<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Security on Fernando Ruiz</title><link>https://www.fernandoux.com/tags/security/</link><description>Recent content in Security on Fernando Ruiz</description><generator>Hugo</generator><language>en-us</language><lastBuildDate>Mon, 01 Jun 2026 15:01:17 -0500</lastBuildDate><atom:link href="https://www.fernandoux.com/tags/security/index.xml" rel="self" type="application/rss+xml"/><item><title>I Built a Medical SaaS With AI. Then I Got Hacked. Here's the Case Study.</title><link>https://www.fernandoux.com/blog/en/medical-saas-case-study-dark-forest/</link><pubDate>Thu, 23 Apr 2026 00:00:00 +0000</pubDate><guid>https://www.fernandoux.com/blog/en/medical-saas-case-study-dark-forest/</guid><description>&lt;p&gt;The first night I deployed my sister&amp;rsquo;s medical scheduling system to production, I went to bed feeling like a king. By 9am the next morning, my server&amp;rsquo;s CPU was pinned at 300%, and someone else was mining cryptocurrency on my rented hardware.&lt;/p&gt;
&lt;p&gt;That&amp;rsquo;s the middle of the story, though. Let me back up.&lt;/p&gt;
&lt;p&gt;This is a case study about the SaaS I always wanted to build, the one that finally found me, and everything I broke and learned getting it to work. It&amp;rsquo;s also the story of a Product Designer who thought he understood software, and discovered the internet is a much stranger, more hostile place than any Figma file ever suggested.&lt;/p&gt;</description></item><item><title>Safeguards for Destructive Actions: Positive Friction</title><link>https://www.fernandoux.com/en/wiki/techniques/destructive-action-safeguards/</link><pubDate>Mon, 01 Jan 0001 00:00:00 +0000</pubDate><guid>https://www.fernandoux.com/en/wiki/techniques/destructive-action-safeguards/</guid><description>&lt;div class="info-panel"&gt;
 &lt;div class="info-header"&gt;
 &lt;span class="material-symbols-outlined info-panel-icon"&gt;info&lt;/span&gt;
 &lt;span class="info-panel-label"&gt;Quick Definition&lt;/span&gt;
 &lt;/div&gt;
 &lt;div class="info-content"&gt;
 &lt;strong&gt;Safeguards&lt;/strong&gt; are intentional friction mechanisms designed to prevent a user from performing irreversible actions (deleting, formatting, closing an account, or removing critical data) accidentally or impulsively. In this case, &lt;strong&gt;friction is an ally of the user experience.&lt;/strong&gt;
 &lt;/div&gt;
&lt;/div&gt;

&lt;h2 id="the-power-of-positive-friction"&gt;The Power of Positive Friction&lt;/h2&gt;
&lt;p&gt;In standard interface design, we seek to remove any obstacles or friction that slows down the user. However, for destructive actions, friction is &lt;strong&gt;humanly necessary&lt;/strong&gt;. Without it, a single mistaken click could erase years of user work. A good safeguard forces the brain to switch from automatic mode (&amp;ldquo;System 1&amp;rdquo;) to analytical and conscious mode (&amp;ldquo;System 2&amp;rdquo;).&lt;/p&gt;</description></item></channel></rss>