// field notes on security & AI

CipherMind

by anlabs

In-depth writing on AI & LLMs, cybersecurity, PKI & cryptography — and the command-line recipes that tie them together.

Read the latestExplore the map

Latest

23 articles
Apple’s Free Local LLM Is Hiding in macOS Terminal
AI4 min

Apple’s Free Local LLM Is Hiding in macOS Terminal

There's a working local AI model in your Mac's terminal that most people never notice — free, private, and requiring no account or API key.

5 Essential Tools to Supercharge Your Claude Workflows
AI5 min

5 Essential Tools to Supercharge Your Claude Workflows

Five open-source tools—Graphify, Ponytail, Task-Observer, Claude-Mem and Headroom—that save tokens, keep context and make Claude Code more reliable.

Harness Engineering: The Harness Around the Brain
AI7 min

Harness Engineering: The Harness Around the Brain

The loop makes an LLM behave like an agent, but the harness is what makes it survivable in production — tool registry, context manager, state store, guardrails, and evaluators around the model.

Loop Engineering: The Brain Behind the Agent
AI5 min

Loop Engineering: The Brain Behind the Agent

An LLM is a stateless next-token predictor. The 'brain' of an AI agent isn't the model — it's the loop you build around it. What actually happens in one iteration, and where the loop breaks in production.

First Step Towards CISSP Certification: A Practical Starter's Guide
Others5 min

First Step Towards CISSP Certification: A Practical Starter's Guide

A field guide to starting your CISSP journey — prerequisites, domains, the study materials that actually helped, and the exam-day strategy I wish someone had handed me on day one.

Passkeys: The Future of Web Authentication
PKI6 min

Passkeys: The Future of Web Authentication

Passkeys replace passwords with asymmetric cryptography bound to your device and unlocked by a biometric. How they actually work, why they're better, and where they still fall short.

Tools

All 11 tools →

Free security tools that run entirely in your browser — locked so nothing you paste can leave it.

Paste anything — we’ll pick the tool

JWT Inspector

Decode a JSON Web Token, verify its signature, and check it the way your API should — plus inspect a JWKS or OpenID Connect configuration for risky settings.

Open →

Certificate & CSR Decoder

Read certificates, CSRs, .p7b bundles and CRLs — then check the chain reaches a trusted root, covers your host name, follows the CA/Browser Forum rules, and isn’t revoked.

Open →

SAML Inspector

Decode a SAMLResponse or AuthnRequest and see who it logs in, for which service and until when — with checks for unsigned assertions, signature wrapping and comment tricks.

Open →

Encode / Decode Workbench

Base64, hex, URL, HTML, Unicode, Base32, quoted-printable, MIME headers, PowerShell -EncodedCommand, gzip/deflate (SAML), punycode, ROT and XOR — auto-detected, chainable and shareable as a link.

Open →

Hash & Checksum Verifier

Check downloads against their published checksum — and verify the checksum file’s own OpenPGP or minisign signature, so you know who published it.

Open →

Secret Generator

Passwords, passphrases, API keys, encryption keys and UUIDs from your browser’s cryptographic random generator — with the strength in bits.

Open →

The CipherMind map

Open full map →
AICybersecurityPKICommandsOthers

Stay in the loop

New articles on AI, Cybersecurity, and PKI — delivered to your inbox.

No spam. Unsubscribe any time. By subscribing you agree to our Privacy Policy.