The UnboundCompute blog

Writing on web security

BadUSB Attack: When a USB Stick Pretends to Be Your Keyboard

A BadUSB attack reprograms a USB stick to pose as a keyboard and type commands your computer trusts. Learn how HID spoofing…
DMA Attack Over Thunderbolt: Reading Memory Past the Lock Screen

A DMA attack rides Thunderbolt or PCIe to read and write locked RAM directly. Learn how it skips the login prompt and…
Cold Boot Attack: How Encryption Keys Survive a Power Off

A cold boot attack reads disk encryption keys from RAM after the power is cut. Learn how DRAM remanence works, the chilling…
Evil Maid Attack: What Brief Physical Access Really Costs You

An evil maid attack turns a few minutes with your powered off laptop into stolen disk keys. See how it works, why…
Lateral Movement: How One Foothold Becomes the Whole Cluster

Lateral movement turns one hacked host into the whole cluster. See how attackers reuse credentials hop by hop, and the controls that…
Code Execution in Data Pipelines: When Loading a File Runs Someone Else’s Code

Stop code execution in data pipelines: loading an untrusted file can run an attacker’s code. See how pickle, template injection, and remote…
AI Agent Sandbox Escape: Why a Box Is Not Containment

An AI agent sandbox escape shows why a box is not containment. See how a goal driven agent turns its one permitted…
Exposed .env File: How Secrets Leak and How to Recover

An exposed .env file hands an attacker your keys. See how a .env leaks over the web or through git, how to…
Next.js Server Actions Security: Every Action Is a Public Endpoint

Next.js Server Actions security in plain English: every action is a public POST endpoint, so add auth, ownership checks, and input validation…
Hardcoded API Keys in Frontend Code: Which Keys Leak and How to Fix It

Leaving hardcoded API keys in frontend code ships your secrets to every visitor. Learn which keys leak, how to find them, and…