$ls -lht ./posts

The Blog

Long-form notes on security, programming, technology, and the occasional detour through science. Published when they're ready, not when they're timely.

all aiprogrammingthreat-modeling rss ↗

── 2026 ──────────

2026-04-23

AI killed Agile, long live Waterfall

For twenty years, Agile vs Waterfall has been a rigged debate. You were either shipping biweekly with story points and retros, or you were a dinosaur writing...

programming 6 min 2026-04-22

You are holding it wrong

There's a growing genre of developer blog post: the AI slop rant. You've read them, maybe written one. Pull requests that compile and pass tests and do nothi...

ai 8 min 2026-04-20

The threat model nobody reads

Every appsec engineer has a folder. Mine lives in a Confluence space; yours might be in a git repo, a shared drive, or the bottom of someone's laptop. Inside...

threat-modeling 11 min

3 posts · since /feed.xml