Loading...

Tag trends are in beta. Feedback? Thoughts? Email me at [email protected]

Rust's derive often implies inline

GitHub Actions needs OIDC audience constraints

Dates That Don't Exist (2015)

README, not

You shouldn't trust Trusted Publishing

Brocards for Vulnerability Triage

How many registers does an x86-64 CPU have? (2020)

Serde's zero-copy borrowing can be treacherous

Some flexibility with Go's sumdb

We should all be using dependency cooldowns

Python's splitlines does more than just newlines

Python's splitlines does more than just newlines

Dear GitHub: no YAML anchors, please

Fun with Finite State Transducers

Bypassing GitHub Actions policies in the dumbest way possible

Any program can be a GitHub Actions shell

Be Aware of the Makefile Effect

Zizmor would have caught the Ultralytics workflow vulnerability

TIL: Some surprising code execution sources in bash

Security means securing people where they are

Software-defined (Internet) radio with Liquidsoap (2023)

Introducing zizmor: now you can have beautiful clean workflows

YAML feature extraction with yamlpath

Hiding messages in x86 binaries using semantic duals (2020)

Approximating sum types in Python with Pydantic

Python wheel filenames have no canonical form

More thoughts on vulnerabilities and misaligned incentives

totally_safe_transmute, Line-by-Line (2021)

You don't need analytics on your blog

How x86_64 addresses memory (2020)

More →