Blog Posts

Where my thoughts are written, opinions are my own.

2023-09-13 Software Security Fur All
2023-09-11 Exploring the impact of PQC on Cryptography Key Management
2023-09-08 Domain Fronting and Domain Fuzzing
2023-09-06 SSO Sloppy, SSO Suspect, SSO Vulnerable
2023-09-04 Breaking Into Secure Facilities With OSDP
2023-09-01 Spoofing certificates with MD5 collisions
2023-08-30 The Quantum Debate on Privacy
2023-08-28 Privacy of Web PKI Revocation
2023-08-25 An introduction to Decentralized Identity
2023-08-23 Evading Logging in the Cloud: Bypassing CloudTrail
2023-08-21 Storing passkeys in password managers is okay, actually
2023-07-24 Custom GitHub Actions, Check Runs, GitHub Applications, NPM Publishing
2023-07-17 Sharing code between Deno and Node where Bun and ts-node failed
2023-07-10 A Precious Side Project — This Website
2023-07-04 Help a friend scam on Telegram
2023-06-20 Twitter's bot problem is getting weird with ChatGPT
2023-05-29 A path to niche skill-sets and community
2023-05-11 Reverse Centaur Chickenization, ChatGPT, and Inhuman Centralization
2023-04-16 Process Engineering at a Furry Convention
2023-01-30 How to use HKDF to derive new keys
2023-01-23 Fixing html video playback on chrome
2023-01-07 Passwords are weaker than you believe
2023-01-01 The year 2023 - Some things are frustrating
2022-12-12 Device OAuth Flow is Phishable
2022-12-11 Twitter is Flat
2022-09-29 Sketchy Job Interviews
2022-09-26 How to convince leadership to improve security
2022-09-19 A few thoughts about Uber's breach
2022-09-11 Ed25519 Deep Dive Addendum
2022-08-27 AWS Chicago Summit
2022-08-24 Crypto Agility and Post Quantum
2022-08-21 DEF CON 30 - Hacker Summer Camp in 2022
2022-08-07 How Google played with bad cryptography
2022-07-06 Emergent team behavior: Mob Programming
2022-06-30 The Remarkable Ways We Gain Insights
2022-06-23 Content Negotiation with Cloudflare Workers
2022-06-20 Burnout Again in Summer 2022
2022-03-07 A Deep dive into Ed25519 Signatures
2022-03-05 Why Digital Signature Algorithms
2022-03-03 QR Date, a trusted timestamp for real-time media
2022-02-26 Moving off self hosted email
2022-02-24 Misinformation, Scams, and help
2022-02-18 Do not recommend: User Provided Primary Keys
2022-01-23 A Base64 Surprise
2022-01-12 Advice for a dropout
2022-01-02 2021 Year End Projects
2022-01-01 Its a new year, 2022
2021-12-19 Relying Upon Open Source and Log4j2
2021-11-20 Approaching projects - Part 10
2021-11-19 Approaching projects - Part 9
2021-11-17 Approaching projects - Part 8
2021-11-14 Approaching projects - Part 7
2021-11-11 Approaching projects - Part 6
2021-11-10 Approaching projects - Part 5
2021-11-09 Approaching projects - Part 4
2021-11-08 Approaching projects - Part 3
2021-11-08 Approaching projects - Part 2
2021-11-07 Approaching projects - Part 1
2021-10-03 Dynamic Content with HandlerMapping
2021-08-15 DANE Monitoring
2021-08-07 Hosting your own Email with DANE
2021-06-16 Burnout in Summer 2021
2021-06-03 Attenuated Delegation
2021-05-31 Principle of Least Privilege
2021-04-20 Review of TLS Mastery by Michael W Lucas - Part 1
2021-04-16 What's in a private key?
2021-04-11 A New Year, A New Website