Writing
Security, intelligence work, and building with AI agents. Mostly long-form, written from things I've actually run. About one a month.
2026
- Feature · Security & PrivacyPHP2Shell: the first 24 hours of a critical RCEA critical flaw in PHP, two exposed services and no patch yet. What I closed first, why the order mattered, and the notice I sent.
- AI Agents & EngineeringOne memory for two coding agentsfact-store: one shared SQLite memory for Claude Code and Codex, with trust scores, budgeted hook injection and agents that save facts unprompted.
- Security & PrivacyNo passwords anywhereHow I removed passwords from every sign-in path of my project's single sign-on, the trade-offs I accepted, and the rule I reversed a day later.
- Feature · Building CompaniesA day in Kayori: the interface refreshA year after I restarted Kayori in Rust, it has a quieter interface. A walk through an analyst's day, from the feed to a pinned finding.
- Security & PrivacyRansomware-proof backups, testedFive questions about Kopia and Backblaze B2 Object Lock, how I tested each one, what happened, and the controls I put into production.
- AI Agents & EngineeringPlan, hand off, verify: how I run coding agents on a real productThe method I use to build Kayori with coding agents: written specs, narrow handoffs, CI-grade verification, and a human at the decision points.
- OSINT & IntelligenceStructured analytic techniques: a working referenceThe structured analytic techniques I actually use, grouped by family, with when to use each one, how to run it, and how it fails.
- Security & PrivacyiOS hardening, with the reasonsA settings-by-settings checklist for an iPhone you depend on, and a one-line reason for every setting, so you can judge what fits your own risk.
2025
- Building CompaniesBuilding Kayori: an analyst's notebook, not a dashboardWhy I am building Kayori, a self-hosted OSINT workstation, what the first prototype taught me, and why I started again in Rust with a mesh in mind.
- Security & PrivacyA personal data classification systemA simple template for individuals and small teams to label information by harm, and to mark how it must be stored and shared.
- RadioAnyTone AT-D878UVII PlusVarious programming notes for the AnyTone AT-D878UVII Plus radio.
Nothing in this topic yet.
Follow along with the RSS feed.