Blog

Flutter doesn't use your proxy or trust your cert. Here's how we intercepted it anyway, and why the hardest wall wasn't one we were allowed to break.

Anthropic gated Mythos to twelve partners. The decision behavior signals industrial unilateralism — what it means for builders and attackers in the gated era.

Going beneath the hood: how nmap actually discovers hosts, what changes across subnet boundaries, and why the default 'stealth' flags aren't as stealthy as they sound.

Almost every engagement starts the same way: an nmap scan. Here's what nmap actually does, why everyone runs it first, and where depth and stealth start pulling in opposite directions.

It's been one month since I joined Cymetrics, and I don't think I'll forget how warm those first few weeks were — or the phishing email that arrived two days after I updated my LinkedIn.

Guest on 她Ta Zhi Dao — how scammers collect your data, social engineering in Asia, and building confidence as a woman in security.

Solving Ethernaut's Fallback challenge — claiming contract ownership and draining funds by exploiting how Solidity handles fallback functions.

An introduction to smart contract security — how the EVM works, where vulnerabilities hide, and a step-by-step breakdown of a classic reentrancy exploit.

Volunteering at the Women in Tech Global Summit 2025 in Osaka — how showing up and giving fully turns serendipity into something tangible.