Writing · Topic
Security
Identity, least privilege, threat modeling, data safety, and supply-chain risk.
Posts
2025-05-16
Security
When Letters Lie: Analyzing a Typical IDN Homograph Attack
Breaking down a phishing domain built from lookalike Unicode characters.
2025-04-08
Security
Owning your dependency supply chain
What a private package registry does and does not protect against.
2024-06-28
Security
WordPress plugin supply-chain attacks: June 2024 incident notes
Historical notes on the June 2024 WordPress plugin supply-chain attacks, affected releases, and the response at the time.