Cyberattacks
339 episodes · Page 4 of 15
#4967: AI Gateways: Worth the Middleware Tax?
When does an AI gateway's overhead justify its features? We break down the tradeoffs.
#4849: VPN on Public Wi-Fi: What's Actually Protected?
Your VPN isn't doing what you think. Here's what's actually at risk on airport Wi-Fi in 2026.
#4785: Bonding Wi-Fi and Cellular: Speedify's Catch for Tailscale Users
Speedify bonds Wi-Fi and cellular seamlessly — until it silently breaks your tailnet. Here's the fix.
#4776: Wi-Fi Monitor Mode Hardware Guide
From $40 Alfa adapters to $3,000 spectrum analyzers — the hardware that listens to your network.
#4765: Firewall Rules for Your Social Life
A network engineer’s take on why some people default-deny and others permit any — and how to share a network.
#4759: API Keys vs OAuth: When Simplicity Becomes a Security Trap
API keys are simple but leak identity, scope, and auditability. Here's when they work and when they don't.
#4758: Agent Credentials: Beyond the Password Manager
Why OS keychains fail for AI agents — and what the broker model does instead.
#4757: AI Agents Need a New Identity Model
How composite identity and short-lived credentials replace API keys for autonomous AI agents.
#4756: Eliminating the Secret: Workload Identity Without Credentials
How Google Cloud, AWS, Azure, and Kubernetes are moving from long-lived keys to ephemeral, platform-issued tokens.
#4755: Why OAuth Makes You Re-Authorize Apps
Understanding delegated authority: why OAuth's consent flow is a feature, not a bug.
#4754: Why Code Authentication Needs So Many Keys
API keys, OAuth tokens, service accounts — why can't one authenticator rule them all? The answer is trust topology.
#4753: Cookies as AI Credentials: The Auth Problem
How to get browser cookies into an AI agent's hands — and why they expire so fast.
#4751: AI Agents vs Anti-Bot Systems
Why AI agents get blocked by anti-bot systems and what actually works to get through.
#4750: Reverse-Engineering Hidden Web APIs
How to find undocumented APIs in your browser's network tab and hand them to AI agents.
#4741: Hardware Tokens That Never Leave the Port
Why developers should consider keeping a hardware security token permanently plugged in — and which ones survive the abuse.
#4740: Why FTP Still Exists and SSH Won't Die
FTP from 1985 is still not deprecated. SSH from 1995 keeps evolving. What determines which protocols survive?
#4736: Running Networks Where Failure Means Lives Lost
How military sysadmins run air-gapped networks where mistakes cost lives, not just money.
#4665: The Hidden Auction Where Your Data Gets Sold
How your phone's location, shopping habits, and health searches get auctioned off in milliseconds — and why paying for apps doesn't protect you.
#4649: Why Open Source Heroes Can't Afford Rent
The code running the internet is maintained by people earning a dollar a year. Why does the market fail to reward our digital commons?
#4636: Taming Three DNS Overlays on One Laptop
Commercial VPN, Tailscale, and WARP on one machine — here's how to make them share DNS without leaking a single query.
#4635: Your Phone Is a Firewall Blind Spot — Here's Why
Android ships with no user-facing firewall, and cellular isn't the safe LAN you think. We dig into what's exposed and what actually protects you.
#4602: The Two Manifests: API vs PNR Explained
Passenger manifests aren't one list — they're two distinct data transmissions with different purposes, formats, and legal frameworks.
#4582: Designing a Home MCP Gateway for Conversational AI
How to securely connect ChatGPT to a home-hosted MCP gateway — transport, auth, and the missing pieces.
#4515: Where Extremist Forums Actually Went After Reddit Bans
Reddit bans didn't push extremists to the dark web. They went to Telegram. Here's why.