260 lines (203 loc) · 34.8 KB

Article index

118 article(s) in this repository, 108 published to dev.to/kanywst, across 26 series.

Series

ShowDev (18)

Article	Tags	Published	Engagement	Source
a2claude: Turn Claude Code Into a Server Other AI Agents Can Call	`showdev`, `ai`, `agents`, `python`	2026-06-14	0👍	src
I Made Four Authorization Engines Answer the Same Questions	`showdev`, `authorization`, `security`, `webassembly`	2026-09-12	0👍	src
brtc (Brute-force Cost): A CLI Tool to Convert Password Strength into "Time to Crack and a Real USD Invoice"	`security`, `go`, `cli`, `showdev`	2026-03-08	1👍	src
I built chainscope: reading supply chain attacks across 6 surfaces, one slide at a time	`security`, `supplychain`, `showdev`	2026-04-29	0👍	src
Galick: I built the ultimate Load Testing tool (Go + Starlark)	`showdev`, `go`, `performance`, `testing`	2026-01-20	1👍 · 3💬	src
gmk(Git Mark): Stop Typing Git URLs	`showdev`, `rust`, `cli`, `git`	2026-01-16	0👍	src
GitHub Profile: A "Guest Book" Anyone Can Sign	`showdev`, `github`, `python`, `automation`	2026-03-23	1👍 · 1💬	src
Hacker Heuristics: Mental Shortcuts for Surviving a World Without 'Correct' Answers	`engineering`, `design`, `architecture`, `showdev`	2026-02-15	1👍	src
I Just Wanted a Login Form: The "Swamp" of Complexity in the Modern Auth Ecosystem	`showdev`, `authentication`, `authorization`, `security`	2026-03-01	3👍 · 1💬	src
Introducing Omega: SPIFFE Workload Identity + AuthZEN Authorization in a Single Binary	`spiffe`, `authzen`, `security`, `opensource`	2026-05-01	1👍 · 1💬	src
Introducing Zopa: a 60 KB authorization engine for proxy-wasm, written in Zig	`wasm`, `authorization`, `zig`, `opensource`	2026-05-10	0👍	src
IssueHub: Helping Beginners Find Their First OSS Contribution Opportunities	`showdev`, `oss`, `nextjs`, `typescript`	2026-01-18	2👍	src
Rapg: TUI-based Secret Manager	`showdev`, `cli`, `go`, `security`	2026-01-20	2👍	src
Let's Play Shogi: I Turned My GitHub Profile README Into a Playable Board	`showdev`, `github`, `python`, `automation`	2026-08-13	0👍	src
Stardust: The dashboard that transforms GitHub trends from "search" to "monitoring"	`showdev`, `react`, `typescript`, `github`	2026-02-01	1👍	src
The Birth of Websites: A Visual Journey through IT History	`showdev`, `vue`, `webdev`, `history`	2026-01-09	0👍	src
Velo: A Cross-Platform Network Speed Monitor Built with Go & Wails	`showdev`, `wails`, `golang`, `vue`	2026-01-10	0👍	src
y509: A terminal user interface (TUI) tool for viewing and analyzing X.509 certificate chains	`showdev`, `golang`, `cli`, `security`	2026-01-09	2👍	src

Authorization (11)

Article	Tags	Published	Engagement	Source
同じものを2通りに書けると、認可は割れる: 正規化の失敗という脆弱性クラス	`security`, `authorization`, `go`, `opensource`	draft		src
AuthZEN Authorization API 1.0 Deep Dive: The Standard API That Separates Authorization Decisions from Enforcement	`oauth`, `security`, `authorization`, `api`	2026-03-30	2👍	src
仕様は Final になった。それでも OPA には入らなかった: 自分で出した AuthZEN 対応 issue が5日で閉じるまで	`authorization`, `openid`, `opa`, `security`	draft		src
Cedar のポリシーを SMT で証明する: 「このリファクタは権限を広げていない」を 0.01 秒で保証する	`authorization`, `cedar`, `security`, `rust`	draft		src
Google Zanzibar Deep Dive: Handling 2 Trillion ACLs in Under 10ms	`authorization`, `security`, `architecture`, `google`	2026-04-01	3👍 · 2💬	src
Mandatum: Making an AI Agent's Authority a Chain You Can Verify	`showdev`, `go`, `security`, `authorization`	2026-09-16	1👍	src
Why I Built opa-authzen-interop: Verifying OPA on AuthZEN Interop	`showdev`, `opa`, `authorization`, `rego`	2026-04-05	0👍	src
I Built an OPA Plugin That Turns It Into an AuthZEN-Compatible PDP	`showdev`, `opa`, `authorization`, `go`	2026-04-01	1👍	src
RBAC vs ABAC vs ReBAC: How to Choose and Implement Access Control Models	`authorization`, `security`, `architecture`, `iam`	2026-03-29	2👍 · 2💬	src
Rego に and と or が入った: 値を返さない演算子という設計判断と、実測1.88倍の短絡評価	`opa`, `rego`, `authorization`, `policy`	draft		src
Why I Built awesome-authorization: Mapping the World of Auth Engines onto a Single Page	`authorization`, `security`, `opensource`, `showdev`	2026-04-18	0👍	src

