Don't build "The Vault"

Why Kubernetes failed

Queueing theory for the working software engineer

JIT access considered harmful

A hierarchy of enclaves

VPN rots your brains

Nonces are bad and we should stop using them

The single version rule is good for Google and bad for you

Don't use golden images. Do this instead.

Don't trust aws:SourceIP!

But actually, how do flamegraphs work?

Observations about S3

Contracts do not bind

Safer S3 signed URLs

Security tiers considered harmful

iostat's %util is wrong

Why bother with immutable infrastructure?