getvictor

AI coding agents are evolving fast. But, are they replacing engineers, or just changing the workflow? This article breaks down where AI agents are most effective across the SDLC, realistic productivity gains (max 43%), and risks like deskilling and code quality.

I wrote up the pros and cons of mTLS vs HTTP message signatures for additional client authentication here:

https://victoronsoftware.com/posts/mtls-vs-http-signature/

Yes, I'm assuming you're always running TLS. The question is whether to use mTLS (mutual TLS) vs HTTP message signatures to verify that the request is coming from a trusted client.

Windows Recall will record your screen, so any sensitive information will be accessible by the IT admin (or a bad actor with sufficient privileges).

The OpenBlur Chrome extension was created to hide sensitive information automatically on any web page.

The OpenBlur project is open-source and MIT-licensed:

https://github.com/getvictor/openblur

It is early in development, so bugs are still being worked out.

We recently wrote an in-depth series of articles on mTLS. The series covered a hands-on intro to mTLS, creating a Go mTLS client, and integrating mTLS with macOS keychain and Windows certificate store.

Our goal was to show how to use mTLS in your applications and securely store your mTLS certificates and keys without exposing them to the filesystem.

But what about Linux desktops? That's a good question. How do you keep your cert keys secure on Linux?

I started fixing some outstanding osquery issues recently. There are a lot of outstanding issues on GitHub that I haven't gone through.

What's an issue preventing you from deploying osquery in your org?