OAuth (11)

Article	Tags	Published	Engagement	Source
client_id を URL にした代償: CIMD -02 と、デプロイ管理が識別子管理になる問題	`oauth`, `security`, `identity`, `mcp`	draft		src
The Day client_id Becomes a URL: Client ID Metadata Documents vs Dynamic Client Registration (DCR)	`oauth`, `security`, `identity`, `mcp`	2026-06-26	1👍	src
Transaction Tokens Deep Dive: The OAuth Spec That Carries 'Who, and Why' Across Your Microservices	`oauth`, `security`, `microservices`, `identity`	2026-06-03	1👍	src
OAuth WG の採用文書は15本、個人ドラフトは80本: エージェント委任の標準化が意図的に進まない理由	`oauth`, `security`, `ietf`, `ai`	draft		src
RFC 6749 Deep Dive: Understanding OAuth 2.0 Design Decisions from the Specification	`oauth`, `security`, `authentication`, `oidc`	2026-02-23	9👍	src
RFC 6750 Deep Dive: How Bearer Tokens Actually Work, Straight from the Spec	`oauth`, `security`, `authentication`, `api`	2026-02-24	4👍	src
RFC 7521 Deep Dive: Assertion Framework for OAuth 2.0 Client Authentication and Authorization Grants	`oauth`, `security`, `authentication`	2026-03-12	3👍	src
RFC 7523 Deep Dive: JWT Profile	`oauth`, `jwt`, `security`, `authentication`	2026-04-13	0👍	src
RFC 7636 Deep Dive: How PKCE Kills Authorization Code Interception Attacks	`oauth`, `security`, `authentication`, `pkce`	2026-04-12	0👍	src
RFC 8693 Deep Dive: Token Exchange	`oauth`, `oidc`, `security`, `microservices`	2026-03-03	13👍	src
RFC 8705 Deep Dive: Turning Access Tokens into "Unstealable Tokens" with mTLS	`oauth`, `security`, `tls`, `api`	2026-02-26	4👍 · 1💬	src

AI Agent Identity (10)

Article	Tags	Published	Engagement	Source
A2A Protocol Auth, Taken Apart: Why the Spec Is Thin and Where That Leaves Holes	`ai`, `agents`, `security`, `oauth`	2026-06-13	0👍	src
ID-JAG, Transaction Tokens, WIF: The Three Layers of AI Agent Auth	`oauth`, `security`, `ai`, `agents`	2026-06-03	2👍 · 1💬	src
AgentAuth Deep Dive: Reading the Self-Authenticating UUID for AI Agents from the Source	`ai`, `security`, `mcp`, `typescript`	2026-06-25	0👍	src
Mapping MCP, A2A, and ACP: Telling AI Agent Protocols Apart in 2026	`ai`, `agents`, `mcp`, `a2a`	2026-06-28	1👍	src
ツールを渡すことと、その呼び出しを許すことは別だ: LLM エージェントの confused deputy を LangChain の実ソースで確かめる	`ai`, `security`, `authorization`, `python`	draft		src
AI Agent Authentication & Authorization Deep Dive: Reading draft-klrc-aiagent-auth-00	`ai`, `agents`, `oauth`, `security`	2026-03-14	5👍 · 2💬	src
エージェントに何を許したかを、暗号的に証明可能な形で持ち歩く: AP2 の Mandate を JSON Schema から読む	`security`, `ai`, `identity`, `payments`	draft		src
ID-JAG Deep Dive	`oauth`, `security`, `identity`, `ai`	2026-03-16	8👍	src
ID-JAG が製品になった日: IETF の draft が Okta の GA 機能として出荷されるまで	`oauth`, `identity`, `mcp`, `ai`	draft		src
Identity Chaining Deep Dive: Connecting Identity Across Trust Domains with OAuth	`oauth`, `security`, `identity`, `microservices`	2026-03-14	3👍 · 3💬	src

