---
title: Security
url: 'https://grav.munn.me/articles-books/security'
markdown: 'https://grav.munn.me/articles-books/security.md'
date: '2025-11-09'
description: 'This section contains security articles I find interesting Article Description Rating Hotel Hijinks Defcon peopl having fun with bad securit on lock 4.5 secury by design a nice article on how to secure things by design 4 ssh using tpm for attestation interesting article on how to use our…'
---

# Security

This section contains security articles I find interesting

| Article | Description | Rating |
|---|---|---|
| [Hotel Hijinks](https://peateasea.de/hotel-hotspot-hijinks/) | Defcon peopl having fun with bad securit on lock | 4.5 |
| [secury by design](https://www.documentcloud.org/documents/25049674-sbd_lostrisherman_final?responsive=1&title=1) | a nice article on how to secure things by design | 4 |
| [ssh using tpm for attestation](https://linderud.dev/blog/ssh-ca-with-device-and-identity-attestation-ssh-tpm-ca-authority/) | interesting article on how to use our tpm chip for ssh things |  |
| [restoring symbols from stripped binaries](https://blog.trailofbits.com/2024/09/06/unstripping-binaries-restoring-debugging-information-in-gdb-with-pwndbg/) | nice article on how to do this |  |
| [VERY interesting article on what happens when we get security wrong](https://cohost.org/mononcqc/post/3647311-paper-you-want-my-p0) | a doctor's perspective |  |
| [network socket programmin](https://beej.us/guide/bgnet/html/split/index.html) | nice guide on how to program network code | 5 |
| [detect noisy neighbours with bpf](https://netflixtechblog.com/noisy-neighbor-detection-with-ebpf-64b1f4b3bbdd) | tells you how to detect noisy neighbours with ebpf filters. |  |
| [port forwarding visual guide](https://ittavern.com/visual-guide-to-ssh-tunneling-and-port-forwarding/) | ssh thing on how to port foward etc |  |
| [howto on root role restriction](https://lechatp.github.io/RootAsRole/) | article that lets you do this without sudo |  |
| [security engineering III](https://www.cl.cam.ac.uk/archive/rja14/book.html) | a book on security engineering | 4 |
| [sast and dast tools](https://analysis-tools.dev/) | mostly a directory of sast and dast tools |  |
| [why traceroute sucks](https://www.slideshare.net/slideshow/a-practical-guide-to-correctly-troubleshooting-with-traceroute/57019347) | a REALLY informative slideshow on why traceroute really doesn't work except locall anymore. | 5 |
| [contextual](https://platform.contextal.com/docs/welcome/) | Interesting platform that does ai contextual analysis of threats. |  |
| [vulnlookup](https://linuxjournal.rubdos.be/ljarchive/LJ/298/12538.html) | Vulnerability lookup site supported by the EU | ? |
| [Multi Port Socket Use](https://linuxjournal.rubdos.be/ljarchive/LJ/298/12538.html) | lets you use multiuprocessing on same socket | ? |
| [geofeeds](https://blog.apnic.net/2024/12/05/how-to-boost-geolocation-accuracy-with-geofeed/) | increase your network location accuracy with geofeeds | 4 |
| [ripcalc](https://www.usenix.org.uk/content/ripcalc.html) | does network cidr math for ipv4 and ipv6 | 4 |
| [Kata containers](https://katacontainers.io/) | containers with native encryption | 4 |
| [dns api](https://www.ueber.net/who/mjl/blog/p/dnsclay-dns-update-axfr-notify-to-many-custom-dns-operator-APIs-gateway/) | lets you do dns api stuff for 54 providers | 4 |
| [incident db](https://incidentdatabase.ai/) | database of incidents | 4 |
| [bloodhound](https://github.com/SpecterOps/BloodHound) | lets you query ad / azure | 5 |
| [gittuf](https://github.com/gittuf/gittuf) | The update framework software assurance for git repos | 5 |
| [Google's secure by design framework](https://bughunters.google.com/blog/6644316274294784/secure-by-design-google-s-blueprint-for-a-high-assurance-web-framework?utm_source=cloudseclist.com&utm_medium=referral&utm_campaign=CloudSecList-issue-274) | While I don't love them (one of the four horsepeople of the internet apocylapse), google does have some good advice here. | 5 |
| [data smuggling via emoji](https://paulbutler.org/2025/smuggling-arbitrary-data-through-an-emoji/) | Nice article on steganogrophay with emoji characters! | 5 |
| [kingfisher](https://github.com/mongodb/kingfisher) | detects secrets using ai and noseyparker | 5 |
|  |  |  |

---

## Navigation

- Parent: [Articles and Books](https://grav.munn.me/articles-books.md)
- Next: [Ai Things](https://grav.munn.me/articles-books/ai-things.md)