<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>Endgame Development: Field Notes</title>
    <link>https://endgame.tech/field-notes.html</link>
    <atom:link href="https://endgame.tech/field-notes.xml" rel="self" type="application/rss+xml" />
    <description>General security doctrine from Endgame Development. Post-quantum, onion/I2P OPSEC, offense, and key custody. No client names, no engagement specifics.</description>
    <language>en</language>
    <lastBuildDate>Mon, 22 Jun 2026 18:00:00 +0000</lastBuildDate>
    <item>
      <title>"Later" already started.</title>
      <link>https://endgame.tech/field-notes.html#note-001</link>
      <guid isPermaLink="false">endgame-fieldnote-001</guid>
      <category>Post-Quantum</category>
      <pubDate>Mon, 22 Jun 2026 18:00:00 +0000</pubDate>
      <description><![CDATA[Harvest-now-decrypt-later is not a forecast. It's an active collection posture. Traffic you protect today with classic RSA or ECDH is being archived for a machine that isn't switched on yet. Migration is a deadline, not a backlog item.]]></description>
    </item>
    <item>
      <title>The crypto holds. The operator leaks.</title>
      <link>https://endgame.tech/field-notes.html#note-002</link>
      <guid isPermaLink="false">endgame-fieldnote-002</guid>
      <category>OPSEC</category>
      <pubDate>Sun, 21 Jun 2026 18:00:00 +0000</pubDate>
      <description><![CDATA[Almost no onion service is unmasked by breaking Tor. It's a server timestamp, a clearnet asset loaded by accident, a reused favicon hash, an SSH banner. Anonymity is an operational discipline long before it's a cryptographic one.]]></description>
    </item>
    <item>
      <title>Constant-time is a property of the binary.</title>
      <link>https://endgame.tech/field-notes.html#note-003</link>
      <guid isPermaLink="false">endgame-fieldnote-003</guid>
      <category>Crypto Engineering</category>
      <pubDate>Sat, 20 Jun 2026 18:00:00 +0000</pubDate>
      <description><![CDATA[Not of your source. A helpful compiler will happily reintroduce the branch you carefully removed. If you haven't read the emitted assembly, you don't have constant-time. You have an intention.]]></description>
    </item>
    <item>
      <title>A WAF is a speed bump.</title>
      <link>https://endgame.tech/field-notes.html#note-004</link>
      <guid isPermaLink="false">endgame-fieldnote-004</guid>
      <category>Offense</category>
      <pubDate>Fri, 19 Jun 2026 18:00:00 +0000</pubDate>
      <description><![CDATA[Not a wall. We've never met one that survived contact with a determined operator. It buys you log lines and minutes, not safety. Fix the application; don't rent a filter to stand in front of it.]]></description>
    </item>
    <item>
      <title>The expensive bugs live in the gaps.</title>
      <link>https://endgame.tech/field-notes.html#note-005</link>
      <guid isPermaLink="false">endgame-fieldnote-005</guid>
      <category>Access Control</category>
      <pubDate>Thu, 18 Jun 2026 18:00:00 +0000</pubDate>
      <description><![CDATA[Not in the code you wrote, but in the assumptions between two systems that each behaved correctly. Trust boundaries, not functions, are where real audits earn their fee.]]></description>
    </item>
    <item>
      <title>Sole custody is a story.</title>
      <link>https://endgame.tech/field-notes.html#note-006</link>
      <guid isPermaLink="false">endgame-fieldnote-006</guid>
      <category>Key Custody</category>
      <pubDate>Wed, 17 Jun 2026 18:00:00 +0000</pubDate>
      <description><![CDATA[A key one person can extract is a key one subpoena, one bribe, or one bad night can extract. Threshold it across parties and hardware, or be honest that sole custody is a sentence for the pitch deck.]]></description>
    </item>
    <item>
      <title>The flood is the noise.</title>
      <link>https://endgame.tech/field-notes.html#note-007</link>
      <guid isPermaLink="false">endgame-fieldnote-007</guid>
      <category>Availability</category>
      <pubDate>Tue, 16 Jun 2026 18:00:00 +0000</pubDate>
      <description><![CDATA[The application-layer request that triggers an unindexed join is the signal. Most outages we're called in for weren't bandwidth. They were one expensive endpoint, hit cheaply, a few hundred times a second.]]></description>
    </item>
    <item>
      <title>Escrow is the easy half.</title>
      <link>https://endgame.tech/field-notes.html#note-008</link>
      <guid isPermaLink="false">endgame-fieldnote-008</guid>
      <category>Marketplaces</category>
      <pubDate>Mon, 15 Jun 2026 18:00:00 +0000</pubDate>
      <description><![CDATA[Holding funds was never the hard part. Adjudicating a dispute between two anonymous parties who both hold proof is. Escrow without dispute logic is just a slower way to lose the money.]]></description>
    </item>
    <item>
      <title>You shipped 400 strangers' code.</title>
      <link>https://endgame.tech/field-notes.html#note-009</link>
      <guid isPermaLink="false">endgame-fieldnote-009</guid>
      <category>Supply Chain</category>
      <pubDate>Sun, 14 Jun 2026 18:00:00 +0000</pubDate>
      <description><![CDATA[Your dependency tree is your real attack surface. You audited what you wrote and bundled everything you didn't. The breach rarely knocks on the front door anymore. It arrives as a minor version bump.]]></description>
    </item>
  </channel>
</rss>
