Skip to content
krash
.dev
Writing
Notes from
0xCardinal
Supply-chain, product, and platform security. The interesting bits of attack and defense.
Posts
2026
DNS Over HTTPS (DoH): What, Why, and How It Works
06.23
Securing MCP Servers: A Threat Modeling Guide for Security Engineers
06.12
Before Your Code Runs: Python
03.29
Before Your Code Runs: Node.js
03.29
YubiKey OTP Best Practices
03.15
Navigating the Ethereum Yellow Paper
02.23
2025
Blockchain Architecture: Layers
12.29
Consensus: How Blockchains Agree
12.28
Blockchain Components
12.27
Why Learn Blockchain & Blockchain Security?
09.12
Production Grade Bash Scripts
04.16
2024
Reputation Farming in OSS: A Threat to Building Trust
06.27
Two Bits on the xz Vulnerability
04.01
2023
Handling Deprecated Dependencies In Your Project
11.07
VS Code Security: Looking at the IDE from Security Lens
09.14
Investigating Reported Vulnerabilities: A Closer Look!
07.30
Kubernetes Components
06.18
My Experiments with Raspberry Pi Pico - Poor Man's Rubber Ducky
02.04
Docker Security
02.02
2022
Zone Identifier - Is your file downloaded from the internet?
10.06
Understanding DKIM - Email Security Series
07.26
Understanding SPF - Email Security Series
07.25
Linux - Command Line Struggles
07.04
gRPC: We are not RESTing Anymore
07.02
How is XSS different from CSRF?
06.28
Kubernetes Concept
01.17
2021
Anonymous Challenge Write-Up: WinjaCTF c0c0n 2021
11.15
This is why you need a personal Collaborator Client!
06.22
How does burp proxy work?
06.07
NULLCON 2021 Training: DEVSECOPS
03.27
2020
Exam Experience: CEH v10
11.27
Bug Bounty Summit CTF Writeup
11.02
Hacking Is Not Black & White
11.01
Esc