Writing

Engineering·November 7, 2026·2 min read

An encrypted database value can be perfectly unreadable to an attacker and still end up in the wrong record. If a service moves ciphertext between tenants without binding the record's context, the system may de

Engineering·November 7, 2026·2 min read

When a robotics node starts, I don't want "the process launched" to be confused with "the robot is ready to move." The ROS 2 managed-node design makes this difference explicit with lifecycle states. That's a be

Engineering·November 7, 2026·2 min read

I traced Stuxnet as a boundary-crossing problem: from Windows software into industrial control commands. Calling it sophisticated Windows malware misses the physical-system risk. The attack path targeted software used to supervise and program indust

Engineering·November 7, 2026·2 min read

The starting point I emphasized in my NotPetya review is a trusted enterprise distribution path: the update path for Ukrainian accounting software M.E.Doc. It then moved laterally and disrupted organizations well beyond its initial target geography.