What Chris Wellons thinks about cybersecurity

@chris-wellons · 15 positions · On ppll ↗

Software engineer who writes about low-level and systems programming at nullprogram.com; author of the Elfeed feed reader, the Endlessh SSH tarpit and Enchive.

Chris Wellons did not write this page.

We collected these quotes from things they published elsewhere, and every quote links to where it was said. They have no account here and have not endorsed this site. Quotes are word for word; the short line under each one is our own restatement, not their wording. Their own site. Is this you? Claim it or ask us to remove it. Or tell us what is wrong here.

Filter cybersecurity · Newest first

Topic

All 15 LLMs 5 code generation 4 coding agents 4 design 4 developer tools 3 AI and jobs 2 compilers 1 crypto 1 cybersecurity 1

4 more topics

innovation 1 open source 1 software quality 1 vibe coding 1

Sort

Newest Oldest

Only Chris Wellons on cybersecurity. See everyone on cybersecurity

1 dated position, 2026, in their own words. Our reading of what Chris Wellons has said — not written or endorsed by them.

1 position so far — this page is not yet offered to search engines.

25 Apr 2026

Our readingCode-signing with self-signed certificates makes security worse rather than better.

Their wordsThe most popular use case is code-signing with self-signed certificates, but that actually makes everything worse.

↗My brave new code-signing worldnullprogram.com 1st of 2 in this piece