Tea_And_Liam

Security people don't trust documentation because documentation is evidence, not truth. Attackers don't exploit diagrams or API specs. They exploit implementation. The source of truth is production — and production often behaves very differently from what the documents describe.

AI didn't replace developers. It replaced some routine work and allowed companies to operate with fewer engineers. The challenge was never writing code. It was understanding systems, making decisions, and managing risk. It can't own the consequences when that code fails in production.

What CSP works best for a typical SPA? A practical CSP blocks inline scripts, limits trusted domains, and controls outbound connections with "connect-src" The best policy isn't the most restrictive. It's the one your team can maintain without disabling six months later

The most important stages of a security audit happen before the first vulnerability is found. Understand the system. Map assets. Build a threat model. Then test, analyze impact, and validate fixes The goal of an audit isn't finding bugs. It's understanding how a system can fail before attackers do

CSP may be the most ignored security header on the internet. Because it forces teams to understand what their frontend actually loads and trusts. It reduces the damage when things inevitably go wrong. Like many security controls, its value becomes obvious only after an incident.

Backups won't save your database. They help recover lost data, but they don't stop theft, logic corruption, ransomware, or poor security practices. Backups are not a security strategy. They're a recovery strategy. The worst time to discover the difference is during an incident.

OSINT is not just Googling. Real reconnaissance is a process: mapping targets, discovering assets, profiling technologies, understanding organizations, and connecting relationships. The goal isn't collecting data. It's building a map detailed enough to know where to look next.

Another boring day has come to an end. Honestly, I didn't think there would be so little time left for work and personal thoughts. Sometimes it feels like I'm just in the matrix...

The skills many developers ignore are the ones pentesters use daily: networks, operating systems, processes, and memory. Frameworks hide complexity. Security forces you to understand what happens underneath.

Building landing pages won’t make you a frontend developer. Listening to security podcasts won’t make you a pentester. Learning is valuable, but content is a map, not the territory. Real expertise starts when tutorials end and real systems begin.

OSINT is more powerful than most people realize. Security work often starts with public information: GitHub repos, subdomains, LinkedIn profiles, metadata, DNS records, and forgotten services. OSINT is not “hacking”. It’s understanding systems through the footprints they leave behind.

Tech influencers changed more than trends — they changed expectations. Social media rewards hype and visibility, so technology often gets reduced to fast success and oversimplified advice. But real engineering is slower, messier, and built on systems, not trends. #security #IntSec #redteam

It looks like I'm at the stage where I don't really want to play computer games, I'm tired of TV series and movies. In short, IT's ALL LINEAR. But on the other hand, there is great news about numerous data leaks or experienced social engineers who got access to places they didn't need to)

We have one tablet and one phone. And let's connect them, people didn't have anything before, Sumsung thought...

Do u like sushi? I like them all. After hard laboratory I can eat a whole set of rolls) Once I accidentally hacked a friend's app like that. Really sorry I didn't want it.

What do u think? Does AI really help with my work, or am I just such a paranoid skeptic?

What a hell is going on in my recommendations?

System thinking changes how you see technology. Beginners see isolated components. Experienced engineers see relationships: how one decision affects security, performance, and business logic across the entire system. In production, failures rarely appear as isolated bugs. #it #technologies

As an acquaintance from the Blue Team told me. Large doors are difficult to protect)

So good though. I suppose you can take a note.

I'd write something about IT, but... There's only 300 symbols, really? Okay, first of all I should say that I'd want to write about IT here. And drop different images, I don't know...