04 / Writeups
Notes from figuring things out.
Technical breakdowns from projects and labs: what I built, where it went wrong, and what I changed.
OCTOBER 2026 · 9 MIN READ
From raw telemetry to an evidence-grounded investigation
How deterministic detections feed constrained investigations, and how a 3,067-event adversarial benchmark exposes measurable false positives without sacrificing attack-case recall.
SEPTEMBER 2026 · 6 MIN READ
What building a reverse proxy in C taught me
Defensive HTTP parsing, concurrency, TLS, rate limiting, and the difference between serving a request and surviving bad traffic.
SEPTEMBER 2026 · 5 MIN READ
Hardening a small AWS environment without losing track of access
What IAM roles, S3 policies, and security groups taught me about least privilege and configuration risk.
OCTOBER 2026 · OPEN SOURCE
Security fixes contributed upstream
Writeups covering API authentication, secret-safe logging, CVE workflow filtering, secret-scanner false positives, CI maintenance, and contributor documentation.