Writing
Short technical pieces published here: readings of advisories, explainers on how a class of attack actually works, and notes on verification method. Longer reported work lives under clips.
-
How to read a CISA advisory without overclaiming
An advisory tells you less than the coverage of it usually implies. A short guide to what these documents assert, what they only suggest, and where the seams are.
- method
- attribution
-
What this site is
A security engineer's notebook on critical infrastructure, attribution, and digital rights — and what I'm using it for.
- meta