https://some-natalie.dev/ Things I'm learning, working on, or thinking about. All opinions and snark my own. 2026-08-08T02:31:54-04:00 Natalie Somersall https://some-natalie.dev/ Jekyll © 2026 Natalie Somersall /assets/img/favicons/favicon.ico /assets/img/favicons/favicon-96x96.png 2026-08-07T00:00:00-04:00 2026-08-07T00:00:00-04:00 https://some-natalie.dev/container-escapes-workshop/ Natalie Somersall

Welcome to Container Escapes 101 at the AppSec Village at DEF CON 34!! 🎯 Goal: to have a working knowledge of container escapes and how each security measure or risk maps to potential for exploitation. With actual exploits … mostly of misconfigurations or the “rough edges” of containers. Where we’re going There’s a lot of hard-earned lessons at the weird intersection of how a no-longer-...

2026-04-20T00:00:00-04:00 2026-04-21T22:48:13-04:00 https://some-natalie.dev/blog/starting-ai-cyber/ Natalie Somersall

This talk was first presented at the Boulder Secure AI & DevOps group on 20 April 2026. The end goal is enough knowledge to (1) take some first steps on your own and (2) to see the path is worth exploring because there are tons of problems to solve still! You won’t leave an expert or have a deep dive into any particular problem. These are the slides with expanded writeup. This talk t...

2026-04-06T00:00:00-04:00 2026-04-06T00:00:00-04:00 https://some-natalie.dev/blog/chargeback-value/ Natalie Somersall

There’s nothing quite like the feeling of a successful proof-of-concept becoming a production system, but we’re not there yet. It turns out money makes for the hardest problems on the path to production. Let’s solve the problem we set out to solve, getting an understanding of software costs to recover them. We’ll find some unexpected value in the process too. How many ways can a vendor char...

2026-03-31T00:00:00-04:00 2026-03-31T00:00:00-04:00 https://some-natalie.dev/blog/chargeback-buildout/ Natalie Somersall

We left off with a laptop and a database serving as a bare-minimum proof of concept. It works, but not enough to be usable. Starting a project from scratch doesn’t have to be toil. Moving this into “real infrastructure” gave me an opportunity to implement quality of life improvements. Let’s do databases better this time By this point, the project had expanded beyond one person’s exploratio...

2026-01-25T00:00:00-05:00 2026-05-11T00:16:16-04:00 https://some-natalie.dev/blog/fipsd-it/ Natalie Somersall

Cryptography seems deceptively simple until you get into implementation. Tempted by shortcuts to save money, organizations ship something “just good enough” to pass compliance checks. I see this all the time working with the public sector and companies in highly-regulated industries making new products or trying to enter the market for the first time. Just when you think you’ve done everythi...