing a Media Archive and Taking Control of Backups — 2026-02-11
• 📅 Day 15 — Building a Proper Terminal Logging Pipeline — 2026-02-06
• 📅 Day 14 — Linux Permissions, Identity, Pipes, and Data Processing Fundamentals — 2026-02-05
• 📅 Day 12 — Linux Files, Permissions, and Safety — 2026-02-02
• 📅 Day 11 — Linux Fundamentals Part 3 (Finale) — 2026-01-31

MCP

• 📅 Day 148 — Building Least-Privilege Tool Profiles for My AI Agents (and Finding My Own Risk Scorer Was Inverted) — 2026-06-28
• 📅 Day 132 — Giving a Local LLM Hands: LM Studio, Function Calling, and MCP Servers — 2026-06-12

MITRE

• 📅 Day 143 — Building a Local MITRE ATT&CK Technique Library from My Own Notes — 2026-06-23

MacBook

• 📅 Day 1 — Environment Setup & Foundations — 2026-01-19

MariaDB

• 🧪 Lab 23 – Completing a SQL Join for a Security Incident Investigation — 2026-09-15
• 🧪 Lab 16 – SELECT, FROM, and ORDER BY for Login-Activity Review — 2026-08-11
• 🧪 Lab 15 – Filtering SQL Queries with WHERE and LIKE — 2026-08-11

MemorySecurity

• 📅 Day 220 — Finding That an Empty Tool List Meant 'Inherit Everything', Not 'Deny All' — 2026-09-08

MobileSecurity

• 📅 Day 161 — Hardening the iOS Companion: Untrusted Links, Redacted Errors, and the 'Full Power' Question — 2026-07-11
• Audit Report: Security and Quality Review of My iPhone App for Controlling AI Agents — 2026-07-06

Monitoring

• 📅 Day 210 — Fixing an Unattended Job That Kept Picking the Same Files and Starved the Rest — 2026-08-29
• 📅 Day 209 — Fixing a Watchdog That Mistook a Network Failure for an Expired Credential — 2026-08-28
• 📅 Day 191 — Building a Watchdog for Expiring Credentials and Proving the Alarm Fires — 2026-08-10

MultiAgent

• 🧪 Lab 10 – Isolating Parallel Agents with Git Worktrees — 2026-07-22
• 📅 Day 172 — Parallel Agents Without Collisions: Task Graphs and Git Worktrees — 2026-07-22

NIST

• Risk Assessment of My AI Agent Workstation Using NIST SP 800-30 — 2026-10-01
• Vulnerability Assessment of an Internet-Exposed Database (Training Scenario, NIST SP 800-30) — 2026-09-23
• 📅 Day 235 — Writing a Vulnerability Assessment Report for an Internet-Exposed Database (Simulated) — 2026-09-23

NetworkResilience

• 📅 Day 216 — Building Remote Power Control for a Mac over Telegram, with Two Sender Checks — 2026-09-04

NetworkSecurity

• Letting Home Assistant Wake and Sleep a Mac Without Handing It Broad Access — 2026-09-05
• 🧪 Lab 21 – Verifying a Local-Only HTTP Service Cannot Be Reached or Misused — 2026-09-05

Networking

• 📅 Day 160 — Tailscale Broke My Stack: Node Identity, Hostnames, and Private Services — 2026-07-10
• 📅 Day 114 — OS, Network, and Cloud Hardening — 2026-05-25
• 📅 Day 113 — Sniffing, Spoofing, and Interception Tactics — 2026-05-24
• 📅 Day 112 — DoS, DDoS, SYN Floods, Smurf, and Amplification — 2026-05-23
• 📅 Day 111 — Reading tcpdump-Style Logs and DNS/ICMP Failures — 2026-05-22
• 📅 Day 110 — Enterprise Network Flow and Attack Surface Mapping — 2026-05-21
• 📅 Day 109 — Firewalls, VPNs, Proxies, Security Zones, and CIDR — 2026-05-20
• 📅 Day 108 — Network Protocols, Ports, DNS, HTTP, and Remote Access — 2026-05-19
• 📅 Day 107 — Network Architecture, Cloud Networks, and the TCP/IP Model — 2026-05-18
• 📅 Day 96 — IP Spoofing, Sniffing, and Attack Technique Classification — 2026-05-07
• 📅 Day 95 — DoS, DDoS, Smurf Attacks, and Amplification — 2026-05-06
• 📅 Day 94 — DNS and ICMP Traffic Incident Analysis — 2026-05-05
• 📅 Day 93 — Turning Network Concepts into Incident Reports — 2026-05-04
• 📅 Day 91 — Enterprise Attack Surface and Exploitation Points — 2026-05-02
• 📅 Day 90 — Mapping an Enterprise Network End to End — 2026-05-01
• 📅 Day 89 — From Protocol Memorization to SOC Thinking — 2026-04-30
• 📅 Day 87 — Network Protocols, Ports, and SOC Visibility — 2026-04-28
• 📅 Day 86 — Investigating Botnets and IoT Malware — 2026-04-27
• 📅 Day 84 — Lateral Movement Techniques in Enterprise Networks — 2026-04-25
• 📅 Day 82 — The NotPetya Cyberweapon and Destructive Malware — 2026-04-23
• 📅 Day 81 — The WannaCry Global Ransomware Outbreak — 2026-04-22
• 📅 Day 71 — Verifying Services and Understanding Why Connections Fail — 2026-04-12
• 📅 Day 70 — Mapping IP Addresses to Devices Using ARP — 2026-04-11
• 📅 Day 69 — Understanding NAT vs Bridged Networking in a Lab Environment — 2026-04-10
• 📅 Day 68 — Testing Network Connectivity and Verifying Open Ports — 2026-04-09
• 📅 Day 67 — Investigating SSH Connection Failures and Security Warnings — 2026-04-08
• 📅 Day 66 — Debugging DNS Resolution and Understanding Hosting Mismatch — 2026-04-07
• 📅 Day 62 — Understanding Phishing Attacks and Email Security Controls — 2026-04-03
• 📅 Day 61 — Investigating the Dark Web Safely and Understanding Tor — 2026-04-02
• 📅 Day 60 — Understanding Local AI, Model Hosting, and the Cloud vs Local Debate — 2026-04-01
• 📅 Day 54 — Investigating Phishing Through Email Gateway Logs — 2026-03-26
• 📅 Day 53 — Understanding Phishing Attacks and Email Security Layers — 2026-03-25
• 📅 Day 44 — Detecting Beaconing and Command-and-Control Traffic — 2026-03-16
• 🧪 Lab 05 – SSH Brute-Force Investigation and Automated Defense — 2026-03-10
• 📅 Day 38 — SSH Brute-Force Investigation and Automated Defense — 2026-03-10
• 📅 Day 37 — Ports, Services, and Investigating Listening Processes — 2026-03-09
• 📅 Day 34 — Networking Mental Model Reset (DNS, TCP/UDP, HTTPS/TLS, QUIC) — 2026-03-03
• 📅 Day 32 — OSI Model, Encapsulation, and Core Network Protocols — 2026-03-01
• 📅 Day 13 — SSH and Networking Flow Between VMs — 2026-02-04
• 📅 Day 11 — Linux Fundamentals Part 3 (Finale) — 2026-01-31
• 📅 Day 3 — How Websites Work (Big Picture) — 2026-01-21
• 📅 Day 2 — Networking & Web Fundamentals (Consolidation Day) — 2026-01-20

