https://t0ul.com/blog/ship-securely-ch1-getting-started/2025-09-02T00:00:00+00:00https://t0ul.com/blog/handbook-start-here/2025-08-05T00:00:00+00:00https://t0ul.com/blog/introducing-automate-the-boring-stuff-with-go/2022-11-04T00:00:00+00:00https://t0ul.com/blog/the-plan/2025-08-12T00:00:00+00:00https://t0ul.com/blog/automate-go-ch1-introduction/2022-11-18T00:00:00+00:00https://t0ul.com/blog/setting-up-the-lab/2025-08-19T00:00:00+00:00https://t0ul.com/blog/automate-go-ch2-go-basics/2022-12-09T00:00:00+00:00https://t0ul.com/blog/attack-driven-design-shown-once/2025-08-26T00:00:00+00:00https://t0ul.com/blog/automate-go-ch3-control-flow/2022-12-30T00:00:00+00:00https://t0ul.com/blog/automate-go-ch4-functions/2023-01-20T00:00:00+00:00https://t0ul.com/blog/automate-go-ch5-slices/2023-02-10T00:00:00+00:00https://t0ul.com/blog/automate-go-ch6-syntax/2023-03-03T00:00:00+00:00https://t0ul.com/blog/automate-go-ch7-strings/2023-03-24T00:00:00+00:00https://t0ul.com/blog/automate-go-ch8-files/2023-04-14T00:00:00+00:00https://t0ul.com/blog/automate-go-ch9-excel-files/2023-05-05T00:00:00+00:00https://t0ul.com/blog/automate-go-ch10-pdfs/2023-05-26T00:00:00+00:00https://t0ul.com/blog/automate-go-ch11-web-requests/2023-06-16T00:00:00+00:00https://t0ul.com/blog/ship-securely-ch2-devsecops-in-action/2025-09-09T00:00:00+00:00https://t0ul.com/blog/one-shape-for-everything/2025-09-02T00:00:00+00:00https://t0ul.com/blog/dates-the-model-never-decides/2025-09-09T00:00:00+00:00https://t0ul.com/blog/inert-output-and-the-human-accept/2025-09-16T00:00:00+00:00https://t0ul.com/blog/the-watched-folder/2025-09-23T00:00:00+00:00https://t0ul.com/blog/ship-securely-ch3-reviewing-results/2025-09-16T00:00:00+00:00https://t0ul.com/blog/the-eval-harness/2025-09-30T00:00:00+00:00https://t0ul.com/blog/attacking-the-baseline/2025-10-07T00:00:00+00:00https://t0ul.com/blog/ship-securely-ch4-supply-chain-hardening/2025-09-23T00:00:00+00:00https://t0ul.com/blog/a-log-you-can-trust/2025-10-14T00:00:00+00:00https://t0ul.com/blog/a-gateway-you-cannot-route-around/2025-10-21T00:00:00+00:00https://t0ul.com/blog/one-trace-id/2025-10-28T00:00:00+00:00https://t0ul.com/blog/ship-securely-ch5-kubernetes-runtime-security/2025-09-30T00:00:00+00:00https://t0ul.com/blog/when-the-email-gives-orders/2025-11-04T00:00:00+00:00https://t0ul.com/blog/the-email-is-data-not-orders/2025-11-11T00:00:00+00:00https://t0ul.com/blog/system-prompt-leakage/2025-11-18T00:00:00+00:00https://t0ul.com/blog/ship-securely-ch6-conclusion/2025-10-07T00:00:00+00:00https://t0ul.com/blog/scrubbing-secrets-and-pii/2025-11-25T00:00:00+00:00https://t0ul.com/blog/the-calendar-field-exfil/2025-12-02T00:00:00+00:00https://t0ul.com/blog/the-tracking-pixel/2025-12-09T00:00:00+00:00https://t0ul.com/blog/a-search-tool-hits-a-local-server/2025-12-16T00:00:00+00:00https://t0ul.com/blog/ship-securely-appendix/2