Syd: An Introduction to Secure Application Sandboxing for Linux

Tightening every bolt

Kintsugi: A Decentralized E2EE Key Recovery Protocol

Nothing to see here - practical advice to avoid tunnel vision and similar decloaking techniques against VPNs

The SELinux problem that cast a months long shadow

A Practical Introduction to using sq, Sequoia PGP's CLI

Using DPoP to use access tokens securely in your Single Page Applications

Breaking Barriers: The Art of (Free) Gamified Security Training

TKey, an open source/open hardware security token for SSH et c

Hardware backed SSH keys: ssh-tpm-agent

Sigsum: Detecting rogue signatures through transparency

An overview on detecting Login Anomalies with BuffaLogs

Managing Vulnerabilities in Open-Source Dependencies

What if Log4Shell were to happen today?

How Threat Actors Are Weaponizing Your Favorite Open-Source Package Registry

Hunting for GitHub Actions bugs with zizmor

Enhancing artifact security with GitHub Artifact Attestations