InsanityBit

https://blog.yossarian.net/2025/11/21/We-should-all-be-using-dependency-cooldowns I read this blog post on the idea that we should use “dependency cooldowns” - the core concept is that by delaying when we install dependencies we’ll give more time to detect

I rolled my own crypto Disclaimer This code is not meaningfully tested or reviewed.

Mitigations without Modeling Something that has been brought up for years is that mitigation techniques should not be built without a threat model.

Saving Firefox So once again the topic of Firefox’s decline has shown up on Hacker News.

The Cognitive Burden of Garbage Collection vs Move Semantics Many people feel that Rust’s borrow checker introduces too much cognitive overhead, and that it must therefore reduce productivity.

I had some thoughts about capabilities.

Supply Chain Thoughts So there was a malicious crates.io package.

Static Intersections With Pytype Python has had a static type system for quite some time as initially defined in PEP 484 (with additions in future PEPs).

I’ve been using Rust since just before it hit 1.0.

Detection and Response is all about data.

Grapl is a Graph based detection and response platform, but what does this workflow actually look like?

A detection and response (D&R) team’s attack signature queries are vital to their success, providing insight into suspicious behaviors occurring in their environment.

I released the first Alpha version of Grapl in mid October, 2018.

(This blog post is transcribed from a conference talk) (Original slides) Github: https://github.com/insanitybit/grapl Twitter: https://twitter.com/InsanityBit Grapl is an open source platform for Detection and Response (D&R).

Over the last few months I’ve been working on Grapl, a platform for DFIR built largely around graph structures.

Oftentimes when chasing down an alert I find myself asking the same questions: I know that a process is malicious, did it spawn any children?

I’ve been continuing work on my rust actor library, which macro-magically turns synchronous structs into asynchronous actors.

Recently we had to solve a problem at work - we wanted to use AWS SNS topics to communicate in some of our services, but we also needed to selectively delay visibility/ processing of specific messages.

Recently I’ve been trying to extend my actor library, Aktors to deal with type safety.

(Don’t want to read?