β˜•οΈ Naming things is hard

A blog about application security, and the occasional ramblings on AI and crypto.

2024

β€’ 9 min read
Practical Supply Chain Security

A breakdown of how software supply chains actually get compromised: phishing, build server backdoors, typosquatting, lockfile injection, and what you can do about it.

2023

β€’ 9 min read
Bug Bounty 101 (a triager's perspective)

The practical side of running a bug bounty program: what works, what doesn't, and how to actually manage researchers without losing your mind.

β€’ 11 min read
AGI and existential risk

Why AGI alignment might matter more than you thinkβ€”examining existential risk, cognitive biases that blind us to it, and why the problem is harder than the sci-fi narrative suggests.

2022

β€’ 2 min read
Neovim for Writers

Configuring Neovim as a writing environment: how to set it up for prose instead of code, and whether it's actually worth the effort.

β€’ 8 min read
On proof of work

Understanding proof of work: the mechanics of Bitcoin mining, why it actually costs real energy and real money, and what makes it so hard to cheat.

2019

β€’ 2 min read
Neovim terminal fun

Configure your neovim terminal for maximum efficiency

β€’ 1 min read
My dev setup

A look at my development environment: tools I use every day, how I have them configured, and why each choice mattered enough to stick.

2018

2017