costaskou

Have you ever sat in a meeting when someone asks, “Didn’t Alex fix this back in 2015?”

I very matter of factly told a colleague that security.txt is a well-known standard but it's not widely used in "major corporations".

One of my hobbies is researching covert exfiltration mechanisms that use public cloud services1.

It seems like you're asking me to change my password every x days.

It all started down at the pub, during a casual, work-adjacent gathering.

2025 started with me ripping off the USB port of the left hand side of my redox keyboard.

How many IAM layers exist when accessing an S3 object from within an AWS VPC using an AWS principal?

Sometimes I use a simple mnemonic to evaluate an organisation's cybersecurity maturity.

Check out Clotho and a working example using Squid In the realm of public cloud computing, the necessity of utilizing public endpoints is an inherent characteristic — it's what defines the "public" in public cloud.

I'm writing an authorisation library for AWS in Rust and Python.

I stumbled upon this post on the AWS subreddit: How are you mitigating the risk of a rogue AWS engineer accessing our data or damaging the RDS instance?

With my browser setup I don't get to see the GDPR cookie banners.

You can solve any problem in an enterprise setting by assigning it to the team that is not in the meeting.

I stumbled upon lottery statistics which are very useful if you have never come across the gambler's fallacy.

Race Conditions in Cloud Security Posture Management Race conditions - the archenemy of all detective and corrective controls.

I like Medium.

The shared responsibility of credential stuffing If your account falls victim to a credential stuffing attack, whose responsibility is it ?

Querying and Visualising OctoDNS records with Neo4j Visualising DNS records with Neo4j OctoDNS provides a toolset for managing DNS records across multiple providers.

The economics of credential stuffing attacks If you run a website with a login form, you have either experienced a credential stuffing attack or it has gone undetected.

Build your own keyboard Out of all the peripherals out there, I like keyboards the most.