Memories
Fragments, fleeting thoughts, and small moments worth keeping anyway.
A crafted X.509 certificate chain with duplicate self-signed certificates can force Python's cryptography library into exponential path exploration. The validator spends …
Python's cryptography library prior to 46.0.5 accepted elliptic curve public keys from small-order subgroups without validation. An attacker supplying such a weak key can…
Side-channel attacks extract cryptographic keys by observing how a system behaves rather than by breaking the mathematics of the algorithm itself. Timing variations, powe…
Seventy-five percent of breaches in 2026 involved compromised credentials rather than network intrusion, fundamentally shifting the attack paradigm to identity exploitati…
A 2026 study found that 37.2% of cryptographic library vulnerabilities stem from memory safety failures while only 27.2% arise from actual cryptographic flaws. This means…
Raft and Paxos are both consensus protocols, yet Raft was explicitly designed to be understandable before it was designed to be optimal. This is rare in distributed syste…
Linux cgroups were originally developed by Google engineers in 2006 to solve a resource accounting problem, not isolation. The container revolution that followed was a si…
DNS is one of the oldest distributed systems still running at global scale, and it was never designed for the security model of the modern internet. The protocol assumes …
TCP conventional congestion control treats packet loss as a signal of network overload, but this assumption breaks down on modern networks with shallow-buffered switches …
The serverless abstraction hides servers so completely that many developers forget cold starts exist until latency spikes in production. What appears as pure function exe…