01
Blog
Articles and practical guides about cybersecurity, privacy, surveillance, infrastructure, and technology.
- Cybersecurity
- Privacy
- Technology
- Digital life
Cybersecurity // privacy // technology
We are alltargets.
Every device records. Every platform profiles. Every system makes assumptions about who you are, what you want, and what you may do next.
Digital Sentry is a small cybersecurity company and the home for our writing, projects, and practical security work.
Awareness is the first defense.Stay aware. Stay autonomous.Control your signal.
// What Digital Sentry is
One focused company.A consistent point of view.
We use Digital Sentry to share what we are learning, building, and thinking about across cybersecurity, privacy, surveillance, and technology. It is also where we offer practical security services.
01Question the default.
02Protect what matters.
03Build and share useful things.
// Explore Digital Sentry
Writing, projects, and security work.
Everything here follows the same themes: understand technology, protect your privacy, improve security, and share useful work.
02
Projects
Software, security tools, learning platforms, and experiments we are building or documenting.
- Software
- Automation
- Security tools
- Education
03
Cybersecurity Services
Practical assessments and technical guidance for organizations that need clearer risk decisions and fewer blind spots.
- Security assessments
- Risk analysis
- Hardening
- Training
// Latest posts
From the blog
Cybersecurity, privacy, infrastructure, technology, and the lessons we find worth sharing.
Threat Actors
Lazarus Group Targets Crypto Infrastructure in New Campaign
A field-level look at Lazarus Group, the North Korean state-sponsored threat actor behind some of the largest cyber heists on record. Background, observed TTPs, the major public incidents, and what defenders can actually do about it.
May 16, 202412 min read
Cybersecurity
Understanding OAuth 2.0 Security Best Practices
OAuth 2.0 is the backbone of modern delegated authorization, but the spec is large and the failure modes are subtle. The grant types that matter, the token storage decisions that actually keep you safe, the scope designs that survive the test of time, and the operational practices that catch the rest.
May 14, 202411 min read
Cybersecurity
Phishing-Resistant MFA and WebAuthn: The Practical Choices That Actually Stop Account Takeover
Push-based MFA and SMS one-time passwords are vulnerable to phishing and push fatigue. FIDO2 / WebAuthn with hardware-backed credentials is the standard that holds up. What phishing-resistant MFA actually means, how WebAuthn works, where the failure modes still are, and how to roll it out without breaking everything.
May 15, 202410 min read
// Cybersecurity services
Practical cybersecurity for organizations that cannot afford blind spots.
Security assessments, technical risk analysis, and clear guidance grounded in actual exposure—not fear, theater, or generic checklists.