The Comforting Lie Of SHA Pinning
In March 2026, Trivy became the latest reminder that software supply chains are, at best, loosely held together with convention and trust.
read morePosts related to: Security
Preparing for Quantum Computers That May or May Not Exist
In my day-to-day life as a Platform Engineer I find I spend an unusual amount of time thinking about identity. Not so much in the philosophical sense. In the much less interesting sense of certificates, tokens, key exchanges, and authentication. Logging in to AWS. Signing API calls. Issuing certificates. Rotating secrets. Establishing tunnels between systems that would rather not trust each other… and everything in between.
read more