English tag hub: same canonical tag strings as the Spanish site (Tags in front matter); this page’s chrome and blurbs are in English.
Posts tagged: Cybersecurity
Advanced cybersecurity: protecting your data in a vulnerable digital world
Beyond the basics—stronger authentication, network hygiene, monitoring, and organizational controls.
Read more →
AINARRES: change the shape, not the volume
Four findings came out of the last two deliveries, and three of them were bugs in my model of the system rather than in the system. They did not come from more testing. They came from changing the shape of the input twice — handing the operator''s seat to a stranger, and handing the machine a problem instead of a specification. This installment ships no code. It argues that when you build a system you also operate, your own habits quietly satisfy your assumptions, and the only thing that surfaces them is a change of shape.
Read more →
AINARRES: only wake who the work needs
The machine that runs itself had an expensive habit — whenever any task was waiting, it started every worker it had, and most of them found nothing to do. This installment teaches the substrate to report what is waiting in terms of capabilities, so the service can wake exactly the workers that can serve it. The interesting part was not the saving. It was what happened when the machine found a capability nobody holds — and, correctly, told me to hire someone for a job I had deliberately kept for myself.
Read more →
AINARRES: someone else sat in the seat
Last installment built a seat for an agent operator and a credential envelope so it would not have to hold the signing key. Then I drove it myself, which proves nothing. This time an agent that had built none of it sat down, with no key, and ran a delivery end to end. The boundary held. What broke were two things that were working exactly as designed — and unreadable to anyone who did not already know the answer.
Read more →
AINARRES: the crank is gone — the machine that runs itself
For every feature this series describes, a human still did two things by hand — started the machine, and hand-wrote the request that fed it. This installment retires both. AINARRES stops being a script you run and becomes a process that runs — idling when there is no work, waking on its own when there is — and it grows a door, an authenticated way for a request to arrive from outside. The prettiest part is honest: the machine that no longer needs starting built its own status dial, hands-off, and a bug we had been dismissing as "flaky" turned out to be real.
Read more →
AINARRES: the first brief that wasn't a spec
Every request I had ever handed the swarm was a specification in disguise — the function named, the strings quoted, the assertions listed. This one was a problem, a contract it may not reopen, and permission to refuse. It came back as a four-node dependency graph, built in eighteen seconds, and four merged pull requests in seventy-one minutes: the first time this machine has been handed something to decide rather than something to transcribe. Two findings came with it, and both were about my work rather than its.
Read more →
AINARRES: the operator seat
For twelve installments there was a person at the terminal doing the things no role covered — refining a request, creating the work, starting the service. That person was never an identity. They were whoever held the signing key, wearing whichever worker's face the act happened to require. This installment gives that seat a name, and then discovers what a name makes visible: months of work credited to the wrong families, a whole class of spending the system could not see, and a definition of "operator" that nobody had ever had to write down.
Read more →
Cybersecurity in the digital world: protecting your information online
Why cybersecurity matters in a connected environment and practical steps to keep your information safer on the web.
Read more →
The internet is not a safe place (II) — privacy
How privacy is at risk when we browse carelessly—and what large platforms learn from cookies, embeds, and cross-site scripts.
Read more →
Introduction to cybersecurity
A practical introduction to cybersecurity with concrete tips to protect your valuable data online.
Read more →
JWT Authentication with PostgREST
Why JSON Web Tokens help secure a PostgREST API, and how roles, headers, and PostgreSQL functions fit together.
Read more →
Social network privacy: tips and good practices
How to keep your data and boundaries healthier on social platforms without abandoning them entirely.
Read more →
Tuqan — Stage 3: Configuration Externalization and Safer Queries
How in Stage 3 of the Tuqan modernization we started removing hardcoded credentials and replacing string-concatenated SQL queries with prepared statements on the most critical paths of the application.
Read more →