Writing · Topic
Security
Identity, least privilege, threat modeling, data safety, and supply-chain risk.
Posts
2025-05-16
Security
When Letters Lie: Analyzing a Typical IDN Homograph Attack
A client forwarded a suspicious security update email. The domain looked right. Character by character, it was not.
2025-04-08
Security
Owning your dependency supply chain
Auditing a dependency tells you about the version you read. It says nothing about the one being published tonight.
2024-06-28
Security
WordPress plugin supply-chain attacks: June 2024 incident notes
Historical notes on the June 2024 WordPress plugin supply-chain attacks, affected releases, and the response at the time.