RivasSec

Infrastructure. Security. Insight.

Field notes on infrastructure security, cloud hardening, Kubernetes, IAM, and OSINT by RivasSec.

When Telemetry Turns Predatory: A DevSecOps Look at Digital Repression in Venezuela

Every SOC pipeline has a shadow version. Using Venezuela as a grounded case study: how the primitives security engineers build become surveillance systems.


Continue reading

IAM Blast Radius Is an Architecture Problem, Not a Policy Problem

Most IAM reviews start too late, after the account structure and trust boundaries are set. Least privilege isn't fewer actions; it's smaller failure domains.


Continue reading