Stories by woodruffw

Attestations: A new generation of signatures on PyPI

Show HN: Zizmor, static analysis for GitHub Actions

Zizmor: A static analysis tool for GitHub Actions

YAML Feature Extraction with Yamlpath

Signatures Are Like Backups

Tracking and Publishing My TILs

Approximating sum types in Python with Pydantic

Debugging running Python scripts with PDB via GDB

Hiding messages in x86 binaries using semantic duals

Homebrew Security Audit

Quantum is unimportant to post-quantum

Apple's PCC: Bold step forward, not without flaws

Python wheel filenames have no canonical form

A peek into build provenance for Homebrew

Two New LMS Libraries

Why the World Still Needs Immanuel Kant

PyPI: Expanding Trusted Publisher Support

More thoughts on vulnerabilities and misaligned incentives

Relishing new Fickling features for securing ML systems

Breaking the shared key in threshold signature schemes

1
2
3
4
5
6
7
8