kt - DEV Community

16 min read

kt

May 14

AWS Deep Dive

#aws #cloud #security #infrastructure

7 min read

kt

May 10

Introducing Zopa: a 60 KB authorization engine for proxy-wasm, written in Zig

#webassembly #authorization #zig #opensource

8 min read

kt

May 9

What 11 big tech companies actually do with AI in 2026

#ai #productivity #engineering #llm

23 min read

kt

May 1

Introducing Omega: SPIFFE Workload Identity + AuthZEN Authorization in a Single Binary

#spiffe #authzen #security #opensource

4 min read

kt

Apr 30

Hacking GitHub: From Tag Rewrites to Dangling Commits, Where the Git Protocol Trusts You Without Checking

#security #github #git #supplychain

19 min read

kt

Apr 29

I built chainscope: reading supply chain attacks across 6 surfaces, one slide at a time

#showdev #security #supplychain

7 min read

kt

Apr 29

SLSA Provenance Hands-on: Generate with GitHub Actions, Verify with slsa-verifier

#security #supplychain #slsa #sigstore

11 min read

kt

Apr 28

Why Did Docker Abandon TUF?: A Turbulent History of Container Signing

#security #docker #supplychain #sigstore

10 min read

kt

Apr 26

SLSA Deep Dive: Securing the Supply Chain Using Verifiable Levels

#security #supplychain #slsa #openssf

12 min read

kt

Apr 22

Sigstore Deep Dive: Unmasking the Magic Behind Keyless Verification

#security #sigstore #kubernetes #devops

18 min read

kt

Apr 20

xDS Deep Dive: Dissecting the "Nervous System" of the Service Mesh

#envoy #servicemesh #kubernetes #istio

10 min read

kt

Apr 19

Why Can We Use "Shorter" Keys?: Key Length vs Security Bits, the Real Story

#todayilearned #security #cryptography #beginners

11 min read

kt

Apr 18

Why I Built awesome-authorization: Mapping the World of Auth Engines onto a Single Page

#showdev #authorization #security #opensource

6 min read

kt

Apr 13

RFC 7523 Deep Dive: JWT Profile

#oauth #jwt #security #authentication

5 min read

kt

Apr 12

RFC 7636 Deep Dive: How PKCE Kills Authorization Code Interception Attacks

#oauth #security #authentication #pkce

7 min read

kt

Apr 11

Why Do SSL/TLS Certificate Lifetimes Keep Getting Shorter?: Everything You Need to Know for the 47-Day Era

#security #tls #devops #pki

13 min read

kt

Apr 5

Why I Built opa-authzen-interop: Verifying OPA on AuthZEN Interop

#showdev #opa #authorization #rego

4 min read

kt

Apr 1

I Built an OPA Plugin That Turns It Into an AuthZEN-Compatible PDP

#showdev #opa #authorization #go

5 min read

kt

Apr 1

Google Zanzibar Deep Dive: Handling 2 Trillion ACLs in Under 10ms

#authorization #security #architecture #google

11 min read

kt

Mar 30

AuthZEN Authorization API 1.0 Deep Dive: The Standard API That Separates Authorization Decisions from Enforcement

#oauth #security #authorization #api

17 min read

kt

Mar 29

RBAC vs ABAC vs ReBAC: How to Choose and Implement Access Control Models

#authorization #security #architecture #iam

15 min read

kt

Mar 24

WIMSE (Workload Identity in Multi System Environments) Deep Dive: Standardizing Identity Authentication for Microservices

#security #microservices #oauth #identity

11 min read

kt

Mar 23

GitHub Profile: A "Guest Book" Anyone Can Sign

#showdev #github #python #automation

1 min read

kt

Mar 23

OSS License Deep Dive

#opensource #license #github #programming

12 min read

kt

Mar 16

ID-JAG Deep Dive

#oauth #security #identity #ai

19 min read

kt

Mar 14

Identity Chaining Deep Dive: Connecting Identity Across Trust Domains with OAuth

#oauth #security #identity #microservices

15 min read

kt

Mar 14

AI Agent Authentication & Authorization Deep Dive: Reading draft-klrc-aiagent-auth-00

#ai #agents #oauth #security

15 min read

kt

Mar 12

RFC 7521 Deep Dive: Assertion Framework for OAuth 2.0 Client Authentication and Authorization Grants

