https://k0g.com/articles/ Evergreen articles on cybersecurity, cryptography, quantum computing and applied security from K0G. en https://k0g.com/articles/51-percent-attack.html https://k0g.com/articles/51-percent-attack.html A 51% attack lets an entity with majority mining power reorganize blocks and double spend. Learn how the attack works and how networks defend against it. Blockchain & Applied Crypto https://k0g.com/articles/advanced-persistent-threats.html https://k0g.com/articles/advanced-persistent-threats.html An advanced persistent threat is a stealthy long-term intrusion by a skilled adversary. Learn how APTs work and how to detect and defend against them. Malware & Threats https://k0g.com/articles/aes-encryption-explained.html https://k0g.com/articles/aes-encryption-explained.html AES encryption is the Advanced Encryption Standard used to secure data worldwide. Learn how AES works including rounds S-boxes key sizes and modes. Cryptography https://k0g.com/articles/ai-ml-security-adversarial.html https://k0g.com/articles/ai-ml-security-adversarial.html AI and machine learning security examines adversarial attacks including evasion poisoning and model extraction that manipulate models through crafted inputs. Cloud, Hardware & Emerging https://k0g.com/articles/api-security-best-practices.html https://k0g.com/articles/api-security-best-practices.html API security best practices protect REST and web APIs from attacks. Learn authentication authorization rate limiting input validation and the OWASP API risks. Application Security https://k0g.com/articles/arp-spoofing-explained.html https://k0g.com/articles/arp-spoofing-explained.html How ARP spoofing and poisoning work, why the Address Resolution Protocol trusts forged replies, and the detection and defenses that protect local networks. Network Security https://k0g.com/articles/aslr-dep-exploit-mitigations.html https://k0g.com/articles/aslr-dep-exploit-mitigations.html ASLR and DEP are exploit mitigations that make memory corruption bugs harder to weaponize. Learn how ASLR DEP stack canaries and CFI defend against attacks. Application Security https://k0g.com/articles/block-cipher-modes-explained.html https://k0g.com/articles/block-cipher-modes-explained.html Block cipher modes turn a block cipher like AES into a full encryption scheme. Learn how ECB CBC CTR and GCM work and which modes are safe to use. Cryptography https://k0g.com/articles/botnets-and-c2.html https://k0g.com/articles/botnets-and-c2.html A botnet is a network of compromised devices run through command-and-control infrastructure. Learn how botnets and C2 work and how to detect and disrupt them. Malware & Threats https://k0g.com/articles/buffer-overflow-attacks.html https://k0g.com/articles/buffer-overflow-attacks.html A buffer overflow is a memory-corruption bug where data exceeds a buffer and overwrites adjacent memory. Learn how buffer overflow attacks and defenses work. Offensive Security https://k0g.com/articles/bug-bounty-getting-started.html https://k0g.com/articles/bug-bounty-getting-started.html Bug bounty programs reward researchers for responsibly reporting vulnerabilities. Learn how bug bounties work how to start and how to write strong reports. Offensive Security https://k0g.com/articles/capture-the-flag-ctf.html https://k0g.com/articles/capture-the-flag-ctf.html Capture the flag or CTF competitions teach security skills by solving hands-on hacking challenges. Learn the CTF formats categories and how to start competing. Offensive Security https://k0g.com/articles/certificate-based-authentication.html https://k0g.com/articles/certificate-based-authentication.html Certificate-based authentication uses X.509 client certificates and public-key cryptography to prove identity through mutual TLS without shared passwords. Authentication & Identity https://k0g.com/articles/chacha20-poly1305.html https://k0g.com/articles/chacha20-poly1305.html ChaCha20-Poly1305 is a fast authenticated encryption construction used in TLS. Learn how the ChaCha20 stream cipher and Poly1305 authenticator work together. Cryptography https://k0g.com/articles/cloud-security-shared-responsibility.html https://k0g.com/articles/cloud-security-shared-responsibility.html The shared responsibility model splits cloud security duties between provider and customer across IaaS PaaS and SaaS. Learn where the line falls and why. Cloud, Hardware & Emerging https://k0g.com/articles/code-signing-explained.html https://k0g.com/articles/code-signing-explained.html Code signing uses digital signatures to prove software authenticity and integrity. Learn how signing certificates hashing timestamping and verification work. Application