Technical Whitepapers & Research
High-substance engineering whitepapers published by the Oakai Security research team. Every paper includes reproducible threat models and code teardowns.
Storing Secrets Securely: The Mechanics of Compromise and the $90,000 Git Leak Nightmare
How automated crawler bots index public GitHub commits in under 4 minutes, harvest OpenAI and AWS keys, and spin up 128 GPU mining instances before developers wake up.
The Swap Memory Trap: Why Standard Secret Managers Leak Plaintext Keys on Host Reboots
Examining how Linux and Windows virtual memory paging flushes unsealed container keys to unencrypted swap partitions, and implementing mlock() with volatile zeroization in Rust.
Case Studies in Catastrophic Secret Leakage: Dissecting Uber, CircleCI, and Toyota Exposures
Forensic breakdown of three watershed data breaches caused by accidental credential leaks in source code and third-party build infrastructure.
Zero-Account Cryptographic Enclaves: Why Microservices Don't Need Postgres Just to Store a Password
Challenging the multi-tier enterprise secret manager architecture. Why single-blob SQLite WAL with AES-256-GCM AEAD provides superior confidentiality.
The Blast Radius Architecture: Path-Scoped Machine Tokens vs Global Secrets
Mitigating lateral movement in container networks when a public-facing microservice experiences a Remote Code Execution (RCE) vulnerability.