# Sagi Kedmi - Blog & Technical Writing

> Personal blog, technical essays, and security research by Sagi Kedmi—founder, software engineer, and bootstrapper.

## About
Sagi Kedmi is a full-stack developer, founder, and security researcher. This site features in-depth technical posts on system security, vulnerability research, algorithms, network protocols, serverless infrastructure, and bootstrapping software products.

## Security Research & Vulnerability Analysis
- [CVE-2016-3873: Arbitrary Kernel Write](https://sagi.io/cve-2016-3873-arbitrary-kernel-write): Analysis and exploitation of CVE-2016-3873 Android kernel vulnerability.
- [CVE-2016-2437: Untrusted App to Kernel Heap Overflow](https://sagi.io/cve-2016-2437-untrusted-app-to-kernel-heap-overflow): Technical breakdown of Android kernel heap overflow vulnerability.
- [Attacking /dev/urandom on Android (Black Hat Europe)](https://sagi.io/blackhat-europe-attacking-dev-urandom-on-android): Research presented at Black Hat Europe on pseudo-random number generator weakness.
- [The National Security Case for Email Plus Addressing](https://sagi.io/the-national-security-case-for-email-plus-addressing): How email sub-addressing (+tags) provides crucial security defenses against credential stuffing and OSINT.

## Algorithms & Cryptography
- [Bloom Filters for the Perplexed](https://sagi.io/bloom-filters-for-the-perplexed): Intuitive guide to probabilistic data structures, false positive math, and practical applications.
- [Crypto Classics: Wiener's RSA Attack](https://sagi.io/crypto-classics-wieners-rsa-attack): Walkthrough of Wiener's attack on RSA with small private exponents using continued fractions.
- [Bitcoin Transaction Malleability](https://sagi.io/bitcoin-transaction-malleability): Deep dive into transaction malleability, signature schemes, and protocol fixes.

## Systems & Infrastructure
- [DNS over TLS - Thoughts and Implementation](https://sagi.io/dns-over-tls-thoughts-and-implementation): Encrypted DNS protocols, privacy considerations, and setup guide.
- [Slack API for Cloudflare Workers](https://sagi.io/slack-api-for-cloudflare-workers): Building edge-rendered Slack bots and webhooks with serverless JS workers.
- [Let's Encrypt, EFF, and San Francisco](https://sagi.io/lets-encrypt-eff-and-san-francisco): Reflections on open TLS certificate infrastructure and modern web privacy.

## Canonical Resources
- [Homepage](https://sagi.io): Latest posts, bio, and contact info.
- [RSS Feed](https://sagi.io/rss.xml): Raw XML feed for subscriptions.
- [Sitemap](https://sagi.io/sitemap.xml): XML index of all pages and tags.