The Curious Engineer

All blogs / Security

Latacora

latacora.com/blog

Retained security teams for startups.

SecurityDevOps / SRE / infrastructure

’18’19’20’21’22’23’24’25’26
Posts
35 from 3 Apr 2018 to 14 Oct 2026
Posting
monthly (7 in the last year)
Kind
company blog
Feed
https://www.latacora.com/blog/index.xml

2026 5

  1. Have your bots talk to my bots. Who’s checking IDs?
  2. Fire the slop cannons (safely): on coding agents and sandboxing
  3. Slopportunity knocks: how AI impacts security practices for startups
  4. Stytch & Latacora: A Security Partnership Retrospective
  5. Latacora Achieves AWS Advanced Tier Services Partner Status

2025 6

  1. Writing MCP servers in Clojure with Ring and Malli
  2. OIDC workload identity on AWS
  3. ECS on EC2: Covering Gaps in IMDS Hardening
  4. Introducing Replik8s, a Modern Security Tool for Kubernetes
  5. Bit by bit: how Latacora helped Notion build security that scales
  6. Privacy for the newly appointed (and already exasperated) DPO

2024 5

  1. Lessons in logging, part 2: mapping your path to a mature security program with logs and audit trails
  2. Datomic and Content Addressable Techniques: An Ultimate Data Wonderland
  3. Latacora & Vanta - Howdy (Managed Service) Partner!
  4. Cryptographic Right Answers: Post Quantum Edition
  5. Real World Crypto 2024

2023 4

  1. A case for password hashing with delegation
  2. Lessons in logging: chopping down security risks using audit trails
  3. Our Approach to Building Security Tooling
  4. Frequently Asked Questions from Strange Loop 2023

2021 1

  1. Remediating AWS IMDSv1

2020 2

  1. The SOC2 starting seven
  2. Stop using encrypted email

2019 2

  1. How (not) to sign a JSON object
  2. The PGP problem

2018 10

  1. Analyzing a simple encryption scheme using GitHub SSH keys
  2. ROCA vs. ROBOT: An Eternal Golden Braid
  3. The default OpenSSH key encryption is worse than plaintext
  4. Factoring the Noise protocol matrix
  5. Loud subshells
  6. A Child's Garden of Inter-Service Authentication Schemes
  7. Gripes with Google Groups
  8. There will be WireGuard
  9. Dumb security questionnaires
  10. Cryptographic right answers