Security

Every kief.dev note filed under Security, newest first.

Supply chain
Atomic Arch: How the AUR Attack Actually Worked, and How to Lock Your System Down
A hands-on technical breakdown of the June 2026 AUR supply-chain attack — the real PKGBUILD payload chain, how to hunt for it on your box, and how to scan before you build.
Kief StudioJune 18, 2026
Web security
Security Headers Graded: We Checked 100 Developer Tool Sites
Over half the tools you use to build software scored a C or worse on their own security headers.
Kief StudioMay 15, 2026
Supply chain
OSV.dev: The Free Vulnerability Database You Should Be Using
NVD is drowning in backlog. OSV.dev aggregates 24 sources, tracks malicious packages, and doesn't need a government contract to stay alive.
Kief StudioMay 1, 2026