<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Barry O'Callaghan</title><link>https://barryocallaghan.com/</link><description>Recent content on Barry O'Callaghan</description><generator>Hugo -- gohugo.io</generator><language>en</language><managingEditor>me@barryocallaghan.com (Barry O'Callaghan)</managingEditor><webMaster>me@barryocallaghan.com (Barry O'Callaghan)</webMaster><copyright>© 2026 Barry O'Callaghan</copyright><lastBuildDate>Tue, 20 Oct 2026 00:00:00 +0000</lastBuildDate><atom:link href="https://barryocallaghan.com/index.xml" rel="self" type="application/rss+xml"/><item><title>sec-headers: Audit Your Security Headers in One Command</title><link>https://barryocallaghan.com/posts/sec-headers-launch/</link><pubDate>Tue, 20 Oct 2026 00:00:00 +0000</pubDate><author>me@barryocallaghan.com (Barry O'Callaghan)</author><guid>https://barryocallaghan.com/posts/sec-headers-launch/</guid><description>&lt;p>Security headers are the cheapest defense you can deploy. They cost nothing, take
minutes to configure, and block entire classes of attacks — XSS, clickjacking,
MIME sniffing, SSL stripping. Yet most sites get them wrong, or don&amp;rsquo;t set them
at all.&lt;/p></description></item><item><title>The Day Encryption Stops Working</title><link>https://barryocallaghan.com/posts/q-day/</link><pubDate>Tue, 20 Oct 2026 00:00:00 +0000</pubDate><author>me@barryocallaghan.com (Barry O'Callaghan)</author><guid>https://barryocallaghan.com/posts/q-day/</guid><description>&lt;div
 
 class="flex px-4 py-3 rounded-md shadow bg-primary-100 dark:bg-primary-900"
 
 >
 &lt;span
 
 class="text-primary-400 pe-3 flex items-center"
 
 >
 
 &lt;/span>

 &lt;span
 
 class="dark:text-neutral-300"
 
 >This is &lt;strong>Part 1&lt;/strong> of the &lt;em>Post-Quantum Cryptography&lt;/em> series — a plain-language
guide to what&amp;rsquo;s coming, why it matters, and what to do about it.&lt;/span>
&lt;/div>

&lt;p>Most security problems announce themselves. A suspicious login, a port left
open, a file where it shouldn&amp;rsquo;t be. You get a signal, and usually a chance to
respond.&lt;/p></description></item><item><title>vt-scanner: Check Any File Against VirusTotal in One Command</title><link>https://barryocallaghan.com/posts/vt-scanner-launch/</link><pubDate>Tue, 20 Oct 2026 00:00:00 +0000</pubDate><author>me@barryocallaghan.com (Barry O'Callaghan)</author><guid>https://barryocallaghan.com/posts/vt-scanner-launch/</guid><description>&lt;p>If you handle suspicious files — malware samples, email attachments, downloads
from sketchy URLs — you&amp;rsquo;ve done the dance: hash the file, open VirusTotal,
paste the hash, wait, repeat. It&amp;rsquo;s slow, manual, and burns your attention on
process instead of analysis.&lt;/p></description></item><item><title>Projects</title><link>https://barryocallaghan.com/projects/</link><pubDate>Mon, 01 Jan 0001 00:00:00 +0000</pubDate><author>me@barryocallaghan.com (Barry O'Callaghan)</author><guid>https://barryocallaghan.com/projects/</guid><description>&lt;p>I build small, sharp, open-source security tools that solve problems I actually
hit in the field. Each one is &lt;strong>CLI-first&lt;/strong>, &lt;strong>scriptable&lt;/strong>, and &lt;strong>free&lt;/strong> — no
SaaS dashboard, no browser extension, no signup. They slot into the same
pipelines you already run.&lt;/p></description></item></channel></rss>