A five-round leak audit, a marketplace leak no git check could catch, and the four doors that guard every exit now.
I audited three of my repos before making things public. The audit was after one class of thing, anything that tied the code to the private world behind it:
absolute paths from my machine
the names of projects that were never meant to be seen
internal addresses
the real names of people and places around the work
Last time I said each post would show you the receipts. This one is a single day's worth. In about a...
Disclosure: I am a senior backend tech lead in Paris and I run HostingGuru, a small European PaaS....
The pre-pentest audit in successive passes. How to verify findings before panicking, and how to select which probes become…
A heavy day across six repos. Rather than list commits, here's the through-line: almost everything...
Two projects, thirteen serious bugs, and one pattern that kept showing up everywhere. Most engineers...
I put my working practice on a public shelf, and then took some of it back off again. Working out which half was the interesting…
