17 min
Exit 0 means allow
Porting an internal Claude Code safety tool from Linux to macOS took a couple months, and nearly every failure I found on the new platform failed in the permissive direction while printing a checkmark on the way out.
Security
All writing →3 posts filed under Security, newest first.
7 min
Already tracked
A live Stripe key sitting in a tracked `.env` file, in a repo that had listed `.env` in its `.gitignore` since 2023. The line was correct and it had never done anything.
9 min
We billed them for the cleanup
A site I built in 2018 at a previous agency spent about two months redirecting phones to a sweepstakes page, and the invoice we sent for cleaning it up was larger than a year of the maintenance nobody had ever sold them.