Websauna Co / Cybersecurity
I spent the last month intentionally poking at a selection of low-cost smart home hubs to answer a question that keeps me up at night: if a device’s supply chain is compromised — think counterfeit firmware shipped from a factory or an attacker...
Read more... →
Data poisoning is one of those threats that feels both abstract and terrifying: an attacker doesn't need access to your production model to ruin it — they only need to slip malicious or low-quality examples into a training dataset upstream. I've...
Read more... →
I’ve been in procurement meetings where the promise of “best-in-class” AI models meets the cold reality of legal redlines and security assessments. Vendors talk about accuracy and throughput; security and legal teams ask about data flows,...
Read more... →
Category: CybersecurityWhen I’m asked to audit an AI model for compliance and data leakage risk, I start with one guiding question: Where did the data come from, what happened to it, and who can access the model or its outputs? Tracing data...
Read more... →
I buy cheap smart displays to test what manufacturers cut to hit a low price. Over time I’ve learned that “budget” often means compromises you can’t see at first glance—hidden microphones, weak privacy controls, and network behaviour that...
Read more... →
I’ve spent the last few years wrestling with the tension every ML team feels: how to move fast and still be secure. Machine learning pipelines are messy by design — they touch data, notebooks, scripts, containers, model artifacts, feature stores...
Read more... →
I recently led a migration from password-based authentication to passkeys for a mid-size SaaS product using Okta as our identity provider. The project forced us to balance security wins with real-world usability: passkeys dramatically reduce...
Read more... →
I spent the last two weekends tearing down the privacy posture of three affordable Wi‑Fi 6E mesh systems so you don’t have to. The promise of 6GHz bandwidth and smoother multi-device performance is great, but if a router phones home constantly,...
Read more... →
I installed my first smart home hub because I wanted fewer apps, fewer latency issues, and — frankly — fewer cloud services hoarding sensor data about what I do at home. Over the years I’ve tested hubs that promise “local-first” operation...
Read more... →
I’ve been tracking npm supply-chain incidents long enough to know that most successful attacks share the same fingerprints — if you know what to look for, you can catch many of them before they ever touch your CI. I’m not talking about...
Read more... →