025-10-14T00:00:00+00:00https://t0ul.com/blog/least-privilege/2025-12-23T00:00:00+00:00https://t0ul.com/blog/the-human-gate/2025-12-30T00:00:00+00:00https://t0ul.com/blog/circuit-breakers/2026-01-06T00:00:00+00:00https://t0ul.com/blog/the-problem-with-running-code/2026-01-13T00:00:00+00:00https://t0ul.com/blog/the-detonation-chamber/2026-01-20T00:00:00+00:00https://t0ul.com/blog/egress-deny-and-the-broker/2026-01-27T00:00:00+00:00https://t0ul.com/blog/no-shell/2026-02-03T00:00:00+00:00https://t0ul.com/blog/the-dual-llm-brain/2026-02-10T00:00:00+00:00https://t0ul.com/blog/agent-to-agent-hand-off/2026-02-17T00:00:00+00:00https://t0ul.com/blog/a-pinned-tool-catalog/2026-02-24T00:00:00+00:00https://t0ul.com/blog/model-artifacts/2026-03-03T00:00:00+00:00https://t0ul.com/blog/defeating-the-lethal-trifecta/2026-03-10T00:00:00+00:00https://t0ul.com/blog/answering-what-is-on-this-month/2026-03-17T00:00:00+00:00https://t0ul.com/blog/index-poisoning/2026-03-24T00:00:00+00:00https://t0ul.com/blog/cross-tenant-leak/2026-03-31T00:00:00+00:00https://t0ul.com/blog/memory-poisoning-and-lifecycle/2026-04-07T00:00:00+00:00https://t0ul.com/blog/conflicts-and-mangled-data/2026-04-14T00:00:00+00:00https://t0ul.com/blog/hallucinated-dates/2026-04-21T00:00:00+00:00https://t0ul.com/blog/the-one-command-scorecard/2026-04-28T00:00:00+00:00https://t0ul.com/blog/from-pattern-to-library/2026-05-05T00:00:00+00:00https://t0ul.com/blog/honest-eval-methodology/2026-05-12T00:00:00+00:00https://t0ul.com/blog/a-live-red-team-against-the-real-model/2026-05-19T00:00:00+00:00https://t0ul.com/blog/add-on-an-app-that-is-not-this-one/2026-05-26T00:00:00+00:00https://t0ul.com/blog/a-full-chain-attack-contained/2026-06-02T00:00:00+00:00https://t0ul.com/blog/tasks-and-reminders/2026-06-09T00:00:00+00:00https://t0ul.com/blog/my-week-at-a-glance/2026-06-16T00:00:00+00:00https://t0ul.com/blog/the-directory-and-contacts/2026-06-23T00:00:00+00:00https://t0ul.com/blog/action-links/2026-06-30T00:00:00+00:00https://t0ul.com/blog/calendar-crud-and-export/2026-07-07T00:00:00+00:00https://t0ul.com/blog/the-ui-and-chat/2026-07-14T00:00:00+00:00https://t0ul.com/blog/a-governed-control-plane-and-operator-roles/2026-07-21T00:00:00+00:00https://t0ul.com/blog/the-agent-gets-a-wallet/2026-07-28T00:00:00+00:00https://t0ul.com/blog/admin-audit-and-one-click-rollback/2026-08-04T00:00:00+00:00https://t0ul.com/blog/incident-response-and-the-kill-switch/2026-08-11T00:00:00+00:00https://t0ul.com/blog/data-and-privacy-governance/2026-08-18T00:00:00+00:00https://t0ul.com/blog/output-authenticity/2026-08-25T00:00:00+00:00https://t0ul.com/blog/durable-execution-and-resume-verify/2026-09-01T00:00:00+00:00https://t0ul.com/blog/exactly-once-side-effects/2026-09-08T00:00:00+00:00https://t0ul.com/blog/context-compaction-and-summarization-injection/2026-09-15T00:00:00+00:00https://t0ul.com/