KAWSHIK.DEV Field notes // 2026
Practical notes from the intersection of security, artificial intelligence, software engineering, and the wonderfully messy systems between them.
Identity Security // Kawshik.dev
The password mistakes that still lead to account takeover, plus a local strong password checker for safer password habits.
02 Intelligence stream
Showing 8 of 40 notes
01
A comprehensive technical guide to DNS attacks: how DNS spoofing, Kaminsky cache poisoning, and BGP DNS hijacking work, and how to defend systems with DNSSEC, DoH/DoT, and RPKI.
01
A comprehensive guide to securing AI agent tool calling and Model Context Protocol (MCP) servers against SSRF, parameter poisoning, and unauthorized code execution.
01
Master Google Dorking with this beginner-friendly guide. Learn advanced Google search operators like site:, filetype:, and exact match for faster, safer research.
01
Learn how to complete your NID card download online in Bangladesh for 2026. Follow our step-by-step guide to get your NID online copy safely and securely.
02
The password mistakes that still lead to account takeover, plus a local strong password checker built around modern NIST, CISA, OWASP, and breach-screening guidance.
02
Apple has not confirmed the date, but the 2026 calendar and recent release pattern point to Sept. 9, Sept. 11 pre-orders, and Sept. 18 availability.
03
How slopsquatting turns AI-invented package names into install-time malware and how script policy, sandboxing, and SCA stop the spin.
04
How infostealers replay authenticated browser sessions and how rotation, revocation, DPoP, and DBSC shrink the blast radius.
05
The receipts, the AI aura scorecard, and a pilot-vs-copilot workflow for using coding assistants without outsourcing your engineering judgment.
06
Harden Bash and Zsh with leading-space controls, history-free agent wrappers, secret-safe CLI input, and an atomic redaction safety net.
Try a different topic or search phrase.
03 Knowledge map
Original explanations, experiments, and tutorials written by Kawshik Ahmed Ornob for developers, security learners, and curious builders.
Practical guides to threat modeling, DDoS awareness, network security, secure defaults, privacy, vulnerability research, and defensive engineering.
Explore security notesApplied AI tutorials covering prompt safety, language models, responsible automation, machine learning experiments, and natural language processing for Bengali text.
Explore AI notesMaintainable JavaScript, web performance, accessible interfaces, GitHub workflows, observability, APIs, and lessons from building useful digital products.
Explore engineering notesClear technical writing about mobile networks, MVNO services, connected devices, network signals, and real-world Internet of Things projects.
Explore telecom notesClear explainers on smartphone launches, platform changes, privacy features, and the technology decisions that affect everyday users.
Explore consumer tech notesPractical guides for public result portals, scholarship notices, official links, SMS formats, PDF downloads, and student-facing education services.
Explore education notes04 Complete Field Notes Directory
A permanent, crawlable index of all 34 research articles, cybersecurity guides, and software engineering notes.