NonRepudiation

• 📅 Day 229 — Hash Functions and Why They Are Not Encryption (Google Cybersecurity Certificate) — 2026-09-17

OAuth

• 📅 Day 209 — Fixing a Watchdog That Mistook a Network Failure for an Expired Credential — 2026-08-28
• 📅 Day 191 — Building a Watchdog for Expiring Credentials and Proving the Alarm Fires — 2026-08-10

OSINT

• 📅 Day 233 — OSINT: Turning Public Information into Security Intelligence (Google Cybersecurity Certificate) — 2026-09-21

OWASP

• 📅 Day 232 — Defense in Depth, CVE, CVSS and the OWASP Top 10 (Google Cybersecurity Certificate) — 2026-09-20

Obsidian

• 📅 Day 154 — Building a Cybersecurity Glossary Without Breaking My Notes — 2026-07-04
• 📅 Day 144 — A 348-Term Glossary and the False Positives That Came With It — 2026-06-24
• 📅 Day 143 — Building a Local MITRE ATT&CK Technique Library from My Own Notes — 2026-06-23
• 📅 Day 141 — A Human Memory Layer: The RAG Vault My Agents Write and I Read Anywhere — 2026-06-21
• 📅 Day 2 — Networking & Web Fundamentals (Consolidation Day) — 2026-01-20
• 📅 Day 1 — Environment Setup & Foundations — 2026-01-19

Ollama

• 📅 Day 240 — Finding a Setting That Was Correct in the File but Wrong in the Running Service — 2026-09-28
• 📅 Day 212 — Choosing a Local Coding Model by Measuring Repeated Full Rounds — 2026-08-31
• 📅 Day 208 — Adding a Live Trial Because Passing Fixture Tests Did Not Prove a Local Model Was Ready — 2026-08-27
• 📅 Day 151 — Benchmarking My Local LLM Stack Instead of Trusting Vibes — 2026-07-01

OpenSSL

• 🧪 Lab 24 – Decrypting a Caesar Cipher and an AES-256 File in Linux — 2026-09-16

OperationalSafety

• 🧪 Lab 13 – Finding Linux Commands with Built-in Help — 2026-07-31
• 📅 Day 181 — Using Linux Help Before Making a Change — 2026-07-31

OperationalSecurity

• 📅 Day 149 — Turning My iPhone Into a Command Center for Local Agents — 2026-06-29

Orchestration

• 📅 Day 174 — Shadow Trials: Letting the New Router Watch Before It Acts — 2026-07-24
• 📅 Day 152 — Building an AI Inference Orchestrator With Routing, Retries, and Cost Awareness — 2026-07-02
• 📅 Day 140 — AI-OS: Governance, Routing, and a Verification Gateway for My Local Agents — 2026-06-20

OutputValidation

• 📅 Day 238 — Extending an Outgoing-Message Guard to Check the Message It Replies To — 2026-09-26
• 🧪 Lab 28 – Testing an AI Agent's Final Message, Not Its First Draft — 2026-09-24

PKI

• 📅 Day 228 — How PKI Combines Symmetric and Asymmetric Encryption (Google Cybersecurity Certificate) — 2026-09-16

PackageManagement

• 📅 Day 11 — Linux Fundamentals Part 3 (Finale) — 2026-01-31

Packets

• 📅 Day 2 — Networking & Web Fundamentals (Consolidation Day) — 2026-01-20

Parallels

• 📅 Day 2 — Networking & Web Fundamentals (Consolidation Day) — 2026-01-20
• 📅 Day 1 — Environment Setup & Foundations — 2026-01-19

PatchManagement

• Audit Report: Dependency Vulnerabilities in My Self-Hosted AI Agent Gateway, From 76 Findings to Zero — 2026-08-02

PathTraversal

• 📅 Day 186 — Fixing a Citation Check That Treated a Matching Hash as Trust — 2026-08-05

PatternRecognition

• 📅 Day 196 — Four Bugs, One Pattern: Code That Claimed Success Without Proof — 2026-08-15

PerformanceEngineering

• 📅 Day 212 — Choosing a Local Coding Model by Measuring Repeated Full Rounds — 2026-08-31

PermissionModel

• 📅 Day 148 — Building Least-Privilege Tool Profiles for My AI Agents (and Finding My Own Risk Scorer Was Inverted) — 2026-06-28

Permissions

• 📅 Day 28 — Understanding Command Resolution & Filesystem Investigation with find — 2026-02-25
• 📅 Day 25 — Effective Shell Fundamentals: ls, du, man, Heredocs, Updates, and Docker Permissions — 2026-02-17
• 📅 Day 19 — Bare-Metal Dual Boot on Intel Mac (macOS + Ubuntu Server) — 2026-02-10
• 🧪 Lab 02 – Real SUID Behavior: Scripts vs Binaries — 2026-02-07
• 📅 Day 16 — Linux Privilege Escalation: SUID, SGID, Sticky Bit (Foundations) — 2026-02-07
• 🧪 Lab 01 – Linux Permissions & Ownership Hands-On Practice — 2026-02-05
• 📅 Day 14 — Linux Permissions, Identity, Pipes, and Data Processing Fundamentals — 2026-02-05
• 📅 Day 12 — Linux Files, Permissions, and Safety — 2026-02-02

Phishing

• 🧪 Lab 35 – Write an Incident Handler Journal Entry — 2026-10-02
• 📅 Day 244 — Writing an Incident Handler Journal Entry for a Ransomware Scenario With the Five W’s — 2026-10-02

PolicyEnforcement

• 📅 Day 198 — Testing My Personal-Data Policy Gate with Phone Location — 2026-08-17
• 📅 Day 185 — Turning Two Log-Only Guards into Guards That Block — 2026-08-04

Portfolio

• 📅 Day 192 — SQL Labs: Filtering with WHERE and LIKE, Sorting with ORDER BY — 2026-08-11
• 📅 Day 136 — Linux Permissions and Authorization: A Google Cybersecurity Certificate Portfolio Activity — 2026-06-16