blog/agent-memory-architecture/2026-09-22T00:00:00+00:00https://t0ul.com/blog/make-it-idiomatic-the-repo-refactor/2026-09-29T00:00:00+00:00https://t0ul.com/blog/the-app-layer-red-team-gored/2026-10-06T00:00:00+00:00https://t0ul.com/blog/conclusion/2026-10-13T00:00:00+00:00https://t0ul.com/blog/2026-12-16T00:00:00+00:00https://t0ul.com/2026-12-16T00:00:00+00:00https://t0ul.com/projects/2026-11-25T00:00:00+00:00https://t0ul.com/tags/agents/2026-10-13T00:00:00+00:00https://t0ul.com/tags/ai-security/2026-10-13T00:00:00+00:00https://t0ul.com/tags/golang/2026-10-13T00:00:00+00:00https://t0ul.com/tags/2026-10-13T00:00:00+00:00https://t0ul.com/projects/ai-security-engineering/2026-10-10T00:00:00+00:00https://t0ul.com/blog/krabber-api-scuttle-bot/2026-10-09T09:00:00-04:00https://t0ul.com/tags/aws/2026-10-09T09:00:00-04:00https://t0ul.com/tags/go/2026-10-09T09:00:00-04:00https://t0ul.com/tags/krabber/2026-10-09T09:00:00-04:00https://t0ul.com/tags/devops/2026-10-09T00:00:00+00:00https://t0ul.com/blog/immutable-deploys-one-box/2026-10-09T00:00:00+00:00https://t0ul.com/blog/email-on-a-budget-ses/2026-10-07T00:00:00+00:00https://t0ul.com/tags/offensive/2026-10-06T00:00:00+00:00https://t0ul.com/tags/red-team/2026-10-06T00:00:00+00:00https://t0ul.com/tags/security/2026-10-05T00:00:00+00:00https://t0ul.com/blog/tls-all-the-way-to-the-crab/2026-10-05T00:00:00+00:00https://t0ul.com/blog/reading-the-scrapersphere/2026-10-03T00:00:00+00:00https://t0ul.com/blog/the-day-krabber-net-went-dark/2026-10-01T00:00:00+00:00https://t0ul.com/tags/architecture/2026-09-29T00:00:00+00:00https://t0ul.com/tags/refactoring/2026-09-29T00:00:00+00:00https://t0ul.com/projects/krabber/2026-09-25T00:00:00+00:00https://t0ul.com/now/2026-09-25T00:00:00+00:00https://t0ul.com/tags/projects/2026-09-25T00:00:00+00:00https://t0ul.com/tags/multi-agent/2026-09-22T00:00:00+00:00https://t0ul.com/tags/reliability/2026-09-22T00:00:00+00:00https://t0ul.com/tags/prompt-injection/2026-09-15T00:00:00+00:00https://t0ul.com/blog/riskrancher-self-contained-go-stdlib/2026-09-09T00:00:00+00:00https://t0ul.com/tags/riskrancher/2026-09-09T00:00:00+00:00https://t0ul.com/tags/idempotency/2026-09-08T00:00:00+00:00https://t0ul.com/tags/durability/2026-09-01T00:00:00+00:00https://t0ul.com/tags/governance/2026-08-25T00:00:00+00:00https://t0ul.com/tags/provenance/2026-08-25T00:00:00+00:00https://t0ul.com/tags/mlops/2026-08-18T00:00:00+00:00https://t0ul.com/blog/riskrancher-open-findings-dashboard/2026-08-12T00:00:00+00:00https://t0ul.com/tags/incident-response/2026-08-11T00:00:00+00:00https://t0ul.com/tags/operations/2026-08-04T00:00:00+00:00https://t0ul.com/tags/identity/2026-07-28T00:00:00+00:00https://t0ul.com/tags/rbac/2026-07-21T00:00:00+00:00https://t0ul.com/blog/riskrancher-tickets-slas-remediation/2026-07-08T00:00:00+00:00https://t0ul.com/tags/ssrf/2026-06-30T00:00:00+00:00https