Security
Capstone: The Incident I Rehearse For
I have not been breached by a supply-chain attack. This is the drill I rehearse for anyway, in three acts: crisis, survival, advancement.
Mohammed jawed · · 13 min read
Tag
#infosec
Security
Part 2: The Morning I Realized the Door Had No Lock
Short-lived tokens, rotating refresh, 2FA, email-match OAuth, and the one-call revocation I built the day I couldn't cleanly remove one person.
Mohammed jawed · · 14 min read
Security
Part 1: What a WAF Monitor Taught Me About the Real Cost of a Public IP
Three minutes after DNS resolved, the first bot arrived. What a live WAF monitor showed me, and the drift I found when I finally looked.
Mohammed jawed · · 13 min read
Security
Part 0: Security Without a Security Team
The whole posture behind live production systems, on one page. Four rings, six principles, and the disclosure discipline behind all of it.
Mohammed jawed · · 11 min read