The Curious Engineer

All blogs / Security

Little Man In My Head

littlemaninmyhead.wordpress.com

World Wide Web Security

SecurityMathAI / ML

’15’16’17’18’19’20’21’22’23’24’25’26
Posts
27 from 29 May 2015 to 7 Sep 2025
Posting
now and then
Kind
personal blog
Feed
https://littlemaninmyhead.wordpress.com/feed/

2025 3

  1. Lessons learned from doing cryptographic research with ChatGPT
  2. Inverting the Xorshift128+ random number generator
  3. A Hobbyist’s Take on Vibe Programming

2022 2

  1. A Curious Connection Between Cubing and Cryptography
  2. How I Avoided Management for 25 Years

2021 3

  1. If you copied any of these popular StackOverflow encryption code snippets, then you coded it wrong
  2. Why We Shouldn’t Commit Secrets into Source Code Repositories
  3. No, Java is not a Secure Programming Language

2020 2

  1. Fighting Bots with the Client-Puzzle Protocol
  2. Understanding Certificate Pinning

2019 5

  1. Some Useful AppSec Resources
  2. Thoughts on the Capital One Security Breach
  3. Don’t Underestimate Grep Based Code Scanning
  4. Collection of References on Why Password Policies Need to Change
  5. Protecting User Accounts When Usability Matters

2018 2

  1. Demonstrating Reflected versus DOM Based XSS
  2. Secure Coding: Understanding Input Validation

2017 4

  1. A Review of PentesterLab
  2. Why I left cryptography
  3. How I became a cryptographer
  4. Top 10 Developer Crypto Mistakes

2016 1

  1. Words With Friends Trusts The Clients A Little Too Much

2015 5

  1. Cautionary note: UUIDs generally do not meet security requirements
  2. So, You Want to Learn to Break Ciphers
  3. A Retrospective on Ashely Madison and the Value of Threat Modeling
  4. Account Enumeration via Timing Attacks
  5. Hello world!