An unfamiliar repository may be completely legitimate. It still contains code and configuration written by someone else. What should you check before installing dependencies, running builds or tests, and how can you limit the risk when using IDEs, coding agents, and Git itself?
Category:Blog
I ran malware on purpose. It found its server address in the blockchain
A LinkedIn job offer led to a private repository with malware in it. It reads its server address out of an Ethereum transaction, and on first run it writes itself into VS Code, Cursor and npm.
The Application Works. Is That Enough?
A successful handover does not mean a web application correctly protects accounts, roles and data. When is a security review enough, and when do you need a penetration test?
Code Hidden in DNS: When an AI Agent Opens the Door
Code does not have to be hidden directly in a repository. It can be loaded at runtime from something as ordinary as a DNS TXT record. This demo uses a harmless payload to show why that becomes risky when helpful AI agents automatically run setup commands.
Crypto Wars – Can a Government Ban Mathematics?
When governments tried to regulate encryption as a weapon.
Promptpunk I. – Don’t vibe. Verify.
When AI generates code that allows attackers to get hold of our users’ data, the reputational problem is ours, not the AI agent’s. It is hard to respond to a data leak by pointing at an AI agent and saying, “It was his fault!”
Cryptoanarchy – To be safe to be free
Cryptoanarchy is a tool by which an individual can avoid pressure from society to abide by the rules and/or respect the rights of others.
Personal Threat Model
This personal threat model is the first step toward ensuring my cybersecurity in the field of cryptocurrencies.
On the Origin of Hackers
Who were the first hackers and when did the history of hacking begin? Probably earlier than you’d expect. It’s been more than…
Hackers – who are we defending ourselves against?
Hacking and hackers are shrouded in many myths, perhaps most notably by film production and journalists who need to engage their readers and viewers.