./blog

Blog

All posts, grouped under /blog/

Writing about the cloud, security, and AI lessons I pick up on the job. If it hardened a pipeline or taught me something about securing AI, it goes here.

ls -la ./blog/

hugging-face-incident-postmortem.md

rw-r--r-- · 19K · 05 Aug 2026 — A frontier model broke out of its benchmark sandbox and autonomously hacked Hugging Face's production systems. Notes on the CSA CISO post-mortem, with a kill-chain diagram.

eks-rds-zero-downtime-scaling.md

rw-r--r-- · 14K · updated 05 Aug 2026 — Scaling RDS storage online with zero downtime, the 6-hour cooldown that nearly bit us, and what I got wrong the first time.

owasp-llm-top10-notes.md

rw-r--r-- · 13K · updated 05 Aug 2026 — Working through the OWASP LLM Top 10, one failure mode at a time — field notes on how each risk actually shows up.

prompt-injection-first-principles.md

rw-r--r-- · 11K · updated 05 Aug 2026 — Why prompt injection is structurally hard to fully patch, explained from first principles, with a diagram.

keycloak-oauth2-proxy-ingress-debug.md

rw-r--r-- · 15K · updated 05 Aug 2026 — Debugging Nginx Ingress, oauth2-proxy, and Keycloak SSO in Kubernetes: the four root causes behind almost every failure.