Hello from The Secure Cookie

An introduction to me and to this newsletter. And why building security is more than just following AI hints.

Curiosity, learning, and hands-on testing are what brought us here today, to this online exchange between writer and reader. Knowledge has always fueled human progress, and it continues to shape the way we understand and build technology.

However, AI is now reshaping nearly everything we do, especially how we develop applications. Developers used to spend hours digging, testing, and figuring things out. Now we often just ask. That makes us faster and more productive, but when it comes to complex areas like security, things aren’t that simple. Security influences everything, from system performance and application usability to data integrity and user privacy.

The truth is, you can’t build secure systems without really understanding security. If you don’t know the threats, you can’t pick the right defenses. AI can give useful hints, but without the right context, you might not apply them correctly, and that’s when trouble happens.

These days, people assume applications need to be secure by default. Teams expect developers to deliver features quickly, meet business requirements, and avoid security gaps. All at once.

This is precisely why knowledge remains such a powerful advantage. AI is great, but genuine understanding gives you perspective. It helps you learn faster, solve harder problems, and work smarter.

For me, building secure systems is not just about adhering to best practices or integrating AI-driven advice. It is about being prepared for challenging scenarios, deeply understanding the technology, and enjoying the learning process itself.

That’s what motivates me to write this newsletter: to share what I’ve researched, tested, and learned in terms of security, hopefully in a way that makes life a little easier for all engineers.

I hope you find it useful.

Ferran