Blog
GCP Professional Cloud …
Back in late 2023 I published two posts that remain my most referenced Google Cloud certification write-ups: Google Cloud Certified: Professional Cloud Security Engineer exam and prep – my original exam experience. GCP Professional Cloud Security Engineer – Ultimate Study Resource List – the big …
SPADE: Side-channel …
Hero image generated by ChatGPT This is a personal blog and all content herein is my own opinion and not that of my employer. Introduction Over the past few years, enterprises have dramatically expanded their use of SaaS platforms, cloud-native runtimes, and browser-based IDEs. This has brought …
Announcing ISDF – Intune …
Hero image generated by ChatGPT This is a personal blog. All opinions are my own - not my employer’s. Earlier this year, I published OuttaTune – a deep dive into how Conditional Access (CA) depends on device-sourced metadata and the risks of trusting values that endpoints themselves can …
Turn On, Tune In, Cop …
Hero image generated by ChatGPT This is a personal blog. All opinions are my own - not my employer’s. Introduction This is a follow-up to my original post detailing a security flaw in Microsoft Intune’s Conditional Access (CA) filtering that allows local admin attackers to bypass CA policies by …
Secure Google Cloud …
Hero Image generated by ChatGPT This is a personal blog and all content therein is my personal opinion and not that of my employer. Secure Google Cloud Authentication in Python: Avoiding CI/CD Pitfalls with Service Accounts Authenticating Python applications to Google Cloud, especially with service …
Taming the Inner Chimp – …
Cover Photo by ChatGPT Introduction In my earlier posts — “Listen to the Silent Alarm” and “Mental Health Tips & Techniques” — I explored how self-awareness tools like MECS and BACES helped build an early-warning system for my mental health. But awareness alone isn’t always enough. Especially …