What a Login Request Looks Like Once You Stop Trusting the BrowserTwo weeks ago I watched a login cross the network in Wireshark — passively, from the outside, reading packets as they flew past. This week I stopped one mid-flight and rewrote it before it reached theJul 30 · 8 min readgoosegustin.hashnode.dev
I Built a Fraud Detector With Zero Frameworks — Just the Python Standard LibraryThere's a belief that catching fraud requires a platform. A SIEM. A machine-learning model. A vendor contract with "AI-powered" somewhere in the deck. I believed some version of it too — right up untiJul 29 · 7 min readgoosegustin.hashnode.dev
Your Login Form Has a Six-Step Journey. I Watched Every One.DNS is the thing everyone learns wrong first: "it's the internet's phonebook." That explanation is why so many developers can look at a failed login and have no idea whether the problem is their code,Jul 28 · 7 min readgoosegustin.hashnode.dev
Case Study: Wayback Machine + Git Folder = A Devastating Data LeakHow a Forgotten Directory Led to Full Source Code Exposure In cybersecurity, the most dangerous threats often come from the most mundane oversights. A simple misconfiguration—one that many developers might dismiss as harmless—can lead to catastrophic...Jul 24, 2025 · 3 min readgoosegustin.hashnode.dev
Case Study: How Poor Patching and Open Ports Led to the Equifax BreachIn 2017, one of the most catastrophic breaches in U.S. history occurred — nearly 148 million people had their personal data stolen from Equifax. The cause? A combination of overlooked security basics: an unpatched vulnerability and an exposed web app...Jul 18, 2025 · 2 min readgoosegustin.hashnode.dev