Josiah Bruner
@josiahbruner.com
Reposted by Josiah Bruner
Because it always feels dangerous *not* to follow security advice, the outdated and sometimes never justified security advice piles up.
Don't get bogged down by the hacklore.
hacklore.org
(Thanks to the always awesome @boblord.bsky.social for this initiative)
Don't get bogged down by the hacklore.
hacklore.org
(Thanks to the always awesome @boblord.bsky.social for this initiative)
Stop Hacklore!
hacklore.org
November 24, 2025 at 3:43 PM
Because it always feels dangerous *not* to follow security advice, the outdated and sometimes never justified security advice piles up.
Don't get bogged down by the hacklore.
hacklore.org
(Thanks to the always awesome @boblord.bsky.social for this initiative)
Don't get bogged down by the hacklore.
hacklore.org
(Thanks to the always awesome @boblord.bsky.social for this initiative)
I've gotten so sick of debugging slightly invalid IAM policies in terraform code that I decided to write a provider that lets you automatically validate policies at planning time using AWS IAM policy validation APIs.
If this sounds interesting, check out: registry.terraform.io/providers/Jo...
If this sounds interesting, check out: registry.terraform.io/providers/Jo...
Terraform Registry
registry.terraform.io
September 6, 2025 at 3:49 PM
I've gotten so sick of debugging slightly invalid IAM policies in terraform code that I decided to write a provider that lets you automatically validate policies at planning time using AWS IAM policy validation APIs.
If this sounds interesting, check out: registry.terraform.io/providers/Jo...
If this sounds interesting, check out: registry.terraform.io/providers/Jo...
I decided to articulate some thoughts on where I think security engineering needs some maturing, after finally hitting a decade in the software industry: riskytrees.com/blog/when-security-engineering-is-neither-security-nor-engineering.
When Security Engineering is Neither Security, nor Engineering — RiskyTrees
Welcome, dear reader, to the first – and perhaps last – opinion-style blog post I will ever write. This post is intended for folks who take an interest in the security industry (which I’ve now been i...
riskytrees.com
June 11, 2025 at 8:47 PM
I decided to articulate some thoughts on where I think security engineering needs some maturing, after finally hitting a decade in the software industry: riskytrees.com/blog/when-security-engineering-is-neither-security-nor-engineering.
Reposted by Josiah Bruner
EFF Statement on U.S. Supreme Court's Decision to Uphold TikTok Ban:
January 17, 2025 at 4:01 PM
EFF Statement on U.S. Supreme Court's Decision to Uphold TikTok Ban:
I had the privilege of working with Jellyfish's wonderful IT team to build a pretty slick approach for just-in-time, capability-based IAM access control scheme in AWS. If you're curious what that means or how it works, check out our blog post: jellyfish.co/blog/are-you...
“Are you still eating that?” (Access Control at Jellyfish) | Jellyfish Blog
Our customer’s security is paramount. Learn about Jellyfish's defences in our AWS environment and how we keep our customer data safe.
jellyfish.co
March 16, 2024 at 12:21 PM
I had the privilege of working with Jellyfish's wonderful IT team to build a pretty slick approach for just-in-time, capability-based IAM access control scheme in AWS. If you're curious what that means or how it works, check out our blog post: jellyfish.co/blog/are-you...