://t0ul.com/tags/pii/2026-06-23T00:00:00+00:00https://t0ul.com/tags/integrity/2026-06-16T00:00:00+00:00https://t0ul.com/blog/riskrancher-deduping-findings-one-hash/2026-06-10T00:00:00+00:00https://t0ul.com/tags/classification/2026-06-09T00:00:00+00:00https://t0ul.com/tags/defense-in-depth/2026-06-02T00:00:00+00:00https://t0ul.com/blog/durable-fan-out/2026-05-28T00:00:00+00:00https://t0ul.com/tags/attack-driven-design/2026-05-26T00:00:00+00:00https://t0ul.com/tags/transfer/2026-05-26T00:00:00+00:00https://t0ul.com/tags/testing/2026-05-19T00:00:00+00:00https://t0ul.com/blog/riskrancher-no-code-adapter-builder/2026-05-13T00:00:00+00:00https://t0ul.com/tags/evaluation/2026-05-12T00:00:00+00:00https://t0ul.com/tags/camel/2026-04-21T00:00:00+00:00https://t0ul.com/tags/hallucination/2026-04-21T00:00:00+00:00https://t0ul.com/blog/riskrancher-normalizing-scanner-chaos/2026-04-08T00:00:00+00:00https://t0ul.com/tags/memory/2026-04-07T00:00:00+00:00https://t0ul.com/tags/authorization/2026-03-31T00:00:00+00:00https://t0ul.com/tags/rag/2026-03-31T00:00:00+00:00https://t0ul.com/tags/retrieval/2026-03-17T00:00:00+00:00https://t0ul.com/blog/riskrancher-air-gapped-by-design/2026-03-11T00:00:00+00:00https://t0ul.com/tags/models/2026-03-03T00:00:00+00:00https://t0ul.com/tags/supply-chain/2026-03-03T00:00:00+00:00https://t0ul.com/tags/mcp/2026-02-24T00:00:00+00:00https://t0ul.com/blog/watching-an-11-dollar-site/2026-02-19T00:00:00+00:00https://t0ul.com/tags/a2a/2026-02-17T00:00:00+00:00https://t0ul.com/blog/riskrancher-pure-go-sqlite-no-cgo/2026-02-12T00:00:00+00:00https://t0ul.com/tags/isolation/2026-02-03T00:00:00+00:00https://t0ul.com/blog/riskrancher-one-binary-one-sqlite/2026-01-15T00:00:00+00:00https://t0ul.com/tags/denial-of-service/2026-01-06T00:00:00+00:00https://t0ul.com/tags/human-in-the-loop/2025-12-30T00:00:00+00:00https://t0ul.com/tags/least-privilege/2025-12-23T00:00:00+00:00https://t0ul.com/tags/exfiltration/2025-12-09T00:00:00+00:00https://t0ul.com/blog/a-ci-pipeline-with-a-budget-it-cant-exceed/2025-11-13T00:00:00+00:00https://t0ul.com/tags/devsecops/2025-10-14T00:00:00+00:00https://t0ul.com/tags/ship-securely/2025-10-14T00:00:00+00:00https://t0ul.com/blog/keyless-deploys-github-oidc/2025-08-28T00:00:00+00:00https://t0ul.com/tags/setup/2025-08-19T00:00:00+00:00https://t0ul.com/blog/terraform-bootstrap-vs-prod/2025-05-22T00:00:00+00:00https://t0ul.com/blog/krabmin-moderation-krabctl/2025-02-13T00:00:00+00:00https://t0ul.com/blog/browser-hardening-csp/2024-11-07T00:00:00+00:00https://t0ul.com/blog/layered-csrf-in-go/2024-08-01T00:00:00+00:00https://t0ul.com/blog/htmx-no-spa/2024-04-25T00:00:00+00:00https://t0ul.com/blog/generated-crab-avatars/2024-01-18T00:00:00+00:00https://t0ul.com/blog/metering-every-request-dynamodb-cost/2023-10-26T00:00:00+00:00https://t0ul.com/blog/rate-limiting-in-one-table/2023-07-20T00:00