Blog posts

Where my tech thoughts are written, opinions are my own.

2023-01-30 How to use HKDF to derive new keys
2023-01-23 Fixing html video playback on chrome
2023-01-07 Passwords are weaker than you believe
2023-01-01 The year 2023
2022-12-12 Device OAuth Flow is Phishable
2022-12-11 Twitter is Flat
2022-09-29 Sketchy Job Interviews
2022-09-26 How to convince leadership to improve security
2022-09-19 A few thoughts about Uber's breach
2022-09-11 Ed25519 Deep Dive Addendum
2022-08-27 AWS Chicago Summit
2022-08-24 Crypto Agility and Post Quantum
2022-08-21 DEF CON 30
2022-08-07 How Google played with bad cryptography
2022-07-06 Emergent team behavior: Mob Programming
2022-06-30 The Remarkable Ways We Gain Insights
2022-06-23 Content Negotiation with Cloudflare Workers
2022-06-20 Burnout Again
2022-03-06 A Deep dive into Ed25519 Signatures
2022-03-05 Why Digital Signature Algorithms
2022-03-03 QR Date, a trusted timestamp for real-time media
2022-02-26 Moving off self hosted email
2022-02-24 Misinformation, Scams, and help
2022-02-18 Do not recommend: User Provided Primary Keys
2022-01-23 A Base64 Surprise
2022-01-12 Advice for a dropout
2022-01-02 2021 Year End Projects
2022-01-01 Its a new year, 2022
2021-12-19 Relying Upon Open Source and Log4j2
2021-11-20 Approaching projects - Part 10
2021-11-19 Approaching projects - Part 9
2021-11-17 Approaching projects - Part 8
2021-11-14 Approaching projects - Part 7
2021-11-11 Approaching projects - Part 6
2021-11-10 Approaching projects - Part 5
2021-11-09 Approaching projects - Part 4
2021-11-08 Approaching projects - Part 3
2021-11-08 Approaching projects - Part 2
2021-11-07 Approaching projects - Part 1
2021-10-02 Dynamic Content with HandlerMapping
2021-08-14 DANE Monitoring
2021-08-07 Email and DANE
2021-07-16 Burnout
2021-06-02 Attenuated Delegation
2021-05-30 Principle of Least Privilege
2021-04-19 Review of TLS Mastery by Michael W Lucas - Part 1
2021-04-16 What's in a private key?
2021-04-11 A New Year, A New Website