Privacy

• 🧪 Lab 34 – Building a Status Importer That Rejects Stale Data and Unproven Completion Claims — 2026-10-01
• 📅 Day 243 — Building a Work Summary Tool That Says 'Not Proven' When Evidence Is Missing — 2026-10-01
• 🧪 Lab 32 – Building a Status Record That Holds No Message Content and Expires — 2026-09-29
• 📅 Day 241 — Keeping a Daily Status Digest from Becoming a Transcript Archive — 2026-09-29
• 🧪 Lab 30 – Letting Automation Add a Calendar Event Only When the Message Proves It — 2026-09-27
• 📅 Day 239 — Turning a Message into a Calendar Event Safely: Evidence, Dates, Duplicates — 2026-09-27
• 📅 Day 238 — Extending an Outgoing-Message Guard to Check the Message It Replies To — 2026-09-26
• 📅 Day 162 — An AI Secretary With a Kill Switch: Calendars, Sender Policy, and Emergency Control — 2026-07-12

PrivacyByDesign

• 📅 Day 198 — Testing My Personal-Data Policy Gate with Phone Location — 2026-08-17

PrivacyEngineering

• 📅 Day 222 — Moving a Message Safety Filter to the Final Delivery Step — 2026-09-10

Processes

• 📅 Day 117 — macOS Persistence, LaunchDaemons, and Endpoint Triage — 2026-05-28
• 📅 Day 85 — Understanding Cryptomining Malware — 2026-04-26
• 📅 Day 84 — Lateral Movement Techniques in Enterprise Networks — 2026-04-25
• 📅 Day 79 — Squiblydoo and Rundll32 Script Execution — 2026-04-20
• 📅 Day 77 — PowerShell Empire and Fileless Malware Techniques — 2026-04-18
• 📅 Day 47 — Encoded PowerShell and Obfuscated Command Execution — 2026-03-19
• 📅 Day 46 — Understanding LOLBins and Living-off-the-Land Attacks — 2026-03-18
• 📅 Day 43 — Detecting Suspicious Process Chains — 2026-03-15
• 📅 Day 41 — Sysmon Telemetry, Lab Automation, and Full Cyber Lab Architecture — 2026-03-13
• 📅 Day 40 — Building a Reproducible Windows SOC VM and Lab Infrastructure — 2026-03-12
• 📅 Day 37 — Ports, Services, and Investigating Listening Processes — 2026-03-09
• 📅 Day 36 — Linux Process Investigation and First Log Exploration — 2026-03-07
• 📅 Day 35 — Linux Process Baselining with ps and top — 2026-03-05
• 📅 Day 30 — Streams, Exit Codes, and Bash Redirection — 2026-02-27
• 🧪 Lab 04 – Endpoint Process Chain Triage with Pipe-Delimited Logs and awk — 2026-02-26
• 📅 Day 29 — SOC Thinking with Linux Pipelines, Pivots, and Process Chains — 2026-02-26
• 📅 Day 28 — Understanding Command Resolution & Filesystem Investigation with find — 2026-02-25
• 📅 Day 26 — Effective Shell Part 2: Pipelines, Readline Search, Job Control — 2026-02-22
• 📅 Day 25 — Effective Shell Fundamentals: ls, du, man, Heredocs, Updates, and Docker Permissions — 2026-02-17
• 📅 Day 24 — Tools Lane Setup, Effective Shell, and Shutdown Triage — 2026-02-16
• 🧪 Lab 02 – Real SUID Behavior: Scripts vs Binaries — 2026-02-07
• 📅 Day 16 — Linux Privilege Escalation: SUID, SGID, Sticky Bit (Foundations) — 2026-02-07
• 📅 Day 14 — Linux Permissions, Identity, Pipes, and Data Processing Fundamentals — 2026-02-05
• 📅 Day 11 — Linux Fundamentals Part 3 (Finale) — 2026-01-31

ProductSecurity

• 📅 Day 150 — Remote Agent Hub and the Discipline of Honest Feature Labels — 2026-06-30

ProductionRollback

• 📅 Day 203 — A Config Cap That Deadlocked the Gateway, and a Prefix Match That Nearly Revoked the Wrong User — 2026-08-22

ProgressiveDisclosure

• 📅 Day 176 — Execution Depth Presets, a Broken Build, and Unit Tests for the Small Stuff — 2026-07-26

Provenance

• 🧪 Lab 34 – Building a Status Importer That Rejects Stale Data and Unproven Completion Claims — 2026-10-01
• 📅 Day 243 — Building a Work Summary Tool That Says 'Not Proven' When Evidence Is Missing — 2026-10-01
• 🧪 Lab 32 – Building a Status Record That Holds No Message Content and Expires — 2026-09-29
• 📅 Day 241 — Keeping a Daily Status Digest from Becoming a Transcript Archive — 2026-09-29
• 🧪 Lab 30 – Letting Automation Add a Calendar Event Only When the Message Proves It — 2026-09-27
• 📅 Day 239 — Turning a Message into a Calendar Event Safely: Evidence, Dates, Duplicates — 2026-09-27
• 📅 Day 188 — Giving Agent Memory Real Sources, and Routing Trivial Turns to a Small Model — 2026-08-07
• 📅 Day 178 — Testing Whether a Codebase Index Actually Helps Find Evidence — 2026-07-28
• Vetting Third-Party Tools Before Installing Them: Source, Permissions, Removal — 2026-07-27
• 🧪 Lab 11 – Assessing a Candidate Tool Before Adoption — 2026-07-27
• 📅 Day 177 — Choosing Tools by Evidence, Not by Novelty — 2026-07-27
• 📅 Day 173 — Provenance and Recovery: Knowing Who Changed What, and Undoing It — 2026-07-23
• 🧪 Lab 08 – Auditing What an AI Agent Is Given to Read Before It Acts — 2026-07-15
• 📅 Day 165 — Bounded Context, Better Decisions: Testing AI Agent Memory Without Blind Trust — 2026-07-15

Python

• 🧪 Lab 21 – Verifying a Local-Only HTTP Service Cannot Be Reached or Misused — 2026-09-05
• 🧪 Lab 19 – Testing an Agent Relay That Refuses Stale or Replayed Messages — 2026-08-30
• 🧪 Lab 17 – Building a Minimal Adversarial Test Harness for a Chat Persona — 2026-08-19
• 🧪 Lab 14 – Building and Breaking an SSRF-Safe Fetch Guard — 2026-08-02
• Incident Report: A Service Stopped Answering Because It Never Closed Its Database Connections — 2026-07-23
• 🧪 Lab 08 – Auditing What an AI Agent Is Given to Read Before It Acts — 2026-07-15

QualityAssurance

• Audit Report: Security and Quality Review of My iPhone App for Controlling AI Agents — 2026-07-06
• 📅 Day 147 — 'Build Succeeded' Isn't Proof: Writing a Real UI Test for the Auth Flow — 2026-06-27

QualityGates

• 📅 Day 176 — Execution Depth Presets, a Broken Build, and Unit Tests for the Small Stuff — 2026-07-26

