Blog
All posts · security, infrastructure, open web
Deterministic Desktop Automation: Inspecting OS Accessibility Trees with Rust
A deep dive into agent-desktop: how querying native OS accessibility trees replaces brittle pixel-based vision models with deterministic JSON handles.
BTCPay Server Hot Wallet Attack: What Broke, What to Do, and the Patch Gap Problem
BTCPay Server versions through 2.4.1 are confirmed vulnerable to an attack that drained hot wallets. Here is what the architecture makes possible, how to harden…
Native Engineering in TablePro: Zero Shared Code Across Platforms
An architectural case study on TablePro: why building independent Swift and Rust native codebases outperforms cross-platform runtimes in memory, startup latency…
LightPanda vs Kronos: headless browser vs market data library
A quick comparison of LightPanda's Zig headless browser and Kronos' Python market data toolkit across integration, performance, and cost.
LightCraft: Rebuilding the RAW Photo Pipeline in Pure Rust
Raw photo development remains tied to bloated subscription software and legacy C libraries. LightCraft rebuilds the non-destructive image pipeline in pure Rust …
EIP-7702 Account Delegation: Attack Surfaces in Ephemeral Contract Wallets
EIP-7702 introduces temporary contract delegation to Ethereum EOAs, but persistent designators and blind authorization signatures create critical attack vectors…
Dissecting In-Memory Key-Value Stores: Architecture, Kernels, and Replication
A technical Q&A analyzing in-memory database bottlenecks, kernel page management, replication backlog buffer sizing, and connection pipelining.
Case Study: Userspace MASQUE Proxy with Aether
Aether tunnels traffic over Cloudflare MASQUE, offering a zero‑trust outbound path without kernel modules. This case study shows deployment challenges and pract…
Comparing Desktop SSH Clients: Oryxis vs SSH Pilot
An architectural comparison of Oryxis and SSH Pilot across local vault encryption, secret manager integration, GPU rendering performance, and peer-to-peer synch…
Liability Boundaries for Autonomous Agent Payments
Delegating execution authority to autonomous software without cryptographic parameter envelopes forces infrastructure operators to assume unlimited financial co…
The Evolution of Linux Process Triage: From Pipelines to Context Trees
Tracing rogue processes and open socket descriptors on Linux has evolved from manual procfs shell pipelines to unified context trees.
Interview: The Operational Pitfalls of Streaming Data Pipelines
Distributed systems architect Elena Rostova breaks down the operational risks of replacing batch jobs with real-time stream processing, from state backfills to …