Aditya Sharma

Writing

Everything I
have checked.

19 pieces Every number carries a named source and a date The Jyotisha and iPhone tools archives live on their own pages
All WordPress 106 AI 28 Cyber Security 19 SEO 7 Automation 22 Elementor 9 Google Sheets 6 Personal 1 Health 1
  1. 01 WordPress File Permissions That Actually Matter Core does not read 644 or 755 to decide if it can update itself. It compares file owners. Plus the three permission mistakes that end in… Cyber Security 8 min
  2. 02 What a WordPress Backup Has to Contain Before a Restore Will Work UpdraftPlus free does not archive wp-config.php. Read from three plugins' source: what is in the archive, what is not, and the restore rehearsal that finds out. Cyber Security 9 min
  3. 03 Hardening wp-admin: What Actually Costs an Attacker Something Six standard hardening measures ranked by whether they change an attacker's work. Two are real, two depend on implementation, two are mostly noise reduction. Cyber Security 11 min
  4. 04 WordPress Capabilities and Roles, Read From the Source Administrator holds 61 capabilities, editor 34, subscriber 2. And edit_post is not stored anywhere, because map_meta_cap computes it per post at check time. Cyber Security 11 min
  5. 05 WordPress Plugin Supply Chain: What Actually Happened in the Documented Incidents Five incidents with primary sources and dates. In four of them the code was fine and the delivery channel was compromised. Cyber Security 11 min
  6. 06 Why WordPress Malware Scanners Miss Cloaked Spam, and How to Actually Check A scanner reads files on disk. Cloaked spam is a decision made at request time. Here is the mechanism, and the check that settles it. Cyber Security 11 min
  7. 07 Application Passwords in WordPress: The Security Model, and Where It Leaks 24 characters, no scope, no expiry, and an admin key can install plugins over REST. What core actually does, read from the source. Cyber Security 10 min
  8. 08 Reading Your WordPress Access Logs for the Things Scanners Will Not Tell You A scanner reports on files. The access log reports on events. Seven tested queries that separate a real compromise from the daily noise. Cyber Security 10 min
  9. 09 The Scanner Said Clean. The Site Was Serving Spam to Googlebot. A client site was cloaking spam to search engines while every commercial security plugin reported no threats. Why signature scanners miss this, and the agent I… AI 5 min
  10. 10 Running Claude Code Against WordPress: The Complete Setup Six months of AI agents against production WordPress. The MCP stack, the guardrails that block destructive commands, and four failure modes no tutorial covers. AI 6 min
  11. 11 Dedicated Password Manager Vs Browser Password Manager (Chrome, Safari, Firefox) As someone who uses the internet daily, you likely have multiple accounts that require passwords. With so many passwords to remember, it’s no surprise that many… Cyber Security 7 min
  12. 12 YubiKey vs YubiKey 5- What’s the Difference? (With Comparison Table) YubiKey is a popular security key that provides an extra layer of security to online accounts. When it comes to choosing between YubiKey Security Key and… Cyber Security 6 min

Agents in Production

The demos are impressive. I write down the part where it falls over.

Free. One email a week. Unsubscribe in one click, and I do not send anything else.