https://namelessnerd.com https://namelessnerd.com/namelessnerd.jpg Sushan Khadka (namelessnerd) — Full-Stack Developer & Software Engineer Portrait of Sushan Khadka, known online as namelessnerd — full-stack software engineer from Kathmandu, Nepal. https://namelessnerd.com/blog/Advances-Information-hiding-techniques https://namelessnerd.com/images/blogs/steganography-information-hiding-namelessnerd.jpg How Information Gets Hidden: Steganography and Covert Channels Explained — by Sushan Khadka (namelessnerd) How data is concealed inside ordinary images, files, and network traffic — steganography, covert channels, and the detection techniques defenders use to catch it. https://namelessnerd.com/blog/Compromising-android-phone https://namelessnerd.com/images/blogs/compromising-android-phone-namelessnerd.webp How Android Malware Payloads Work — And How to Defend Against Them — by Sushan Khadka (namelessnerd) A defender's breakdown of Android RAT payloads: how a malicious APK gains control, why permissions and sideloading are the weak points, and how to detect and prevent infection. https://namelessnerd.com/blog/anatomy-of-a-web-exploit https://namelessnerd.com/images/blogs/anatomy-of-a-web-exploit-namelessnerd.webp Anatomy of a Modern Web Exploit: From Recon to RCE — by Sushan Khadka (namelessnerd) Follow a realistic attack chain from reconnaissance through SSRF and insecure deserialization to remote code execution — and how to break the chain at every stage. https://namelessnerd.com/images/blogs/anatomy-of-a-web-exploit-diagram-namelessnerd.webp Anatomy of a Modern Web Exploit: From Recon to RCE - diagram by Sushan Khadka (namelessnerd) Diagram from "Anatomy of a Modern Web Exploit: From Recon to RCE" by Sushan Khadka (namelessnerd). https://namelessnerd.com/blog/breaking-and-securing-jwt https://namelessnerd.com/images/blogs/breaking-and-securing-jwt-namelessnerd.webp Breaking and Securing JWT Authentication: Real-World Token Attacks — by Sushan Khadka (namelessnerd) alg=none, algorithm-confusion, weak secrets, and token replay — the JWT attacks every backend engineer should understand, and how to defend. https://namelessnerd.com/images/blogs/breaking-and-securing-jwt-diagram-namelessnerd.webp Breaking and Securing JWT Authentication: Real-World Token Attacks - diagram by Sushan Khadka (namelessnerd) Diagram from "Breaking and Securing JWT Authentication: Real-World Token Attacks" by Sushan Khadka (namelessnerd). https://namelessnerd.com/blog/buffer-overflows-modern-defenses https://namelessnerd.com/images/blogs/buffer-overflows-modern-defenses-namelessnerd.webp Buffer Overflows in 2025: Stack Smashing, ASLR, and Bypassing Modern Defenses — by Sushan Khadka (namelessnerd) From classic stack smashing to stack canaries, NX, ASLR, and the return-oriented programming techniques that bypass them — a defender's mental model. https://namelessnerd.com/images/blogs/buffer-overflows-modern-defenses-diagram-namelessnerd.webp Buffer Overflows in 2025: Stack Smashing, ASLR, and Bypassing Modern Defenses - diagram by Sushan Khadka (namelessnerd) Diagram from "Buffer Overflows in 2025: Stack Smashing, ASLR, and Bypassing Modern Defenses" by Sushan Khadka (namelessnerd). https://namelessnerd.com/blog/concurrency-race-conditions-lock-free https://namelessnerd.com/images/blogs/concurrency-race-conditions-lock-free-namelessnerd.webp Concurrency Deep Dive: Race Conditions, Locks, and Lock-Free Patterns — by Sushan Khadka (namelessnerd) Mental models for concurrency: data races, memory ordering, mutexes versus lock-free structures, and how to reason about correctness. https://namelessnerd.com/images/blogs/concurrency-race-conditions-lock-free-diagram-namelessnerd.webp Concurrency Deep Dive: Race Conditions, Locks, and Lock-Free Patterns - diagram by Sushan Khadka (namelessnerd) Diagram from "Concurrency Deep Dive: Race Conditions, Locks, and Lock-Free Patterns" by Sushan Khadka (namelessnerd). https://namelessnerd.com/blog/database-indexing-internals