The Library
Cybersecurity
Everything Nullhaus has published in this pillar. Free, open, no login. Back to the library
-
A bridge is a trust model, not a pipe
Cross-chain bridges keep getting drained, and the reason is almost never the cryptography. It is that the word bridge describes a user experience while hiding the…
-
Detection rules rot, and nobody notices
A rule that fired correctly last year and has been silent for eight months is either a rule for something that stopped happening, or a rule…
-
The build is the boundary: supply chain security is a CI problem
A lockfile pins versions, not trust. The dependency that compromises you will pass every integrity check you have, because the hash it matches is the hash…
-
Your IAM policy is a graph, not a list
Reviewing permissions one policy at a time will never show you the path from a build runner to organization admin. That path is made of edges,…
-
The authorization bugs your scanner will never find
SAST finds injection because injection has a shape. Broken object-level authorization has no shape, only a missing comparison. Here is why the tooling cannot see it…
-
Prompt injection is a trust boundary problem, not a filtering problem
Every mitigation that tries to detect malicious instructions in text eventually loses. The ones that hold treat retrieved content as untrusted input and constrain what the…
-
Field Guide: A Leaked Secret, and the First Thirty Minutes
A secret has leaked. Rotate too fast, with no record of what the key could reach, and you close the door without checking whether anyone was…