https://substack.bomfather.dev/archivedailyhttps://substack.bomfather.dev/aboutweeklyhttps://substack.bomfather.dev/p/sandboxing-isnt-the-solution2026-03-24monthlyhttps://substack.bomfather.dev/p/can-we-improve-on-software-supply2026-03-17monthlyhttps://substack.bomfather.dev/p/how-we-secure-builds-with-fs-verity2026-02-16monthlyhttps://substack.bomfather.dev/p/confidential-computing-adds-a-crazy2026-02-04monthlyhttps://substack.bomfather.dev/p/dynamic-runtime-policies-in-ebpf2026-01-08monthlyhttps://substack.bomfather.dev/p/tracking-shell-scripts-and-python2025-12-26monthlyhttps://substack.bomfather.dev/p/making-pigs-fly-aka-getting-the-verifier2025-12-15monthlyhttps://substack.bomfather.dev/p/upbit-hacked-37m-solana-how-would2025-12-01monthlyhttps://substack.bomfather.dev/p/how-we-managed-to-secure-25k-in-gcp2025-12-01monthlyhttps://substack.bomfather.dev/p/securing-runtime-of-the-l2-base-ethereum2025-12-01monthlyhttps://substack.bomfather.dev/p/breakdown-of-new-runc-vulnerabilities2025-12-01monthlyhttps://substack.bomfather.dev/p/l2-base-node-builds-are-insecure2025-12-01monthlyhttps://substack.bomfather.dev/p/stopping-kill-signals-against-your2025-12-01monthlyhttps://substack.bomfather.dev/p/githubs-ubuntu-latest-runners-have2025-12-01monthlyhttps://substack.bomfather.dev/p/how-we-secured-our-ebpf-from-ebpf2025-12-01monthlyhttps://substack.bomfather.dev/p/were-replacing-our-kubernetes-ingress2025-12-01monthlyhttps://substack.bomfather.dev/p/attacking-and-securing-ebpf-maps2025-12-01monthlyhttps://substack.bomfather.dev/p/ld_preload-the-invisible-key-theft2025-12-01monthly