Brennenstuhl on Security
Search

Writing

Every essay in chronological order, newest first. Also browse by topic or search.

2026

  1. What I Learned Building an Identity Broker With Coding Agents
  2. Guest Lecture at HTW Berlin: AppSec in the Age of Agentic Engineering AppSec for Agentic Engineering
  3. Shift Down: Why Agentic Engineering Demands Platform-Level Security AppSec for Agentic Engineering
  4. Dependency Updates: latest Is Not a Security Strategy AppSec for Agentic Engineering
  5. AppSec in the Age of Agentic Engineering AppSec for Agentic Engineering

2025

  1. Goodbye Big Tech: My European JAMstack Migration
  2. Bunny Shield Review: 3 Things Need Improvement
  3. Bunny CDN: How to redirect Root Domain to Subdomain

2023

  1. What is JWA? A Deep Dive into JSON Web Algorithms JSON Web Tokens
  2. Mastering JWKS: JSON Web Key Sets Explained JSON Web Tokens
  3. JSON Web Encryption: Exploring JWE Token JSON Web Tokens
  4. JWT vs OAuth 2.0: Understanding the Key Differences JSON Web Tokens
  5. What is Whaling Cyber Awareness? Prevention Tips & Training Whaling
  6. Whaling Phishing: Definition and Prevention Strategies Whaling
  7. Step-Up Authentication: Elevating Security with OpenID Connect (OIDC)
  8. Password Attack Guide: What is Password Spraying?
  9. Passwordless: Critical Notes on FIDO2 Passkeys
  10. Passwordless Authentication: Future of Cybersecurity
  11. Long Password Support for Safer Login Systems Usable Password Security
  12. Max Password Length: A Secure Password Guide Usable Password Security
  13. Honeytoken: Authentication Attack Breach Detection
  14. How to Design a Strong & Usable Password Policy Usable Password Security
  15. How to: Password-Manager Friendly Login Forms Usable Password Security

2017

  1. Learning AssertJ: Null ain't Blank
  2. The Purpose of JWT: Stateless Authentication JSON Web Tokens
  3. On Making Spring Security OAuth RFC-compliant
  4. Weak Crypto, Github SAML Attack & Twitter Security UX

2016

  1. Single-Use JWT: Unlocking the Power of Stateless One Time Token JSON Web Tokens
  2. AWS DynamoDB: Backup & Recovery Strategy

2015

  1. Abusing JSON: Why AWS CloudFormation sucks?!
  2. Evolution of a Microservice: A Git History Visualisation
  3. Python Docopt: Convert Tuple List to Dictionary
  4. How to Migrate SVN to GIT with History?
  5. How to Check Github Licenses
  6. AWS Monocyte: Let's Build a Cloud Immune System