Archive

All 10 posts, newest first.

2026

• Aug 11Pinning Dependencies Is Not Optional Anymore
• Jul 22Security Reviews That Developers Don't Dread
• Jun 28Threat Modeling in Thirty Minutes
• Mar 26Signing Container Images With Sigstore
• Mar 2Rotating Secrets Without a Maintenance Window

2025

• Sep 25Session Cookies Done Right
• Sep 9Least Privilege for Humans, Not Just Services
• May 15SSRF Explained Through Real-World Mistakes
• May 8What a Leaked API Key Taught Our Team
• May 4Your Content Security Policy Is Probably Too Loose