The Case for Local AI: Keep Your Data and Your Models Close
·
The default AI architecture ships your data to someone else’s computer. The case for local-first AI — governance, economics, latency — and why PHP is finally ready for it.
security
-
-
Why I Left Crypto and Found Canton
·
I was initially skeptical of blockchain, so I investigated a cross-chain DeFi protocol. I found its engineering compelling and joined up. After a series of ethical concerns pulled me away, I pivoted to Canton, drawn by its robust privacy architecture and established institutional support.
-
Why One Key Shouldn’t Rule Them All: Threshold Signatures for the Rest of Us
·
Private keys are the backbone of digital security — and a single point of failure. Threshold signatures split that risk across multiple parties, and the DKLS23 protocol does it in just three rounds. Here’s how it works and why it matters.
-
Managing Multiple Identities with Git Configuration
·
Discover the power of Git’s conditional includes to automatically switch between different developer identities, email addresses, and signing keys based on your project directory structure.
-
A Foray into Private Hosting
·
I’m going to revolutionize the way you host software on the internet! Follow along as I build in the open – starting with a private git server run by Forgejo and networked with Tailscale. Follow and stay tuned for more!
-
WordPress Nonces: Why We Can’t Have Nice Things
·
WordPress’ implementation of nonces was one of my first encounters with cryptographic protections in software development. It’s too bad WordPress nonces aren’t really nonces in the first place …
-
Disclosure: SQL Injection in Cart66 Pro
·
Last month I discovered a critical SQL injection vulnerability in the no-longer-developed yet still actively used Cart66 Pro plugin for WordPress. Here are the details …
-
Introducing Secure Updates for WordPress
·
Today I introduce the a new plugin that provides secure updates for WordPress: DGXPCO.
-
World Domination through WordPress Security
·
I’m tired of lamenting the state of WordPress security and doing nothing to address it. I’m building solutions to turn the conversation around.
-
Managing Gearman Securely
·
The impact of an improperly-secured Gearman server grows with the importance of the application using it.