I quickly recall the first time I watched a SOC analyst triage hundreds of security alerts. It was late- 2 AM- and they were taking their third energy beverage, and one-third or so of those notifications were false positives. That…
Now, I have been playing Pokemon TCG long enough to start to know that most promotional cards are simply collector bait. You acquire them, they are trendy, and they can fit in your binder as you use your deck of…
I have exhausted dozens of mobile card games billed as having social features, and most of them drop a friends list on it and proceed with their business. Then I had a sluggish weekend, downloaded Pokemon TCG PPocket, and was,…
Fine, I have been buying Pokemon cards since the Deadpool days, and I believed in the rarity system. Then came Pokemon TCG Pocket: the Mega Evolution set was released in September 2025, and now I find myself looking at cards…
Honestly, I would look, but I assumed that, at first, when the Mareep Drop Event showed up on the Pokémon TCG Pocket, it would be yet another grindy thing. However, after gambling a week on Expert and earning all the…
Mmm, I am going to be candid about this – the first install that I did in November 2024 was to download Pokemon TCG Pocket, and at that time I believed that sometimes a promo card is a fancy selection…
I previously leaked an API key to GitHub. I spent Sunday panicking, rotating credentials, and reviewing access logs. That error saved me a whole library on API authentication that no tutorial could. Authentication is no longer optional when building or…
I’ve built enough systems to know that, in the current state of things, tokens are omnipresent, and most developers aren’t adequately informed about the underlying mechanics. Another incident I experienced involved planning a weekend reconstruction of an auth system after…
I’m not here to preach to you about password security. You’ve heard it all before. However, one thing that can catch your eye is enabling Multi-Factor Authentication (MFA), which can block 99.9% of automated attack attempts against your account. This…
You see, I wasted far too much time not understanding these three protocols before I realized it. Everybody throws around “SAML,” OAuth, and OpenID Connect like they are similar, but they are not. Each addresses a different issue, and choosing…
I have more than 20 years of experience logging into websites, and I honestly didn’t think much about how bad passwords were until I started noticing how authentication is actually implemented. Moving off passwords and toward passwordless isn’t just a…
You know, I was telling you the truth: I had spent too long thinking authorization and authentication were practically identical. They both deal with access; they both sound technical, quite frankly. Most articles describe them in a monotonous way. Then…