Notes on web security, system hardening, and building software that stays safe to run.