A working journal for learning to build and defend servers, sites and applications — one attack understood, one control shipped, one entry logged.