Kumar Ashwin

ashwin@krash.dev

Writing

Essays and notes on software security, supply chain, blockchain, and AI — published on krash.dev.

DNS Over HTTPS (DoH): What, Why, and How It Works Securing MCP Servers: A Threat Modeling Guide for Security Engineers Before Your Code Runs: Node.js Before Your Code Runs: Python YubiKey OTP Best Practices Navigating the Ethereum Yellow Paper Blockchain Architecture: Layers Consensus: How Blockchains Agree Blockchain Components Why Learn Blockchain & Blockchain Security? Production Grade Bash Scripts Reputation Farming in OSS: A Threat to Building Trust Two Bits on the xz Vulnerability Handling Deprecated Dependencies In Your Project VS Code Security: Looking at the IDE from Security Lens Investigating Reported Vulnerabilities: A Closer Look! Kubernetes Components My Experiments with Raspberry Pi Pico - Poor Man's Rubber Ducky Docker Security Zone Identifier - Is your file downloaded from the internet? Understanding DKIM - Email Security Series Understanding SPF - Email Security Series Linux - Command Line Struggles gRPC: We are not RESTing Anymore How is XSS different from CSRF? Kubernetes Concept Anonymous Challenge Write-Up: WinjaCTF c0c0n 2021 This is why you need a personal Collaborator Client! How does burp proxy work? NULLCON 2021 Training: DEVSECOPS Exam Experience: CEH v10 Bug Bounty Summit CTF Writeup Hacking Is Not Black & White Search