About

I write as sudodrift. I’ve worked in IT for more than ten years, most of it as a Linux sysadmin and in security. A lot of that time went into the unglamorous parts: who has sudo, whose SSH key is still on the box, which secret nobody rotated.

That is what I write about. When a breach makes the news, I read the vendor’s incident report and the research write-ups, separate what’s confirmed from what’s guessed, and turn it into checks you can run on your own machines. No hype, and I say so when I don’t know something.

I also build sudodrift, a free open source tool that snapshots and diffs sudoers, SSH keys and SUID files on Linux servers.

Where to find me

• Weekly Breach Notes on Substack: one breach a week with the fix that goes with it. This is the best way to follow my writing.
• Medium: copies of my articles.
• GitHub: sudodrift: the code, releases and issues.
• Ko-fi: if something here saved you time and you want to say thanks.