Linux TCP Use-After-Free: Patch vs Mitigate
Your kernel has a remotely reachable use-after-free in the TCP handshake path, your distro hasn't shipped a fix, and someone has already demonstrated a working...
Cloud & Security 22 articles
Priya Sharma
Priya comes from infrastructure and security engineering, where the job is mostly preventing the 3 a.m. page. She writes about cloud platforms, DevOps practice and cybersecurity.
Her pieces lean on real incidents and post-mortems: what broke, why the safeguards did not catch it, and what actually changes the odds next time.
More from Priya
Cursor Marketplace Backdoor: VS Code Fork Trust Problem
A developer opens Cursor on a Tuesday morning, sees an update to the Claude Code extension, and lets it install. Nothing looks different. The extension loads,...
Anti-LLM Obfuscation: Fingerprinting Scripts Fight Back
A researcher hooked every canvas call on 10,000 of the web's biggest sites, collected over a thousand fingerprinting renderings, and went looking for the...
Distributed SQLite: 5 Myths Tested After 12 Years
Distributed SQLite went from one person's weekend project to a venture-funded product category without most engineers noticing the decade in between. In...
Switch 2 Jailbreak: The Exploit Chain That Beat Secure Boot
A fresh console ships with a hardened microkernel, pointer authentication on every return address, execute-only memory, control-flow integrity, and a signed...
eMudhra's Weak CA Keys: 5 PKI Myths, Busted
One of eMudhra's certificate authority private keys is the number 4. Not a 384-bit number that starts with 4 — just 4, with 47 zero bytes padding it out to...
Intermediate CA Compromise: When Trust Chains Snap
Here's a take that sounds backwards: the worst certificate authority incidents aren't the ones where an attacker breaks in. The recent eMudhra intermediate CA...
Registrar Lockdown vs Layered Defense: When Each Wins
Imagine waking up to find every domain your company owns — production, staging, the one holding your MX records — suspended by your domain registrar overnight....
NIST Curve Seeds Solved: 5 Myths About ECDSA Origins
For twenty-five years, the NIST ECDSA curve seeds were the closest thing applied cryptography had to an unsolved cold case. Five seemingly random 160-bit...
When Git Breaks: Monorepo Lessons From 30,000 Merges a Day
If you run a git monorepo, there is a number somewhere in your future where the wheels come off. For Anthropic, that number was roughly 30,000 merges a day, a...
CLI Tools Shouldn't Install Background Daemons by Default
A developer runs npm install -g @openai/codex to try an AI coding assistant, and ends up with a persistent, self-updating background daemon they never asked...
How Talorys Runs Stateful AI Agents on Serverless
Here's my contrarian take, and I'll defend it: a personal AI agent is a better fit for serverless infrastructure than it is for the Raspberry Pi under your...
Your Fitness App Is a Surveillance Tool
A French newspaper recently tracked the real-time location of France's only aircraft carrier — the Charles de Gaulle, one of the most strategically sensitive...
eBPF Spinlocks and the Art of Kernel Debugging
A spinlock bug in eBPF doesn't announce itself with a stack trace or an error message. It announces itself with a machine that stops responding. No logs, no...
The Evolution of sudo: Unix su to Modern Privileges
Here's a fact that surprises most people: when you type your password into sudo, you don't see any feedback at all. No asterisks, no dots, nothing. The cursor...
Quantum Cryptography: What Developers Actually Need to Know
Charles Bennett and Gilles Brassard won the Turing Award for their foundational work on quantum information science — specifically, for the BB84 quantum key...
What the Xbox Hack Teaches About Hardware Security Models
Microsoft designed the Xbox One's security architecture to be impenetrable. A hardware root of trust. A custom hypervisor. Encrypted storage with per-console...
The Blind Spots in Cloud Authentication Logging
A security team at TrustedSec recently disclosed their third and fourth methods for bypassing Azure sign-in logging. That's four independent techniques for...
DNS Configuration Is Still Breaking Production
Apple's latest macOS release broke custom DNS settings for thousands of developers. Specifically, it started intercepting queries for the .internal TLD — which...
Defensive Engineering: Systems That Resist Catastrophe
A junior engineer at a mid-sized fintech company ran a database migration script on a Friday afternoon. The script was supposed to clean up orphaned records in...
Sub-Millisecond VM Sandboxes via Copy-on-Write
Starting a Docker container takes about 500 milliseconds. A Firecracker microVM takes about 125 milliseconds. A V8 isolate takes about 5 milliseconds. But a...
FreeBSD: The Underappreciated Server OS
When Netflix serves you a movie, the video data is likely coming from a FreeBSD server. When you send a WhatsApp message, it's routed through infrastructure...