•6 min read
Who Watches the Watch List?
After three months of noise from one PHP path, the filter changed. The small promotion raised a larger question about how much judgement belongs inside a telemetry system, and who exercises it.
Read moreTag: security
10 posts found.
•5 min read
What the Canaries Caught
A single thirty-day window made the scanning look like one steady thing. Three months shows the opposite: overlapping campaigns that surge and vanish, an edge that loses its lead and then takes it back, and a curated filter already drifting out of date.
Read more•4 min read
The Path Not Found Is the Point
This site's robots.txt politely asks crawlers to avoid six paths. None of the six exist. Anyone who asks for one anyway has just introduced themselves.
Read more•5 min read
Why Toronto! and Why, Toronto?
One CloudFront edge location dominated the probe traffic by a factor of six. Pulling that thread led to Azure Canada Central and a particular kind of internet scavenger.
Read more•6 min read
Knock Knock, Who's There?
A static site with no login pages, no forms, and no commercial value still attracts more than twenty thousand unsolicited requests a month. This is what that traffic contains.
Read more•5 min read
Caching for Consistency: A Balanced Static Site Strategy
Implementing a tiered caching strategy that balances high-performance delivery for assets with immediate consistency for content updates.
Read more•6 min read
Modern AWS Authentication: Humans vs Automation
How to simplify your AWS security model by clearly separating human access from automated deployment.
Read more•3 min read
Security Boundaries in Small Systems
Why security is about explicit intent rather than system size, and how to implement durable boundaries without enterprise complexity.
Read more•4 min read
AWS, but Deliberately
Why using cloud primitives directly provides a better foundation for ownership and security than 'magic' hosting platforms.
Read more•3 min read
Intentional Engineering in the Age of AI
Reflecting on why building a personal blog as a production-grade system matters in an era where AI makes it easy to skip the thinking process.
Read more