https://namelessnerd.com/images/blogs/database-indexing-internals-namelessnerd.webp Database Indexing Internals: B-Trees, Cardinality, and Query Plans — by Sushan Khadka (namelessnerd) Why indexes make reads fast and writes slow, how the planner chooses them, and how to read an EXPLAIN plan like a senior engineer. https://namelessnerd.com/images/blogs/database-indexing-internals-diagram-namelessnerd.webp Database Indexing Internals: B-Trees, Cardinality, and Query Plans - diagram by Sushan Khadka (namelessnerd) Diagram from "Database Indexing Internals: B-Trees, Cardinality, and Query Plans" by Sushan Khadka (namelessnerd). https://namelessnerd.com/blog/designing-a-distributed-rate-limiter https://namelessnerd.com/images/blogs/designing-a-distributed-rate-limiter-namelessnerd.webp Designing a Distributed Rate Limiter: A System Design Walkthrough — by Sushan Khadka (namelessnerd) Token bucket versus sliding window, Redis-backed counters, race-free atomic increments, and the trade-offs of rate limiting at scale. https://namelessnerd.com/images/blogs/designing-a-distributed-rate-limiter-diagram-namelessnerd.webp Designing a Distributed Rate Limiter: A System Design Walkthrough - diagram by Sushan Khadka (namelessnerd) Diagram from "Designing a Distributed Rate Limiter: A System Design Walkthrough" by Sushan Khadka (namelessnerd). https://namelessnerd.com/blog/designing-idempotent-apis https://namelessnerd.com/images/blogs/designing-idempotent-apis-namelessnerd.webp Designing Idempotent and Resilient APIs — by Sushan Khadka (namelessnerd) Idempotency keys, safe retries, the exactly-once illusion, and the patterns that keep distributed APIs correct when the network fails. https://namelessnerd.com/images/blogs/designing-idempotent-apis-diagram-namelessnerd.webp Designing Idempotent and Resilient APIs - diagram by Sushan Khadka (namelessnerd) Diagram from "Designing Idempotent and Resilient APIs" by Sushan Khadka (namelessnerd). https://namelessnerd.com/blog/dns-internals-and-cache-poisoning https://namelessnerd.com/images/blogs/dns-internals-and-cache-poisoning-namelessnerd.webp DNS Internals and Security: Recursion, Caching, and Cache Poisoning — by Sushan Khadka (namelessnerd) How DNS resolution really works under the hood — recursion, caching, TTLs — and how attackers poison caches, plus the defenses that stop them. https://namelessnerd.com/images/blogs/dns-internals-and-cache-poisoning-diagram-namelessnerd.webp DNS Internals and Security: Recursion, Caching, and Cache Poisoning - diagram by Sushan Khadka (namelessnerd) Diagram from "DNS Internals and Security: Recursion, Caching, and Cache Poisoning" by Sushan Khadka (namelessnerd). https://namelessnerd.com/blog/tls-1-3-handshake-packet-level https://namelessnerd.com/images/blogs/tls-1-3-handshake-packet-level-namelessnerd.webp Demystifying the TLS 1.3 Handshake at the Packet Level — by Sushan Khadka (namelessnerd) A packet-by-packet walk through the TLS 1.3 handshake — ClientHello, key shares, 0-RTT, and why it is both faster and safer than TLS 1.2. https://namelessnerd.com/images/blogs/tls-1-3-handshake-packet-level-diagram-namelessnerd.webp Demystifying the TLS 1.3 Handshake at the Packet Level - diagram by Sushan Khadka (namelessnerd) Diagram from "Demystifying the TLS 1.3 Handshake at the Packet Level" by Sushan Khadka (namelessnerd). https://namelessnerd.com/blog/what-happens-when-you-type-a-url https://namelessnerd.com/images/blogs/what-happens-when-you-type-a-url-namelessnerd.webp What Really Happens When You Type a URL Into Your Browser — by Sushan Khadka (namelessnerd) The classic senior-interview question answered in depth: DNS, TCP, TLS, HTTP, and the rendering pipeline — every hop from keystroke to pixels. https://namelessnerd.com/images/blogs/what-happens-when-you-type-a-url-diagram-namelessnerd.webp What Really Happens When You Type a URL Into Your Browser - diagram by Sushan Khadka (namelessnerd) Diagram from "What Really Happens When You Type a URL Into Your Browser" by Sushan Khadka (namelessnerd).