Posts tagged security

Hardening Short.io’s bare metal nodes: from encrypted disks to verified boot

We wiped a bare metal provider's AlmaLinux installs and rebuilt them with LUKS. Then PCR 7 turned out not to stop a kernel command line edit — signed UKIs did.

Andrii Sep 11, 2026

Engineering

Verifying an email address without the round-trip

We implemented Chrome's Email Verification Protocol: the registration email still goes out, but some signups are verified without anyone clicking the link in it. Why we want it standardised, what we verify, and how to opt in.

Andrii Jul 28, 2026