RAG

• 📅 Day 220 — Finding That an Empty Tool List Meant 'Inherit Everything', Not 'Deny All' — 2026-09-08
• 📅 Day 213 — Unifying Agent Memory into One Source-Attributed Retrieval Path — 2026-09-01

RSS

• 📅 Day 8 — Killing Minima Ghosts & Owning the Stack — 2026-01-26

RaceConditions

• 📅 Day 205 — Fixing a Bot That Said Good Night at 11:24 in the Morning (Stale Cached Time) — 2026-08-24

Ransomware

• 🧪 Lab 35 – Write an Incident Handler Journal Entry — 2026-10-02
• 📅 Day 244 — Writing an Incident Handler Journal Entry for a Ransomware Scenario With the Five W’s — 2026-10-02

Recovery

• 📅 Day 166 — Resilient Sessions: What a Torn Journal Taught Me About Safe AI State — 2026-07-16

RedTeaming

• 🧪 Lab 17 – Building a Minimal Adversarial Test Harness for a Chat Persona — 2026-08-19
• 📅 Day 200 — Red-Teaming My Own Chatbot: Building an Adversarial Persona Harness — 2026-08-19

Reliability

• 📅 Day 210 — Fixing an Unattended Job That Kept Picking the Same Files and Starved the Rest — 2026-08-29
• 📅 Day 196 — Four Bugs, One Pattern: Code That Claimed Success Without Proof — 2026-08-15
• 📅 Day 171 — Five Ways My Automation Faked Success (and the Fail-Closed Fixes) — 2026-07-21
• 📅 Day 164 — Verifying the Verifier: A False-Positive Streak in My Own Checks — 2026-07-14
• 📅 Day 152 — Building an AI Inference Orchestrator With Routing, Retries, and Cost Awareness — 2026-07-02
• 📅 Day 139 — Benchmarking a Local LLM Coding Stack: Harness, Routing, and Review Findings — 2026-06-19

Remediation

• 📅 Day 135 — Auditing My Own Website, Then Fixing What the Report Found — 2026-06-15

RemoteAccess

• 📅 Day 138 — An iOS Companion for My Local Agent, Private by Design — 2026-06-18

RemoteAgentHub

• 📅 Day 150 — Remote Agent Hub and the Discipline of Honest Feature Labels — 2026-06-30

RemovableMedia

• 🧪 Lab 27 – Assessing a Found USB Drive Without Plugging It In — 2026-09-22
• 📅 Day 234 — Assessing a Found USB Drive as a Data-Leak and Malware Risk — 2026-09-22

Reporting

• 📅 Day 157 — WebCheckup: Turning the Mini-Audit Into a Real Multilingual Service — 2026-07-07
• 📅 Day 134 — Building a Website Trust & Security Mini-Audit Service — 2026-06-14

Reports

• WebCheckup Report: External Check-Up of juribuora.com, With Fixes and a Re-Test — 2026-10-01
• Risk Assessment of My AI Agent Workstation Using NIST SP 800-30 — 2026-10-01
• Incident Report: An Exposed Bot Token, and a Rotation That Reported Success While the Service Was Down — 2026-09-10
• Test Report: Restoring an Encrypted Backup of My AI Agent's Data on a Second Machine — 2026-09-03
• Incident Report: A Chat Message Powered Off My Computer and Nothing Could Say Who Did It — 2026-08-19
• Vulnerability Report: DNS-Rebinding SSRF in a Web-Reading Tool for an AI Agent — 2026-08-03
• Audit Report: Dependency Vulnerabilities in My Self-Hosted AI Agent Gateway, From 76 Findings to Zero — 2026-08-02
• Incident Report: A Service Stopped Answering Because It Never Closed Its Database Connections — 2026-07-23
• Audit Report: Security and Quality Review of My iPhone App for Controlling AI Agents — 2026-07-06

Resilience

• 📅 Day 205 — Fixing a Bot That Said Good Night at 11:24 in the Morning (Stale Cached Time) — 2026-08-24
• 📅 Day 199 — Investigating an Unexplained Mac Shutdown and Restricting Who Can Power It Off — 2026-08-18
• 📅 Day 166 — Resilient Sessions: What a Torn Journal Taught Me About Safe AI State — 2026-07-16

ResourceManagement

• 📅 Day 212 — Choosing a Local Coding Model by Measuring Repeated Full Rounds — 2026-08-31
• 📅 Day 188 — Giving Agent Memory Real Sources, and Routing Trivial Turns to a Small Model — 2026-08-07
• 📅 Day 163 — Model Fleet Ops: Migrating the Coding Lane to Gemma and Budgeting Tokens Like a Resource — 2026-07-13
• 📅 Day 137 — Running DS4: A Serious Local Model on a Laptop With Limits — 2026-06-17

RiskAssessment

• Risk Assessment of My AI Agent Workstation Using NIST SP 800-30 — 2026-10-01
• Vulnerability Assessment of an Internet-Exposed Database (Training Scenario, NIST SP 800-30) — 2026-09-23
• 📅 Day 235 — Writing a Vulnerability Assessment Report for an Internet-Exposed Database (Simulated) — 2026-09-23
• 📅 Day 180 — Reviewing a Skill Catalog and Installing Only a Small Allowlist — 2026-07-30
• 📅 Day 175 — Unattended Delegation: Which Lanes Are Allowed to Work While I Sleep — 2026-07-25

RiskManagement

• 📅 Day 225 — Asset Security: From Inventory to Classification (Google Cybersecurity Certificate) — 2026-09-13
• 📅 Day 169 — Why Safe Rollouts Use Feature Flags, Fixtures, and Evidence Gates — 2026-07-19

RiskRegister

• Risk Assessment of My AI Agent Workstation Using NIST SP 800-30 — 2026-10-01

RiskScoring

• 📅 Day 148 — Building Least-Privilege Tool Profiles for My AI Agents (and Finding My Own Risk Scorer Was Inverted) — 2026-06-28

Rollback

• 📅 Day 173 — Provenance and Recovery: Knowing Who Changed What, and Undoing It — 2026-07-23

RootCauseAnalysis

• Incident Report: A Service Stopped Answering Because It Never Closed Its Database Connections — 2026-07-23

RoutingPolicy

• 📅 Day 175 — Unattended Delegation: Which Lanes Are Allowed to Work While I Sleep — 2026-07-25

Ruby

• 📅 Day 6 — Polishing Website & Fixing Jekyll Environment — 2026-01-24

RuntimeVerification

• 🧪 Lab 31 – Checking a Config Change Actually Reached the Running Service — 2026-09-28
• 📅 Day 240 — Finding a Setting That Was Correct in the File but Wrong in the Running Service — 2026-09-28

SOC

• 🧪 Lab 35 – Write an Incident Handler Journal Entry — 2026-10-02
• 📅 Day 244 — Writing an Incident Handler Journal Entry for a Ransomware Scenario With the Five W’s — 2026-10-02

