Writing

Notes from the work.

Writings about current security landscape, product security best practices and interesting bits inbetween.

By now, I think we've all seen the deluge of AI generated articles out on the web. If you've got a keen eye, they're easy to spot. Even though we've moved away from the obvious...

2026-11-03

Human written

AI has increased fearmongering in security

Fearmongering has always been part of the security landscape. Plenty of vendors lean into hypothetical "what if?" scenarios to sell their tooling, and plenty of orgs give into...

2026-10-26

Human written

Timeline of PHP2Shell

The two latest vulnerabilities in PHP, CVE-2026-109618 and CVE-2026-109619, have reached mainstream news, so I think it's safe to say that almost everyone will have heard of it.

2026-10-21

Human written

Proxmox Community Scripts are a bad idea

I've been running Proxmox for quite some time now to host my business-critical infrastructure. This includes services like Nextcloud, Vaultwarden and Authentik, most of which...

2026-09-22

Human written

AI doesn't eliminate the cost of owning software

I'm deep into reading papers about AI, mostly with regard to secure code generation and trust in AI models. Compared with the enormous amount of dfiscussion around AI...

2026-09-02

Human written