The Desk

The Desk is the editorial voice of About Hacking. Everything here is published under it rather than under a personal byline, because what matters is whether an explanation holds up, not who signed it.

The aim is narrow and worth stating plainly: explanations a reader can act on and verify. The mechanism comes before the fix, because a fix you do not understand is a fix you cannot adapt when the situation changes.

The Desk works from primary sources — the specifications, the vendor documentation, and the OWASP, NIST and NCSC guidance that defines behaviour — and will not state a claim that cannot be traced back to one of them. Every article lists the sources it was built from, and every one of those links is checked before publication.

The subjects it returns to are the ones security is most often taught badly: the browser’s security model, injection in all its forms, protocol-level attacks, and the unglamorous defensive work that keeps systems standing long after the exciting part is over. It writes for the reader who wants to understand a thing, not merely be warned about it.

Corrections are welcome and are made in the open. If something here is wrong, say so and it will be fixed.