SQL

• 🧪 Lab 23 – Completing a SQL Join for a Security Incident Investigation — 2026-09-15
• 📅 Day 227 — SQL JOINs for Combining Security Logs (Google Cybersecurity Certificate) — 2026-09-15
• 🧪 Lab 22 – SQL Time-Window Filtering for Authentication Triage — 2026-09-12
• 📅 Day 224 — SQL for Security Triage: Filtering Logins by Date, Time and Number — 2026-09-12
• 🧪 Lab 16 – SELECT, FROM, and ORDER BY for Login-Activity Review — 2026-08-11
• 🧪 Lab 15 – Filtering SQL Queries with WHERE and LIKE — 2026-08-11
• 📅 Day 192 — SQL Labs: Filtering with WHERE and LIKE, Sorting with ORDER BY — 2026-08-11

SQLite

• Test Report: Restoring an Encrypted Backup of My AI Agent's Data on a Second Machine — 2026-09-03
• Proving a Backup Restores: Encrypted Off-Host Backup of an Agent's State — 2026-09-02
• 🧪 Lab 20 – Verifying an Encrypted Backup Restore Safely — 2026-09-02
• 📅 Day 214 — Building an Encrypted Off-Host Backup and Proving It Restores on Another Machine — 2026-09-02
• Incident Report: A Service Stopped Answering Because It Never Closed Its Database Connections — 2026-07-23

SSH

• 📅 Day 73 — Detecting SSH Brute Force Attacks Using auth.log — 2026-04-14
• 📅 Day 67 — Investigating SSH Connection Failures and Security Warnings — 2026-04-08
• 🧪 Lab 05 – SSH Brute-Force Investigation and Automated Defense — 2026-03-10
• 📅 Day 38 — SSH Brute-Force Investigation and Automated Defense — 2026-03-10
• 📅 Day 19 — Bare-Metal Dual Boot on Intel Mac (macOS + Ubuntu Server) — 2026-02-10
• 📅 Day 14 — Linux Permissions, Identity, Pipes, and Data Processing Fundamentals — 2026-02-05
• 📅 Day 13 — SSH and Networking Flow Between VMs — 2026-02-04
• 📅 Day 11 — Linux Fundamentals Part 3 (Finale) — 2026-01-31
• 📅 Day 10 — Linux Fundamentals Part 2 (SSH, Filesystem, Permissions) — 2026-01-30

SSRF

• Vulnerability Report: DNS-Rebinding SSRF in a Web-Reading Tool for an AI Agent — 2026-08-03
• Building an SSRF Guard for an Agent's Web Fetches, Then Finding Two Bypasses in It — 2026-08-02
• 🧪 Lab 14 – Building and Breaking an SSRF-Safe Fetch Guard — 2026-08-02
• 📅 Day 183 — The Fix Had Two More Holes: A Live DNS-Rebinding Bypass Hunt — 2026-08-02
• 📅 Day 182 — Building an SSRF-Safe Fetcher for an Agent That Reads the Web — 2026-08-01

Scheduling

• 📅 Day 210 — Fixing an Unattended Job That Kept Picking the Same Files and Starved the Rest — 2026-08-29

SecretRedaction

• 📅 Day 211 — Building a Relay Between ChatGPT and a Local Coding Agent, Guarded Against Stale and Duplicate Messages — 2026-08-30
• 📅 Day 187 — Making Email Verification Prove Delivery, Not Just Sending — 2026-08-06

SecretScanning

• 📅 Day 197 — Adding a Secret Scan Before Every Push to a New Repository — 2026-08-16

SecretsManagement

• Incident Report: An Exposed Bot Token, and a Rotation That Reported Success While the Service Was Down — 2026-09-10
• 📅 Day 221 — Handling a Leaked Bot Token: Removing It from Code Is Not Revoking It — 2026-09-09

SecureAutomation

• 🧪 Lab 18 – Allowing Exactly One Reply per Incoming Message — 2026-08-25
• 📅 Day 206 — Requiring a Recent Incoming Message Before a Bot May Reply, Once — 2026-08-25

SecureDelivery

• 📅 Day 238 — Extending an Outgoing-Message Guard to Check the Message It Replies To — 2026-09-26
• Sharing an Agent's Output Files Safely: Expiring Links and Hash Checks — 2026-07-18
• 🧪 Lab 09 – Testing Safe File Delivery: Expiring Links and Hash Checks — 2026-07-18
• 📅 Day 168 — Secure Artifact Delivery: Narrow Links, Verified Bytes, and No Duplicate Sends — 2026-07-18

SecureMessaging

• 📅 Day 222 — Moving a Message Safety Filter to the Final Delivery Step — 2026-09-10

SecurityAssessment

• 📅 Day 223 — Basing Website Security Claims on What a Real Browser Shows — 2026-09-11

SecurityHeaders

• WebCheckup Report: External Check-Up of juribuora.com, With Fixes and a Re-Test — 2026-10-01

SecurityOperations

• 🧪 Lab 32 – Building a Status Record That Holds No Message Content and Expires — 2026-09-29
• 📅 Day 241 — Keeping a Daily Status Digest from Becoming a Transcript Archive — 2026-09-29

SecurityTesting

• 🧪 Lab 28 – Testing an AI Agent's Final Message, Not Its First Draft — 2026-09-24
• 📅 Day 236 — Testing a Messaging Bot's Final Message Instead of the Model's First Output — 2026-09-24

ShadowDeployment

• 📅 Day 204 — Shadow-Testing a New Briefing Feature Before It Reaches Anyone — 2026-08-23

ShadowMode

• 📅 Day 174 — Shadow Trials: Letting the New Router Watch Before It Acts — 2026-07-24

SkillCuration

• 📅 Day 180 — Reviewing a Skill Catalog and Installing Only a Small Allowlist — 2026-07-30

SocialEngineering

• 🧪 Lab 27 – Assessing a Found USB Drive Without Plugging It In — 2026-09-22
• 📅 Day 234 — Assessing a Found USB Drive as a Data-Leak and Malware Risk — 2026-09-22

StateManagement

• 🧪 Lab 19 – Testing an Agent Relay That Refuses Stale or Replayed Messages — 2026-08-30
• 📅 Day 211 — Building a Relay Between ChatGPT and a Local Coding Agent, Guarded Against Stale and Duplicate Messages — 2026-08-30

StaticSite

• 📅 Day 8 — Killing Minima Ghosts & Owning the Stack — 2026-01-26

StaticSites

• 📅 Day 7 — Workflow Ergonomics & GitHub Pages Stabilization — 2026-01-25

Supervisor

• 📅 Day 195 — Fixing a Bug Where Narration Text Was Executed as a Task — 2026-08-14
• 📅 Day 171 — Five Ways My Automation Faked Success (and the Fail-Closed Fixes) — 2026-07-21