Amazon Web Services (10)

Article	Tags	Published	Engagement	Source
AWS Free Hands-On	`aws`, `tutorial`, `serverless`, `beginner`	2026-05-15	3👍	src
AWS IAM Deep Dive	`aws`, `iam`, `security`, `authentication`	2026-05-17	1👍	src
AWS IAM Roles Anywhere Deep Dive	`aws`, `iam`, `security`, `authentication`	2026-05-28	0👍	src
Why AWS IAM Is So Hard	`aws`, `iam`, `security`, `beginners`	2026-06-06	0👍	src
AWS Deep Dive	`aws`, `cloud`, `security`, `infrastructure`	2026-05-14	0👍	src
AWS IAM Roles Anywhere Hands-On	`aws`, `iam`, `sts`, `security`	2026-05-26	1👍	src
AWS S3 Deep Dive	`aws`, `s3`, `security`, `storage`	2026-05-18	0👍	src
AWS SigV4 and SigV4A Deep Dive	`aws`, `sigv4`, `security`, `signing`	2026-05-30	1👍	src
AWS STS Deep Dive	`aws`, `sts`, `iam`, `security`	2026-05-24	0👍	src
WORM (Write Once Read Many) Deep Dive	`storage`, `security`, `compliance`, `aws`	2026-05-18	0👍	src

Supply Chain Security (7)

Article	Tags	Published	Engagement	Source
Why Did Docker Abandon TUF?: A Turbulent History of Container Signing	`security`, `docker`, `supplychain`, `sigstore`	2026-04-28	2👍	src
Hacking GitHub: From Tag Rewrites to Dangling Commits, Where the Git Protocol Trusts You Without Checking	`security`, `github`, `git`, `supplychain`	2026-04-30	0👍	src
4年前に忘れられた1つのクレデンシャルが、9つの SaaS のトークンを持っていった: Klue 侵害の構造	`security`, `oauth`, `saas`, `supplychain`	draft		src
Supply Chain Security: A Deep Dive into SBOM and Code Signing	`security`, `sbom`, `kubernetes`, `devops`	2026-01-11	0👍	src
Sigstore Deep Dive: Unmasking the Magic Behind Keyless Verification	`security`, `sigstore`, `kubernetes`, `devops`	2026-04-22	1👍	src
SLSA Provenance Hands-on: Generate with GitHub Actions, Verify with slsa-verifier	`security`, `supplychain`, `slsa`, `sigstore`	2026-04-29	0👍	src
SLSA Deep Dive: Securing the Supply Chain Using Verifiable Levels	`security`, `supplychain`, `slsa`, `openssf`	2026-04-26	1👍 · 1💬	src

Linux Kernel (5)

Article	Tags	Published	Engagement	Source
eBPF: Experiencing eBPF with Cilium	`cilium`, `ebpf`, `kubernetes`, `network`	2026-01-12	1👍	src
Linux File System Architecture: A Deep Dive into VFS, Inodes, and Storage	`linux`, `kernel`, `systems`, `learning`	2026-01-10	6👍	src
Linux Kernel Architecture: From Ring 0 to Network Stack & eBPF	`linux`, `kernel`, `ebpf`, `programming`	2026-01-10	2👍	src
Linux Kernel Deep Dive: Zombie Processes and Modern Process Management	`linux`, `kernel`, `container`, `ebpf`	2026-02-05	1👍	src
The Magic of .sock: Why Modern Infrastructure Relies on Unix Domain Sockets	`linux`, `security`, `go`, `infrastructure`	2026-01-15	0👍	src

OIDC (4)

Article	Tags	Published	Engagement	Source
OpenID Connect Core 1.0 Deep Dive: Understanding the "Authentication" Layer on top of OAuth 2.0	`oauth`, `security`, `authentication`, `oidc`	2026-02-28	4👍	src
OpenID Connect Discovery 1.0 Deep Dive: OP's "Self-Introduction" and Dynamic Configuration Retrieval	`oauth`, `security`, `authentication`, `oidc`	2026-03-07	6👍	src
OpenID Connect Dynamic Client Registration 1.0 Deep Dive: Dynamic Client Registration for Automation and Scale	`oauth`, `oidc`, `security`, `authentication`	2026-03-09	4👍	src
What Exactly is "Authentication": From the Limits of Passwords to FIDO2, Passkeys, and IdP Architecture	`authentication`, `security`, `oidc`, `fido2`	2026-03-01	1👍	src