Security https://k0g.com/articles/container-security.html https://k0g.com/articles/container-security.html Container security and Docker hardening reduce attack surface with minimal images non-root users and namespace isolation. Learn how containers are secured. Cloud, Hardware & Emerging https://k0g.com/articles/content-security-policy-guide.html https://k0g.com/articles/content-security-policy-guide.html Content Security Policy is a browser control that limits which resources load, reducing XSS impact. Learn how to write and deploy an effective CSP header. Web Security https://k0g.com/articles/cors-explained.html https://k0g.com/articles/cors-explained.html CORS or cross-origin resource sharing relaxes the same-origin policy in a controlled way. Learn how CORS works and how to avoid dangerous misconfigurations. Web Security https://k0g.com/articles/credential-stuffing-attacks.html https://k0g.com/articles/credential-stuffing-attacks.html Credential stuffing and password spraying are automated attacks that abuse reused and weak passwords to take over accounts, and here is how to stop them. Authentication & Identity https://k0g.com/articles/cross-site-scripting-xss.html https://k0g.com/articles/cross-site-scripting-xss.html Cross-site scripting or XSS lets attackers run scripts in a victim browser. Learn the reflected, stored, and DOM-based types and how to defend against them. Web Security https://k0g.com/articles/crypto-agility-migration.html https://k0g.com/articles/crypto-agility-migration.html Crypto-agility explained, a framework for migrating to post-quantum cryptography using cryptographic inventory, hybrid schemes, and quantum-safe rollout. Quantum & Post-Quantum https://k0g.com/articles/crypto-wallet-keys-explained.html https://k0g.com/articles/crypto-wallet-keys-explained.html Public and private keys in crypto wallets control your funds. Learn how key pairs are generated derive addresses sign transactions and stay secure. Blockchain & Applied Crypto https://k0g.com/articles/csrf-explained.html https://k0g.com/articles/csrf-explained.html Cross-site request forgery tricks a browser into sending authenticated requests a user never intended. Learn how CSRF works and how tokens stop it. Web Security https://k0g.com/articles/cyber-kill-chain.html https://k0g.com/articles/cyber-kill-chain.html The cyber kill chain is a model describing the stages of a cyberattack from reconnaissance to actions on objectives. Learn each phase and its defenses. Offensive Security https://k0g.com/articles/data-anonymization.html https://k0g.com/articles/data-anonymization.html Data anonymization irreversibly removes identity while pseudonymization only masks it. Learn how they differ and when re-identification of records is possible. Privacy & Anonymity https://k0g.com/articles/ddos-attacks-explained.html https://k0g.com/articles/ddos-attacks-explained.html How DDoS attacks work, from volumetric floods and protocol attacks to application-layer assaults, plus the mitigations that keep services online under load. Network Security https://k0g.com/articles/dependency-confusion.html https://k0g.com/articles/dependency-confusion.html Dependency confusion tricks package managers into installing malicious public packages instead of private ones. Learn how the attack works and how to stop it. Application Security https://k0g.com/articles/differential-privacy.html https://k0g.com/articles/differential-privacy.html Differential privacy adds calibrated mathematical noise so aggregate data can be analyzed without exposing whether any single individual is in the dataset. Privacy & Anonymity https://k0g.com/articles/diffie-hellman-key-exchange.html https://k0g.com/articles/diffie-hellman-key-exchange.html Diffie-Hellman key exchange lets two parties agree on a shared secret over an insecure channel. Learn how the protocol works and why authentication matters. Cryptography https://k0g.com/articles/digital-forensics-incident-response.html https://k0g.com/articles/digital-forensics-incident-response.html Digital forensics and incident response DFIR combines evidence preservation and threat containment through a structured lifecycle to investigate incidents. Cloud, Hardware & Emerging https://k0g.com/articles/digital-signatures-explained.html https://k0g.com/articles/digital-signatures-explained.html Digital signatures prove authenticity integrity and non-repudiation with public-key cryptography. Learn how RSA ECDSA and EdDSA signature schemes work. Cryptography https://k0g.com/articles/dns-security-dnssec-doh-dot.html https://k0g.com/articles/dns-security-dnssec-doh-dot.html DNS security explained, covering how DNSSEC authenticates