Tagged
#security
4 posts
Technical · 25 min
How I Tried to Break My Own Encrypted Journaling App — Ten Times
An authorized, ten-round penetration test of MoodHaven Journal — 65+ targets, 41 confirmed-and-fixed vulnerabilities, and the bespoke tooling it took to prove the encryption actually holds.
Read Technical · 13 min
So We Rooted the Phone and Went Deeper
The unrooted phone told us our encryption held. Root let us check whether we were telling ourselves the truth. We weren't, entirely — and that was the point.
Read Technical · 10 min
I Tried to Break Into My Own Journaling App on an Unrooted Pixel 9
A weekend attacking my own encrypted journaling app. The only foothold I got was my own debug build, my standard MITM playbook failed completely, and figuring out why taught me the most.
Read Technical · 9 min
Changing a Password Is a One-Liner — Unless You Encrypt Everything
Crash-safe master-password rotation in a zero-knowledge journaling app: re-encrypting across two layers and two runtimes with a single atomic flip a kill -9 can't corrupt.
Read