Posts

2026


2023


2021


Encrypt sensitive fields inside the ORM

Three takes on storing sensitive data in a database you don't control: AES-256-CTR fields in a desktop app's SQLite, an encrypted payload with an HMAC in MongoDB documents, and a drop-in encrypted text field for SQLAlchemy and Django.
·4 mins

Dynamic DNS for home routers the hacker way

Instead of a public DDNS service, a small Flask app updates the router's A record: dnspython edits the zone file and bumps the SOA serial, paramiko uploads it and reloads the DNS server, and a JWT identifies the router.
·4 mins

Keep the configuration out of the code

A C++ factory picked one of many Style subclasses through a growing if/else chain. The subclasses only returned fixed properties, so one JSON resource per configuration replaced the whole hierarchy.
·2 mins

2018