records and how DoH and DoT encrypt lookups to stop spoofing, tampering, and eavesdropping. Network Security https://k0g.com/articles/elliptic-curve-cryptography-explained.html https://k0g.com/articles/elliptic-curve-cryptography-explained.html Elliptic curve cryptography delivers strong public-key security with small keys. Learn how ECC works including point addition scalar multiplication and curves. Cryptography https://k0g.com/articles/encryption-at-rest-vs-in-transit.html https://k0g.com/articles/encryption-at-rest-vs-in-transit.html Encryption at rest protects stored data while encryption in transit protects data on the network. Learn how the two differ and why a secure system needs both. Privacy & Anonymity https://k0g.com/articles/end-to-end-encryption.html https://k0g.com/articles/end-to-end-encryption.html End-to-end encryption ensures only the sender and recipient can read messages while servers and attackers in between see only unreadable ciphertext. Privacy & Anonymity https://k0g.com/articles/fido2-explained.html https://k0g.com/articles/fido2-explained.html FIDO2 and WebAuthn deliver phishing-resistant passwordless login using public-key cryptography, security keys, passkeys, and origin-bound credentials. Authentication & Identity https://k0g.com/articles/fileless-malware.html https://k0g.com/articles/fileless-malware.html Fileless malware runs in memory and abuses built-in tools to evade detection. Learn how fileless and living-off-the-land attacks work and how to defend. Malware & Threats https://k0g.com/articles/firewalls-explained.html https://k0g.com/articles/firewalls-explained.html How firewalls work, from stateless packet filtering and stateful inspection to next-generation firewalls with deep packet and application inspection. Network Security https://k0g.com/articles/fuzzing-explained.html https://k0g.com/articles/fuzzing-explained.html Fuzzing automatically feeds random and malformed inputs to software to find crashes and security bugs. Learn how coverage-guided fuzzing and sanitizers work. Application Security https://k0g.com/articles/grovers-algorithm-explained.html https://k0g.com/articles/grovers-algorithm-explained.html Grover's algorithm explained and how its quadratic speedup for unstructured search affects AES symmetric encryption and hash functions and how to defend. Quantum & Post-Quantum https://k0g.com/articles/hardware-security-modules.html https://k0g.com/articles/hardware-security-modules.html Hardware security modules protect cryptographic keys in tamper-resistant hardware performing signing and encryption so keys never leave the secure boundary. Cloud, Hardware & Emerging https://k0g.com/articles/harvest-now-decrypt-later.html https://k0g.com/articles/harvest-now-decrypt-later.html Harvest now decrypt later explained, the quantum harvesting threat where attackers store encrypted data to decrypt once quantum computers mature enough. Quantum & Post-Quantum https://k0g.com/articles/hash-based-signatures.html https://k0g.com/articles/hash-based-signatures.html Hash-based signatures explained from Lamport one-time keys and Merkle trees to XMSS and stateless SPHINCS+ SLH-DSA for quantum-resistant digital signing. Quantum & Post-Quantum https://k0g.com/articles/hash-functions-in-blockchain.html https://k0g.com/articles/hash-functions-in-blockchain.html Cryptographic hash functions are the backbone of blockchain security. Learn how SHA-256 Keccak and hashing properties protect blocks proofs and addresses. Blockchain & Applied Crypto https://k0g.com/articles/hmac-explained.html https://k0g.com/articles/hmac-explained.html HMAC is a hash-based message authentication code that provides integrity and authenticity. Learn how HMAC works its construction and why it resists attacks. Cryptography https://k0g.com/articles/how-bitcoin-uses-cryptography.html https://k0g.com/articles/how-bitcoin-uses-cryptography.html Discover how Bitcoin uses cryptography including SHA-256 hashing ECDSA signatures on secp256k1 addresses and proof of work to secure the network. Blockchain & Applied Crypto https://k0g.com/articles/how-blockchain-works.html https://k0g.com/articles/how-blockchain-works.html Learn how blockchain works at a technical level from hash-linked blocks to consensus and see how cryptography makes a distributed ledger tamper evident. Blockchain & Applied Crypto https://k0g.com/articles/how-tls-works.html https://k0g.com/articles/how-tls-works.html How TLS works to secure data in transit, from the handshake and certificates to symmetric session keys that protect web traffic from eavesdroppers. Network Security https://k0g.com/articles/how-tor-works.html https://k0g.com/articles/how-tor-works.html