Service Mesh (4)

Article	Tags	Published	Engagement	Source
Envoy AI Gateway: A Hands-On Tour You Can Run Before Touching Kubernetes	`ai`, `kubernetes`, `envoy`, `llm`	2026-08-14	0👍	src
xDS Deep Dive: Dissecting the "Nervous System" of the Service Mesh	`envoy`, `servicemesh`, `kubernetes`, `istio`	2026-04-20	0👍	src
What xDS Actually Ships: Your Control Plane Sends protobuf, Not YAML	`envoy`, `istio`, `kubernetes`, `grpc`	2026-06-09	0👍	src
xDS Deep Dive, Part 2: Designing What You Ship Over the Universal Data Plane API	`envoy`, `servicemesh`, `kubernetes`, `grpc`	2026-06-07	0👍	src

Workload Identity (4)

Article	Tags	Published	Engagement	Source
JWT (Access Token) vs X.509 Deep Dive: How to Choose What You Present as a Credential	`security`, `authentication`, `jwt`, `tls`	2026-06-15	0👍	src
SPIFFE Compliance Deep Dive	`spiffe`, `identity`, `security`, `workloadidentity`	2026-05-31	0👍	src
SPIFFE/SPIRE Deep Dive	`spiffe`, `spire`, `security`, `kubernetes`	2026-02-14	2👍	src
WIMSE (Workload Identity in Multi System Environments) Deep Dive: Standardizing Identity Authentication for Microservices	`security`, `microservices`, `oauth`, `identity`	2026-03-24	3👍	src

Concurrency (3)

Article	Tags	Published	Engagement	Source
Concurrency Design Patterns: From Fundamental Theory to Architecture	`concurrency`, `designpatterns`, `architecture`, `performance`	2026-02-08	4👍	src
Go Deep Dive: Mutex vs RWMutex	`go`, `concurrency`, `performance`, `programming`	2026-02-04	1👍	src
Concurrency Deep Dive: Memory Models, Lock-Free, and RCU	`rust`, `concurrency`, `performance`, `architecture`	2026-02-07	1👍	src

Cryptography (3)

Article	Tags	Published	Engagement	Source
Digital Signatures: Mechanics and Go Benchmarks (RSA vs ECDSA vs Ed25519)	`go`, `cryptography`, `performance`, `security`	2026-01-13	0👍	src
RSA Performance Anatomy: Why is 'Verification' Blazing Fast and 'Signing' Extremely Slow?	`algorithms`, `cryptography`, `math`, `performance`	2026-01-17	1👍	src
Why Can We Use "Shorter" Keys?: Key Length vs Security Bits, the Real Story	`security`, `cryptography`, `beginners`, `todayilearned`	2026-04-19	0👍	src

Engineering Mindset (3)

Article	Tags	Published	Engagement	Source
Dunning-Kruger Effect 2.0: The 'Illusion of Omnipotence' in the AI Era	`ai`, `career`, `psychology`, `learning`	2026-02-06	3👍	src
The Feynman Technique 2026: A Cognitive Algorithm to Kill the 'Illusion of Competence'	`learning`, `career`, `productivity`, `ai`	2026-02-11	2👍	src
The Essence of Google-Style Code Review: A Culture of 'Improvement' Over 'Perfection'	`google`, `codereview`, `engineering`, `productivity`	2026-02-01	1👍	src

Kubernetes Fundamental (3)

Article	Tags	Published	Engagement	Source
Kubernetes Deep Dive: Kubelet	`kubernetes`, `kubelet`, `internal`, `architecture`	2026-02-04	1👍	src
Kubernetes Deep Dive: Networking (Service, EndpointSlice, Gateway)	`kubernetes`, `networking`, `service`, `ingress`	2026-01-25	1👍 · 1💬	src
Kubernetes Deep Dive: OCI Runtime vs CRI	`kubernetes`, `container`, `cri`, `oci`	2026-01-27	0👍	src

O11y (3)

