alicansaykal.comAli Can Saykal — InfoSec & Stuff. Short ideas and collected things.https://alicansaykal.comenA threat model that does not fit in one sentence is not a threat modelhttps://alicansaykal.com/ideas/threat-model-is-a-sentencehttps://alicansaykal.com/ideas/threat-model-is-a-sentenceIf you cannot say who you are defending against and what they want, the spreadsheet underneath is decoration.Fri, 14 Aug 2026 00:00:00 GMTAn alert without an owner is a decorationhttps://alicansaykal.com/ideas/alerts-need-ownershttps://alicansaykal.com/ideas/alerts-need-ownersDetection coverage is easy to buy and easy to measure. Someone whose week gets worse when the alert fires is neither.Sat, 08 Aug 2026 00:00:00 GMTChoosing static was the security decisionhttps://alicansaykal.com/ideas/static-is-a-security-controlhttps://alicansaykal.com/ideas/static-is-a-security-controlThis site has no server, no database, no login and no third-party script. Most of its security work was done by deciding what not to build.Sun, 02 Aug 2026 00:00:00 GMT