Application Security11 September 2026
Datasette 1.0a39/0.65.4: A Case Study in Multi-Tenant Permission Bugs
Two patch releases close a cluster of subtle authorisation bypasses in the open-source data-publishing tool — a reminder that permission checks fail at the edges, not the middle.
datasetteauthorization-bypassopen-source-security
4 min readRead
Systems & File-Format Security24 August 2026
Your Executable Is a SQLite Database — Why That Matters for Defenders
A neat Linux trick turns an ordinary SQLite file into a runnable ELF binary. It's clever engineering, not an exploit — but it's a clean reminder that file type isn't a security boundary.
linuxelfsqlite
4 min readRead