SQLite Runs the World: Inside the Most Deployed Database Ever
How SQLite single-file, serverless, public-domain design conquered phones and browsers, what WAL mode buys, and when a server database is still right.
Engineering deep dives for builders: MCP and AI-tooling internals, API design and abuse cases, cloud and infrastructure (Terraform, Kubernetes, CI/CD), and the platform-security angles that come with them. Written by the researcher behind Hmmnm – practical, current, and tied to the security practice.
Terraform State: The Most Sensitive File in Your Infrastructure
How Terraform state works, why it stores secrets in plaintext, and the remote-backend, locking and drift practices that make it safe.
HTTP/3 and QUIC: How the Web Moved to a New Transport
How QUIC rebuilt web transport on UDP: per-stream delivery, 1-RTT handshakes with TLS 1.3 inside, connection migration — and the real costs.
eBPF Explained: Verified Programs Inside the Kernel
How eBPF runs verified, JIT-compiled programs safely in the Linux kernel — and why networking and security tools bet their stacks on it.
Why Time Synchronization Breaks: NTP, PTP and the Leap-Second Problem
How NTP and PTP keep infrastructure clocks honest, why leap seconds took down Cloudflare and Reddit, and how to run time sync you can trust.
Kubernetes Security Fundamentals: RBAC, Pod Security and the Controls That Matter
The Kubernetes security layers that stop real cluster compromises: control plane, RBAC, Pod Security Admission, network policy and image supply chain — with a ten-point audit checklist.
SBOMs in Practice: SPDX vs CycloneDX and What Actually Breaks
SPDX vs CycloneDX compared honestly, how to generate SBOMs that match production, and the failure modes that sink real adoption — plus the EU CRA deadlines now in force.
ADS-B and GNSS Spoofing: Aviation’s Position Data Has No Authentication
ADS-B broadcasts aircraft position worldwide with no authentication — and GNSS spoofing corrupts it. The attacks, the documented incidents since 2022, and why there is no quick fix.
EFB safety and human factors, from battery fires to failure planning
EFB Safety & Human Factors: Battery Fires, Failure Policy and the Future
EFB operational safety: lithium thermal runaway containment, failure & redundancy policy, human factors and common-mode risk — plus AI-era EFBs from 2026 on.
Securing the EFB with DO-326A, hardening, signed data, monitoring and incident response
Securing the EFB: DO-326A, Hardening and Defense-in-Depth
How the industry defends EFBs: DO-326A/ED-202A airworthiness security, MDM hardening, signed chart data, AID isolation and continuous monitoring.
Cybersecurity threats, the attack surface, published research and real attack chains
EFB Cybersecurity: Attack Surface, Real Threats and Published Research
The EFB attack surface mapped: device tampering, chart data poisoning, AID attacks, malicious updates and supply chain — with real published aviation research.
Regulations and certification under FAA AC 120-76E, EASA AMC 20-25 and ICAO Doc 10020
EFB Regulations & Certification: FAA AC 120-76E, EASA AMC 20-25 & ICAO Doc 10020
EFB regulatory framework explained: FAA AC 120-76E/AC 91-78A, EASA AMC 20-25, ICAO Doc 10020, OpSpecs, Part-IS — and the operational approval process step by step.
- 1
- 2
- 3
- 4
- …
- 6
- Go to the next page