Blog

Security posts

Practical application security: phishing infrastructure, secret handling, authentication flows, and the reporting process that gets bad actors taken offline.

1 post in Security

Sorted by newest first

Secure locker terminal with a touchscreen interface

Security30 Mar 20269 min readReader favourite

How I Accidentally Stepped on a Phishing Site and Then Helped Shut It Down

A search result one position below the real thing took me to a login page that looked exactly right. I noticed a detail that was almost right, and the next four hours turned into a reporting exercise that took the whole operation offline.