Csaba Stefan's Everyday Consumer Experiences – The Good and the Bad

On this page, I share my real-life experiences and interactions with various companies and service providers – from telecom operators and car repair shops to software vendors and internet providers. I document both the positive and the negative sides, offering an honest look into what consumers go through.

This is not about complaining – my goal is to share insights so others can avoid pitfalls or discover great practices. These are not expert opinions, but personal stories based on real situations, often involving long, winding processes to find a solution. Where applicable, I also include how many hours I spent explaining and resolving the issue. These are the kinds of cases that tested my patience, spiked my blood pressure, and may have even contributed to a few gray hairs – for real.

Real Stories, Real Lessons – Learning Through Everyday Challenges

We all face service-related issues at some point, and often it feels like we're alone in those struggles. This site presents real-life cases that show how – or how not – problems were solved, and what valuable takeaways we can draw from them.

I'm not a lawyer or industry expert – just someone who documents their journey. Some stories are based on months or even years of emails, calls, and meetings. My goal is to help others steer clear of the same traps, and offer ideas for more effective problem-solving.

Latest case studies

What Is a WAF – and Why I Never Thought I'd Be Writing About It in 2026

I never thought that on 21 October 2026 I'd be explaining what a WAF is. I've been running IT infrastructure for healthcare providers since 2005, and I've never put a single system on the internet without a WAF. What a web application firewall is, why it doesn't replace patching – and some rules from my own knowledge base, built over 20 years.

PHP2Shell: Two Critical PHP Vulnerabilities and How to Mitigate Them

CVE-2026-109618 and CVE-2026-109619: two CVSS 9.2 flaws in the PHP engine itself, allowing remote code execution without login – with exploitation attempts seen before the fix. Affected servers and versions, the fixed releases, and step by step how to reduce the risk until you patch.

PHP2Shell Risk Handbook by Website Type

The same flaw, very different consequences. Six environments, from static sites through WordPress and web shops to AWS EKS and Azure AKS – with impact, GDPR and PCI DSS implications, and an immediate action checklist. Prepared by Csaba Stefan Bako, PMI PMP, ISACA CISM.

BCDR and IT Operations: "Show Me the BCDR!"

"Csaba, what should we do?" – a question I heard a hundred times in a few days, and when I asked for the BCDR, the answer was almost always: there isn't one, or it's out of date. What BCDR, RTO and RPO mean, the three options I give in an incident, and what every business leader using IT or SaaS services should watch out for.

Three Backups, One Point of Failure – A 4 a.m. Telekom Outage

At 4 a.m. Telekom's fibre went down, taking Wi-Fi calling and mobile internet with it. On the terrace at 7 °C, Vanda, the virtual assistant, asked for my customer number from the app – with no internet. Unannounced maintenance, and five lessons for an SAP cutover.

What a Modern Apartment Building's Internet and Wi-Fi Should Look Like

L-shaped floors over 60 metres long, cameras, EV chargers and a community room in one building. A proposal from a resident with an IT background: separate networks, two internet providers, a central firewall and Wi-Fi on the floors too.