Authenticated testing detects 78% more sensitive data exposure
Analysis of 105,000+ mobile app scans shows authenticated testing detects 78% more sensitive data exposure, with some findings 10-60x more likely to appear.
Don't Panic
Developer, cybersecurity expert, and author. Writing about mobile security, forensics, and software development.
Latest posts
Remove whitespace after copying Claude Code response
A quick fix for the Unicode box-drawing characters and extra whitespace that sneak in when you copy text from Claude Code in VS Code.
SEC accession number math
macOS Spotlight helpfully solves an SEC accession number as a math problem.
How to make searching shell history faster with a custom zsh function
Learn how to speed up shell history searches on macOS by creating a zsh function that chains grep filters and aliases for common queries. Reduce keystrokes and improve productivity when hunting commands.
Mobile App Vulnerabilities in ICS: What CISA Alerts Reveal
An analysis of CISA ICS Advisories related to mobile apps, highlighting vulnerabilities, severity rankings, and best practices for developers and users.
Configuring CyberNewsMCP with a local LLM
This tutorial guides you through setting up CyberNewsMCP to use a local LLM via LM Studio with Qwen2.5 model.
How to add markdown footnote support in Astro
Learn how to add footnotes and annotations support to your blog posts using the 'remark-gfm' plugin for Markdown.
How to configure Visual Studio Code so double click expands folders
Learn how to adjust VS Code settings to prevent accidental folder expansion, ensuring a more precise and controlled navigation experience.
How to avoid breaking globally installed node tools during Homebrew NVM upgrades
Learn how to prevent breaking globally installed node tools during nvm upgrades by correctly setting the $NVM_DIR.
Debugging Random HTTPS Redirects to `localhost` in Safari During Local Development
A technical blog post detailing a problem with unexpected HTTPS redirections from localhost, and how the issue was resolved.
Uncovering Audio Source with macOS Control Center
Discover how the 'Now Playing' widget in macOS can reveal all active audio sources, as demonstrated by a user experienators unexpected background music from an Apple Music session.
How to grant GitHub Container Registry permissions to GitHub Actions
Guide on resolving deployment issues with GitHub Actions.
How I debugged a Let's Encrypt TLS cert renewal error with ChatGPT
My automated TLS certs via Let's Encrypt process started failing this morning for several domains. This article dives into the issue, how I debugged it with ChatGPT, and how human steering is still critical
Claude Code committed directly to main
A small reminder that even smart assistants need clear constraints—especially when working with Git.
Why Caddy proxy sometimes causes a zero-byte file to download
This blog walks you through what was causing Caddy proxy to download a zero byte file and how to resolve it
How to convert PNGs to WebP on macOS
Why I started converting PNGs to WebP, how ImageMagick helps reduce size and strip metadata, and the bonus of using Astro’s image component for automatic resizing.
How to deploy a Docker hosted website using GitHub Actions
A quick reminder of variables I need to configure to allow my actions to automatically SSH into my production servers, pull a docker image, and restart a container
Fixing trailing slash issues with Pagefind and Caddy
How to fix
My new Apple Watch goal
How I'm changing my relationship with my Apple Watch by making it a challenge to take it off as quickly as possible each day
How to prevent macOS Sequoia from sleeping via command line
macOS Sequoia suspends background terminal tasks when idle or when the screen turns off. Here's how to keep scripts running using caffeinate.