Notes from the workshop.
Engineering thinking, written down — on architecture, operations, and building software that lasts past its second year.
- August 6, 20262 min read
The guard was correct. Its scope was wrong.
Scan makes requests to whatever host you point it at, so it has a guard against reaching internal addresses. The guard was right. It just wasn’t covering the whole path.
Read - July 30, 20262 min read
A certificate check that worked on my machine and was dead in production
Scan flags certificates signed with SHA-1. The check ran perfectly in development and silently never fired on the deployed site, because the two run different versions of Node.
Read - July 23, 20262 min read
My scanner told me to add a DNS record that wouldn’t have helped
Sentinel checked a subdomain for a DMARC record, didn’t find one, and told me exactly what to add. Following that advice would have accomplished nothing.
Read - July 16, 20262 min read
The scanner said my own site was an F
Sentinel graded nyxoralabs.com an F. I’d already hardened it, so only one of us was wrong.
Read
Building something that has to last?
If durable, systems-focused engineering is what your project needs, start here.