Rafael Gómez
Network & Security Engineer
Tutorials, guides and opinions on IT, networking, security and automation
Latest posts
php2shell: the PHP flaw that bypasses your WordPress, and how to know you’re safe
php2shell: two critical PHP flaws allow code execution with no password. Fixed versions and how to check your VPS, Docker containers or…
He didn’t type “admin” into a login: what really happened with the 16-year-old and Microsoft
A 16-year-old researcher got admin access to an internal Microsoft service with an unsigned token. What really happened, what the headlines got…
What AI to use when your Claude quota runs out: I tested 13, and my pick costs half a cent
I tested 13 models with hidden tests to cover the days without Claude quota. Six returned wrong dates without warning; my pick…
Jev picks the Claude Code model: I measured it before recommending it
A hook that asks TypeSafe's Jev which model each Claude Code subagent deserves. I tested it with over 150 decisions, a cost…
From a HEIC photo to OpenAI’s internal code: what the case teaches anyone who runs servers
A photo uploaded to OpenAI's forum ended up as a pull request in its internal repository. What happened, what we don't know,…
Device code phishing: the email your MFA does not stop
The same phishing email, two verdicts: one quarantined, one delivered. Why MFA does not protect against device code phishing, and which control…
Networking and Security
php2shell: the PHP flaw that bypasses your WordPress, and how to know you’re safe
php2shell: two critical PHP flaws allow code execution with no password. Fixed versions and how to check your VPS, Docker containers or…
He didn’t type “admin” into a login: what really happened with the 16-year-old and Microsoft
A 16-year-old researcher got admin access to an internal Microsoft service with an unsigned token. What really happened, what the headlines got…
From a HEIC photo to OpenAI’s internal code: what the case teaches anyone who runs servers
A photo uploaded to OpenAI's forum ended up as a pull request in its internal repository. What happened, what we don't know,…
My journey
Starting a Tech Career as an Immigrant: My Story and Advice That Works
Being an immigrant and starting a career in technology is hard, but not impossible. I share my own experience and practical advice…
My First IT Certification: The Start of My Journey in Tech
Getting started in IT can be daunting, and picking your first certification is key to opening doors. In this post I share…