SupplyChainSecurity

• 🧪 Lab 29 – Reviewing an Agent Tool Bundle for Least Privilege — 2026-09-25
• 📅 Day 237 — Reviewing Which Tools a Messaging Agent Can Really Use — 2026-09-25
• 📅 Day 231 — Vulnerability Management and CI/CD Pipeline Security (Google Cybersecurity Certificate) — 2026-09-19
• 📅 Day 197 — Adding a Secret Scan Before Every Push to a New Repository — 2026-08-16
• Audit Report: Dependency Vulnerabilities in My Self-Hosted AI Agent Gateway, From 76 Findings to Zero — 2026-08-02
• 📅 Day 180 — Reviewing a Skill Catalog and Installing Only a Small Allowlist — 2026-07-30
• Vetting Third-Party Tools Before Installing Them: Source, Permissions, Removal — 2026-07-27
• 🧪 Lab 11 – Assessing a Candidate Tool Before Adoption — 2026-07-27
• 📅 Day 177 — Choosing Tools by Evidence, Not by Novelty — 2026-07-27

SwiftUI

• 📅 Day 138 — An iOS Companion for My Local Agent, Private by Design — 2026-06-18

TCPIP

• 📅 Day 113 — Sniffing, Spoofing, and Interception Tactics — 2026-05-24
• 📅 Day 112 — DoS, DDoS, SYN Floods, Smurf, and Amplification — 2026-05-23
• 📅 Day 111 — Reading tcpdump-Style Logs and DNS/ICMP Failures — 2026-05-22
• 📅 Day 109 — Firewalls, VPNs, Proxies, Security Zones, and CIDR — 2026-05-20
• 📅 Day 108 — Network Protocols, Ports, DNS, HTTP, and Remote Access — 2026-05-19
• 📅 Day 107 — Network Architecture, Cloud Networks, and the TCP/IP Model — 2026-05-18
• 📅 Day 96 — IP Spoofing, Sniffing, and Attack Technique Classification — 2026-05-07
• 📅 Day 95 — DoS, DDoS, Smurf Attacks, and Amplification — 2026-05-06
• 📅 Day 94 — DNS and ICMP Traffic Incident Analysis — 2026-05-05
• 📅 Day 89 — From Protocol Memorization to SOC Thinking — 2026-04-30
• 📅 Day 87 — Network Protocols, Ports, and SOC Visibility — 2026-04-28
• 📅 Day 34 — Networking Mental Model Reset (DNS, TCP/UDP, HTTPS/TLS, QUIC) — 2026-03-03
• 📅 Day 32 — OSI Model, Encapsulation, and Core Network Protocols — 2026-03-01

Tailscale

• 📅 Day 160 — Tailscale Broke My Stack: Node Identity, Hostnames, and Private Services — 2026-07-10
• 📅 Day 138 — An iOS Companion for My Local Agent, Private by Design — 2026-06-18

TechnicalWriting

• 📅 Day 170 — Making Security Work Clear Without Overselling It — 2026-07-20

TestHarness

• 📅 Day 200 — Red-Teaming My Own Chatbot: Building an Adversarial Persona Harness — 2026-08-19

Testing

• 🧪 Lab 19 – Testing an Agent Relay That Refuses Stale or Replayed Messages — 2026-08-30
• 🧪 Lab 18 – Allowing Exactly One Reply per Incoming Message — 2026-08-25
• 📅 Day 176 — Execution Depth Presets, a Broken Build, and Unit Tests for the Small Stuff — 2026-07-26
• 📅 Day 169 — Why Safe Rollouts Use Feature Flags, Fixtures, and Evidence Gates — 2026-07-19
• 🧪 Lab 09 – Testing Safe File Delivery: Expiring Links and Hash Checks — 2026-07-18
• 🧪 Lab 08 – Auditing What an AI Agent Is Given to Read Before It Acts — 2026-07-15
• 📅 Day 161 — Hardening the iOS Companion: Untrusted Links, Redacted Errors, and the 'Full Power' Question — 2026-07-11
• 📅 Day 147 — 'Build Succeeded' Isn't Proof: Writing a Real UI Test for the Auth Flow — 2026-06-27

ThreatHunting

• 🧪 Lab 22 – SQL Time-Window Filtering for Authentication Triage — 2026-09-12
• 📅 Day 224 — SQL for Security Triage: Filtering Logins by Date, Time and Number — 2026-09-12

ThreatIntelligence

• 📅 Day 233 — OSINT: Turning Public Information into Security Intelligence (Google Cybersecurity Certificate) — 2026-09-21

ThreatModeling

• Risk Assessment of My AI Agent Workstation Using NIST SP 800-30 — 2026-10-01

TimeSecurity

• 📅 Day 207 — Gating the One Scheduled Message a Bot May Send Without Being Asked — 2026-08-26

TokenRotation

• 📅 Day 221 — Handling a Leaked Bot Token: Removing It from Code Is Not Revoking It — 2026-09-09

ToolEvaluation

• 📅 Day 178 — Testing Whether a Codebase Index Actually Helps Find Evidence — 2026-07-28
• Vetting Third-Party Tools Before Installing Them: Source, Permissions, Removal — 2026-07-27
• 🧪 Lab 11 – Assessing a Candidate Tool Before Adoption — 2026-07-27
• 📅 Day 177 — Choosing Tools by Evidence, Not by Novelty — 2026-07-27

Tooling

• 📅 Day 137 — Running DS4: A Serious Local Model on a Laptop With Limits — 2026-06-17
• 📅 Day 132 — Giving a Local LLM Hands: LM Studio, Function Calling, and MCP Servers — 2026-06-12
• 📅 Day 131 — Project Retrospective: Turning a Real Website Build Into Portfolio Evidence — 2026-06-11
• 📅 Day 130 — Public Website Security Review for a Static Business Site — 2026-06-10
• 📅 Day 129 — Testing, Linting, Type Checking, and Build Validation — 2026-06-09
• 📅 Day 128 — Privacy, Analytics, and Consent-Aware Configuration — 2026-06-08
• 📅 Day 127 — Custom Domain, DNS, and Website Availability — 2026-06-07
• 📅 Day 126 — GitHub Pages Deployment and CI/CD Trust Boundaries — 2026-06-06
• 📅 Day 125 — Image Optimization and Performance as Operational Security — 2026-06-05
• 📅 Day 124 — SEO, Metadata, and Structured Data Without Forgetting Security — 2026-06-04
• 📅 Day 123 — Contact Forms, Validation, and Anti-Spam Thinking — 2026-06-03
• 📅 Day 122 — Mobile-First UX and Customer-Facing Reliability — 2026-06-02
• 📅 Day 121 — Routing, Pages, and Public Attack Surface — 2026-06-01
• 📅 Day 120 — Repository Structure and Operational Hygiene — 2026-05-31
• 📅 Day 119 — React, TypeScript, Vite, and Tailwind as a Production Stack — 2026-05-30
• 📅 Day 118 — Real Client Website Scope and Business Requirements — 2026-05-29
• 📅 Day 116 — Frontend Architecture, Website Optimization, and GitHub Workflows — 2026-05-27
• 📅 Day 115 — Local AI Models, Coding Agents, and Operational Automation — 2026-05-26
• 📅 Day 101 — Frameworks, Controls, Ethics, and Analyst Tooling — 2026-05-12
• 📅 Day 65 — Understanding GitHub Authentication, Cloning, and Local Repositories — 2026-04-06
• 📅 Day 39 — Building a Portable Zsh Environment with GitHub Dotfiles — 2026-03-11
• 📅 Day 33 — Expanding the SOC Learning Roadmap (Identity, Triage, and Hiring Readiness) — 2026-03-02
• 📅 Day 21 — Building My Detection Engineering Repo + Hardening My Blog Setup — 2026-02-12
• 📅 Day 20 — Auditing a Media Archive and Taking Control of Backups — 2026-02-11
• 📅 Day 18 — Intel Mac Dual-Boot Experiments, Architecture Friction, and Lab Prep — 2026-02-09
• 📅 Day 8 — Killing Minima Ghosts & Owning the Stack — 2026-01-26
• 📅 Day 7 — Workflow Ergonomics & GitHub Pages Stabilization — 2026-01-25

