Note🌱 Seedling
Nobody chose to be insecure, they just did not choose
A large share of lab wins come from settings no one decided on. The default decided instead.
6 August 2026
Note🌳 Evergreen
The browser check is for the user, the server check is for you
Every developer knows client validation is not security. Bypassing a form yourself is what makes it stick.
29 June 2026
Article
What TryHackMe's Top 6% actually taught me as a developer
Security labs changed how I write forms, handle input, and think about defaults. Three habits that came straight out of the labs.
29 June 2026
Looking for something else?
Every tag on the site is listed together, or start from the garden.