Tor works by wrapping traffic in layers of encryption and routing it through volunteer relays so no single relay learns both who you are and where you go. Privacy & Anonymity https://k0g.com/articles/ids-and-ips-explained.html https://k0g.com/articles/ids-and-ips-explained.html How intrusion detection and prevention systems work, comparing signature and anomaly detection and how IDS and IPS spot and block network threats. Network Security https://k0g.com/articles/iot-security.html https://k0g.com/articles/iot-security.html IoT security addresses weak default credentials unpatched firmware and insecure network exposure across billions of connected devices with layered defenses. Cloud, Hardware & Emerging https://k0g.com/articles/jwt-security-best-practices.html https://k0g.com/articles/jwt-security-best-practices.html JSON Web Tokens carry signed claims between services. Learn JWT structure, common security pitfalls, and best practices for validating tokens safely. Web Security https://k0g.com/articles/kerberos-explained.html https://k0g.com/articles/kerberos-explained.html Kerberos authentication uses tickets and a trusted key distribution center to prove identity across a network without sending passwords over the wire. Authentication & Identity https://k0g.com/articles/kubernetes-security.html https://k0g.com/articles/kubernetes-security.html Kubernetes security best practices span RBAC network policies pod security admission and secrets to protect clusters from compromise and lateral movement. Cloud, Hardware & Emerging https://k0g.com/articles/lattice-based-cryptography.html https://k0g.com/articles/lattice-based-cryptography.html Lattice-based cryptography explained through the Learning With Errors problem, lattice hard problems, and how they power quantum-resistant encryption schemes. Quantum & Post-Quantum https://k0g.com/articles/man-in-the-middle-attacks.html https://k0g.com/articles/man-in-the-middle-attacks.html How man-in-the-middle attacks work, from ARP spoofing and DNS hijacking to TLS interception, and the encryption and authentication defenses that stop them. Network Security https://k0g.com/articles/memory-safety-explained.html https://k0g.com/articles/memory-safety-explained.html Memory safety prevents bugs like buffer overflows and use-after-free that cause most severe security vulnerabilities. Learn how it works and how to achieve it. Application Security https://k0g.com/articles/merkle-trees-explained.html https://k0g.com/articles/merkle-trees-explained.html Merkle trees let blockchains commit to many transactions in one hash and prove inclusion efficiently. Learn how Merkle trees and Merkle proofs work. Blockchain & Applied Crypto https://k0g.com/articles/metadata-privacy-risk.html https://k0g.com/articles/metadata-privacy-risk.html Metadata reveals who you talk to when and where even when content is encrypted. Learn why this overlooked privacy risk matters and how to reduce your exposure. Privacy & Anonymity https://k0g.com/articles/mitre-attack-framework.html https://k0g.com/articles/mitre-attack-framework.html The MITRE ATT&CK framework is a knowledge base of adversary tactics and techniques. Learn how ATT&CK works and how defenders use it to improve detection. Malware & Threats https://k0g.com/articles/ml-dsa-dilithium-explained.html https://k0g.com/articles/ml-dsa-dilithium-explained.html ML-DSA formerly Dilithium explained, the NIST post-quantum digital signature scheme built on Module-LWE and Fiat-Shamir with aborts for quantum-safe signing. Quantum & Post-Quantum https://k0g.com/articles/ml-kem-kyber-explained.html https://k0g.com/articles/ml-kem-kyber-explained.html ML-KEM formerly Kyber explained, the NIST post-quantum key encapsulation mechanism built on Module-LWE lattices for quantum-safe key exchange and encryption. Quantum & Post-Quantum https://k0g.com/articles/multi-factor-authentication.html https://k0g.com/articles/multi-factor-authentication.html Multi-factor authentication strengthens login security by combining knowledge, possession, and inherence factors to stop account takeover and phishing. Authentication & Identity https://k0g.com/articles/network-segmentation.html https://k0g.com/articles/network-segmentation.html How network segmentation and microsegmentation work, using VLANs, subnets, and identity-based policy to contain breaches and limit lateral movement. Network Security https://k0g.com/articles/oauth2-and-openid-connect.html https://k0g.com/articles/oauth2-and-openid-connect.html OAuth 2.0 handles delegated authorization while OpenID Connect adds authentication. Learn the roles, grant types, tokens, and PKCE that make the flow