Triage

• 🧪 Lab 07 – Investigating a False-Positive Alert in a Verification Script — 2026-07-14

Troubleshooting

• 📅 Day 133 — When the Learning Log Breaks: Fixing My Blog's Own Publishing Pipeline — 2026-06-13
• 📅 Day 6 — Polishing Website & Fixing Jekyll Environment — 2026-01-24

TryHackMe

• 📅 Day 52 — First Steps with Python and JavaScript for Security — 2026-03-24
• 📅 Day 51 — CLI Fundamentals, OS Security, and Understanding How Data is Represented — 2026-03-23
• 📅 Day 11 — Linux Fundamentals Part 3 (Finale) — 2026-01-31
• 📅 Day 10 — Linux Fundamentals Part 2 (SSH, Filesystem, Permissions) — 2026-01-30
• 📅 Day 9 — Linux Fundamentals Part 1 — 2026-01-27
• 📅 Day 3 — How Websites Work (Big Picture) — 2026-01-21
• 📅 Day 2 — Networking & Web Fundamentals (Consolidation Day) — 2026-01-20

UX

• 📅 Day 149 — Turning My iPhone Into a Command Center for Local Agents — 2026-06-29

Ubuntu

• 📅 Day 1 — Environment Setup & Foundations — 2026-01-19

UnicodeSecurity

• 📅 Day 184 — Fixing a Self-Certification Check That a Unicode Lookalike Could Bypass — 2026-08-03

VSCode

• 📅 Day 6 — Polishing Website & Fixing Jekyll Environment — 2026-01-24
• 📅 Day 5 — Blogging with GitHub Pages (Publishing Foundations) — 2026-01-23

Validation

• 📅 Day 223 — Basing Website Security Claims on What a Real Browser Shows — 2026-09-11
• 📅 Day 222 — Moving a Message Safety Filter to the Final Delivery Step — 2026-09-10
• Test Report: Restoring an Encrypted Backup of My AI Agent's Data on a Second Machine — 2026-09-03
• Proving a Backup Restores: Encrypted Off-Host Backup of an Agent's State — 2026-09-02
• 📅 Day 208 — Adding a Live Trial Because Passing Fixture Tests Did Not Prove a Local Model Was Ready — 2026-08-27
• 📅 Day 154 — Building a Cybersecurity Glossary Without Breaking My Notes — 2026-07-04

Verification

• Incident Report: An Exposed Bot Token, and a Rotation That Reported Success While the Service Was Down — 2026-09-10
• 📅 Day 219 — Upgrading a Live Service and Proving Which Commit Is Actually Running — 2026-09-07
• 📅 Day 191 — Building a Watchdog for Expiring Credentials and Proving the Alarm Fires — 2026-08-10
• 📅 Day 187 — Making Email Verification Prove Delivery, Not Just Sending — 2026-08-06
• 🧪 Lab 12 – Extracting Text from a Local HTML File Safely — 2026-07-29
• Stopping an AI Agent from Claiming Success It Cannot Prove — 2026-07-21
• 📅 Day 171 — Five Ways My Automation Faked Success (and the Fail-Closed Fixes) — 2026-07-21
• 📅 Day 170 — Making Security Work Clear Without Overselling It — 2026-07-20
• 📅 Day 164 — Verifying the Verifier: A False-Positive Streak in My Own Checks — 2026-07-14
• 📅 Day 159 — Widening an Agent's Write Scope on Purpose (and Making Its Findings Earn Evidence) — 2026-07-09
• 📅 Day 153 — Testing Hermes Agent: Strong First Builds, Weak Self-Verification — 2026-07-03
• 📅 Day 142 — Benchmarking an Autonomous Agent: Strong One-Shot Builds, Unreliable Self-Debugging — 2026-06-22
• 📅 Day 140 — AI-OS: Governance, Routing, and a Verification Gateway for My Local Agents — 2026-06-20

VirtualMachine

• 📅 Day 1 — Environment Setup & Foundations — 2026-01-19

Visualization

• 📅 Day 3 — How Websites Work (Big Picture) — 2026-01-21

VoiceSecurity

• 🧪 Lab 33 – Requiring Confirmation Before a Voice Command Starts an Agent Job — 2026-09-30
• 📅 Day 242 — Testing a Voice Command Path That Starts Coding-Agent Jobs from Telegram — 2026-09-30

VulnerabilityAssessment

• Vulnerability Assessment of an Internet-Exposed Database (Training Scenario, NIST SP 800-30) — 2026-09-23
• 📅 Day 235 — Writing a Vulnerability Assessment Report for an Internet-Exposed Database (Simulated) — 2026-09-23

VulnerabilityManagement

• 📅 Day 231 — Vulnerability Management and CI/CD Pipeline Security (Google Cybersecurity Certificate) — 2026-09-19
• Audit Report: Dependency Vulnerabilities in My Self-Hosted AI Agent Gateway, From 76 Findings to Zero — 2026-08-02

VulnerabilityReport

• Vulnerability Report: DNS-Rebinding SSRF in a Web-Reading Tool for an AI Agent — 2026-08-03

VulnerabilityScoring

• 📅 Day 232 — Defense in Depth, CVE, CVSS and the OWASP Top 10 (Google Cybersecurity Certificate) — 2026-09-20

WebCheckup

• 📅 Day 157 — WebCheckup: Turning the Mini-Audit Into a Real Multilingual Service — 2026-07-07

