@ktamarapalli
Security Researcher
Nothing here yet.
Nothing here yet.
1d ago · 5 min read · Forcing Digital Supply-Chain Attacks Into the Physical World Introduction: Security Is Economics, Not Perfection Security architecture does not eliminate attacks.It reshapes the economics of attackin
Join discussionMar 7 · 3 min read · Why Provenance Without Intent Is Not Enough Introduction: The Rise of Supply-Chain Frameworks Sigstore, in-toto, and SLSA represent real progress in supply-chain security. They provide: Artifact sig
Join discussionFeb 28 · 4 min read · Verifying CI/CD Artifacts Against Human-Signed Source Trees Introduction: The Build Server Is Not a Source of Truth Most CI/CD security models assume the build server is honest. This is a dangerous assumption. SolarWinds demonstrated that a build sy...
Join discussionFeb 21 · 3 min read · Why All Approvals Should Not Cost the Same Introduction: The Click-Through Syndrome Security teams often believe friction equals security. In practice, static friction leads to automation and fatigue. When engineers approve deployments dozens of tim...
Join discussionFeb 14 · 4 min read · Designing Immutable Audit Trails for CI/CD in Hostile Environments Introduction: The Illusion of Observability Most security teams believe they have “logs.” In reality, most organizations have rumors of past events stored in databases that attackers...
Join discussion