Things I build, break, fix, and write about

16 July 2026
LiteLLM exploit chains at the auth boundary

LiteLLM exploit chains only work because the auth boundary is doing too much, and failing badly when the database wobbles. I trust a proxy less when a bad lookup can quietly turn into proxy-admin identity, which is exactly the sort of mess I like to trace by hand.

16 July 2026
Manual validation in AI-assisted pentesting

AI-assisted pentesting is useful until it starts sounding certain, and that is where I get suspicious. The machine can surface a neat story, but...

15 July 2026
Corecrypto proofs against FIPS 203 and FIPS 204

Apple’s corecrypto formal verification work is interesting because it is properly dull, in the best sense. It ties a portable C implementation back to...

15 July 2026
alloc_pipe_info: why soft limits shrink new pipes

When pipe-user-pages-soft bites, the kernel stops being predictable in the way people like to assume. I prefer to check F_GETPIPE_SZ and watch the...

Latest blog posts you might like

8 March 2024
Future Tech: Brain-Computers and Space Colonisation

In the rapidly evolving landscape of technology, two groundbreaking areas stand poised to redefine the future of humanity: Brain-Computer Interfaces (BCIs) and space colonisation.

11 February 2024
The Wonders of Diversified Technology in 2024

Explore the latest in tech trends for 2024, from Generative AI to the Metaverse. Learn how datafication and 3D printing are shaping our digital future.

2 February 2024
Advanced Linux System Administration: Tips and Tricks

Linux system administration requires a deep understanding of the operating system and the various tools available to manage it effectively.

15 January 2024
How to Install WordPress with Apache, MySQL, and SSL

Setting up WordPress on an Ubuntu 20.04 server with Apache, MySQL, and an SSL certificate ensures your website is secure and performant.