For a look at how a “serverless” platform runs using AWS Firecracker under the hood (and of course using actual servers) see this article I wrote for LWN.net recently. lwn.net/Articles/77573…

Meet @I_Am_VinayakB. Vinayak has extensive experience working for donor organisations and started up a health technology company aimed at connecting diabetes patients with nurses and other forms of support. #BhekisisaBoard bit.ly/3hONTlF

My thesis won an an award!

We are hiring for 2 new positions in our fledgling "Labs". - One is to help us track, document and distill security research published world wide; - One is to help us invent new attacks, defenses, tools and utilities. Check it out and drop us a note: canary.tools/jobs/labs

This week ThinkstScapes returned! It helps you make sense of recent security research with quarterly reviews (I do wish all your other (sub)fields had this too) x.com/ThinkstCanary/…

We are looking for awesome people to help us build products that people love. If you are (or know): - a great front-end engineer; - a snr. full-stack engineer; - a technical sales-engineer; Please reach out¹ canary.tools/jobs __ ¹ (We are a pretty great place to work).

A few months ago we released¹ our WireGuard Canarytoken. Thanks to Azhar Desai that token is now available on our free Canarytoken server (at canarytokens.org) $0.00 && Super Useful! __ ¹ blog.thinkst.com/2021/06/would-…

Yes, we did build a fake WireGuard to catch stolen keys. And, definitely, it was a lot of fun @thinkstcanary shunting packets safely at scale. We wrote up the story below: blog.thinkst.com/2021/11/buildi…

If you want some light(ish) reading (that doesn't mention Log4J at all) @JacobTorrey has released our Q4-Research-Roundup at thinkst.com/ts It's free, non-paywalled, covers over 300 confs and is a great read/listen. You can also (finally) subscribe to future releases.

The 2022-Q2 issue of ThinkstScapes has just been released. For this issue, we tracked dozens of conferences, over 800 talks & ~150 blog posts. Grab your PDF copy free¹ at thinkst.com/ts (where you can listen to the audio summary too) __ ¹ Free. No reg. No paywall.

In the Zuma-era, there were prosecutors and policemen who carried out dubious investigations. The cases they prosecuted helped to protect state capture. Some of these officials remain employed in the NPA and Hawks, and now lead state capture cases. Read my latest investigation:

Some commands are overwhelmingly run by attackers on compromised hosts (and seldom ever by regular users in regular usage). Our @subtee has just released a new (free) Canarytoken to make monitoring these commands trivial. Read more about it - blog.thinkst.com/2022/09/sensit…

Johan van der Merwe led the apartheid police at one of South Africa’s deadliest periods. The TRC estimated almost 14000 people were killed in violence while he was commissioner. He died in August, burying secrets of police atrocities forever. dailymaverick.co.za/article/2022-0…

God I love this industry.

#TheUnaccountables is coming! It's a joy to have written this book with a sterling team. #TheUnaccountables profiles the profiteers of economic crime who remain unaccountable from apartheid to now. Join Lester Kiewit, Michael Marchant and myself at The Book Lounge next week.

Jacob Torrey on stage at ShmooCon just released our new Credit Card Canarytoken. 1) Visit canarytokens.org to create ur own legit credit-card; 2) Place it in a data-store of your choice; 3) Get an alert when an attacker runs that card! Read more: blog.thinkst.com/2023/01/swipe-…

Keeping up with security research is tough. Theres a bunch of noise (& not nearly enough signal). We release ThinkstScapes every quarter to help with this: Our picks of ~20-30 pieces of work that we found interesting (and why). Its worth checking out.. thinkst.com/ts

Our latest investigation uncovers the estate agents and lawyers who enabled politically connected families to buy luxury homes in SA with dodgy cash from grand corruption. Join us this Thursday!

In 2022, we published Bad Cops, Bad Lawyers to reveal the NPA prosecutors whose decisions enabled state capture, including Chauke. Later, we focussed on Chauke’s failure to prosecute corruption cases: dailymaverick.co.za/article/2022-0… Finally, the President takes action. Open Secrets ZA

Our Nicholas Rohrbeck & Azhar Desai wrote a quick post on how they wrapped Samba with googles NsJail. For a quick intro to lightweight sandboxing, check out: blog.thinkst.com/2018/02/sandbo…