A red team blog by a security practitioner sharing hands-on research notes on offensive and defensive security topics, such as pip package index manipulation, WebAssembly internals and HTTP/3 detection. Readers get practical walkthroughs with code snippets and tooling, such as a Burp extension for spotting HTTP/3 endpoints.
Website: https://dtm.uk/
Sascha Corti's personal blog documents his experiments with a subdermal VivoKey Apex Flex implant, covering how he moved OpenPGP keys onto it and used them for SSH login via GnuPG on macOS. Posts also weigh up when open-weight AI models are worth running instead of frontier ones.
Nadav Eyal's newsletter offers deeply sourced analysis of Israeli politics, the October 7 aftermath, and regional security, with weekly columns on election dynamics and intelligence failures. Readers get informed, opinionated context that cuts through the noise of daily Israeli and Middle East news.
Technical posts from an engineering firm on building Rust within Nix, Daml/Canton smart contract custody patterns, and running the Nix daemon unprivileged. Readers get concrete mechanisms, trade-offs and reproducible examples for high-assurance infrastructure work.
A principal engineer at Just Eat Takeaway writes long-form technical articles on software architecture, authentication concepts, and iOS modular design. The excerpts offer reference-style explanations and detailed accounts of real engineering decisions from a large production system.
One short email a week with hand-picked newsletters from the index. Free, no spam, unsubscribe anytime.
