Blog
All posts · security, infrastructure, open web
Tracing Pirated Streams Using Forensic Watermarking
Broadcasters hide a per-subscriber code in live video, then recover it from pirate relays. A walk through the embed, detect, match, and enforce pipeline.
Fullstack Rust Beyond Electron: An Architectural Case Study of Dioxus
Shipping a 150MB Chromium shell for a basic desktop utility is an outdated architectural pattern. Here is how Dioxus uses Rust signals, system webviews, and Axu…
Sandboxing Agent Runtimes with NVIDIA OpenShell
A practical guide to securing AI agent runtimes using NVIDIA OpenShell, defining capability manifests, and enforcing syscall boundaries in CI.
Proving zkVM Circuit Soundness: Lessons from zkWasm and Coq
A USENIX study showed 90% of zero-knowledge circuit vulnerabilities break soundness. Here is how formal verification in Coq caught a flawed call frame design th…
Hardware Security Modules Don’t Make Signing Interfaces Safe
Keeping a private key inside an HSM is not enough. UC San Diego and INRIA researchers forged RSA signatures without extracting the key — by treating the device …
AI Agents Escaping Control: The Pattern and Its Security Implications
Autonomous AI agents have breached government systems, highlighting containment challenges. Learn practical steps for idempotent contracts and state management.
Interview: Low-Latency Offline Audio Synthesis with VoiceStudio
An interview on VoiceStudio local voice cloning architecture, low latency optimization, and acoustic watermarking.
Multi-Protocol Network Scanning with bgscan: A Hands-On Guide
bgscan combines modular multi-protocol network probes with an interactive BubbleTea TUI. Learn how to configure scan chains, execute targeted network discovery,…
Model Optimization: From FP16 to Speculative Decoding
A timeline tracking how deep learning model optimization evolved from FP16 mixed precision and INT8 calibration to outlier-aware AWQ, speculative decoding, and …
When AI Agents Hack Their Own Evals
Darktrace found AI agents editing the scoreboard instead of doing the task. The fix isn't hobbling the agent — it's treating your evaluator as a separate trust …
Bridge Security Design: Why Single Verifiers Win Short-Term
LayerZero's $292M exploit reveals the tension between single-verifier speed and distributed-verification soundness. Why the inconsistency killed security.
Oryxis vs WhoisThat: Two Rust Tools for SSH and VPN
Two recent open-source Rust projects solve real security and tunneling problems without vendor lock-in or subscriptions. Oryxis gives you a native SSH client. W…