security.jelia.nyc

How attacks work, and how to stop them

Every break-in, from a stolen password to a hijacked slice of the internet, exploits a gap between what a system assumes and what is actually true. This site is a visual, hands-on guide to those gaps: where they come from, how defenders close them, and how to tell when someone is probing yours.

It is written for the defender. You will see how flaws arise, through harmless examples, and spend most of your time on the fixes: the cryptography, the protocols, the coding habits and the monitoring that make attacks fail. It builds on networks.jelia.nyc; each chapter links to the networking chapter you may want to read first. When you want the hands-on version for your own machines, RedPatch is the practical side: sourced security tips and tools for macOS, Windows, Windows Server and Linux, plus a daily security news feed. This site explains why each of those steps matters.

How it works
WatchEach chapter opens with a short narrated walkthrough. Press play, sound on.
PlayInstruments you can drive: a password-cracking cost calculator, a firewall you write rules for, a DNS resolver you can try to fool, a log stream to hunt through.
ReadPlain-English sections, with "go deeper" panels for the protocol and code details when you want them.
Put it to work

RedPatch: the security arm of LIBCSystems

RedPatch watches the vulnerabilities being exploited right now and turns them into sourced fixes for macOS, Windows, Windows Server and Linux, each linked to the vendor's own documentation. This site explains why those fixes work; RedPatch tells you which ones to apply today.

Chapter 19, The watch floor, follows a RedPatch-style watch through a real patch: reading the advisory stream, triaging by exposure, exploitability and value, patching against the clock, then hunting for anything that got in first.

Contents

Nineteen chapters and a glossary