secure. Web Security https://k0g.com/articles/osint-explained.html https://k0g.com/articles/osint-explained.html OSINT or open-source intelligence is gathering data from publicly available sources for security research. Learn the techniques tools and ethics of OSINT. Offensive Security https://k0g.com/articles/owasp-top-10-explained.html https://k0g.com/articles/owasp-top-10-explained.html The OWASP Top 10 ranks the most critical web application security risks along with practical defenses that development and security teams can prioritize. Web Security https://k0g.com/articles/password-cracking-explained.html https://k0g.com/articles/password-cracking-explained.html Password cracking recovers passwords from stored hashes to test credential strength. Learn the techniques tools and defenses used in authorized testing. Offensive Security https://k0g.com/articles/password-hashing-argon2-bcrypt-scrypt.html https://k0g.com/articles/password-hashing-argon2-bcrypt-scrypt.html Password hashing protects stored credentials using slow salted algorithms. Learn how bcrypt scrypt Argon2 and PBKDF2 work and how to choose parameters. Cryptography https://k0g.com/articles/password-security-best-practices.html https://k0g.com/articles/password-security-best-practices.html Password security best practices for hashing, storage, length, and policy, plus the common mistakes that let attackers crack credentials and hijack accounts. Authentication & Identity https://k0g.com/articles/penetration-testing-explained.html https://k0g.com/articles/penetration-testing-explained.html Penetration testing is authorized simulated hacking that finds real vulnerabilities before attackers do. Learn the phases methodology and ethics involved. Offensive Security https://k0g.com/articles/perfect-forward-secrecy.html https://k0g.com/articles/perfect-forward-secrecy.html Perfect forward secrecy uses ephemeral keys so stealing a long-term private key cannot decrypt past sessions. Learn how forward secrecy protects your data. Privacy & Anonymity https://k0g.com/articles/phishing-attacks-explained.html https://k0g.com/articles/phishing-attacks-explained.html Phishing attacks trick people into revealing credentials or running malware. Learn how phishing works and how to detect, prevent, and defend against it. Malware & Threats https://k0g.com/articles/post-quantum-cryptography-explained.html https://k0g.com/articles/post-quantum-cryptography-explained.html Post-quantum cryptography explained, covering lattice, hash-based, and code-based algorithms plus NIST standards like ML-KEM and ML-DSA for the quantum era. Quantum & Post-Quantum https://k0g.com/articles/privilege-escalation.html https://k0g.com/articles/privilege-escalation.html Privilege escalation is how attackers gain higher access rights on a system after an initial foothold. Learn vertical and horizontal techniques and defenses. Offensive Security https://k0g.com/articles/prompt-injection-llm-security.html https://k0g.com/articles/prompt-injection-llm-security.html Prompt injection is the top LLM security risk where untrusted text hijacks a model instructions enabling data exfiltration and tool misuse in AI applications. Cloud, Hardware & Emerging https://k0g.com/articles/proof-of-work-vs-proof-of-stake.html https://k0g.com/articles/proof-of-work-vs-proof-of-stake.html Compare proof of work vs proof of stake and learn how each consensus mechanism achieves Sybil resistance security and finality in a blockchain network. Blockchain & Applied Crypto https://k0g.com/articles/public-key-infrastructure-and-x509.html https://k0g.com/articles/public-key-infrastructure-and-x509.html Public key infrastructure binds identities to public keys using X.509 certificates and certificate authorities. Learn how PKI trust chains and revocation work. Cryptography https://k0g.com/articles/quantum-computing-explained.html https://k0g.com/articles/quantum-computing-explained.html Quantum computing explained for security readers, covering qubits, superposition, entanglement, and quantum gates and why they threaten modern cryptography. Quantum & Post-Quantum https://k0g.com/articles/quantum-key-distribution-bb84.html https://k0g.com/articles/quantum-key-distribution-bb84.html Quantum key distribution and the BB84 protocol explained, using photon polarization and the no-cloning theorem to detect eavesdropping and share secret keys. Quantum & Post-Quantum https://k0g.com/articles/ransomware-explained.html https://k0g.com/articles/ransomware-explained.html Ransomware is malware that encrypts files and demands payment. Learn how ransomware works, how it spreads, and how to detect and defend against attacks. Malware & Threats