Latest

How I built The Board - a site that tracks fixed deposit rates across every bank and finance company in Sri Lanka, backed by a scraping pipeline, a FastAPI read API, and an admin panel for managing it all - with AI-assisted development.

My Yantop dashcam (sold as the Car DVR/Dash Camera Yantop) only lets you view the live feed through its own app. I used nmap, PCAPdroid and Wireshark to figure out what that app was actually doing on the network, and turned it into a script that opens the same feed straight in VLC - no app, no flashing, no root.

Discover the new HTTP QUERY method that finally lets you send request bodies on read-only, cacheable operations without abusing POST.

A comprehensive deep-dive into TLS/SSL security - from TCP handshakes to certificate verification, covering everything you need to know about secure network connections, encryption, and how HTTPS really works.

A step-by-step mathematical deep-dive into how Diffie-Hellman key exchange works - from simple paint mixing analogies to the discrete logarithm problem that makes it unbreakable.

A detailed breakdown of CVE-2026-31431 - understanding how a kernel page cache vulnerability allows privilege escalation from regular user to root access through cryptographic socket exploitation.

How I built a lightweight, fast clipboard manager for Linux using PyQt6 and automated PyPI publishing with GitHub Actions - showcasing the power of AI-assisted development in creating polished desktop applications.

Technical showcase of a production-ready authentication API featuring JWT with refresh token rotation, RBAC, Redis rate limiting, comprehensive security headers, audit logging, and automated CI/CD deployment.