#oauth #security #authentication

8 min read

kt

Mar 9

OpenID Connect Dynamic Client Registration 1.0 Deep Dive: Dynamic Client Registration for Automation and Scale

#oauth #oidc #security #authentication

4

8 min read

kt

Mar 8

brtc (Brute-force Cost): A CLI Tool to Convert Password Strength into "Time to Crack and a Real USD Invoice"

#showdev #security #go #cli

6 min read

kt

Mar 7

OpenID Connect Discovery 1.0 Deep Dive: OP's "Self-Introduction" and Dynamic Configuration Retrieval

#oauth #security #authentication #oidc

6

7 min read

kt

Mar 3

RFC 8693 Deep Dive: Token Exchange

#oauth #oidc #security #microservices

7

10 min read

kt

Mar 1

I Just Wanted a Login Form: The "Swamp" of Complexity in the Modern Auth Ecosystem

#showdev #authentication #authorization #security

2 min read

kt

Mar 1

What Exactly is "Authentication": From the Limits of Passwords to FIDO2, Passkeys, and IdP Architecture

#authentication #security #oidc #fido2

8 min read

kt

Feb 28

OpenID Connect Core 1.0 Deep Dive: Understanding the "Authentication" Layer on top of OAuth 2.0

#oauth #security #authentication #oidc

4

15 min read

kt

Feb 26

RFC 8705 Deep Dive: Turning Access Tokens into "Unstealable Tokens" with mTLS

#oauth #security #tls #api

21 min read

kt

Feb 24

RFC 6750 Deep Dive: How Bearer Tokens Actually Work, Straight from the Spec

#oauth #security #authentication #api

4

10 min read

kt

Feb 23

RFC 6749 Deep Dive: Understanding OAuth 2.0 Design Decisions from the Specification

#oauth #security #authentication #oidc

7

13 min read

kt

Feb 22

Anonymity Technology: The 5 Layers of Defense

#anonymity #privacy #security #tor

11 min read

kt

Feb 21

OPA & kube-mgmt Deep Dive

#opa #kubernetes #rego #gatekeeper

13 min read

kt

Feb 17

Is it True That Go Maps Don't Shrink?

#go #memory #performance #backend

8 min read

kt

Feb 16

Go Heap Fragmentation Deep Dive: The Battle Against 'Invisible Memory' Continues

#go #memory #performance

7 min read

kt

Feb 15

Hacker Heuristics: Mental Shortcuts for Surviving a World Without 'Correct' Answers

#showdev #engineering #design #architecture

4 min read

kt

Feb 14

Rust Zero-Cost Abstractions Deep Dive

#rust #cpp #compiler #performance

4 min read

kt

Feb 14

SPIFFE/SPIRE Deep Dive

#spiffe #spire #security #kubernetes

5 min read

kt

Feb 13

Do you get my bio?

1 min read

kt

Feb 11

Rust Traits Deep Dive: Static vs. Dynamic Dispatch

#rust #traits #generics #polymorphism

5 min read

kt

Feb 11

The Feynman Technique 2026: A Cognitive Algorithm to Kill the 'Illusion of Competence'

#learning #career #productivity #ai

4 min read

kt

Feb 9

Pingora Deep Dive: The Rust Proxy That Retired NGINX

#rust #pingora #proxy #cloudflare

4 min read

kt

Feb 8

Concurrency Design Patterns: From Fundamental Theory to Architecture

#concurrency #designpatterns #architecture #performance

10 min read

kt

Feb 7

Concurrency Deep Dive: Memory Models, Lock-Free, and RCU

#rust #concurrency #performance #architecture

10 min read

kt

Feb 6

Dunning-Kruger Effect 2.0: The 'Illusion of Omnipotence' in the AI Era

#ai #career #psychology #learning

4 min read

kt

Feb 5

Linux Kernel Deep Dive: Zombie Processes and Modern Process Management

#linux #kernel #container #ebpf

5 min read

kt

Feb 4

Kubernetes Deep Dive: Kubelet

#kubernetes #kubelet #internal #architecture

4 min read

kt

Feb 4

Go Deep Dive: Mutex vs RWMutex

#go #concurrency #performance #programming