Blog
All posts · security, infrastructure, open web
Interview: Replacing Mermaid Slop with Semantic SVG Architecture Diagrams
Cathryn Lavery explains why automated graph renderers fail in production documentation, how strict density budgets eliminate visual clutter, and why standalone …
Agentic Reverse Engineering: Bridging Binary Disassembly and Model Context Protocol with REA
An architectural analysis of REA, an open-source MCP server that coordinates disassemblers, dynamic tracing, and static analysis for agentic reverse engineering…
Europol Quantum Warning: Hardening Crypto Wallet Signatures Before Harvest-Now Attacks
Europol flagged crypto wallets as the primary risk for harvest-now-decrypt-later quantum attacks. Here is a technical breakdown of how to evaluate signature exp…
Managing Secure Remote Infrastructure with Oryxis
A step-by-step guide to configuring Oryxis, an open-source Rust SSH client with encrypted vault storage and port forwarding.
Interview: Deterministic Replay and Autonomous Assertions in e2e Testing
Alex Rivera explains how e2e caches execution traces to eliminate flakiness, bridges accessibility trees with native assertions, and runs air-gapped test suites…
The SSRF Problem Nobody Talks About in AI Pipelines
Everyone hardens the model. Almost nobody hardens what the model fetches. A walkthrough of SSRF and SSRF-adjacent risks in AI ingestion pipelines, with practica…
WebCheck: Self-Host Your Website OSINT Instead of Renting It
Website OSINT in one URL: DNS, TLS, headers, WHOIS, tech fingerprint, all passive. Run the WebCheck fork on your own box so targets never leave your network.
Why Is This Process Running? The Evolution of Process Provenance Tooling
How answering why a process is running moved from /proc archaeology to eBPF streams to witr, the open-source tool that makes provenance a single command.
How to Build a Censorship-Resistant Tunnel with Aether and MASQUE
A step-by-step guide to compiling and configuring Aether, a Rust userspace implementation of Cloudflare WARP using MASQUE over HTTP/3.
Paying for AI Without Revealing Who You Are: Zero-Knowledge Inference Tokens Explained
Zero-knowledge proofs decouple payment identity from LLM inference requests. Here is how the cryptographic architecture works and what security risks exist at t…
VPS Security Baseline: 10-Point Checklist Before You Go Live
A practical pre-flight checklist for hardening a fresh Ubuntu 24.04 VPS before exposing any service to the internet.
The Best Code Is the Code You Never Wrote
Minimalism is a decision procedure, not a style. Why the lazy senior dev ships the smallest working diff, reuses the stdlib, and treats deletion as a feature.