Engineering
Predictable RNG Fallback and 32-Bit Reseed in COLDCARD Firmware
How a deterministic fallback and limited secure-element reseed constrain entropy across COLDCARD generations
~/tags/security
$ cd tags/security
Posts tagged: Security
10 posts found with the tag "Security"
$ ls -l ~/posts/tagged/security
Engineering
Who's Asking? Identity Delegation for AI Agents and Service Meshes
How Block keeps both the user and the software acting on their behalf visible
Engineering
CodeCrucible: A blueprint for LLM-driven SAST
How we built a whole-repo AI security scanner and the tradeoffs that made it useful
Engineering
From Localhost to Launched: Safely Shipping Apps That Anyone Can Build
How Block App Kit lets everyone at Block safely ship internal apps that connect to real company data
Engineering
Encrypting Wire/Proto Messages
How we started encrypting proto messages being transmitted between services and in our Kafka event bus
Engineering
Proof, Not Promises: Evaluating Code Scanner Efficacy
A harness for measuring SAST scanner efficacy against ground truth you control.
Engineering
Kube-Policies BinauthZ: Closing the Supply Chain Gap in Kubernetes
How We Verify Container Image Signatures and Attestations at Scale
Engineering
How We Red-Teamed Our Own AI Agent
Lessons from Operation Pale Fire
Engineering
Agent Guardrails and Controls
Applying the CORS Model to Agents
Engineering
GenAI Security Principles
Building secure AI products at scale
$