#security
45 episodes
#4982: Why Airport Security Feels So Inconsistent
The real reason your belt gets flagged at one airport but not the next—and why millimeter-wave scanners create more problems than they solve.
#4889: Airport Taxi Scams: Why Official Ranks Are the Trap
Why the official taxi rank with attendants is actually the most dangerous place to get a cab.
#4838: The CueCat: A Dot-Com Catastrophe
The story of the free cat-shaped barcode scanner that burned $185 million and then found a second life.
#4759: API Keys vs OAuth: When Simplicity Becomes a Security Trap
API keys are simple but leak identity, scope, and auditability. Here's when they work and when they don't.
#4756: Eliminating the Secret: Workload Identity Without Credentials
How Google Cloud, AWS, Azure, and Kubernetes are moving from long-lived keys to ephemeral, platform-issued tokens.
#4755: Why OAuth Makes You Re-Authorize Apps
Understanding delegated authority: why OAuth's consent flow is a feature, not a bug.
#4754: Why Code Authentication Needs So Many Keys
API keys, OAuth tokens, service accounts — why can't one authenticator rule them all? The answer is trust topology.
#4753: Cookies as AI Credentials: The Auth Problem
How to get browser cookies into an AI agent's hands — and why they expire so fast.
#4746: Did 9/11 Create the Security State?
How a single morning reshaped surveillance, intelligence, and daily life for a quarter century.
#4741: Hardware Tokens That Never Leave the Port
Why developers should consider keeping a hardware security token permanently plugged in — and which ones survive the abuse.
#4740: Why FTP Still Exists and SSH Won't Die
FTP from 1985 is still not deprecated. SSH from 1995 keeps evolving. What determines which protocols survive?
#4733: Why OAuth Still Makes You Dance on Your Own Machine
Why does OAuth treat your personal computer like a public terminal? We explore token storage, PKCE, and Linux secret APIs.
#4695: The Unfenced Runway: When Airfields Blend Into Town Life
What happens when a working airfield has no fence, no guards, and a grandmother using the runway as a shortcut?
#4664: The Trapdoor in Your CPU: How Hypervisors Actually Work
Inside the silicon trapdoor that makes virtualization possible — and why it's nothing like Docker.
#4626: What Israeli Law Allows in a Violent Split Second
What can you legally do when someone is attacked in front of you? We break down self-defense, citizen's arrest, and why people freeze.
#4585: Why `export` Fails But Files Work: Linux Process Secrets
Why does `wrangler login` work across shells but `export` doesn't? The answer reveals how Linux processes really share data.
#4424: Inside the 3D Secure Redirect: What Happens When Your Card Gets Challenged
That split-second redirect at checkout is 3D Secure 2. Here's how the ACS, risk scoring, and SMS challenges actually work.
#4417: How to Tell Real Security Tools From Fakes
A friend's question about SSN monitoring reveals how to spot fake security tools designed to steal what you're trying to protect.
#4261: The Security You Can't See at Ofer Prison
What looks like a shabby, low-tech prison is actually a high-tech fortress. Here's what you're missing.
#4229: SSH Key Strategy: Compartmentalization vs. Chaos
Application-specific SSH keys vs. one key for everything — and what AI agents mean for both approaches.
#4161: How Your Password Manager's 6-Digit Code Actually Works
Your phone and a server generate the same code without ever talking. Here's the elegant math behind it.
#4085: The Clinton Email Server: A Technical Autopsy
What was actually in that Chappaqua basement? A technical breakdown of the most infamous self-hosted email server in history.
#4040: The Clipboard That Opens Any Door
Professional liars with rulebooks: inside the world of authorized break-ins, badge cloning, and jail time as a line item.
#3999: The VLAN Blind Spot: Why Your IoT Devices Still Talk to Each Other
VLANs isolate IoT from your main network, but devices inside can still attack each other. Client isolation is the missing piece.