Essays by Kyeson Blake Utley
01Seed-phrase phishing: the five-second mistake that empties a wallet
No exploit, no malware, no broken cryptography. Just twelve words typed into the wrong box.
- 02
Pig butchering: how the scam works, and the trail it leaves on-chain
The fraud is patient, personal and industrial. The money still has to move, and that is where it shows.
- 03
A web application firewall is a speed bump, not a wall
WAFs buy you log lines and minutes. Treating one as your security boundary is how breaches happen.
- 04
Your dependency tree is your real attack surface
You reviewed the code you wrote. The code you didn't write is most of what you ship.
- 05
Constant-time is a property of the binary, not the source
You can write perfectly branch-free crypto code and still ship a timing leak. The compiler gets the last word.
Kyeson Blake Utley is the founder of GhostKey Development. He writes here about application security, the software supply chain and cryptographic engineering. More about Kyeson.