The Logic Decode blog

Every article, one place

Tutorials, deep-dives, and the trends that actually matter — filter by topic below.

Browse the full archive of 214 articles →

All Python Web Dev AI & ML DevOps CS News

Breaking authentication

Credential stuffing, brute force, and the timing bug that leaks which emails have accounts, with the real fix from a login endpoint in production.

Sep 14, 20266 min

Web Dev

Why your password hash is not good enough

argon2id versus faster hashes, why a 12-character minimum beats complexity rules, and a real race condition in a signup endpoint under concurrent load.

Sep 14, 20266 min

Web Dev

CSRF: making the browser betray its user

How cross-site request forgery uses a browser's own cookie-sending rules to trigger actions a logged-in user never asked for, and how to actually stop it.

Sep 13, 20266 min

Web Dev

XSS: running your code on their page

How cross-site scripting turns a comment box into a way to run JavaScript on someone else's session, demonstrated live, then fixed with proper escaping.

Sep 13, 20266 min

Web Dev

SQL injection: break it live, then fix it

Run a real SQL injection against a real in-browser SQLite database, watch every row come back, then fix it the way Linkstash actually does.

Sep 12, 20266 min

Web Dev

How apps actually get broken

A working threat model for web apps: who attacks them, what they're after, and the shape every lesson in this security series follows.

Sep 12, 20265 min

News

Full-Duplex Voice AI, Explained: Inside GPT-Live-1

OpenAI's GPT-Live-1 hit the API on September 10. How full-duplex voice works, why turn-based pipelines feel slow, and the voice/brain split it forces.

Sep 11, 20269 min

News

OpenAI's Navier-Stokes Proof: What Was Actually Proved

OpenAI says an AI cracked a Millennium Prize Problem. The Clay rules do allow a forcing term, so here's what the proof settles and what stays open.

Sep 11, 20269 min

Web Dev

Project: tests that run on every push

A test suite that only runs on your laptop is a suggestion. Wire Vitest into GitHub Actions so every push and pull request runs it automatically.

Sep 11, 20265 min