Setting Up a Go Vanity URL

Tests Should Listen on Port 0

Agent Sandboxing

My New Secure Baseline for GitHub

Passkeys Are Not 2FA

Stop Autoupdating in My Face

How to Bypass Spotify's Age Verification

Go Monorepo Challenges

Financial Mistakes I've Made

i405 and Interstate Circuits

I Don’t Like the Builder Pattern (in Go)

Online Safety Act

RDAP Is Cool, But... Not Ready?

GitHub Actions Supply Chain Attack

Uncloud: A Fresh Take on Workload Orchestration

OTP in Your Password Manager Is Not 2FA

How I Got a Digital Nomad Visa for Japan

LLMs for Countering Stylometry

GitHub "Actions" Are An Impending Security Disaster

TPM-Backed SSH Keys on Windows 11

Musings on LLMs

Why I Disallow Web Crawlers

Site Moved to Cloudflare

Clean Dockerfile for Go Builds

k9s Connection Pooling Bug

ReadPromise Interface

Travel in July

Adversarial Routing

Multi-cluster GitOps With Argo CD

Sudo Is Broken

No, I Will Not Call You

YubiKey HOTP Authentication With PAM

Instance Metadata Service Risks

Chezmoi Is Awesome

TOFU: Do You Check?

Tales of Computer Mischief

Rust's "Nightly Syndrome"

An Analogy for Tech Debt

Hopes and Goals for 2023

Breaking Up With Python

Creating a Private DNF Repo With S3

Use This Kernel Parameter in Your Kiosk

[1/5] Google Foobar Challenge

Foray Into Reverse Engineering

Hardening OpenSSH Server for File Transfer

The 'Fuck You' Pattern

Goodbye Oculus

Building OS Images in Docker

Messing Around With Windows Unified Write Filter

Protecting Secrets for Unprivileged systemd Services

Build Your Own Tiny Ubuntu 20.04 Image

Defer for Shell

Beware ProtonMail

State of VR Software

I Was Wrong About VR

Fast Dimensions for Remote Images

Compilation With Cloud Functions

Finch and Perceptual Hashing