Mastodawn

Most developers are trained to write code — but senior engineers are defined by how well they can read and understand it.

The infographic breaks down why code comprehension is becoming the real differentiator in modern software systems.

Cross posted in LinkedIn:
https://www.linkedin.com/feed/update/activity:7461389515111170048

#SecureCoding #CodeReview #AIinSoftware #EngineeringLeadership

𝕯𝖎𝖓𝖊𝖘𝖍 🇮🇳May 9

A kernel bug sat in plain sight for 8 years. AI found it in an hour.

Wrong takeaway: AI is making attackers faster.

Better takeaway: our security model assumes too much about patching.

Assume latent flaws exist.
Design around containment, isolation, and resilience.

AI isn’t changing vulnerability physics.
It’s exposing reality faster.

More thoughts here:
LinkedIn: 🔗 https://www.linkedin.com/posts/dinesh-mr_73-sounds-impressive-until-you-ask-what-activity-7458128840872349696-kpVc

#CyberSecurity #Linux #AISecurity #SecurityEngineering

𝕯𝖎𝖓𝖊𝖘𝖍 🇮🇳May 7

73% sounds impressive — until you ask what it measures.

UK AISI tested Claude Mythos Preview on cyber tasks. Headline: 73% on expert CTFs. But CTFs are puzzles, not networks.

The real test — a 32-step simulated attack — was solved 3/10 times against an undefended range, with operator direction and heavy compute.

Four questions the report doesn't answer: noise, cost, operator guidance, OT pivot.

Full breakdown: [https://www.linkedin.com/posts/dinesh-mr_73-sounds-impressive-until-you-ask-what-activity-7458128840872349696-kpVc]

#Infosec #AISafety #CyberSecurity #RedTeam #ThreatIntel

𝕯𝖎𝖓𝖊𝖘𝖍 🇮🇳Apr 27

Built a personal mindfulness check-in tool, three questions, four times a day: how's your breath, what's your mental state, one small shift you can make.

Runs on Cloudflare Workers + D1. Single HTML file served inline from the worker, localStorage for offline-first saves, D1 for stats and streaks.

Just added a few things:
- "Now" slot for anytime check-ins outside the four fixed windows
- Shareable read-only stats link (opt-in, no feelings exposed, just patterns)
- Daily rotating tip from Verbal Judo by George Thompson
- Weekly practice screen ? one chapter snippet + one exercise per week, rotates by ISO week number

Public stats: 🔗 https://mindful.mrdinesh.workers.dev/public=1

The sharpest bug I hit: inside a JS template literal, \' collapses to ' your own app's string delimiters become invalid tokens in the browser. Fixed with
data-* attributes instead of inline string args.

Code + writeup: mrdee.in

#javascript #cloudflare #mindfulness #vibecoding

𝕯𝖎𝖓𝖊𝖘𝖍 🇮🇳Apr 26

Bad Connection
Uncovering Global Telecom Exploitation by Covert Surveillance Actors https://citizenlab.ca/research/uncovering-global-telecom-exploitation-by-covert-surveillance-actors/

An investigation by the Citizen Lab Team, which uncovers two sophisticated telecom surveillance campaigns and, for the first time, directly links real-world attack traffic to mobile operator signalling infrastructure.

#CyberSecurity #ThreatIntelligence #Surveillance #TelecomSecurity #MobileSecurity #SS7 #NetworkSecurity #CyberEspionage #CitizenLab #Infosec #Privacy #DigitalRights #CyberResearch #SignalInfrastructure #Telecom

𝕯𝖎𝖓𝖊𝖘𝖍 🇮🇳Apr 18

Writing stats from 750words.com

𝕯𝖎𝖓𝖊𝖘𝖍 🇮🇳Apr 18

Blacked out the Hacker News front page. What survived became a poem.

"Fevered Machines" ? lunar / hay / fever / gunpowder / Smol / machines / PanicLock / Slop / Hyperscalers / Troy / acceleration / Casus / Belli

Inspired by Austin Kleon's newspaper blackout poetry. Single HTML file, no backend ? fetches HN headlines, sends them to an LLM, animates the erasure.

🔗 https://github.com/mr-dinesh/hn-blackout
🌐 https://mrdee.in/vibecoding/vibecoding-019-hn-blackout-poetry

#VibeCoding #BlackoutPoetry #HackerNews #GenerativeArt #IndieWeb

𝕯𝖎𝖓𝖊𝖘𝖍 🇮🇳Apr 16

Scored a D on securityheaders.com. Fixed it in 20 minutes.

Hardened my blog's security headers this week. Removed unsafe-inline from CSP after reading the Congo theme source. Left the CORS wildcard alone deliberately.
Not every scanner warning needs fixing. Some are amber because they can be dangerous, not because they are in your context.

Write-up:
https://mrdee.in/notes/security-headers-mrdee/

Scan your own site: securityheaders.com
#infosec #csp #cloudflare