The Curious Engineer

All blogs / Security

Cendyne's Posts about security, architecture, software, management, an

cendyne.dev

I write about security, software architecture, management, and applied cryptography.

SecuritySoftware / engineering practiceEngineering management / careers

Posts
89 from 11 Apr 2021 to 11 Oct 2026
Posting
now and then (5 in the last year)
Kind
personal blog
Feed
https://cendyne.dev/feed.xml

2026 4

  1. Fable took my jorb
  2. Can you even "own" a passkey?
  3. Atlanta 2026 and the furries
  4. From Fargo to Zebra

2025 10

  1. A Vibe Coded SaaS Killed My Team
  2. What about the web developers?
  3. Vibe Coding's Hype for non-developers is over
  4. Single Sign On for Furries
  5. Advertising to Agents
  6. Technical Interviews are realigning with reality through AI
  7. You might be graduating soon in Computer Science
  8. "Vibe Coding" vs Reality
  9. Dual-Device Authorization with QR Codes
  10. New Year - Toooo much work

2024 7

  1. An Imprecise, Inaccurate but Offline-First Search Index
  2. Technology plans for FurSquared 2025 and Beyond
  3. A Reflection of 2024's Registration Technology
  4. Technology Updates for FurSquared 2024
  5. A Critical Issue for Conventions: Size
  6. Issues identified at FurSquared 2023
  7. How 2023 came and went, and the new year of 2024 is here

2023 24

  1. Preparing Fur Squared 2024's new technology
  2. Software Security Fur All
  3. Exploring the impact of PQC on Cryptography Key Management
  4. Domain Fronting and Domain Fuzzing
  5. SSO Sloppy, SSO Suspect, SSO Vulnerable
  6. Breaking Into Secure Facilities With OSDP
  7. Spoofing certificates with MD5 collisions
  8. The Quantum Debate on Privacy
  9. Privacy of Web PKI Revocation
  10. An introduction to Decentralized Identity
  11. Evading Logging in the Cloud: Bypassing CloudTrail
  12. Storing passkeys in password managers is okay, actually
  13. Custom GitHub Actions, Check Runs, GitHub Applications, NPM Publishing
  14. Sharing code between Deno and Node where Bun and ts-node failed
  15. A Precious Side Project — This Website
  16. Help a friend scam on Telegram
  17. Twitter's bot problem is getting weird with ChatGPT
  18. A path to niche skill-sets and community
  19. Reverse Centaur Chickenization, ChatGPT, and Inhuman Centralization
  20. Process Engineering at a Furry Convention
  21. How to use HKDF to derive new keys
  22. Fixing html video playback on chrome
  23. Passwords are weaker than you believe
  24. The year 2023 - Some things are frustrating

2022 24

  1. Device OAuth Flow is Phishable
  2. Twitter is Flat
  3. Sketchy Job Interviews
  4. How to convince leadership to improve security
  5. A few thoughts about Uber's breach
  6. Ed25519 Deep Dive Addendum
  7. AWS Chicago Summit
  8. Crypto Agility and Post Quantum
  9. DEF CON 30 - Hacker Summer Camp in 2022
  10. How Google played with bad cryptography
  11. Emergent team behavior: Mob Programming
  12. The Remarkable Ways We Gain Insights
  13. Content Negotiation with Cloudflare Workers
  14. Burnout Again in Summer 2022
  15. A Deep dive into Ed25519 Signatures
  16. Why Digital Signature Algorithms
  17. QR Date, a trusted timestamp for real-time media
  18. Moving off self hosted email
  19. Misinformation, Scams, and help
  20. Do not recommend: User Provided Primary Keys
  21. A Base64 Surprise
  22. Advice for a dropout
  23. 2021 Year End Projects
  24. Its a new year, 2022

2021 20

  1. Relying Upon Open Source and Log4j2
  2. Approaching projects - Part 10
  3. Approaching projects - Part 9
  4. Approaching projects - Part 8
  5. Approaching projects - Part 7
  6. Approaching projects - Part 6
  7. Approaching projects - Part 5
  8. Approaching projects - Part 4
  9. Approaching projects - Part 3
  10. Approaching projects - Part 2
  11. Approaching projects - Part 1
  12. Dynamic Content with HandlerMapping
  13. DANE Monitoring
  14. Hosting your own Email with DANE
  15. Burnout in Summer 2021
  16. Attenuated Delegation
  17. Principle of Least Privilege
  18. Review of TLS Mastery by Michael W Lucas - Part 1
  19. What's in a private key?
  20. A New Year, A New Website