Article	Tags	Published	Engagement	Source
Node Exporter Deep Dive: Connecting the Linux Kernel and Prometheus	`prometheus`, `monitoring`, `linux`, `o11y`	2026-01-28	2👍	src
Prometheus Deep Dive: Pull Architecture and TSDB Secrets	`prometheus`, `monitoring`, `tsdb`, `o11y`	2026-01-26	3👍 · 1💬	src
Thanos Deep Dive: Breaking Through Prometheus's 'Limitations'	`prometheus`, `thanos`, `o11y`, `s3`	2026-01-26	0👍	src

Rust (3)

Article	Tags	Published	Engagement	Source
Pingora Deep Dive: The Rust Proxy That Retired NGINX	`rust`, `pingora`, `proxy`, `cloudflare`	2026-02-09	3👍	src
Rust Traits Deep Dive: Static vs. Dynamic Dispatch	`rust`, `traits`, `generics`, `polymorphism`	2026-02-11	0👍	src
Rust Zero-Cost Abstractions Deep Dive	`rust`, `cpp`, `compiler`, `performance`	2026-02-14	3👍	src

Docker (2)

Article	Tags	Published	Engagement	Source
Docker Deep Dive: One Container, One Process	`docker`, `kubernetes`, `container`, `security`	2026-01-31	0👍	src
Docker: Internal Architecture	`docker`, `container`, `linux`	2026-01-10	4👍	src

Go Memory Management (2)

Article	Tags	Published	Engagement	Source
Go Heap Fragmentation Deep Dive: The Battle Against 'Invisible Memory' Continues	`go`, `golang`, `memory`, `performance`	2026-02-16	1👍	src
Is it True That Go Maps Don't Shrink?	`go`, `memory`, `performance`, `backend`	2026-02-17	1👍 · 3💬	src

Go vs Rust (2)

Article	Tags	Published	Engagement	Source
Go vs Rust vs C++: Deep Dive into Reverse Proxy Performance on Mac (Pingora/Envoy/Traefik/Nginx)	`go`, `rust`, `proxy`, `performance`	2026-01-23	0👍	src
Go vs Rust: Deep Dive into OS Threads, GC, and CPU Limits	`go`, `rust`, `performance`, `internal`	2026-01-14	1👍	src

Kubernetes Security (2)

Article	Tags	Published	Engagement	Source
Kubernetes Pentest Methodology: Cluster Security from an Attacker's Perspective	`kubernetes`, `security`, `pentest`, `rbac`	2026-01-30	0👍	src
OPA & kube-mgmt Deep Dive	`opa`, `kubernetes`, `rego`, `gatekeeper`	2026-02-21	0👍	src

Zero Trust (2)

Article	Tags	Published	Engagement	Source
Microsegmentation Deep Dive	`security`, `zerotrust`, `networking`, `kubernetes`	2026-05-27	0👍	src
Zero Trust 2026: Has the Trust Boundary 'Vanished'? AI, ID-JAG, and Confidential Computing	`security`, `zerotrust`, `ai`, `cloudnative`	2026-01-29	1👍	src

AI Trends (1)

Article	Tags	Published	Engagement	Source
What 11 big tech companies actually do with AI in 2026	`ai`, `productivity`, `engineering`, `llm`	2026-05-09	1👍	src

Anonymity Technology (1)

Article	Tags	Published	Engagement	Source
Anonymity Technology: The 5 Layers of Defense	`anonymity`, `privacy`, `security`, `tor`	2026-02-22	3👍	src

gRPC (1)

Article	Tags	Published	Engagement	Source
gRPC Deep Dive: Stubs, HTTP/2 Frames, and Why Netflix, Spotify, and Mercari Switched	`grpc`, `microservices`, `go`, `http2`	2026-06-10	0👍	src

OSS (1)

Article	Tags	Published	Engagement	Source
OSS License Deep Dive	`opensource`, `license`, `github`, `programming`	2026-03-23	1👍	src

PKI (1)

Article	Tags	Published	Engagement	Source
Why Do SSL/TLS Certificate Lifetimes Keep Getting Shorter?: Everything You Need to Know for the 47-Day Era	`security`, `tls`, `devops`, `pki`	2026-04-11	1👍 · 1💬	src

Standalone

Article	Tags	Published	Engagement	Source
Hello World: Managing Dev.to Articles with GitOps	`productivity`, `github`, `automation`, `gitops`	2026-01-08	1👍 · 4💬	src