2026
-
The Case for Local AI: Keep Your Data and Your Models Close
Sept 17
The default AI architecture ships your data to someone else’s computer. The case for local-first AI — governance, economics, latency — and why PHP is finally ready for it.
-
Why I Left Crypto and Found Canton
Apr 30
I was initially skeptical of blockchain, so I investigated a cross-chain DeFi protocol. I found its engineering compelling and joined up. After a series of ethical concerns pulled me away, I pivoted to Canton, drawn by its robust privacy architecture and established institutional support.
-
Why One Key Shouldn’t Rule Them All: Threshold Signatures for the Rest of Us
Mar 18
Private keys are the backbone of digital security — and a single point of failure. Threshold signatures split that risk across multiple parties, and the DKLS23 protocol does it in just three rounds. Here’s how it works and why it matters.
-
From Defense AI Drift to Policy Enforcement: Why I Built Firebreak
Feb 28
I wrote earlier about why defense AI companies drift toward offensive applications. Today for a hackathon I built the engineering solution I wish had existed when I was inside that world. Firebreak is a policy-as-code enforcement proxy that makes pre-negotiated AI boundaries hold — automatically, at machine speed, with full audit trails.
2025
-
When it rains …
Oct 20
Planning for an AWS outage might seem like overkill until you need to evacuate vacation rental guests during a tropical storm and your entire infrastructure goes dark. Sometimes the improbable becomes critical, and understanding your business continuity options can mean the difference between frustration and tragedy.
-
Managing Multiple Identities with Git Configuration
May 28
Discover the power of Git’s conditional includes to automatically switch between different developer identities, email addresses, and signing keys based on your project directory structure.
-
A Foray into Private Hosting
Apr 2
I’m going to revolutionize the way you host software on the internet! Follow along as I build in the open – starting with a private git server run by Forgejo and networked with Tailscale. Follow and stay tuned for more!
2024
-
Bounties and Risk
Aug 14
I reflect on my experiences in cybersecurity, emphasizing the challenges and risks involved in reporting security issues. I’ve had positive experiences, such as receiving a bug bounty from Dropbox, and negative ones, like a legal threat from a university. Despite occasional hostilities, I strongly believe in responsibly reporting security problems and advocate for compensating security…
-
Password Security
May 7
How do you address password security? What controls do you put in place? Do they matter? What does a strong password look like? Learn how to protect your users in 2024 and beyond!
2022
-
Understanding access control
Mar 18
Every application that allows authentication requires a proven form of access control. It’s important to understand the different formats available.
-
Adversarial mindsets
Mar 17
What’s the absolute worst thing that could happen with your application? How could an adversary leverage that mistake to their advantage?