6 posts
BeyondCorp removed implicit trust from the network. AI agents require the same decision for delegated authority, tool calls, runtime identity, and every side effect.
#zero-trust · #security · #ai · #agents · #architecture
A small encrypted key beside each ciphertext looks redundant until rotation, access control, and KMS outages expose what that extra layer buys.
Formfix proved KMS's encrypt-first design while an Elixir umbrella let the key-management code move gradually from an embedded OTP application to a separate open-source project.
#formfix · #kms · #elixir · #security · #architecture
A tested Finicky configuration routes trusted macOS URLs locally and sends everything else to an executable without shell interpolation.
#dotfiles · #finicky · #macos · #security · #automation
Taking ownership of macOS URL handling lets unknown links leave the work machine before they reach a privileged browser session.
#dotfiles · #security · #macos · #browsers · #virtualization
Configuring a read-only vsftpd service with virtual users on Debian.
#linux · #operations · #security · #ftp