Lab log / 187 entries since 2008
Lab notes on application security, Ruby, and the web.
I write to document what I learn and to share it with anyone who finds it useful.
Latest No. 187
What I learned From Managing Bug Bounty Program
Triage judgement and trust: what I learned from managing a bug bounty program.
Read entry- No. 186
My Transition to Claude Code: Key Learnings on Precedence, Karpathy Rules, and More
I started with GitHub Copilot, then moved on to Windsurf. Now, I use Claude Code. Here are my key takeaways.
- No. 185
Why I am moving to Medium
Switched to Medium to save time, not money. Old posts: www.kaklabs.com. New posts: kaklabs.com.
- No. 184
DEF CON Singapore 26 Talks - PackageGate: Finding 0-days in every JS Package Manager
Why you should migrate from NPM or Yarn to vlt, pnpm, or bun
- No. 183
My DEF CON 2026 Training Experience in Singapore
Insight from my DEF CON training: Harnessing LLMs for Application Security.