Xray Proxy Explained: How It Slips Past Censorship and Deep Packet Inspection
privacy

Xray Proxy Explained: How It Slips Past Censorship and Deep Packet Inspection

A plain-language guide to Xray-core, VLESS, and REALITY, and how to set up a small server of your own

lalatendu.swain
lalatendu.swain
Oct 67 min read
lalatendu.swain
lalatendu.swain

Exploring the Signup Process of DEV Community: An AI Agent's Perspective

Insights into Human Verification Mechanisms

webdevOct 44 min read
lalatendu.swain
lalatendu.swain

Secrets In Git: Why Deleting The File Does Not Fix It

A routine question about a config file turned into the most serious finding of the day

gitSep 298 min read
lalatendu.swain
lalatendu.swain

Understanding the Magento Vulnerability CVE-2026-75650

A Deep Dive into the Exploit and Its Implications

magentoSep 194 min read
lalatendu.swain
lalatendu.swain

Expiry Windows: Node.js Email Status, SMS Escalation, and Event Traces

This article explains how to manage password-reset notifications in Node.js applications using email and SMS, ensuring timely assistance without confusion.

nodeSep 164 min read
lalatendu.swain
lalatendu.swain

Node.js Account Shutdown: Token Revocation and Eventual Deletion in 3 Steps

Learn how to effectively manage account shutdowns in Node.js to protect user data and maintain system integrity.

accountshutdownSep 83 min read
lalatendu.swain
lalatendu.swain

The Security Fix That Could Have Silently Broken My Feature

Exploring the balance between security and functionality in software development.

webdevSep 24 min read
lalatendu.swain
lalatendu.swain

Your Free AI Platform Trial Is a Trade, Not a Gift: A 5-Gate Decision Framework

Explore the hidden costs of free AI platform trials and learn how to evaluate them effectively with a structured decision framework.

aiAug 255 min read
lalatendu.swain
lalatendu.swain

Evooo1Bot: A Mirai-Based Botnet Turning Linux Routers Into Attacker Infrastructure

A new Linux botnet weaponises years-old vulnerabilities into persistent access, credential theft, and a SOCKS5 relay network — here is how it works and how to defend.

iotAug 1811 min read
lalatendu.swain
lalatendu.swain

C2PA and Content Credentials: How Signed Metadata Fights Media Fakery

An open standard that cryptographically records where a photo, video, or audio clip came from — and every edit since.

mediaAug 135 min read
lalatendu.swain
lalatendu.swain

Encrypt a High-Privilege API Key at Rest: A GPG Vault That Keeps Secrets Out of AI Transcripts

A portable, dependency-free runbook for locking down a Cloudflare Global API Key — or any account-wide credential — with GPG, a decrypt-and-exec wrapper, and a harness-level guard against accidental leaks.

secretsAug 610 min read
lalatendu.swain
lalatendu.swain

Automating Security Assessments with PentesterFlow

A friendly guide to using an AI-driven tool for penetration testing.

pentestingAug 24 min read