Software Engineering, Security, and Cloud Native Technologies
We explore why NixOS is uniquely positioned to implement a scalable process for vulnerability management.
Discover how a default CoreDNS configuration left over for backward compatibility can allow attackers to completely bypass Cilium network policies.
17 May 2025 · 10 min read
A comparison of GitHub Action Scanners.
15 April 2025 · 5 min read
Setting up OpenPubkey SSH with Kanidm as the Identity Provider.
10 April 2025 · 9 min read
19 March 2025 · 6 min read
12 March 2025 · 6 min read
KubeCon North America: Atlanta · November 2025
Post-Quantum Cryptography (PQC) is no longer theoretical. With Go 1.24+ enabling ML-KEM by default, Kubernetes v1.33+ inherits significant quantum resistance for key exchange. This talk dives into the practical realities.
All Systems Go 2024 · September 2024
SPIFFE is a framework to generate identities for software systems in dynamic and heterogeneous environments. SPIFFE Verifiable Identity Documents (SVIDs) enable us to be explicit about the trust we place in systems. However, the degree of trust we can place in SVIDs relies heavily on the soundness of the data gathering and verification process during node attestation.