Contents

All essays

40 essays · 2011–2026

2026 · 6

  1. The light of other days

    security · ai

  2. AI Escapes: Super Intelligence or Super Incompetence?

    security · ai

  3. Unicorns as a media product

    investing

  4. How to get your GrokBot to receive emails instantly

    security

  5. Jota

    investing · fintech

  6. Erebor

    investing · banking

2025 · 1

  1. Finisterra

    investing · data

2024 · 3

  1. BVNK

    stablecoins · investing

  2. Stablecoins: A Quiet Revolution

    stablecoins

  3. Chaos Labs

    investing · defi

2019 · 1

  1. A Pirate's take on Command vs. Leadership

    business · pirates · leadership

2018 · 1

  1. A Pirate's take on Strategy vs. Tactics

    business

2017 · 6

  1. Crypto Anchors: Exfiltration Resistant Infrastructure

    crypto-anchors · infosec

  2. Bitcoin hard-forks and replay attacks

    bitcoin

  3. The two metrics that matter for host security
  4. Why you shouldn't use ENV variables for secret data

    docker · secrets

  5. Why should *hard* be secure enough? Information and non-invertibility

    hash · information theory

  6. Hitless TLS Certificate Rotation in Go

    docker · tls · golang · swarm · rotation · MTLS

2016 · 2

  1. Build once run where? Migrating my blog to hyper.sh

    docker · hypersh · ghost

  2. Increasing Attacker Cost Using Immutable Infrastructure

    docker · immutable

2015 · 2

  1. Creating a CSP Policy from Scratch

    csp

  2. From F to A+: Getting Good Grades on Website Security Evaluations

    csp

2014 · 2

  1. Password Security: Why the horse battery staple is not correct

    passwords

  2. MPTCP: The path to multipath

    mptcp · tcp

2013 · 3

  1. Skynet (beta): The rise of the Beam robot

    beam

  2. Bot wars - The arms race of restaurant reservations in SF

    bot

  3. Weird packet of the day

2012 · 3

  1. Raising the dead - Undeleting files in ext4
  2. Hush OS X Terminal, hush

    terminal · macOS

  3. It's not just the salt, stupid

    crypto

2011 · 10

  1. Exploit-suggester
  2. The dangers of pastebin-like websites
  3. Dead Simple HTTPd in Python

    python

  4. Sniffing in Monitor Mode with Airport

    wifi · macOS · ruby

  5. Facebook Sidejacking

    python · facebook · sidejacking

  6. Poor man's SSH keylogger

    ssh · keylogger

  7. Packet Inter Arrival Time With Scapy

    scapy · pcap · python

  8. Merging multiple .pcap files

    tcpdump

  9. Change your MAC with py-MACtool

    macOS · wifi

  10. Monitor VS Promiscuous

    macOS · wifi