Tag
trust-boundaries
- Feb 7, 2025 Trust Boundaries in Shared Build Caches A cache entry written by an untrusted build is an input to a trusted one. How key collisions become code execution, why content addressing does not help, and how namespaces separate the two. devops
- Dec 12, 2024 Trust Boundaries in Data Flow Diagrams and Where Threats Localize How a data flow diagram encodes trust as lines rather than prose, why a boundary is only real where a principal loses authority, and how moving one line changes the entire threat list. security
- Dec 6, 2023 Deserialization as Re-entry Across the Trust Boundary Why parsing untrusted bytes into objects is the most exposed operation a runtime performs, how format-directed object construction grants authority, and which design choices contain the damage. language runtimes