Stories by erans

Opengrep – an Open Source fork of Semgrep

Hairy Ball Theorem

How to make developers love security

What Every Developer Needs to Know About GitHub Branch Protection

Oracle warns Java users not to upgrade to macOS Sonoma 14.4 on Apple Silicon

The Cloud and App Security List

What Developers Can Learn from Taylor Swift's Re-Recording Strategy

How to make developers love security

MPT-7B-StoryWriter-65k+: LLM for super long contexts (Apache 2.0)

Local webhook development: A Guide to customizing smee.io for fun and profit

The Importance of EPSS in Vulnerability Prioritization: A Holistic Approach

WebKit Exploitation and Gigacage

What Is Pipelineless Security?

Considerations for choosing GitHub-hosted or self-hosted runners

Have trouble keeping track of your keys? So does Toyota

Demystifying the Pl0x GitHub Attack

Targeted Deanonymization via the Cache Side Channel: Attacks and Defenses [pdf]

We offer our secret scanning service for free, even for private repos

Hacking Upstream: Finding a 0-Day in an OpenSSH Key Parser Library

1
2
3
4
5
6
7
8
9