Category: IT Security

“Our team can just write it, can’t we?” — This one sentence can cost an organization three months. > 🎯 What this article covers The real reasons behind the Terraform code ownership debate Advantages and limitations when the infrastructure team is responsible Advantages and limitations when the development team (including DevOps) is responsible 3 practical…

“Even at this very moment, 15 Claude sessions are running simultaneously.” — Boris Cherny, Creator of Claude Code > 🎯 What this article covers The actual workflow used by the designer of Claude Code Parallel execution strategies for one person to handle 100 PRs How to level up your entire team with the CLAUDE.md file…

“Your resident registration number may have disappeared, but its shadow still lingers on the internet.” > 🎯 What this article covers What CI (Connecting Information) is and why it was created Why CI is 88 bytes — The secret of the hash algorithm CI generation process (Resident Registration Number → HMAC → Base64) CI vs…

“AI writes code in the terminal? All three can do it, so what’s the difference?” — Those who have used them know that the difference is quite significant. > 🎯 What This Article Covers Key differences between Claude Code, Gemini CLI, and OpenAI Codex Comparison of code quality / context window / speed / price…

Terraform is a declarative tool. However, ‘when to apply’ is a much more complex issue than it seems. 🎯 What this article covers The exact working principle of terraform apply How to use apply in a migration scenario The role and precautions of apply when drift occurs Differences and common principles between the two cases…

“Finding a vulnerability takes 30 minutes; responsibly communicating it takes 30 days.” — From an anonymous maintainer > What This Article Covers Current operational status and statistics of GHSA (GitHub Security Advisory) in 2026 Why now is the most challenging period in GHSA history — The era of “AI Slop” 7 essential attitudes security professionals…

# Migrating a 10-year-old legacy system to the cloud is not a relocation; it’s a surgical operation. > 🎯 What this article covers 6 strategies for migrating legacy apps to AWS (6 R’s) Comparison of the most common choices — Lift & Shift vs Replatform Practical overview of dedicated DB migration tools (AWS DMS, SCT)…

If ‘what an agent can do’ is a skill, then ‘how it operates’ is a harness. > 🎯 What this article covers OpenAI’s Harness Engineering Experiment — 1 million lines of code, 0 lines written by humans Anthropic’s defined long-running agent harness structure Fundamental differences between Skill and Harness Why these two concepts are confused…

“Isn’t it just a matter of lifting the server as is to AWS?” — This is the most common, and most dangerous, misconception heard at migration sites. > 🎯 What this article covers Essential compatibility analysis before migrating legacy apps to the cloud Why AWS migration tool (MGN) does not solve kernel issues Cases solvable…

“This S3 bucket is configured as a website. We recommend using the website endpoint instead of the bucket endpoint.” Ignore this one-line warning, and you’ll surely regret it later. > 🎯 What this article covers The exact meaning of the warning message that appears when configuring CloudFront origins Key differences between S3 bucket endpoints vs.…