WebFundamentals

• 📅 Day 131 — Project Retrospective: Turning a Real Website Build Into Portfolio Evidence — 2026-06-11
• 📅 Day 130 — Public Website Security Review for a Static Business Site — 2026-06-10
• 📅 Day 129 — Testing, Linting, Type Checking, and Build Validation — 2026-06-09
• 📅 Day 128 — Privacy, Analytics, and Consent-Aware Configuration — 2026-06-08
• 📅 Day 127 — Custom Domain, DNS, and Website Availability — 2026-06-07
• 📅 Day 126 — GitHub Pages Deployment and CI/CD Trust Boundaries — 2026-06-06
• 📅 Day 125 — Image Optimization and Performance as Operational Security — 2026-06-05
• 📅 Day 124 — SEO, Metadata, and Structured Data Without Forgetting Security — 2026-06-04
• 📅 Day 123 — Contact Forms, Validation, and Anti-Spam Thinking — 2026-06-03
• 📅 Day 122 — Mobile-First UX and Customer-Facing Reliability — 2026-06-02
• 📅 Day 121 — Routing, Pages, and Public Attack Surface — 2026-06-01
• 📅 Day 120 — Repository Structure and Operational Hygiene — 2026-05-31
• 📅 Day 119 — React, TypeScript, Vite, and Tailwind as a Production Stack — 2026-05-30
• 📅 Day 118 — Real Client Website Scope and Business Requirements — 2026-05-29
• 📅 Day 110 — Enterprise Network Flow and Attack Surface Mapping — 2026-05-21
• 📅 Day 103 — Security Frameworks, Controls, NIST CSF, OWASP, and Audits — 2026-05-14
• 📅 Day 98 — Cookie Banners, Technical Cookies, and Website Privacy Checks — 2026-05-09
• 📅 Day 97 — Privacy-First Website Analytics — 2026-05-08
• 📅 Day 91 — Enterprise Attack Surface and Exploitation Points — 2026-05-02
• 📅 Day 90 — Mapping an Enterprise Network End to End — 2026-05-01
• 📅 Day 88 — Security Design Principles and OAuth — 2026-04-29
• 📅 Day 62 — Understanding Phishing Attacks and Email Security Controls — 2026-04-03
• 📅 Day 55 — Typosquatting and Malicious Domain Impersonation — 2026-03-27
• 📅 Day 53 — Understanding Phishing Attacks and Email Security Layers — 2026-03-25
• 📅 Day 51 — CLI Fundamentals, OS Security, and Understanding How Data is Represented — 2026-03-23
• 📅 Day 34 — Networking Mental Model Reset (DNS, TCP/UDP, HTTPS/TLS, QUIC) — 2026-03-03
• 📅 Day 31 — Regex Behavior and Text Processing Foundations — 2026-02-28
• 🧪 Lab 03 — HTTP in Practice (Pentester POV) — 2026-02-08
• 📅 Day 17 — Cookies, Sessions, and Trust Boundaries — 2026-02-08
• 📅 Day 8 — Killing Minima Ghosts & Owning the Stack — 2026-01-26
• 📅 Day 3 — How Websites Work (Big Picture) — 2026-01-21

WebPerformance

• WebCheckup Report: External Check-Up of juribuora.com, With Fixes and a Re-Test — 2026-10-01

WebSecurity

• WebCheckup Report: External Check-Up of juribuora.com, With Fixes and a Re-Test — 2026-10-01
• 📅 Day 223 — Basing Website Security Claims on What a Real Browser Shows — 2026-09-11
• 📅 Day 145 — Productizing a Website Security Mini-Audit, and Finding an Access Gap in My Own Funnel — 2026-06-25
• 📅 Day 144 — A 348-Term Glossary and the False Positives That Came With It — 2026-06-24
• 📅 Day 135 — Auditing My Own Website, Then Fixing What the Report Found — 2026-06-15
• 📅 Day 134 — Building a Website Trust & Security Mini-Audit Service — 2026-06-14

WebTesting

• 📅 Day 153 — Testing Hermes Agent: Strong First Builds, Weak Self-Verification — 2026-07-03

WebsiteMaintenance

• 📅 Day 6 — Polishing Website & Fixing Jekyll Environment — 2026-01-24

WhatsApp

• 📅 Day 206 — Requiring a Recent Incoming Message Before a Bot May Reply, Once — 2026-08-25

Windows

• 📅 Day 58 — DLL Files, Code Signing, and Malware Trust Verification — 2026-03-30
• 📅 Day 57 — LOLBins Deep Dive: Squiblydoo (rundll32 and mshtml Abuse) — 2026-03-29
• 📅 Day 41 — Sysmon Telemetry, Lab Automation, and Full Cyber Lab Architecture — 2026-03-13
• 📅 Day 40 — Building a Reproducible Windows SOC VM and Lab Infrastructure — 2026-03-12

Windows11

• 📅 Day 1 — Environment Setup & Foundations — 2026-01-19

Workflow

• 📅 Day 7 — Workflow Ergonomics & GitHub Pages Stabilization — 2026-01-25

Worktrees

• 🧪 Lab 10 – Isolating Parallel Agents with Git Worktrees — 2026-07-22
• 📅 Day 172 — Parallel Agents Without Collisions: Task Graphs and Git Worktrees — 2026-07-22

ZeroDay

• 📅 Day 4 — Recovery Day Logged Honestly — 2026-01-22

api-security

• PASTA Threat Model: Sneaker Marketplace Mobile App — 2026-10-01

application-security

• PASTA Threat Model: Sneaker Marketplace Mobile App — 2026-10-01

authentication

• PASTA Threat Model: Sneaker Marketplace Mobile App — 2026-10-01

cybersecurity

• PASTA Threat Model: Sneaker Marketplace Mobile App — 2026-10-01

data-protection

• PASTA Threat Model: Sneaker Marketplace Mobile App — 2026-10-01

iOS

• 📅 Day 161 — Hardening the iOS Companion: Untrusted Links, Redacted Errors, and the 'Full Power' Question — 2026-07-11
• 📅 Day 149 — Turning My iPhone Into a Command Center for Local Agents — 2026-06-29
• 📅 Day 147 — 'Build Succeeded' Isn't Proof: Writing a Real UI Test for the Auth Flow — 2026-06-27
• 📅 Day 146 — Giving My Local Agent Daemon Real Auth (And Almost Leaking the Token in the 401 Page) — 2026-06-26
• 📅 Day 138 — An iOS Companion for My Local Agent, Private by Design — 2026-06-18

macOS

• 📅 Day 7 — Workflow Ergonomics & GitHub Pages Stabilization — 2026-01-25

pasta

• PASTA Threat Model: Sneaker Marketplace Mobile App — 2026-10-01

rbenv

• 📅 Day 6 — Polishing Website & Fixing Jekyll Environment — 2026-01-24

sql-injection

• PASTA Threat Model: Sneaker Marketplace Mobile App — 2026-10-01

threat-modeling

• PASTA Threat Model: Sneaker Marketplace Mobile App — 2026-10-01