Cybersecurity on Ulveon's Thoughts

Why did AI destroy my production database?

Tue, 05 May 2026 14:00:00 +0100

I already posted my thoughts on AI and why I don’t think it’s going away any time soon. Unfortunately, it seems some people who don’t like LLMs are using AI-induced outages and deletions as an opportunity to reaffirm their biases, and, in doing so, may be missing part of the picture.

The secure open source fallacy

Wed, 03 Dec 2025 08:00:00 +0100

Most open source advocates, and many security professionals, often say things like “open source software is secure because you can just read the code”.

This argument assumes that the ability to read source code directly translates into the ability to understand, verify, and trust it, because you can see the files this software opens or the network sockets it listens on. You can see the kind of network data it sends, and the cryptography it uses.

Vanguard (Part 1): Telegram raid protection

Sat, 09 Aug 2025 00:00:00 +0000

I’ve been developing Vanguard over the past few months. Initially it was little more than a hack, which was developed quickly and without much consideration regarding the cleanliness of the code. I needed a way to have public Telegram links without the risk of raids, or getting botted.

Effective security beyond encryption

Sun, 25 May 2025 00:00:00 +0000

To highly technical audiences, it is unsurprising that Telegram is not cryptographically secure and that Signal is much better.

Numerous security experts have pointed out that Telegram’s reputation as a secure messenger is primarily a result of its marketing rather than its technical architecture.

Software toggles are evil

Tue, 13 May 2025 00:00:00 +0000

“Do not sell my personal information”, “Reject all cookies”, “Do not show me personalised ads”, “Do not use my Maps activity for improvements”, “Do not store my voice recordings”, “Permanently delete my account”

Operational Security: Staying safe online

Sat, 05 Oct 2024 23:39:19 +0100

The Internet is a dangerous place. Especially if you are LGBTQ, furry, have unconventional sexual tendencies (CNC, BDSM, FinDom, etc) or are a member of a religious or racial minority group.

The Internet was not designed with safety or security in mind. In its ARPANET beginnings, many systems didn’t even have passwords because only privileged users were supposed to access them. As such, privacy and security features are often little more than layers added on top of aging protocols, like HTTPS is just SSL applied on top of HTTP.