Kinwilder · Code anatomyhttps://kinwilder.com/Cybersecurity, decoded. AI-assisted analysis with primary sources.enSun, 25 Oct 2026 06:11:10 GMTOpenSSH’s three-line equality loop and the limits of timing safetyhttps://kinwilder.com/read/openssh-timingsafe-bcmp-aa18063-equality-boundary-2026-10-25https://kinwilder.com/read/openssh-timingsafe-bcmp-aa18063-equality-boundary-2026-10-25Sun, 25 Oct 2026 06:11:10 GMTAn analysis of what a comparison accumulator proves, what compilation can change, and which assumptions its caller must preserve.Code anatomyThe flag that outlived the data.https://kinwilder.com/read/dirty-pipe-the-flag-that-outlived-the-datahttps://kinwilder.com/read/dirty-pipe-the-flag-that-outlived-the-dataSat, 24 Oct 2026 17:27:26 GMTThree lines from Dirty Pipe’s original exploit PoC drain a pipe. A live bit-level model shows why security-relevant state can survive—and how initialization breaks the chain.Incident anatomyWhy Linux hides a number from its compiler.https://kinwilder.com/read/linux-why-hide-an-index-from-the-compilerhttps://kinwilder.com/read/linux-why-hide-an-index-from-the-compilerSat, 24 Oct 2026 16:13:12 GMTThree lines connect compiler proofs, transient execution, and a security assumption ordinary bounds checks cannot express. Read the mask—and the limits of the mask.Code & binariesWhen a security verdict needs a third value.https://kinwilder.com/read/pyrit-the-security-verdict-that-needs-three-valueshttps://kinwilder.com/read/pyrit-the-security-verdict-that-needs-three-valuesSat, 24 Oct 2026 16:13:12 GMTA five-line Microsoft PyRIT helper preserves “undetermined.” The hard part is keeping that meaning intact all the way to a release decision.AI securityThe same loader. A different authority.https://kinwilder.com/read/nist-juliet-same-loader-different-authorityhttps://kinwilder.com/read/nist-juliet-same-loader-different-authoritySat, 24 Oct 2026 16:13:12 GMTInside a public NIST/NSA training case, the loader call barely changes. The security decision lives upstream—in who gets to choose the code.Code & binariesWhen test data became a build step.https://kinwilder.com/read/xz-when-test-data-became-a-build-stephttps://kinwilder.com/read/xz-when-test-data-became-a-build-stepSat, 24 Oct 2026 05:00:00 GMTAn exact fragment of the compromised XZ release macro, an inspectable byte-level model, and the boundary where build data became instructions.Incident anatomyMemory safe. Boundary broken.https://kinwilder.com/read/rust-the-boundary-is-the-bughttps://kinwilder.com/read/rust-the-boundary-is-the-bugSat, 24 Oct 2026 05:00:00 GMTThree innocent lines in a Rust archive library explain why memory safety is only the beginning of a security argument.Rust & systemsTwo parsers. One very bad assumption.https://kinwilder.com/read/rust-windows-two-parsers-one-argumenthttps://kinwilder.com/read/rust-windows-two-parsers-one-argumentSat, 24 Oct 2026 05:00:00 GMTRust’s Windows batch-file advisory shows why “passed as an argument” is not a universal property of a string.Rust & systemsThe bit that fell off.https://kinwilder.com/read/the-bit-that-fell-offhttps://kinwilder.com/read/the-bit-that-fell-offSat, 24 Oct 2026 05:00:00 GMTFrom an eight-bit sum to a C allocation: how arithmetic quietly changes the size of a security boundary.Code & binaries