notes

thoughts on security, software, ai, etcetera.

so you think you found a deserialization sink?

exploiting deserialization vectors the easy way, and the hard way. but mostly the easy way.

pushed 2026-07-08

they are no longer the point of control.

pushed 2026-03-13