Accidental Security Bug Discovery: A Right-Click Adventure

2025-03-08
Accidental Security Bug Discovery: A Right-Click Adventure

While configuring a self-service portal, the author, driven by curiosity, modified a supposedly uneditable email field and discovered an SSO vulnerability. This allowed changing the work email to a personal one, bypassing authentication. The vulnerability was reported, and the vendor swiftly fixed it. This highlights how even simple tests can uncover critical security flaws and emphasizes the importance of curiosity and a user-centric approach in software testing.

Read more
Development security bug

From DIY Pi-hole Hell to NextDNS Nirvana: A $20 Solution

2025-02-19
From DIY Pi-hole Hell to NextDNS Nirvana: A $20 Solution

The author initially used a Raspberry Pi to set up a Pi-hole ad blocker. While easy to set up and user-friendly, it frequently caused network outages, requiring constant troubleshooting and consuming significant time. Eventually, the author switched to NextDNS, a SaaS service, resolving all issues for $20/year. This eliminated the need for tedious maintenance and troubleshooting, providing a more stable ad-blocking experience. The author concludes that the cost is well worth the time and effort saved.

Read more
Development Ad Blocking

Colorado Springs' Top-Rated Restaurants: A Comprehensive List

2025-02-17
Colorado Springs' Top-Rated Restaurants: A Comprehensive List

This list compiles reviews from numerous restaurants in Colorado Springs, offering a diverse culinary landscape from authentic Cuban food to Thai cuisine. Arelita Authentic Cuban Food takes the top spot with a 5-star rating and 262 reviews, while other establishments like Starving and Manitou Baked also garner high praise. This list provides a wide array of options for diners to explore based on their preferences and tastes.

Read more

Finding the Best Restaurants in Colorado Springs with LLMs and the Google Places API

2025-02-15
Finding the Best Restaurants in Colorado Springs with LLMs and the Google Places API

This post details a data science project using LLMs and the Google Places API to identify the best restaurants in Colorado Springs. The author navigated the complexities of Google API registration, data cleaning (including removing irrelevant entries like synagogues and shops), and experimented with ranking algorithms like Bayesian Average and Wilson Score Interval before settling on the latter. The final output includes a ranked list of restaurants and heatmaps visualizing their locations, revealing interesting geographical patterns in the city's culinary scene.

Read more
Development

Cloudflare Pages' Surprisingly Generous Free Tier: Why?

2025-01-15
Cloudflare Pages' Surprisingly Generous Free Tier: Why?

Cloudflare Pages offers an unlimited bandwidth free tier, a standout feature among competitors. The author explores the reasons behind this generosity: static websites are lightweight and easy to serve; Cloudflare benefits from a faster, more reliable internet, leading to increased demand for its security products; and the free tier drives word-of-mouth marketing and potential upgrades to paid services. While Cloudflare hasn't officially explained it, the author posits it's a strategic move aligned with other free services like 1.1.1.1 and free DDoS protection, ultimately boosting its security product ecosystem.

Read more