Category
Security
Security from a builder's seat. Vulnerability disclosures, supply-chain attacks, secrets management, and defensive engineering patterns — explained with enough depth to act on, not just react to.
Article
The Trojan Snow: Protestware and the Dual-Hatted Maintainer Risk
A hidden locale-based trigger in a classic X11 toy exposes the vulnerability of relying on a single upstream-downstream maintainer.
Emeka Okafor
The CAPTCHA is Dead (And AI Killed It)
The Cordyceps Exploits: Why Your CI/CD Pipelines Are Wide Open
Vulnerability Reports Lost Their Privilege. Now What?
The Cryptographic Battle for the Bot-Era Web
GitHub Hardens actions/checkout to Block Pwn Request Attacks
The Secure Boot Cert Expiry Won't Brick Your Box — But It Bites Elsewhere
Beyond Encryption: The Supply Chain Threat of Pure Exfiltration
npm v12 Kills Auto-Run Scripts: What Developers Must Do
Agentjacking: How Public Sentry Keys Turn AI Coding Agents Into Trojan Horses
Securing AI Agents: Inside NVIDIA's SkillSpector Scanner
The Android 17 GrapheneOS Port and the Play Integrity Trap
Agentic Security: Standardizing Cyber Workflows for AI Developers
Demystifying iOS Device Fingerprinting with Loupe
The AUR Namespace Trap: Lessons from the Atomic Arch Attacks
