< Articles />
Long-form writing, newest first.
-
Reconstructing cloud identity intrusions from O365 and CloudTrail logs
The uncomfortable truth of modern cloud IR is that there is often nothing to "detect" in the old sense. Attackers don't break in anymore; they log in. CrowdStrike's 2026 Global Threat Report put 82% of last year's detections in the malware-free column, with valid-account abuse behind roughly a…
-
AI as a Laundering Machine: What Software Engineering Taught Me About Accountability
If an employer uses AI to decide whether I'm worth interviewing, we call it innovation. If I use the same technology to write more clearly or work around a disability, we call it cheating. The algorithms haven't changed — only who benefits.
-
The Safety Net Is an Accessibility Feature: ADHD, AI, and How I Actually Build Software
A while back I wrote that you don't need perfect code — you need a safety net that talks back. People read it as an engineering post, which it was. But I left something out. I don't build those systems only because they're good engineering. I build them because they're how I stay functional as a…
-
You Don't Need Perfect Code - You Need a Safety Net That Talks Back
TL;DR — My last post was about catching drift: the moment my config tool's idea of "valid" silently diverges from the real Pyxel framework. This post is about the other half of the same system — what happens the instant a human hits one of those checks. A safety net has two jobs: it has to catch…