Blog

SPADE: Side-channel …

Hero image generated by ChatGPT This is a personal blog and all content herein is my own opinion and not that of my employer. Introduction Over the past few years, enterprises have dramatically expanded their use of SaaS platforms, cloud-native runtimes, and browser-based IDEs. This has brought …

Announcing ISDF – Intune …

Hero image generated by ChatGPT This is a personal blog. All opinions are my own - not my employer’s. Earlier this year, I published OuttaTune – a deep dive into how Conditional Access (CA) depends on device-sourced metadata and the risks of trusting values that endpoints themselves can …

Turn On, Tune In, Cop …

Hero image generated by ChatGPT This is a personal blog. All opinions are my own - not my employer’s. Introduction This is a follow-up to my original post detailing a security flaw in Microsoft Intune’s Conditional Access (CA) filtering that allows local admin attackers to bypass CA policies by …

Secure Google Cloud …

Hero Image generated by ChatGPT This is a personal blog and all content therein is my personal opinion and not that of my employer. Secure Google Cloud Authentication in Python: Avoiding CI/CD Pitfalls with Service Accounts Authenticating Python applications to Google Cloud, especially with service …

Taming the Inner Chimp – …

Cover Photo by ChatGPT Introduction In my earlier posts — “Listen to the Silent Alarm” and “Mental Health Tips & Techniques” — I explored how self-awareness tools like MECS and BACES helped build an early-warning system for my mental health. But awareness alone isn’t always enough. Especially …

Security Amnesia: When …

This is a personal blog and all content herein is my personal opinion and not that of my employer. Introduction After I shared the last post on Security Amnesia, a friend replied with a story that hit home: “When I was younger, me and my sister typed up CAA exam papers for commercial pilots …