A security practitioner's newsletter with short essays on bug bounty triage, AI's effect on vulnerability research, and the economics of security. It mixes conference reflections, recommendations for industry change, and excerpts from podcast conversations.
Website: https://cje.io/
Sascha Corti's personal blog documents his experiments with a subdermal VivoKey Apex Flex implant, covering how he moved OpenPGP keys onto it and used them for SSH login via GnuPG on macOS. Posts also weigh up when open-weight AI models are worth running instead of frontier ones.
Nadav Eyal's newsletter offers deeply sourced analysis of Israeli politics, the October 7 aftermath, and regional security, with weekly columns on election dynamics and intelligence failures. Readers get informed, opinionated context that cuts through the noise of daily Israeli and Middle East news.
Technical posts from an engineering firm on building Rust within Nix, Daml/Canton smart contract custody patterns, and running the Nix daemon unprivileged. Readers get concrete mechanisms, trade-offs and reproducible examples for high-assurance infrastructure work.
A principal engineer at Just Eat Takeaway writes long-form technical articles on software architecture, authentication concepts, and iOS modular design. The excerpts offer reference-style explanations and detailed accounts of real engineering decisions from a large production system.
One short email a week with hand-picked newsletters from the index. Free, no spam, unsubscribe anytime.
