Stories by woodruffw

Why the World Still Needs Immanuel Kant

PyPI: Expanding Trusted Publisher Support

More thoughts on vulnerabilities and misaligned incentives

Relishing new Fickling features for securing ML systems

Breaking the shared key in threshold signature schemes

LeftoverLocals: Listening to LLM responses through leaked GPU local memory

You don't need analytics on your blog

NYPD overtime pay in the subway went from $4M to $155M this year

Paged Out Issue #3

Trusted Publishing on Rubygems.org

2FA Requirement for PyPI

The NYPD is spending $390M on a new, encrypted radio system

Function Interposition in Rust with upgrayedd

Assessing the security posture of a widely used vision model

Adding Build Provenance to Homebrew

The Issue with ATS in Apple's macOS and iOS

Some Concerns with OpenPubKey

sigstore-python 2.0

Configuring OpenID Connect in PyPI

GitHub Actions could be so much better

1
2
3
4
5
6
7
8
9