Blog
All posts · security, infrastructure, open web
Context Windows in AI Coding Agents: Sandboxes, Memory, and Routing
AI agents struggle with context windows. The mksglu/context-mode repo keeps tool output small through sandboxes and routes requests to the right backend for 17 …
Age Verification Mandates Are Surveillance Systems in Disguise
Age verification and digital ID mandates don't stop bad actors. They build surveillance infrastructure that only captures compliant users. A technical breakdown…
whoisthat: A Rust TUI VPN Client Backed by a Go/Xray Engine
whoisthat splits a VPN client into two processes: a Rust TUI for the terminal interface and a Go engine driving Xray-core underneath. This guide covers building…
Agent Execution Traces: Making the Unthinkable Visible
Sandboxing agents stops working once they can reason at runtime. Instrumentation through execution traces is the real primitive—capturing intent, detecting loop…
Deterministic First, LLM Second: Rebuilding Automated Code Review
Why pure agentic code review creates PR noise, and how pairing deterministic static analysis with targeted language models builds a faster, cheaper review pipel…
Merkle-Damgard State Leakage: Exploiting Secret Concatenation in API Auth
How Merkle-Damgard hash constructions leak internal state vectors and why secret concatenation fails API authentication.
Shizuku: How Android Apps Access System APIs Without Root
Android's permission model gates system APIs hard. Shizuku brokers privilege access without root, letting apps query system state safely through a validated IPC…
Interview: Replacing Mermaid Slop with Semantic SVG Architecture Diagrams
Cathryn Lavery explains why automated graph renderers fail in production documentation, how strict density budgets eliminate visual clutter, and why standalone …
Agentic Reverse Engineering: Bridging Binary Disassembly and Model Context Protocol with REA
An architectural analysis of REA, an open-source MCP server that coordinates disassemblers, dynamic tracing, and static analysis for agentic reverse engineering…
Europol Quantum Warning: Hardening Crypto Wallet Signatures Before Harvest-Now Attacks
Europol flagged crypto wallets as the primary risk for harvest-now-decrypt-later quantum attacks. Here is a technical breakdown of how to evaluate signature exp…
Managing Secure Remote Infrastructure with Oryxis
A step-by-step guide to configuring Oryxis, an open-source Rust SSH client with encrypted vault storage and port forwarding.
Interview: Deterministic Replay and Autonomous Assertions in e2e Testing
Alex Rivera explains how e2e caches execution traces to eliminate flakiness, bridges accessibility trees with native assertions, and runs air-gapped test suites…