Blog
All posts · security, infrastructure, open web
Bitcoin Core Vulnerability Policy: Fast-Lane Fixes for Automated Audits
Bitcoin Core revised its security policy to drop long disclosure embargoes for easily discoverable bugs. Here is why automated code analysis forced the change a…
Stadia RAT Workstation Triage: An Inspection Checklist for Stolen Credential Incidents
Stadia RAT combines StealC credential theft with hidden desktop access and interactive shells. Use this 10-point triage checklist to inspect Windows endpoints b…
Android TV Launcher Replacement via Claude Code
Android TV owners can now strip sponsored ads, disable tracking, and replace the launcher with a single Claude Code prompt.
Container Runtime Hardening: Ten Controls Against Host Compromise
Default container runtimes favor developer convenience over defensive isolation. Here is a 10-point checklist to lock down Linux container deployments against p…
How to Audit Codebases with Cloudflare Security Audit Skill
A step-by-step technical guide on running multi-phase vulnerability audits with Cloudflare's security-audit-skill, coverage ledgers, and adversarial disproof lo…
Linux Transparent Proxying: TPROXY vs TUN Device Interception
Comparing Linux Netfilter TPROXY and Layer 3 TUN virtual interfaces across kernel overhead, metadata tracking, routing topology, and transport protocol handling…
GPU Cloud Observability Is a Topology Problem
GPU clusters break every observability assumption. The metrics are green but the job is 3x slower. Here's what you actually need to monitor.
Quantum Alliance vs NIST: Two Standards Paths for Post-Quantum Cryptography
Six million bitcoin vulnerable to quantum attack. NIST and an industry Quantum Alliance offer different governance models for post-quantum cryptography. Compare…
Web Endpoint Reconnaissance: A 10-Point Attack Surface Checklist
A 10-point external reconnaissance audit checklist covering HTTP headers, DNS hygiene, TLS configuration, and perimeter exposure using open-source OSINT tooling…
Myth: macOS Menu Bar Apps Run in a Sandboxed, Restricted Privilege Level
Menu bar utilities are assumed unprivileged, but macOS privilege separation doesn't enforce that boundary. Learn how to audit permissions and protect against me…
Myth: SSH Agent Forwarding Is a Safe Bastion Pattern
Passing your local SSH keys through jump hosts with agent forwarding exposes your private identity to any compromised bastion. Here is the mechanical reality an…
The Evolution of Large-Scale MySQL Batch Mutations
How engineering teams transitioned from locking UPDATE queries and trigger tables to resumable cursor queues and adaptive throttle loops to safeguard live produ…