Articles
Notes and write-ups on engineering, security and building products.
Applying NIST CSF 2.0 to web applications and SaaS platforms
A technical profile for applying NIST CSF 2.0 to multi-tenant SaaS: governance, asset inventory, tenant isolation, secure delivery, detection, response, recovery and audit evidence.
CybersecurityNIST CSFSaaSAppSec13 min readFixing a silent buffer-size truncation in Apple's swift-system
My first merged contribution to Apple's swift-system: a correctness fix for a silent buffer-size truncation in the Windows pread/pwrite adapters, why it was dangerous, and how I closed it.
SwiftOpen SourceWindowsSystems Programming6 min read