:00+00:00https://t0ul.com/tags/automate-the-boring-stuff-with-go/2023-06-16T00:00:00+00:00https://t0ul.com/blog/sessions-in-dynamodb-no-redis/2023-04-13T00:00:00+00:00https://t0ul.com/blog/gittyup-from-linode-dev-hackathon/2023-02-12T00:00:00+00:00https://t0ul.com/blog/one-table-to-rule-the-reef/2023-01-26T00:00:00+00:00https://t0ul.com/blog/how-i-got-my-cissp/2023-01-25T00:00:00+00:00https://t0ul.com/blog/ultimate-golang-beginners-cheat-sheet/2022-10-28T00:00:00+00:00https://t0ul.com/blog/how-krabber-runs/2022-10-20T00:00:00+00:00https://t0ul.com/blog/infrahamburglar-cybersecurity-news-bot/2022-10-19T00:00:00+00:00https://t0ul.com/blog/devsecops-engineer-resume/2022-10-10T00:00:00+00:00https://t0ul.com/blog/how-i-used-machine-learning/2022-10-04T00:00:00+00:00https://t0ul.com/blog/golang-svelte/2022-09-27T00:00:00+00:00https://t0ul.com/blog/most-popular-golang-frameworks/2022-09-21T00:00:00+00:00https://t0ul.com/blog/devops-engineer-resume/2022-09-18T00:00:00+00:00https://t0ul.com/blog/golang-hugo-lambda-spa/2022-09-15T00:00:00+00:00https://t0ul.com/blog/make-your-static-netlify-site-pop-with-a-newsletter/2022-09-03T00:00:00+00:00https://t0ul.com/blog/why-beanstalk-not-lambda/2022-07-14T00:00:00+00:00https://t0ul.com/blog/how-to-recover-after-seeing-your-start-up-idea-get-beat/2020-05-19T00:00:00+00:00https://t0ul.com/tags/startups/2020-05-19T00:00:00+00:00https://t0ul.com/tags/career/2020-04-02T00:00:00+00:00https://t0ul.com/tags/gaming/2020-04-02T00:00:00+00:00https://t0ul.com/blog/how-to-beat-animal-crossing-new-horizons/2020-04-02T00:00:00+00:00https://t0ul.com/blog/no-code-review-for-website-and-web-application-building/2020-04-02T00:00:00+00:00https://t0ul.com/blog/dependency-injection-with-golang/2020-03-29T00:00:00+00:00https://t0ul.com/blog/top-10-tips-for-animal-crossing-new-horizons/2020-03-29T00:00:00+00:00https://t0ul.com/blog/how-to-give-feedback-on-pull-requests/2020-03-19T00:00:00+00:00https://t0ul.com/blog/how-i-use-test-driven-development/2020-03-15T00:00:00+00:00https://t0ul.com/blog/junior-software-engineer-tips/2020-03-11T00:00:00+00:00https://t0ul.com/blog/why-everyone-should-learn-one-programming-language/2020-03-11T00:00:00+00:00https://t0ul.com/blog/how-i-became-a-software-engineer/2020-03-06T00:00:00+00:00https://t0ul.com/blog/how-to-use-anchore-inline-docker-image-scan/2020-03-04T00:00:00+00:00https://t0ul.com/blog/how-to-use-ping-to-debug-networking-problems/2020-03-01T00:00:00+00:00https://t0ul.com/blog/how-to-use-kubebench-to-add-security-to-a-kops-provisioned-kubernetes-cluster/2019-06-17T00:00:00+00:00https://t0ul.com/blog/how-to-use-regex-expressions-when-working-with-aws-waf-cloudformation-template/2019-05-01T00:00:00+00:00https://t0ul.com/blog/how-to-use-docker-bench-for-security/2019-04-17T00:00:00+00:00https://t0ul.com/about/https://t0ul.com/books/https://t0ul.com/contact/