Jun 26, 2026 Your dependencies can read any file on disk. cap-std makes them ask permission. Rust's standard library grants ambient filesystem authority to every dependency. capability-based-securityrustcap-stdsandboxing
Jun 25, 2026 Your Service Is an Unwitting Accomplice: How Confused Deputy Attacks Work A confused deputy attack tricks a privileged service into using its authority against itself. capability-based-securityconfused-deputysecurityattacks
Jun 24, 2026 Your permission checks are lying to you Capability-based security replaces scattered role checks with unforgeable tokens of authority. capability-based-securitytypescriptpermissionssecurity
Jun 23, 2026 What If Every Function Had to Receive Permission Instead of Assuming It? Most code runs with ambient authority: every function can touch everything. capability-based-securitypermissionssecurityzero-trust
Jun 22, 2026 Stop Throwing Errors Your Type Checker Can't See Thrown exceptions hide failure paths from your type system. type-level-correctnesserror-handlingtypescriptrust
Jun 21, 2026 Rust newtypes make wrong states unrepresentable at compile time, for free A single-field wrapper struct catches unit-mixing bugs and type confusion without adding a single byte of overhead. type-level-correctnessrustnewtypeszero-cost-abstractions
Jun 20, 2026 Switch statements leak bugs at compile time TypeScript switch statements silently let you forget cases. type-level-correctnesspattern-matchingtypescripttype-safety
Jun 19, 2026 The compiler should catch missing state cases, not your QA team Adding a new state to your machine is easy. Remembering to update every switch statement is not. type-level-correctnessstate-machinesexhaustiveness-checkingtypescript
Jun 18, 2026 Yes, But Your Type System Needs to Know What a Dollar Is TypeScript sees all numbers as identical. Here's how to teach it the difference between USD and EUR so the compiler catches currency conversion bugs before... type-level-correctnesscurrencytypescriptfinancial-software
Jun 17, 2026 A number is not just a number: how to make the compiler catch unit bugs Passing milliseconds where seconds were expected is a bug that passes every test. type-level-correctnessunitstypescriptzero-cost-abstractions
