Writing
Notes on security, data, and building for the long term.
A mix of long-form essays published here, and shorter field notes syndicated from farrosfr.com.
Long-form
Essays
May 22, 2026 · 7 min
Building for the long term when every dependency wants to break
Why I default to static-first architectures, small dependency trees, and a bias for boring tools, and what changes when you build a web product that has to survive five years of someone else's decisions.
web
Apr 8, 2026 · 9 min
Practical red-team notes: what offensive work taught me about defensive defaults
Field notes from running offensive security exercises on web applications I have also built, and the small defensive defaults that survive contact with a real attacker mindset.
security
Feb 14, 2026 · 8 min
Data engineering without a team: what one person can realistically own
An honest accounting of what a single data engineer can keep running well, what has to be deferred, and the smallest possible stack that survives a 90-day vacation.
data
Recent
Field notes from farrosfr.com
Aug 15, 2026
Report Writing for SOC L2 | study notes
Complete study notes for Report Writing for SOC L2. Master executive summaries, DFIR handover notes, and client incident reporting.
farrosfr.com
Aug 15, 2026
SOC L2 Alert Triage | study notes
Complete study notes for the SOC L2 Alert Triage room. Learn advanced SOC level 2 incident investigation and alert analysis.
farrosfr.com
Aug 9, 2026
Man vs. Himself | Chapter 1
Do your best today, do better tomorrow
farrosfr.com
Aug 5, 2026
Complimentary | study notes
Complete study notes for the Complimentary room. Uncover AWS Cognito IAM misconfigurations and extract guest records from DynamoDB.
farrosfr.com
Aug 5, 2026
Packed Light | study notes
Complete study notes for Packed Light room. Analyze network PCAPs, decode covert HTTP traffic, and reassemble exfiltrated data.
farrosfr.com
Jul 30, 2026
Room 404 | study notes
study notes for Room 404 room. Discover an exposed .git directory via web enumeration, dump the repository, and extract the hidden flag.
farrosfr.com
Jul 30, 2026
The Concierge Knows Too Much | study notes
study notes for The Concierge Knows Too Much room. Bypass VERA's AI prompt guardrails using persona impersonation to extract the escalation flag.
farrosfr.com
Jul 27, 2026
Intro to Cloud Security | study notes
Complete study notes for the Intro to Cloud Security room.
farrosfr.com
Jul 27, 2026
OWASP API Security Top 10 - 1 | study notes
study notes for OWASP API Security Top 10 - Part 1 room.
farrosfr.com