Writing

Where the claims get shown their working.

Notes on things that broke, decisions with trade-offs I can articulate, measurements I produced, research I have written and what it does not yet prove, and the parts of the travel and accounting domain that software usually gets wrong. One a month, and none of it filler.

6 September 20266 min read

Our paper on catching an attacker who already has a valid key, and what building it showed us

An unpublished eighth-semester paper about stolen cloud keys, and the three things we only found once we built what it describes, including a place where the paper contradicts itself.

Cloud securityZero trustResearch

What this page is for

Things that broke, and why
Decisions with trade-offs I can articulate
Measurements I actually produced, and the figures I am careful to say I have not
Research I have written, including what it does not yet prove
Domain translation: what a BSP settlement file is, and why software gets it wrong