Tag: Information Security

GraphQL Codegen, stateless MCP, prompt-as-policy, persisted queries

Week of 2026-08-03 roundup

You can't prompt your way into policy

Putting policy inside plain-language instructions gives the model a lot of (expensive) work to do before it can act, and there are no guarantees about safety. Furthermore, other prompts in the context window may be pushing in a different direction. Here's a vision for a better governance model via a context graph.

It's Your Fault You Didn't Protect Yourself

Information security and how we have been made responsible for our own safety and security.

The Future of Cyber Warfare

CSU Essay on the Future of Cyber Warfare and AI

Viasat Ukraine Case Study

A deep dive into the Viasat KA-SAT AcidRain cyber-attack

Cyber Warfare and Terrorism

Essay about Cyber Warfare and Terrorism

Using Elliptical Curve Cryptography in OpenSSH

The Botnet: Webs of Hegemony/Zombies Who Publish

The 'net was never free from commercial interest; it's not a "new" threat to democratic speech

Wireless when housesitting (airmon-ng)

PoC Code for Facebook Friend Profile Gatherer

Fetching files via echo, FTP in a non interactive shell environment

The importance of weaponization in exploit development

IE7 Remote File Access

Firefox 3 disallows cross-site XBL

An XML based XSS PoC platform

Right-To-Left and Left-To-Right characters

XSS for the common good - GreaseMousey

Obfuscated fun

Some evil stuff from sla.ckers

.NETIDS v.0.1.1.0 released

.NETIDS can now detect fragmented XSS

Firefox nested comment fragmented XSS

A bad day for browsers

dotnetids

(C)SRF one-time token bypass using AJAX and XSS

XSS Tutorial

String.fromCharCode Encoder

Bypassing Same Origin Policy using Mash-Ups

RSnake + Jeremiah Grossman's Book Released

XSF: Cross Site Flashing

MOSEB month of search engine bugs

heise Security reports backdoor in Artmedic CMS

XSS in eXceSS: A "learn-XSS tool"

XSS Cheat Sheet

PHP IDS

JavaScript eval String.fromCharCode encoder

Amendments to the British Computer Misuse Act

Bypass ASP.NET XSS Protection in Internet Explorer

httpOnly Cookie Detection

Evaluating the security of the JSONRequest object

JavaScript Referer Scripts XSS Injection

Firefox XBL-JS Loader v1.0