Blog
Never Trust Your AI Agent's Own Sandbox
The oldest rule in sandboxing is that the thing being contained doesn't get to define the boundary. Every coding agent on your laptop ships a sandbox written by the company selling you the agent. …
The Hunt for an Open Source AI Workflow Tool
Seven workflow automation platforms marketed as open source. Six aren't - and the gating always lands on the features a security team needs. One holds up. …
AI Is the Best Thing to Happen to Security
AI makes attackers more capable, developers faster, and attack surfaces bigger. The asymmetry between offense and defense grows - and that's why security as a domain is about to get a lot more investment. …
Let Attendees Say No to Conference Swag
Most tech conference freebies like badges, stickers, and branded items are useless clutter after the event. It's time conferences let attendees opt out of swag. …
How 'What Can Go Wrong?' Went Wrong
How the security threat modeling mindset of constantly asking 'what can go wrong?' seeped into my personal life, creating subtle pessimism, and how I broke the cycle. …
The Key Factor Behind TablePlus's DDoS Resiliency
How TablePlus survived a DDoS attack at zero cost by using Cloudflare R2 instead of AWS S3. The same attack on AWS would have cost $650+ in bandwidth charges. …
Ultimate Guide to Fail at Least Privilege in Cloud (and the Hard Lessons I Learned)
Real-world mistakes and hard lessons from implementing least privilege in cloud, from treating it as binary to lacking rollback mechanisms in automation. …
Kickstarting in Cybersecurity: Strategic Advice for 2nd and 3rd Year Indian College Students
Practical career advice for Indian college students breaking into cybersecurity, covering domains, first roles, networking, coding skills, and choosing the right company. …
Beyond the Basics: AWS WAF's Lesser-Known Limitations
Lesser-known AWS WAF limitations from production experience: 8 KB body inspection limit, inflexible rate-limiting, sensitive header logging, and more. …
My Key Takeaways from AWS re:Inforce 2023
Key takeaways from AWS re:Inforce 2023, covering zero trust, data security, incident response, and new launches like CodeGuru Security, Security Lake, and Bedrock. …