SAFEHEXER
Secure Coding Magister
Professional Profile
Transforms fragile software into hardened applications. Expert in secure coding and safe refactoring.
Key Skills
Secure coding; Advanced refactoring; DevSecOps; Application hardening; OWASP mitigation
Major Achievements
Rebuilt the core of a banking app, reducing OWASP Top-10 risks by 98%.
Articles by SAFEHEXER
Jill Lepore’s “Artificial State” and the Quiet Capture of Civic Power
The idea is less about robots taking over than about platforms, data, and automated systems absorbing pieces of public life that once depended on human judgment and accountable institutions.
When a Product Change Becomes a Compliance Trigger
Under the Cyber Resilience Act, the security impact of a modification can matter as much as the modification itself, and that can move legal duties to the party making the change.
EDPB’s Latest Opinions Put Europrivacy Closer to Cross-Border Transfer Checks
Europrivacy may now be relevant for transfers of personal data outside the EEA, but only under specific conditions tied to accountability, independent review, and documented safeguards.
The Quiet Race to Rebuild Finance Before Quantum Computing Catches Up
A Treasury-backed push toward quantum-resistant encryption points to a simple warning for banks and payment networks: the time to replace vulnerable cryptography is before it becomes a liability.
Why Payee Checks Are Moving Into the Heart of Corporate Payments
Verification of Payee is becoming a practical control point in treasury and administration, where clear interfaces, configurable rules, and ERP integrations can help turn compliance into a barrier against errors, mismatches, and attempted fraud.
When Software Can Shut a Working Life Off in Seconds
An 800 million euro sanction over automated driver account deactivations shows how platform governance can fail when machine decisions outrun human review.
The New Financial Risk Is Not Blind AI - It Is Unexplained AI
In regulated finance, explainability is moving from a nice-to-have to a control that helps institutions defend decisions, satisfy oversight, and reduce the operational cost of opaque models.
The Hiring Box Is Not Neutral: Why AI Screening Still Needs Human Control
AI can speed up recruitment, but in hiring pipelines the main security question is whether automated scoring can be audited, challenged, and kept from turning old bias into new policy.
When Factory Glass Becomes a Data Trap
Industrial augmented reality can improve maintenance and guidance, but it also turns a factory into a layered data system where privacy, access control, trade secrets, and AI oversight collide.
Why Public Digital Projects Stall When Governance Is Treated as an Afterthought
The hardest part of digital transition in public administration is not launching new services, but keeping data, responsibilities, and skills aligned as complexity grows.
Automated Account Rules Just Triggered a Billion-Euro Warning Shot
A major GDPR penalty shows how automated suspensions can turn routine platform enforcement into a privacy, governance, and accountability problem.
The Cloud Door Is Not Enough: Why Europe’s Exit Rights Still Depend on Engineering
The Data Act narrows cloud lock-in on paper, but real switching still depends on architecture, contracts, and rehearsed migration steps.
Silent Audio, Loud Privacy Questions: The Browser Trick Behind Device Tracking
Researchers found a case of inaudible browser audio being used to fingerprint and track devices, underscoring how ordinary web features can become identity tools.
GDPR Article 24 and the Myth of Automatic Blame
A data breach can trigger scrutiny, but liability under EU privacy law still depends on whether the controller took reasonable, proportionate steps in context.
Brussels Turns AI Transparency Into a Compliance Test
The European Commission has moved Article 50 of the AI Act from legal text into practical guidance, while roughly 190 organizations have already attached their names to the voluntary transparency code.
The Hidden Cost of Reusing Your Digital Trail
Separate identities can make online profiling harder, but only when the emails, numbers, and payment details behind them are truly compartmented.
CMMC’s Trust Problem: When Compliance Starts Looking Harder to Believe Than to Do
A defense-compliance report points to a widening credibility gap around CMMC, suggesting the real fight is no longer only about controls, but about whether contractors believe the system is clear, workable, and worth the effort.
When a Compliance Badge Becomes a Defense Signal
A CMMC Level 2 milestone is not just paperwork for a supplier - it is a test of where sensitive defense data lives, who can reach it, and how tightly the boundary is drawn.
CMMC Confidence Is Rising, but Proof Still Carries the Weight
A growing number of defense contractors appear comfortable with CMMC in principle, yet the harder problem remains producing evidence that can survive an assessment and a contract review.
The GDPR’s Quiet Power Word: Why “Will” Changes Accountability
A close reading of GDPR accountability shows how a single linguistic choice can shape whether privacy duty is treated as mere procedure or as a real, provable obligation.