now
What I'm doing now.
updated
focus
- — Finishing a deep-dive on Kubernetes admission-controller bypass via mutating race conditions — targeting Q1 2026.
- — Drafting talk for BSides Warsaw 2026 on engineering offensive tooling that survives EDR maturity.
- — Reviewing identity-layer flows in a SaaS engagement — selective consulting, one client at a time.
reading
- — Operating Systems: Three Easy Pieces — re-reading the concurrency chapters.
- — Recent Project Zero posts on hypervisor escapes.
- — RFCs around DPoP and the next iteration of OAuth identity binding.
Inspired by /now.
about →