https://k0g.com/articles/red-team-blue-team-purple-team.html https://k0g.com/articles/red-team-blue-team-purple-team.html Red team blue team and purple team describe offensive defensive and collaborative security roles. Learn how each team works and strengthens defenses together. Offensive Security https://k0g.com/articles/reproducible-builds.html https://k0g.com/articles/reproducible-builds.html Reproducible builds let anyone rebuild source code into a bit-for-bit identical binary to verify no tampering. Learn how determinism and verification work. Application Security https://k0g.com/articles/reverse-engineering-basics.html https://k0g.com/articles/reverse-engineering-basics.html Reverse engineering is analyzing compiled software to understand how it works without source code. Learn the tools concepts and workflow for security research. Offensive Security https://k0g.com/articles/rootkits-explained.html https://k0g.com/articles/rootkits-explained.html A rootkit is stealth malware that hides its presence deep in a system. Learn how rootkits work at different levels and how to detect and remove them. Malware & Threats https://k0g.com/articles/rsa-encryption-explained.html https://k0g.com/articles/rsa-encryption-explained.html RSA encryption is a public-key cryptosystem built on the hardness of factoring. Learn how RSA works including key generation encryption and secure padding. Cryptography https://k0g.com/articles/saml-vs-oauth-vs-oidc.html https://k0g.com/articles/saml-vs-oauth-vs-oidc.html Compare SAML, OAuth 2.0, and OpenID Connect to understand how each handles authentication, authorization, tokens, and federated single sign-on securely. Authentication & Identity https://k0g.com/articles/sast-vs-dast-vs-iast.html https://k0g.com/articles/sast-vs-dast-vs-iast.html Compare SAST vs DAST vs IAST application security testing methods. Learn how static dynamic and interactive analysis find vulnerabilities and when to use each. Application Security https://k0g.com/articles/secp256k1-elliptic-curve.html https://k0g.com/articles/secp256k1-elliptic-curve.html secp256k1 is the elliptic curve behind Bitcoin and Ethereum keys and signatures. Learn its parameters point math and why the ECDLP keeps it secure. Blockchain & Applied Crypto https://k0g.com/articles/secrets-management.html https://k0g.com/articles/secrets-management.html Secrets management explained covering how to store rotate and audit API keys passwords and certificates with vaults dynamic secrets and least privilege. Cloud, Hardware & Emerging https://k0g.com/articles/secure-cookies-samesite.html https://k0g.com/articles/secure-cookies-samesite.html Secure cookies rely on the HttpOnly, Secure, and SameSite attributes to protect sessions. Learn what each attribute does and how to configure cookies safely. Web Security https://k0g.com/articles/secure-messaging-explained.html https://k0g.com/articles/secure-messaging-explained.html Secure messaging depends on end-to-end encryption forward secrecy key verification and metadata protection. Learn what makes a messaging app truly private. Privacy & Anonymity https://k0g.com/articles/secure-software-development-lifecycle.html https://k0g.com/articles/secure-software-development-lifecycle.html The secure software development lifecycle (SSDLC) builds security into every phase of development. Learn threat modeling secure coding testing and deployment. Application Security https://k0g.com/articles/session-management-security.html https://k0g.com/articles/session-management-security.html Session management security best practices for session IDs, secure cookies, expiration, and fixation defense to keep authenticated sessions from being hijacked. Authentication & Identity https://k0g.com/articles/sha-256-and-sha-2-hash-functions.html https://k0g.com/articles/sha-256-and-sha-2-hash-functions.html SHA-256 is the most widely used SHA-2 hash function. Learn how SHA-256 works its Merkle-Damgard structure security properties and where hashing is applied. Cryptography https://k0g.com/articles/shors-algorithm-and-rsa.html https://k0g.com/articles/shors-algorithm-and-rsa.html Shor's algorithm explained and how a quantum computer could break RSA and ECC by solving integer factoring and discrete logarithms in polynomial time. Quantum & Post-Quantum https://k0g.com/articles/side-channel-attacks.html https://k0g.com/articles/side-channel-attacks.html Side-channel attacks leak secrets through timing power consumption and CPU speculation. Learn how timing power analysis Spectre and Meltdown work and defenses. Cloud, Hardware & Emerging https://k0g.com/articles/signal-protocol-double-ratchet.html https://k0g.com/articles/signal-protocol-double-ratchet.html