A student's blog that publishes hands-on security writeups, including a Linux privilege-escalation proof of concept (CVE-2026-31431), CTF solutions with code, and reflections on the AIS3 security training program. Readers get step-by-step technical details mixed with personal learning notes, written in Traditional Chinese.
Website: https://blog.yoyo899843.com/
Stoïk's security team publishes detailed technical write-ups on real ransomware intrusions, scanner vulnerabilities and on-chain ransom tracing. Readers get incident timelines, root-cause analysis and concrete defensive checks drawn from the team's own investigations.
Essays and a serialized book on AI-era cybersecurity, trust and measurement, citing specific vendor and lab reports. Readers get an original framework, including the Learning Advantage Ratio and the work-factor idea for AI judgment, alongside analysis of how security metrics get gamed.
Covers security news for people who run their own servers and care about privacy, including supply-chain attacks, runtime vulnerabilities and forensic tooling. It separates verified facts from rumour and explains what each issue means for readers and which fixes to apply.
One short email a week with hand-picked newsletters from the index. Free, no spam, unsubscribe anytime.
