Ask me anything about your lessons or your code.
“What is a port?” · “Why is my code erroring?”
Proving who you are and being allowed to act are two separate checks. Apps skip the second one constantly.
Authentication vs Authorization
Proving who you are and being allowed to act are two separate checks. Apps skip the second one constantly.
SSO and Federation
One login for everything sounds simple. The trust that makes it work is where it breaks.
MFA Done Right
MFA stops the password dump. The wrong second factor still lets a decent phish walk straight through.
Privileged Access Management
The admin password nobody has rotated since 2019 is in three runbooks and a Slack DM. PAM exists to kill that.
The Identity Lifecycle
The account behind the breach is rarely the CEO's. It is the contractor who left last year whose VPN still works.