The Path Not Found Is the Point
Scanners arrive with a shopping list: WordPress, admin panels, .env files, and login forms. A static site has none of those. That absence turns the site into a passive honeypot.
Read more12 posts found.
Scanners arrive with a shopping list: WordPress, admin panels, .env files, and login forms. A static site has none of those. That absence turns the site into a passive honeypot.
Read moreOne CloudFront edge location dominated the probe traffic by a factor of six. Pulling that thread led to Azure Canada Central and a particular kind of internet scavenger.
Read moreA static site with no login pages, no forms, and no commercial value still attracts thousands of unsolicited requests per month. This is what that traffic contains.
Read moreWhy a CloudFront Function was the right choice for canonical host redirects and URL rewriting, and what would change that decision.
Read moreA privacy-preserving analytics pipeline on AWS, built to cost almost nothing.
Read moreHow ruling things out did most of the design work.
Read moreS3 returns 403 for missing objects when the caller lacks ListBucket permission. Here's why, and how to fix it for static sites on CloudFront.
Read moreImplementing a tiered caching strategy that balances high-performance delivery for assets with immediate consistency for content updates.
Read moreHow to simplify your AWS security model by clearly separating human access from automated deployment.
Read moreWhy security is about explicit intent rather than system size, and how to implement robust boundaries without enterprise complexity.
Read more