The Signal Protocol pairs X3DH key agreement with the Double Ratchet to give secure messaging forward secrecy and post-compromise security per message. Privacy & Anonymity https://k0g.com/articles/single-sign-on-explained.html https://k0g.com/articles/single-sign-on-explained.html Single sign-on lets users authenticate once with an identity provider and access many applications through federated trust, tokens, and centralized login. Authentication & Identity https://k0g.com/articles/smart-contract-security.html https://k0g.com/articles/smart-contract-security.html Smart contract security protects on-chain code from costly exploits. Learn common vulnerabilities like reentrancy and the patterns that defend against them. Blockchain & Applied Crypto https://k0g.com/articles/social-engineering-explained.html https://k0g.com/articles/social-engineering-explained.html Social engineering manipulates people into breaking security. Learn how social engineering attacks work and how to recognize, prevent, and defend against them. Malware & Threats https://k0g.com/articles/software-supply-chain-security.html https://k0g.com/articles/software-supply-chain-security.html Software supply chain security protects the code dependencies and build systems behind your apps. Learn about SBOMs provenance and attacks like typosquatting. Application Security https://k0g.com/articles/sql-injection-explained.html https://k0g.com/articles/sql-injection-explained.html SQL injection lets attackers manipulate database queries through unsanitized input. Learn how the attack works and how parameterized queries prevent it. Web Security https://k0g.com/articles/ssrf-explained.html https://k0g.com/articles/ssrf-explained.html Server-side request forgery makes a server send attacker-controlled requests to internal systems. Learn how SSRF works and how to prevent it effectively. Web Security https://k0g.com/articles/supply-chain-attacks.html https://k0g.com/articles/supply-chain-attacks.html A supply chain attack compromises a trusted vendor to reach its customers. Learn how supply chain attacks work and how to detect and defend against them. Malware & Threats https://k0g.com/articles/totp-and-hotp.html https://k0g.com/articles/totp-and-hotp.html Learn how TOTP and HOTP one-time password algorithms work, from the shared secret and HMAC to the six-digit codes that power authenticator apps. Authentication & Identity https://k0g.com/articles/tpm-and-secure-boot.html https://k0g.com/articles/tpm-and-secure-boot.html TPMs and Secure Boot explained showing how measured boot platform configuration registers and signature checks establish a hardware root of trust for a device. Cloud, Hardware & Emerging https://k0g.com/articles/trusted-execution-environments.html https://k0g.com/articles/trusted-execution-environments.html Trusted execution environments and secure enclaves isolate code and data in encrypted memory so even a compromised operating system cannot read their contents. Cloud, Hardware & Emerging https://k0g.com/articles/types-of-malware.html https://k0g.com/articles/types-of-malware.html A clear guide to the main types of malware including viruses, worms, trojans, ransomware, spyware, and rootkits, with detection and defense tips for each. Malware & Threats https://k0g.com/articles/vpns-explained.html https://k0g.com/articles/vpns-explained.html How VPNs work, from tunneling and encapsulation to IPsec and WireGuard encryption that protect traffic across untrusted networks and shield your IP address. Network Security https://k0g.com/articles/webauthn-and-passkeys.html https://k0g.com/articles/webauthn-and-passkeys.html WebAuthn and passkeys enable phishing-resistant passwordless login using public-key cryptography. Learn how registration and authentication work. Web Security https://k0g.com/articles/zero-knowledge-proofs-explained.html https://k0g.com/articles/zero-knowledge-proofs-explained.html Zero-knowledge proofs let one party prove a statement is true without revealing why. Learn how ZKPs work their properties and zk-SNARKs and zk-STARKs. Cryptography https://k0g.com/articles/zero-trust-architecture.html https://k0g.com/articles/zero-trust-architecture.html How zero trust architecture works, replacing implicit network trust with continuous verification, least privilege, and identity-based access to resources. Network Security https://k0g.com/articles/zk-rollups-and-zk-snarks.html https://k0g.com/articles/zk-rollups-and-zk-snarks.html Zero-knowledge rollups scale blockchains using zk-SNARK validity proofs. Learn how zk-rollups and zk-SNARKs work and the security tradeoffs involved. Blockchain & Applied Crypto