https://farksecurity.com/ Research writeups and blog posts from Fark Consulting. en-us Mon, 24 Aug 2026 00:00:00 GMT https://farksecurity.com/blog/phish-signals-goes-standalone https://farksecurity.com/blog/phish-signals-goes-standalone Mon, 24 Aug 2026 00:00:00 GMT The mirror setup from last week's post is gone. In its place: a full Python port that has to agree with the TypeScript original signal for signal, a patched supply-chain vulnerability, and docs restructured so they stop duplicating the same explanation twice. security phishing detection-engineering typescript python tooling https://farksecurity.com/blog/open-sourcing-the-detection-engine https://farksecurity.com/blog/open-sourcing-the-detection-engine Mon, 17 Aug 2026 00:00:00 GMT The heuristic engine behind /phish-report is now its own open-source npm package with a real release pipeline behind it, and a local indicator database is next. security phishing tooling detection-engineering typescript https://farksecurity.com/blog/phish-analyzer-round-three https://farksecurity.com/blog/phish-analyzer-round-three Mon, 17 Aug 2026 00:00:00 GMT Cross-checking the authentication header against the delivery path itself, catching links with no domain at all, closing an evasion gap in my own keyword matching, and a print bug where the obvious fix quietly did nothing. security phishing detection-engineering meta https://farksecurity.com/blog/phish-analyzer-round-two https://farksecurity.com/blog/phish-analyzer-round-two Sun, 16 Aug 2026 00:00:00 GMT Adding attachment hashing, reply-thread hijack detection, and a Sigma rule that actually uses the hash, then finding a real bug on the way that had nothing to do with any of it. security phishing detection-engineering meta https://farksecurity.com/research/phish-report-detection-expansion-2026 https://farksecurity.com/research/phish-report-detection-expansion-2026 Sun, 16 Aug 2026 00:00:00 GMT Six new detections shipped to the phish-report pipeline this round, and the security review that ran against the diff before merge caught a real memory-exhaustion bug along with four other verified issues. phishing detection-engineering tooling secure-coding https://farksecurity.com/blog/rebuilding-the-phish-analyzer https://farksecurity.com/blog/rebuilding-the-phish-analyzer Sat, 15 Aug 2026 00:00:00 GMT A review of my own site turned up three live bugs in the phishing analyzer, then a scoring model that was quietly wrong, then a tool that could list indicators but not reason about them. security phishing detection-engineering meta https://farksecurity.com/blog/migrating-to-typescript https://farksecurity.com/blog/migrating-to-typescript Mon, 10 Aug 2026 00:00:00 GMT Converting the whole Express app from plain JS to TypeScript, and the handful of sharp edges that came with it. typescript express meta https://farksecurity.com/blog/recent-site-improvements https://farksecurity.com/blog/recent-site-improvements Fri, 07 Aug 2026 00:00:00 GMT What started as a broken deploy turned into a security audit, a new Blog section, and a pile of infrastructure cleanup. meta https://farksecurity.com/blog/starting-a-blog https://farksecurity.com/blog/starting-a-blog Fri, 07 Aug 2026 00:00:00 GMT Why this section exists separately from Research, and what's actually going to end up here. meta https://farksecurity.com/research/farksecurity-security-audit-2026 https://farksecurity.com/research/farksecurity-security-audit-2026 Wed, 05 Aug 2026 00:00:00 GMT A self-audit of this site's infrastructure covering OSINT recon, HTTP header hygiene, and exposed service scanning, plus the fixes that came out of it. audit web-security dns tls https://farksecurity.com/research/welcome-to-the-research-hub https://farksecurity.com/research/welcome-to-the-research-hub Mon, 03 Aug 2026 00:00:00 GMT How writeups get published here, and what to expect from this section. meta